Secure user certification for electronic commerce employing value metering system

• US 6,134,328 A
• Filed: 08/13/1998
• Issued: 10/17/2000
• Est. Priority Date: 08/21/1995
• Status: Expired due to Fees

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Inventors: Ryan, Frederick W. Jr., Cordery, Robert A., Pintsov, Leon A., Lee, David K., Weiant, Monroe A. Jr.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US09/133,706
• Time in Patent Office: 796 Days
• Field of Search: 705/401, 705/402, 705/403, 705/404, 705/405, 705/406, 705/407, 705/408, 705/409, 705/410, 705/411, 705/60, 705/61, 705/62, 705/64, 705/76, 380/9, 380/21, 380/23, 380/24, 380/25, 380/30, 380/49, 380/50, 380/51, 380/55, 380/255, 380/287, 713/150, 713/151, 713/155-158, 713/168, 713/175, 713/182, 713/189, 713/200, 713/201
• US Class Current: 380/55
• CPC Class Codes: G06F 7/725 over elliptic curves
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G07B 17/00362 Calculation or computing within apparatus, e.g. calculation of postage value
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00096 via phone lines
• CPC Class Codes: G07B 2017/00161 from a central, non-user location, e.g. for updating rates or software, or for refilling funds
• CPC Class Codes: G07B 2017/00395 Memory organization
• CPC Class Codes: G07B 2017/00427 Special accounting procedures, e.g. storing special information
• CPC Class Codes: G07B 2017/00758 Asymmetric, public-key algorithms, e.g. RSA, Elgamal
• CPC Class Codes: G07B 2017/00766 Digital signature, e.g. DSA, DSS, ECDSA, ESIGN
• CPC Class Codes: G07B 2017/00782 Hash function, e.g. MD5, MD2, SHA
• CPC Class Codes: G07B 2017/00806 Limited validity time
• CPC Class Codes: G07B 2017/0083 Postal data, e.g. postage, address, sender, machine ID, vendor
• CPC Class Codes: G07B 2017/00854 Key generation
• CPC Class Codes: G07B 2017/00927 Certificates, e.g. X.509
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with anther aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services. Processing the digital token may include generating the digital token or issuing the digital token.

Claims

1. A system, comprising:

register means for storing funds;

first cryptographic key means for processing a digital token providing proof of postage payment;

second cryptographic key means for processing a cryptographic certificate;

means, operatively connected to said register means and to said means for processing a digital tokens and to said means for processing a certificate, for debiting funds stored in said register means when said digital token is processed and when said cryptographic certificate is processed;

communications means coupled to said means for processing a digital token and said means for processing a cryptographic certificate for providing a communications path for communicating cryptographic key information for storage in said first cryptographic key means and in said second cryptographic key means; and

an input means coupled to said communications means for inputting data into said system.

2. A system as defined in claim 1 wherein said input means is a personal computer means, said personal computer means including modem means for enabling communications with a remote location and enabling communications from said remote location to said communications means for entering data into said system from said remote location.

3. A system as defined in claim 2 further comprising means operatively connected to said register means for preventing the processing of said digital token when the funds stored in said register means are below a predetermined amount associated with processing of said digital token and for preventing the processing of said cryptographic certificate when the funds stored in said register means are below a predetermined amount associated with processing said cryptographic certificate.

4. A system as defined in claim 3 further comprising a secure housing, said means for processing a digital token and said means for processing a cryptographic certificate mounted within said secure housing.

5. A system as defined in claim 4 wherein said first cryptographic key means includes a secret key for use in secret key encryption system and said second cryptographic key means includes a private key for use in a public key encryption system.

6. A system as defined in claim 5 wherein said second cryptographic key means further includes a public key associated with said private key, said public key being signed with the prioiate key of a certification authority.

7. A system as defined in claim 1 wherein said means for processing a cryptographic certificate includes generating said cryptographic certificate.

8. A system as defined in claim 1 where said processing of said cryptographic certificate comprises verifying said cryptographic certificate.

9. A system defined in claim 1 further comprising a plurality of further means for processing cryptographic certificates.

10. A system as defined in claim 1 further including recharging means coupled to said register means to enable funds stored in said register means to be remotely recharged with additional funds.

11. A system as defined in claim 1 wherein said means for processing a digital token includes generating said digital token.

12. A method for generating crytographic certificates, comprising the steps of:

providing a register having funds stored therein;

generating a first cryptographic key pair;

sending a first private key of the first cryptographic key pair to a receiver;

assembling a certificate data;

determining if sufficient funds are present in the register for signing the certificate data;

deducting funds from the register for signing the certificate data; and

signing the certificate data with a second private key of a second cryptographic key pair to form a certificate.