Method of token verification in a key management system

• US 5,661,803 A
• Filed: 03/31/1995
• Issued: 08/26/1997
• Est. Priority Date: 03/31/1995
• Status: Expired due to Term

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Inventors: Ryan, Frederick W. Jr., Cordery, Robert A., Pintsov, Leon A., Braun, John F., Pauly, Steven J., Weiant, Monroe A. Jr., D'Ippolito, Frank M., Lawton, Kathyrn V.
• Primary Examiner(s): GREGORY, BERNARR E
• Application Number:
  US08/414,896
• Time in Patent Office: 879 Days
• Field of Search: 380/9, 380/21, 380/23, 380/24, 380/25, 380/44, 380/46, 380/49, 380/50
• US Class Current: 705/60
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00766 Digital signature, e.g. DSA, DSS, ECDSA, ESIGN
• CPC Class Codes: G07B 2017/00846 Key management
• CPC Class Codes: G07B 2017/00854 Key generation
• CPC Class Codes: G07B 2017/0087 Key distribution
• CPC Class Codes: G07B 2017/00887 using look-up tables, also called master tables with pointers
• CPC Class Codes: G07B 2017/00895 Key verification, e.g. by using trusted party
• CPC Class Codes: G07B 2017/00967 PSD [Postal Security Device] as defined by the USPS [US Postal Service]
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807

Abstract

A method of token verification in a Key Management System provides a logical device identifier and a master key created in a logical security domain to a transaction evidencing device, such as a digital postage meter. The method creates a master key record in a key verification box, securely stores the master key record in a Key Management System archive, and produces in the transaction evidencing device evidence in the logical security domain of transaction information integrity. The method inputs the evidence of the transaction information integrity to a token verification box, and inputs in the token verification box the master key record from the Key Management System archive. The method determines in the token verification box that the master key is valid in logical security domain, uses in the token verification box the master key to verify the evidence of transaction information integrity, and outputs from the token verification box an indication of the result of the verification of the evidence of transaction information integrity. The master key record includes the logical device identifier, the master key and a digital signature associating the logical device identifier and the master key. The method checks the digital signature to verify the association of the logical device identifier and the master key within the logical security domain.

Claims

1. A method of token verification in a Key Management System, comprising the steps of:

providing to a transaction evidencing device a master key created in a logical security domain and a logical device identifier;

creating a master key record in a key verification box;

storing the master key record in a Key Management System archive;

performing a predetermined operation on information relating to each transaction in the transaction evidencing device to produce evidence of transaction information integrity in the logical security domain;

inputting the evidence of the transaction information integrity to a token verification box;

inputting in the token verification box the master key record from the Key Management System archive;

determining in the token verification box that the master key is valid in the logical security domain;

using in the token verification box the master key to verify the evidence of transaction information integrity; and

outputting from the token verification box an indication of the result of the verification of the evidence of transaction information integrity.

2. The method of claim 1 wherein the master key record includes the logical device identifier, the master key and a digital signature associating the logical device identifier and the master key.

3. The method of claim 2 wherein the step of determining in the token verification box that the master key is valid in logical security domain comprises the step of:

checking the digital signature to verify the association of the logical device identifier and the master key within the logical security domain.

4. The method of claim 1 wherein the transaction evidencing device is a digital postage meter.

5. The method of claim 1 wherein the evidence of transaction information integrity is at least one token.

6. A method of token verification in a Key Management System, comprising the steps of:

providing to a transaction evidencing device a master key created in a logical security domain and a logical device identifier;

creating a master key record in a key verification box;

storing the master key record in a Key Management System archive;

creating a temporal token key record using the master key in a token key distribution box;

storing the token key record in a Key Management System archive;

producing in the transaction evidencing device the token key;

producing in the transaction evidencing device a token in the logical security domain using the token key;

inputting the token to a distributed token verification box;

inputting in the distributed token verification box the token key record from the Key Management System archive;

determining in the distributed token verification box that the token key is valid in the logical security domain;

using in the distributed token verification box the token key to verify the token; and

outputting from the distributed token verification box an indication of the result of the verification of the token.

7. The method of claim 6 wherein the token key record includes the logical device identifier, the token key and a digital signature associating the logical device identifier and the token key.

8. The method of claim 7 wherein the step of determining in the distributed token verification box that the token key is valid in logical security domain comprises the step of:

checking the digital signature to verify the association of the logical device identifier and the token key within the logical security domain.

9. The method of claim 6 wherein the transaction evidencing device is a digital postage meter.

10. A method of token verification in a Key Management System, comprising the steps of:

providing to a transaction evidencing device a master key created in a logical security domain and a logical device identifier;

creating a master key record in a key verification process;

storing the master key record in a Key Management System archive;

performing a predetermined operation on information relating to each transaction in the transaction evidencing device to produce evidence of transaction information integrity in the logical security domain;

inputting the evidence of the transaction information integrity to a token verification process;

inputting to the token verification process the master key record from the Key Management System archive;

determining in the token verification process that the master key is valid in the logical security domain;

using in the token verification process the master key to verify the evidence of transaction information integrity; and

outputting from the token verification process an indication of the result of the verification of the evidence of transaction information integrity.

11. The method of claim 10 wherein the master key record includes the logical device identifier, the master key and a digital signature associating the logical device identifier and the master key.

12. The method of claim 11 wherein the step of determining in the token verification process that the master key is valid in logical security domain comprises the step of:

checking the digital signature to verify the association of the logical device identifier and the master key within the logical security domain.

13. The method of claim 11 wherein the transaction evidencing device is a digital postage meter.

14. The method of claim 10 wherein said token verification process is a token verification box.