Method for auditing a database and system for carrying out such method

• US 6,957,196 B1
• Filed: 09/05/2000
• Issued: 10/18/2005
• Est. Priority Date: 09/05/2000
• Status: Active Grant

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Inventors: Heiden, Richard W., Cordery, Robert A., Strobel, Kevin L., Pierce, Perry A.
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): CHEUNG, MARY DA ZHI WANG
• Application Number:
  US09/654,951
• Time in Patent Office: 1,869 Days
• Field of Search: 705 60- 61, 705400-405, 705/64, 379/147, 714 1- 7, 714/48, 714/100, 902/38
• US Class Current: 705/60
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

FIG. 6 shows the operation of modules 22 in processing a request for a digital postal indicium. At 72 the selected one of modules 22 receives the indicium request and the requested meter record and, at 76 confirms that sufficient funds are available. If not the request is rejected at 78; again in a manner whose details form no part of the subject invention. At 80 the selected module constructs an indicium message having an appended indicium signature, which when printed in relevant part on a mailpiece will evidence payment of postage in the amount shown, and at 84 updates the requested meter record and appends a meter record signature. Generation of indicia and updating meter records is more fully described in specifications for the Information Based Indicia Program (IBIP) published by the United States Postal Service and further discussion is not believed necessary for an understanding of the subject invention.) At 86 the selected module updates the audit data. (Updating the postage and transaction data is a matter of simple addition. Updating of the error correcting code will be described further below.) At 88 the updated audit data is stored in nonvolatile memory 24, and at 90 the signed indicium message and signed meter record are sent to server 14 for processing as described above. The audit data and the indicium are transmitted to the server at the same time. The indicium is forwarded to customer 12 and a copy of the audit data is stored in server 14. While perhaps less secure than data stored in modules 22, audit data stored in server 14 can be verified against that in modules 22 and can be used, for example, when a module is off-line.

Claims

1. A method for auditing a database comprising a plurality of records, said records each being accessible through at least one of a plurality of independent modules, said method comprising the steps of:

a) maintaining a set of additive audit data in each of said modules;

b) controlling said modules so that each module increments a set of audit data maintained in said module when a record is accessed through said module;

c) summing said sets of audit data to generate system audit data; and

d) verifying said database'"'"'s integrity against said system audit data, wherein the system audit data comprises the sum of all additive audit data stored in each of the plurality of independent modules.

2. A method as described in claim 1 comprising the further steps of:

a) sending a user request for access to a record and said requested record to a selected one of said modules; and

b) said selected module updating said requested record in accordance with said request.

3. A method as described in claim 2 wherein said selected module incorporates cryptographically processed information in said record to prevent generation of fraudulent records.

4. A method as described in claim 3 wherein said request includes a request for a digital postal indicium and comprises the further steps of:

a) controlling said selected module to generate and return to said requesting user a digital postal indicium in accordance with said request; and

b) controlling said selected module to update said requested record in accordance with said request.

5. A method as described in claim 2 wherein said selected module incorporates encrypted information in said audit data to authenticate said audit data.

6. A method as described in claim 2 wherein said selected module incorporates time information in said audit data.

7. A method as described in claim 1 comprising the further step of providing security against tampering for each of said modules.

8. A method as described in claim 1 wherein said sets of audit data comprise increments of a linear error correcting code for correcting a field of said records, whereby said audit data can be summed to generate a system error correcting code to correct said field of said records.

9. A method as described in claim 8 comprising the further steps of:

a) sending a user request for access to a record and said requested record to a selected one of said modules; and

b) said selected module updating said requested record in accordance with said request.

10. A method as described in claim 9 wherein said request includes a request for a digital postal indicium and comprising the further steps of:

a) controlling said selected module to generate and return to said requesting user a digital postal indicium in accordance with said request; and

b) controlling said selected module to update said requested record in accordance with said request.

11. A method as described in claim 10 wherein said corrected field contains a total postage amount for the corresponding record.

12. A method as described in claim 10 wherein said corrected field contains a total number of indica dispensed for the corresponding record.

13. A method as described in claim 8 wherein said sets of audit data further comprise arithmetic totals for values stored in said field of said records, whereby arithmetic sums of said values across said modules can be compared with arithmetic sums across said records, whereby numbers of errors greater than the number which can be detected by said system error correcting code can be detected.

14. A method as described in claim 13 wherein said field contains a total postage amount or a total number of indica dispensed.

15. A database system comprising:

a) a data store storing a database comprising a plurality of records;

b) a server maintaining said records;

c) a plurality of independent modules providing access to said records;

wherein

d) said modules are programmed to maintain a set of additive audit data in each of said modules and increment a set of audit data maintained in one of said modules when a record is accessed through said one module;

e) said server is programmed to sum said sets of audit data to generate system audit data and verify said database'"'"'s integrity against said system audit data, wherein the system audit data comprises the sum of all additive audit data stored in each of the plurality of independent modules.

16. A system as described in claim 15 wherein:

a) said server is further programmed to receive user requests for access and send said user request and said requested record to a selected one of said modules; and

b) said modules are further programmed so that said selected module updates said requested record in accordance with said request.

17. A system as described in claim 16 wherein said modules are further programmed so that said selected module incorporates encrypted information in said record to prevent generation of fraudulent records.

18. A system as described in claim 17 wherein said request includes a request for a digital postal indicium and wherein said modules are further programmed so that said selected module generates and returns to said requesting user a digital postal indicium in accordance with said request;

and updates said requested record in accordance with said request.

19. A system as described in claim 16 wherein said selected module incorporates encrypted information in said audit data to authenticate said audit data.

20. A system as described in claim 16 wherein said selected module incorporates time information in said audit data.

21. A system as described in claim 15 wherein each of said modules is physically secured against tampering.

22. A system as described in claim 15 wherein said sets of audit data comprise increments of a linear error correcting code for correcting a field of said records, whereby said audit data can be summed by said server to generate a system error correcting code to correct said field of said records.

23. A system as described in claim 22 wherein said modules are further programmed so that said selected module incorporates encrypted information in said record to prevent generation of fraudulent records.

24. A system as described in claim 23 wherein said request includes a request for a digital postal indicium and wherein said modules are further programmed so that said selected module generates and returns to said requesting user a digital postal indicium in accordance with said request;

and updates said requested record in accordance with said request.

25. A system as described in claim 24 wherein said corrected field contains a total postage amount for the corresponding record.

26. A system as described in claim 24 wherein said corrected field contains a total number of indicia dispensed for the corresponding record.

27. A system as described in claim 22 wherein said sets of audit data further comprise arithmetic totals for values stored in said field of said records, whereby arithmetic sums of said values across said modules can be compared with arithmetic sums across said records, whereby numbers of errors greater than the number which can be detected by said system error correcting code can be detected.

28. A system as described in claim 27 wherein said field contains a total postage amount or a total number of indicia dispensed.

29. A method for auditing a database comprising a plurality of records, said records each being accessible through at least two of a plurality of independent modules, said method comprising:

maintaining a set of additive audit data in each of said modules;

controlling said modules so that each module increments a set of audit data maintained in said module when a record is accessed through said module;

summing said sets of audit data to generate system audit data; and

verifying said database'"'"'s integrity against said system audit data, wherein the system audit data comprises the sum of all additive audit data stored in each of the plurality of independent modules.

30. A method according to claim 29 further comprising:

controlling said modules so that each module sends a copy of audit data maintained in said module to a server after a record is accessed through said module.

31. A method according to claim 30 wherein:

summing said sets of audit data utilizes at least one set of the copy audit data maintained on the server.

32. A method according to claim 29 further comprising:

controlling said modules so that each module updates an error correcting code after a record is accessed through said module.