On-line value-bearing indicium printing using DSA

• US 7,299,210 B2
• Filed: 02/16/2001
• Issued: 11/20/2007
• Est. Priority Date: 02/16/2000
• Status: Expired due to Fees

• Current Assignee: Stamps.com, Inc.
• Original Assignee: Stamps.com, Inc.
• Inventors: Ogg, Craig Leonard, Weisberg, Seth
• Primary Examiner(s): ELISCA, PIERRE E
• Application Number:
  US09/788,069
• Publication Number:
  US 20010044783A1
• Time in Patent Office: 2,468 Days
• Field of Search: 705/62, 705/50, 705/51
• US Class Current: 705/62
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G07B 17/00024 Physical or organizational aspects of franking systems
• CPC Class Codes: G07B 17/0008 Communication details outside or between apparatus coin-freed apparatus for franking per se G07F17/26
• CPC Class Codes: G07B 17/00435 Details specific to central, non-customer apparatus, e.g. servers at post office or vendor
• CPC Class Codes: G07B 2017/00145 via the Internet
• CPC Class Codes: G07B 2017/00161 from a central, non-user location, e.g. for updating rates or software, or for refilling funds
• CPC Class Codes: G07B 2017/00201 Open franking system, i.e. the printer is not dedicated to franking only, e.g. PC (Personal Computer)
• CPC Class Codes: G07B 2017/00443 Verification of mailpieces, e.g. by checking databases
• CPC Class Codes: G07B 2017/00588 Barcode
• CPC Class Codes: G07B 2017/00709 Scanning mailpieces
• CPC Class Codes: G07B 2017/00766 Digital signature, e.g. DSA, DSS, ECDSA, ESIGN
• CPC Class Codes: G07B 2017/00782 Hash function, e.g. MD5, MD2, SHA
• CPC Class Codes: G07B 2017/00967 PSD [Postal Security Device] as defined by the USPS [US Postal Service]

Abstract

A method and apparatus for generating a Value Bearing Indicium (VBI) for on-line applications. A VBI is generated by hashing user information to create a message digest that is used to create a digital signature. The digital signature is combined with the user information to create a VBI that can be validated by a variety of stand-alone or on-line methods. An on-line postage metering application using the VBI is described.

Claims

1. A method of printing a value bearing indicium (VBI), the method comprising the steps of:

generating a message digest by hashing relevant information;

generating a textual representation of a digital signature from the message digest;

generating a 2-D bar code comprising the relevant information;

generating the indicium, wherein the indicium includes the textual representation of the digital signature and the 2-D bar code; and

communicating the indicium from one of a plurality of stateless cryptomodules to one of a plurality of remotely located user computers, each stateless cryptomodule being programmable to service any of the plurality of remotely located user computers.

2. The method of claim 1, wherein the VBI is a ticket.

3. The method of claim 1, wherein the VBI is a coupon.

4. The method of claim 1, wherein the VBI is a traveler'"'"'s check.

5. The method of claim 1, wherein the VBI is currency.

6. The method of claim 1, wherein:

the representation of the digital signature further includes a right side;

the 2-D bar code further includes a left side; and

the representation of the digital signature right side is adjacent to the 2-D bar code left side.

7. The method of claim 1, wherein:

the representation of the digital signature further includes a top side;

the bar code further includes a bottom side; and

the representation of the digital signature top side is adjacent to the 2-D bar code bottom side.

8. The method of claim 1, wherein:

the representation of the digital signature further includes a bottom side;

the bar code further includes a top side; and

the representation of the digital signature bottom side is adjacent to the 2-D bar code top side.

9. The method of claim 1, wherein:

the representation of the digital signature further includes a right side;

the bar code further includes a left side; and

the representation of the digital signature right side is adjacent to the 2-D bar code left side.

10. The method of claim 1, wherein the VBI is postage for a mail piece.

11. The method of claim 10, wherein the relevant information include one or more of an indicium version number, an algorithm identifier, a certificate serial number, a postage security device manufacturer identifier, a postage security device model identifier, a postage security device serial number, an ascending register value, a postage amount, a date of mailing, a licensing postal code, a software identifier, a descending register value, and a rate category.

12. The method of claim 1, wherein each stateless cryptomodule being programmable to service any of the plurality of remotely located user computers includes accessing user data from a database.

13. A data processing system adapted to print a value bearing indicium (VBI), the data processing system comprising:

one or more processors, at least one of which is associated with a stateless cryptomodule and another of which is associated with a user computer located remotely from the stateless cryptomodule, the stateless cryptomodule being one of a plurality of stateless cryptomodules, each stateless cryptomodule programmable to service any remotely located user computer; and

one or more memories operably coupled to the processors and having program instructions stored therein, the processors being operable to execute the program instructions, the program instructions including;

generating a message digest by hashing relevant information;

generating a text representation of a digital signature;

generating a 2-D bar code comprising the relevant information; and

generating the indicium, wherein the indicium includes the textual representation of the digital signature and the 2-D bar code.

14. The data processing system of claim 13, wherein:

the representation of the digital signature further includes a right side;

the 2-D bar code further includes a left side; and

the representation of the digital signature right side is adjacent to the 2-D bar code left side.

15. The data processing system of claim 13, wherein:

the representation of the digital signature further includes a top side;

the bar code further includes a bottom side; and

the representation of the digital signature top side is adjacent to the 2-D bar code bottom side.

16. The data processing system of claim 13, wherein:

the representation of the digital signature further includes a bottom side;

the bar code further includes a top side; and

the representation of the digital signature bottom side is adjacent to the 2-D bar code top side.

17. The data processing system of claim 13, wherein:

the representation of the digital signature further includes a left side;

the 2-D bar code further includes a left right; and

the representation of the digital signature left side is adjacent to the 2-D bar code right side.

18. The data processing system of claim 13 wherein the data processing system is a closed metering system.

19. The data processing system of claim 13 wherein the data processing system is an open metering system.

20. The data processing system of claim 13, wherein each stateless cryptomodule being programmable to service any of the plurality of remotely located user computers includes accessing user data from a database.

21. A data processing system comprising:

a plurality of stateless cryptomodules and a plurality of remote user computers in communication with at least one of the plurality of stateless cryptomodules, each stateless cryptomodule being programmable to service any of the plurality of remote user computers, wherein the data processing system is adapted to print a VBI;

a processor; and

a memory operably coupled to the processor and having program instructions stored therein, the processor being operable to execute the program instructions, the program instructions including;

generating a message digest by hashing relevant information;

generating a text representation of a digital signature;

generating a 2-D bar code comprising the relevant information; and

generating the indicium, wherein the indicium includes the textual representation of the digital signature and the 2-D bar code.

22. The data processing system of claim 21, wherein:

the representation of the digital signature further includes a right side;

the 2-D bar code further includes a left side; and

the representation of the digital signature right side is adjacent to the 2-D bar code left side.

23. The data processing system of claim 21, wherein:

the representation of the digital signature further includes a top side;

the 2-D bar code further includes a bottom side; and

the representation of the digital signature top side is adjacent to the 2-D bar code bottom side.

24. The data processing system of claim 21, wherein:

the representation of the digital signature further includes a left side;

the 2-D bar code further includes a right side; and

the representation of the digital signature left side is adjacent to the 2-D bar code right side.

25. The data processing system of claim 21, wherein:

the representation of the digital signature further includes a bottom side;

the 2-D bar code further includes a top side; and

the representation of the digital signature bottom side is adjacent to the 2-D bar code top side.

26. The data processing system of claim 21, wherein the VBI is postage for a mail piece.

27. The data processing system of claim 21, wherein the VBI is a ticket.

28. The data processing system of claim 21, wherein the VBI is a coupon.

29. The data processing system of claim 21, wherein the VBI is a traveler'"'"'s check.

30. The data processing system of claim 21, wherein the VBI is currency.

31. The data processing system of claim 21, wherein the VBI is postage for a mail piece.

32. The data processing system of claim 21, wherein each stateless cryptomodule being programmable to service any of the plurality of remote user computers includes accessing user data from a database.

33. A computer-readable storage medium embodying computer program instructions for execution by a computer, the computer program instructions adapting a computer to provide a value bearing indicium to a user via a computer network, the computer program instructions comprising:

generating a message digest by hashing relevant information;

generating a textual representation of a digital signature from the message digest;

generating a 2-D bar code comprising the relevant information;

generating the indicium, wherein the indicium includes the textual representation of the digital signature and the 2-D bar code; and

communicating the indicium from one of a plurality of stateless cryptomodules to one of a plurality of remotely located user computers, each stateless cryptomodule being programmable to service any of the plurality of remotely located user computers.

34. The computer-readable storage medium of claim 33, wherein:

the representation of the digital signature further includes a right side;

the 2-D bar code further includes a left side; and

the digital signature right side is adjacent to the 2-D bar code left side.

35. The computer-readable storage medium of claim 33, wherein:

the representation of the digital signature further includes a top side;

the 2-D bar code further includes a bottom side; and

the representation of the digital signature top side is adjacent to the 2-D bar code bottom side.

36. The computer-readable storage medium of claim 33, wherein:

the representation of the digital signature further includes a left side;

the 2-D bar code further includes a right side; and

the representation of the digital signature left side is adjacent to the 2-D bar code right side.

37. The computer-readable storage medium of claim 33, wherein:

the representation of the digital signature further includes a bottom side;

the 2-D bar code further includes a top side; and

the representation of the digital signature bottom side is adjacent to the 2-D bar code top side.

38. The computer readable storage medium of claim 33, wherein each stateless cryptomodule being programmable to service any of the plurality of remotely located user computers includes accessing user data from a database.