Secure user certification for electronic commerce employing value metering system

• US 6,985,888 B1
• Filed: 08/29/2000
• Issued: 01/10/2006
• Est. Priority Date: 08/21/1995
• Status: Expired due to Fees

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Inventors: Ryan, Frederick W. Jr., Cordery, Robert A., Pintsov, Leon A., Lee, David K., Weiant, Monroe A. Jr.
• Primary Examiner(s): Hayes, John W.
• Application Number:
  US09/650,174
• Time in Patent Office: 1,960 Days
• Field of Search: 705/61, 705/62, 705/63, 705/76, 705/77, 705/60, 705/401, 380/255, 713/150, 713/155, 713/156, 713/168, 713/170, 713/176, 713/181
• US Class Current: 705/60
• CPC Class Codes: G06F 7/725 over elliptic curves
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G07B 17/00362 Calculation or computing within apparatus, e.g. calculation of postage value
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00096 via phone lines
• CPC Class Codes: G07B 2017/00161 from a central, non-user location, e.g. for updating rates or software, or for refilling funds
• CPC Class Codes: G07B 2017/00395 Memory organization
• CPC Class Codes: G07B 2017/00427 Special accounting procedures, e.g. storing special information
• CPC Class Codes: G07B 2017/00758 Asymmetric, public-key algorithms, e.g. RSA, Elgamal
• CPC Class Codes: G07B 2017/00766 Digital signature, e.g. DSA, DSS, ECDSA, ESIGN
• CPC Class Codes: G07B 2017/00782 Hash function, e.g. MD5, MD2, SHA
• CPC Class Codes: G07B 2017/00806 Limited validity time
• CPC Class Codes: G07B 2017/0083 Postal data, e.g. postage, address, sender, machine ID, vendor
• CPC Class Codes: G07B 2017/00854 Key generation
• CPC Class Codes: G07B 2017/00927 Certificates, e.g. X.509
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with anther aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services. Processing the digital token may include generating the digital token or issuing the digital token.

Claims

1. A method for validating a signed digital message, comprising the steps of:

providing a register having funds stored therein;

receiving a signed digital message from a sender;

determining if sufficient funds are present in the register for validating the message;

deducting funds from the register for validating the message; and

validating the signed digital message using a public key of the sender.

2. The method of claim 1, comprising the further steps of:

receiving with the signed digital message a certificate of the sender, the certificate being signed using a private key of a certificate authority;

validating the certificate using a public key of the certificate authority; and

extracting the public key of the sender from the certificate for use in validating the signed digital message.