Secure user certification for electronic commerce employing value metering system

• US 7,539,648 B1
• Filed: 08/29/2000
• Issued: 05/26/2009
• Est. Priority Date: 08/21/1995
• Status: Expired due to Fees

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Inventors: Pintsov, Leon A., Weiant, Monroe A. Jr., Ryan, Frederick W. Jr., Cordery, Robert A., Lee, David K.
• Primary Examiner(s): Hewitt, II; Calvin L
• Assistant Examiner(s): NILFOROUSH, MOHAMMAD A
• Application Number:
  US09/650,177
• Time in Patent Office: 3,192 Days
• Field of Search: 705/1, 705/400, 705/402, 705/50, 705/51, 705/52, 705/64
• US Class Current: 705/60
• CPC Class Codes: G06F 7/725 over elliptic curves
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G07B 17/00362 Calculation or computing within apparatus, e.g. calculation of postage value
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00096 via phone lines
• CPC Class Codes: G07B 2017/00161 from a central, non-user location, e.g. for updating rates or software, or for refilling funds
• CPC Class Codes: G07B 2017/00395 Memory organization
• CPC Class Codes: G07B 2017/00427 Special accounting procedures, e.g. storing special information
• CPC Class Codes: G07B 2017/00758 Asymmetric, public-key algorithms, e.g. RSA, Elgamal
• CPC Class Codes: G07B 2017/00766 Digital signature, e.g. DSA, DSS, ECDSA, ESIGN
• CPC Class Codes: G07B 2017/00782 Hash function, e.g. MD5, MD2, SHA
• CPC Class Codes: G07B 2017/00806 Limited validity time
• CPC Class Codes: G07B 2017/0083 Postal data, e.g. postage, address, sender, machine ID, vendor
• CPC Class Codes: G07B 2017/00854 Key generation
• CPC Class Codes: G07B 2017/00927 Certificates, e.g. X.509
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A system and method include means for processing a cryptographic certificate adapted to provide security functionality. A register means is provided and means for adjusting the register means to account for services when the cryptographic certificate is processed. In accordance with another aspect, a system and method include a register means for storing funds. Means are provided for processing a digital token providing proof of postage payment and means are also provided for processing a cryptographic certificate adapted to provide security functionality. Means debit funds stored in the register means when the digital token is processed and when the cryptographic certificate is processed. Processing the cryptographic certificate may involve many functions such as providing security services and/or certificate management functions (including generating and verifying cryptographic certificates) and/or key management functions and/or access to any needed private keys to perform security services. Processing the digital token may include generating the digital token or issuing the digital token.

Claims

1. A method for obtaining a cryptographic certificate, comprising:

receiving at a metering device a request for a cryptographic certificate, the metering device including a register having funds stored therein;

determining if sufficient funds are present in the register for obtaining the certificate;

if sufficient funds are present in the register, generating, at the metering device, a cryptographic key pair including a private key and a public key;

sending a certificate request to a certificate authority, the certificate request including the public key of the cryptographic key pair;

receiving a cryptographic certificate from the certificate authority, the cryptographic certificate including the public key of the cryptographic key pair generated by the metering device;

deducting funds from the register for obtaining the requested certificate; and

in response to funds being deducted from the register, activating the private key of the cryptographic key pair.

2. The method of claim 1, wherein the metering device includes a postage meter.