Cryptographic module for secure processing of value-bearing items

• US 8,041,644 B2
• Filed: 05/18/2010
• Issued: 10/18/2011
• Est. Priority Date: 10/18/1999
• Status: Expired due to Fees

• Current Assignee: Stamps.com, Inc.
• Original Assignee: Stamps.com, Inc.
• Inventors: Ogg, Craig L., Chow, William W.
• Primary Examiner(s): Augustin; Evens J
• Application Number:
  US12/782,667
• Publication Number:
  US 20100228674A1
• Time in Patent Office: 518 Days
• Field of Search: 705/60, 705/75
• US Class Current: 705/60
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G07B 17/0008 Communication details outside or between apparatus coin-freed apparatus for franking per se G07F17/26
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00056 Client-server
• CPC Class Codes: G07B 2017/00064 Virtual meter, online stamp; PSD functions or indicia creation not at user's location
• CPC Class Codes: G07B 2017/00145 via the Internet
• CPC Class Codes: G07B 2017/00201 Open franking system, i.e. the printer is not dedicated to franking only, e.g. PC (Personal Computer)
• CPC Class Codes: G07B 2017/00887 using look-up tables, also called master tables with pointers
• CPC Class Codes: G07B 2017/00967 PSD [Postal Security Device] as defined by the USPS [US Postal Service]

Abstract

An on-line value bearing item (VBI) printing system that includes one or more cryptographic modules and a central database is disclosed. The cryptographic modules are capable of implementing the USPS Information Based Indicia Program Postal Security Device Performance Criteria and other required VBI standards. The modules encipher the information stored in the central database for all of the on-line VBI system customers and are capable of preventing access to the database by unauthorized users. Additionally, the cryptographic module is capable of preventing unauthorized and undetected modification, including the unauthorized modification, substitution, insertion, and deletion of VBI related data and cryptographically critical security parameters.

Claims

1. A cryptographic device for securing data in a computer network comprising:

a processor programmed to authenticate a plurality of users on the computer network for generating a postal indicium;

a memory for storing a data record for ensuring authenticity of a user;

a cryptographic engine for cryptographically protecting the data record; and

an interface for communicating with the computer network,

wherein the data record includes an ascending register value, a descending register value, a cryptographic device ID, a key token for an indicium signing key, at least one user secret, a key for encrypting the at least one user secret, date and time of last transaction, expiration dates for keys, and a passphrase repetition list.

2. The cryptographic device of claim 1, wherein the processor includes a state machine for determining a state corresponding to availability of one or more commands.

3. The cryptographic device of claim 2, wherein the state machine includes one or more of the group consisting of an uninitialized state, an initialized state, an operational state, an administrative state, an importing shares state, and an error state.

4. The cryptographic device of claim 3, wherein the one or more commands corresponding to the uninitialized state includes a command for start initializing.

5. The cryptographic device of claim 3, wherein the one or more commands corresponding to the initialized state includes commands for one or more of get status command, initialize access control database command, logon command, logoff command, query current user role command, query current user ID command, session management commands, audit entry creation command, generate master key set command, and generate transport key pair commands.

6. The cryptographic device of claim 3, wherein the one or more commands corresponding to the operational state include commands for one or more of access control, session management, key management, and audit support.

7. The cryptographic device of claim 6, wherein the commands for access control include one or more of transition to administrative state command, logon command, logoff command, query current user role command, query current user ID command, view access control database command, change password command, set clock command, and set Status command.

8. The cryptographic device of claim 1, wherein the postal indicium comprises a digital signature.

9. The cryptographic device of claim 1, wherein the postal indicium comprises a postage amount.

10. The cryptographic device of claim 1, wherein the postal indicium includes a bar code.

11. The cryptographic device of claim 1, wherein the value bearing item consists of a group comprising of a ticket, a coupon, a voucher, and a traveler'"'"'s check.

12. The cryptographic device of claim 1, wherein the processor is configured to share a secret with a plurality of other cryptographic devices.

13. The cryptographic device of claim 1, wherein at least one of the plurality of users is an enterprise account.

14. A system for securing data in a computer network comprising:

a server system configured to communicate with a plurality of client systems via the computer network, the server system including a plurality of cryptographic devices, each cryptographic device comprising;

a processor programmed to authenticate a plurality of users on the computer network for secure processing of a value bearing item;

a memory for storing a data record for ensuring authenticity of a user;

a cryptographic engine for cryptographically protecting the data record; and

an interface for communicating with the computer network,

wherein the data record includes an ascending register value, a descending register value, a respective cryptographic device ID, at least one user secret, a key for encrypting the at least one user secret, date and time of last transaction, passphrase repetition list and expiration dates for keys.

15. The system of claim 14, wherein the value bearing item is a postage value including a postal indicium.

16. The system of claim 15, wherein the postal indicium comprises a digital signature.

17. The system of claim 14, wherein the value bearing item includes a bar code.

18. The system of claim 14, wherein the value bearing item comprises of a group consisting of a ticket, a coupon, a voucher, and a traveler'"'"'s check.

19. The system of claim 14, wherein the processor is configured to share a secret with the plurality of cryptographic devices.

20. A system for securing data in a wide area computer network comprising:

a database including information about one or more users using a plurality of user terminals;

a plurality of cryptographic devices remote from the plurality of user terminals and coupled to the computer network, wherein each of the cryptographic devices includes a computer executable code for authenticating one or more users; and

a plurality of security device transaction data records stored in the database for ensuring authenticity of the one or more users, wherein each security device transaction data record is related to a user, wherein each of the cryptographic devices is capable of authenticating an identity of each user and authenticating each user for a role, the role limiting each user to a subset of operations performed by the system,

wherein each of the plurality of cryptographic devices is programmed to receive any of the plurality of security device transaction data records, and wherein each cryptographic device is not dedicated to particular security device transaction data records.

21. The system of claim 20, wherein no security device transaction data record is dedicated to a particular cryptographic device.

22. The system of claim 20, wherein at least one of the plurality of cryptographic devices is an IBM™

4758 cryptographic coprocessor.

23. The system of claim 20, wherein at least one of the plurality of cryptographic devices meets FIPS 140-1 level 3 security requirements.

24. The system of claim 20, wherein at least one of the plurality of cryptographic devices meets FIPS 140-1 level 4 security requirements.

25. The system of claim 20, wherein at least one of the plurality of cryptographic devices zeroizes all critical security parameters when a penetration attempt is detected.

26. The system of claim 20, wherein at least one of the plurality of cryptographic devices includes a security sensing and response circuit.

27. The system of claim 20, wherein at least one of the plurality of cryptographic devices includes a measure for detecting attacks involving probe penetration.

28. The system of claim 20, wherein at least one of the plurality of cryptographic devices includes a measure for detecting attacks involving power sequencing.

29. The system of claim 20, wherein at least one of the plurality of cryptographic devices includes a measure for detecting attacks involving radiation.

30. The system of claim 20, wherein at least one of the plurality of cryptographic devices includes a measure for detecting attacks involving temperature manipulation.

31. The system of claim 20, wherein the security system provides cryptographic module management services including an Internet load-balancing technique among two or more cryptographic devices.

32. The system of claim 20, wherein the security device transaction data records are not dedicated to a particular cryptographic device.

33. The system of claim 21, wherein at least one of the plurality of cryptographic devices is stateless.

34. A security system for securing data in a computer network comprising:

a plurality of cryptographic devices coupled to the computer network, wherein each cryptographic device includes a computer executable code for authenticating a plurality of users and verifying that an authenticated user is authorized to assume a role, and wherein each cryptographic device is capable of performing value management functions for the plurality of users; and

a plurality of security device transaction data records for ensuring authenticity of the plurality of users, wherein each security device transaction data record is related to a user,

wherein each cryptographic device is not dedicated to particular users, and

wherein each cryptographic device is programmable to service any of the plurality of users.

35. The system of claim 34, wherein the assumed role includes one or more corresponding operations to be performed by the authenticated user.

36. The system of claim 34, wherein at least one of the plurality of cryptographic devices is an IBM™

4758 cryptographic coprocessor.

37. The system of claim 34, wherein at least one of the plurality of cryptographic devices meets FIPS 140-1 level 3 security requirements.

38. The system of claim 34, wherein at least one of the plurality of cryptographic devices meets FIPS 140-1 level 4 security requirements.

39. The system of claim 34, wherein at least one of the plurality of cryptographic devices is stateless.