Secure data capture apparatus and method

Abstract

Abstract of Disclosure In a postage meter system, a user enters information indicative of a batch of mail pieces to be franked. The mail pieces are franked, and when the batch is completed, data relating to the batch are made the subject of a cryptographic engine. The data are digitally signed, or a message authentication code (MAC) is derived, all in a postal security device (PSD). The data are communicated to a server, where the data are authenticated, preferably by means of public-key cryptographic means. These data are then made available to the postal authority in a secure way. Customer accounting is based on statistical data gathered by the postage printing base. Such data may be accumulated and stored in the PSD or in the postage printing base outside of the PSD. The cryptographic protection inherent in the PSD, of the sensitive data, effectively detects or prevents tampering. In addition effective backup and recovery mechanisms may be put into place to protect customer as well as third-party interests. In order to assure the authenticity and accuracy of the data collected, the use of a PSD solves both the guarantee of authenticity and accuracy of the data collected for use by the postal authority. Using the data collected by the PSD as input for the calculation of the discount allows for payback calculations due the customers (or allows for giving customers credit for future services).

Claims 
     
         1.   A method for use with a postage meter system under the jurisdiction of a postal authority, the postage meter system comprising a host and a server, the host comprising a postal security device and postal indicia printing means, the server comprising cryptographic device disposed for cryptographically secure communication with the postal security device, the method comprising the steps of: 
       entering information into the host indicative of a batch of mail pieces to be franked; 
       franking the mail pieces whilst storing information about the franking of the batch of mail pieces to a memory within the host; 
       within the postal security device, performing a cryptographic authenticating procedure upon the information about the franking of the batch and the information indicative of the batch, said information defining statistical information; 
       communicating the statistical information from the postal security device to the cryptographic device; 
       authenticating the statistical information at the cryptographic device; and 
       passing the statistical information to a postal authority. 
     
     
         2.   The method of  claim 1  wherein the step of performing the cryptographic authenticating procedure comprises calculating a message authentication code, and the step of authenticating the statistical information comprises checking for correctness of the message authentication code. 
     
     
         3.   The method of  claim 1  wherein the step of performing the cryptographic authenticating procedure comprises digitally signing the statistical information, and the step of authenticating the statistical information comprises checking for correctness of the digital signature.  
     
     
         4.   The method of  claim 1  wherein the communicating step further comprises establishing a cryptographically secure session and communicating the information in a cryptographically secure fashion. 
     
     
         5.   The method of  claim 1  wherein the communicating step is performed in the absence of the establishment of  a cryptographically secure session. 
     
     
         6.   The method of  claim 1  further comprising the step of passing a confirmation from the cryptographic device to the postal security device indicative of receipt by the cryptographic device from the postal security device, and the further step of deleting the statistical information from the postal security device upon receipt of the confirmation. 
     
     
         7.   The method of  claim 1  further comprising the step, performed by the postal authority, of granting a discount based on the statistical information. 
     
     
         8.   The method of  claim 1  further comprising the step, performed by the postal authority, of granting a credit for future franking based on the statistical information. 
     
     
         9.   The method of  claim 1  wherein the memory within the host is within the postal security device. 
     
     
         10.   The method of  claim 1  wherein the memory within the host is not within the postal security device. 
     
     
         11.   The method of  claim 1  where the step of communicating the statistical information from the postal security device to the cryptographic device further comprises the steps of: 
       cryptographically signing the statistical information within the postal security device, yielding a signature; 
       communicating the information and signature to memory within the host and not within the postal security device; 
       the information and signature within the memory within the host and not within the postal security device, and 
       communicating the information and signature from memory within the host and not within the postal security device, to the cryptographic device. 
     
     
         12.   The method of  claim 11  wherein the storing of the information and signature within the memory within the host and not within the postal security device is for at least one day. 
     
     
         13.   A method for use with a postage meter system under the jurisdiction of a postal authority, the postage meter system comprising a host and a server, the host comprising a postal security device and postal indicia printing means, the server comprising cryptographic device disposed for cryptographically secure communication with the postal security device, the host operated by a service provider providing service to a plurality of users, the method comprising the steps of: 
       entering information into the host indicative of a batch of mail pieces to be franked and indicative of an identity of a user associated with the batch; 
       franking the mail pieces whilst storing information about the franking of the batch of mail pieces to a memory within the host; 
       within the postal security device, performing a cryptographic authenticating procedure upon the information about the franking of the batch and the information indicative of the batch, said information defining statistical information; 
       communicating the statistical information from the postal security device to the cryptographic device; 
       authenticating the statistical information at the cryptographic device; and 
       passing the statistical information to a postal authority. 
     
     
         14.  The method of  claim 13  wherein the step of performing the cryptographic authenticating procedure comprises calculating a message authentication code, and the step of authenticating the statistical information comprises checking for correctness of the message authentication code. 
     
     
         15.   The method of  claim 13  wherein the step of performing the cryptographic authenticating procedure comprises digitally signing the statistical information, and the step of authenticating the statistical information comprises checking for correctness of the digital signature. 
     
     
         16.   The method of  claim 13  wherein the communicating step further comprises establishing a cryptographically secure session and communicating the information in a cryptographically secure fashion. 
     
     
         17.   The method of  claim 13  wherein the communicating step is performed in the absence of the establishment of  a cryptographically secure session. 
     
     
         18.   The method of  claim 13  further comprising the step of passing a confirmation from the cryptographic device to the postal security device indicative of receipt by the cryptographic device from the postal security device, and the further step of deleting the statistical information from the postal security device upon receipt of the confirmation. 
     
     
         19.   The method of  claim 13  further comprising the step, performed by the postal authority, of granting a discount to the user associated with the batch based on the statistical information. 
     
     
         20.   The method of  claim 13  further comprising the step, performed by the postal authority, of granting a credit for future franking to the user associated with the batch based on the statistical information. 
     
     
         21.   The method of  claim 13  wherein the memory within the host is within the postal security device. 
     
     
         22.   The method of  claim 13  wherein the memory within the host is not within the postal security device. 
     
     
         23.   The method of  claim 13  where the step of communicating the statistical information from the postal security device to the cryptographic device further comprises the steps of: 
       cryptographically signing the statistical information within the postal security device, yielding a signature; 
       communicating the information and signature to memory within the host and not within the postal security device; 
       storing the information and signature within the memory within the host and not within the postal security device, and 
       communicating the information and signature from memory within the host and not within the postal security device, to the cryptographic device. 
     
     
         24.   The method of  claim 23  wherein the storing of the information and signature within the memory within the host and not within the postal security device is for at least one day.