US7912788B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Mutual authentication system and method for protection of postal security devices and infrastructure
Assignee: Pitney Bowes Inc
•
Filing: 2004-09-29
•
Granted: 2011-03-22
•
Expires: 2024-09-29
Abstract
Abstract A method of authenticating a PSD and an initializing infrastructure that uses a secret key, a PSD public/private key pair and a provider public/private key pair. The infrastructure prepares a signed provider key record using the provider public key and the provider private key and a first MAC using the signed provider key record and the secret key. Both are sent to the PSD. The PSD authenticates the signed provider key record using the first MAC and the provider public key using the included digital signature. The PSD prepares a signed PSD key record using the PSD public key and the PSD private key and a second MAC using the signed PSD key record and the secret key. Both are sent to the infrastructure. The infrastructure authenticates the signed PSD key record using the second MAC and the PSD public key using the included digital signature.
Inventors
- 👤 G. Thomas Athens
- 👤 Michael J. Shukaitis
- 👤 Robert W. Sission
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 00:19
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/3236; H04L9/3242; G; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/36; G06Q20/367; G06Q20/3674; G06Q20/38; G06Q20/382; G06Q20/3829; G07; G07B; G07B17/00; G07B17/00733; G07C; G07C9/00; G07C9/30; G07C9/38; H04L9/3247; H04L9/3271; H04L9/3273; G07B2017/00741; G07B2017/00774; G07B2017/00846; G07B2017/00959; G07B2017/00967
Claims Analysis
Total Claims: 11
Claim 1
Independent Claim
352 words
A method of mutually authenticating a postal security device and an infrastructure, said infrastructure initializing said postal security device, said postal security device having a unique identification number, a PSD public key, and a PSD private key corresponding to said PSD public key, said infrastructure having a provider public key and a provider private key corresponding to said provider public key, the method comprising: said infrastructure obtaining said unique identification number of said postal security device and deriving a secret key from said unique identification number and a master key; said infrastructure preparing a signed provider key record using said provider public key and said provider private key, said signed provider key record including said provider public key and a first digital signature; said infrastructure creating a first message authentication code using said signed provider key record and said secret key and sending said signed provider key record and said first message authentication code to said postal security device; said postal security device authenticating said signed provider key record using said first message authentication code; said postal security device authenticating said provider public key using said first digital signature; said postal security device preparing a signed PSD key record using said PSD public key and said PSD private key, said signed PSD key record including said PSD public key and a second digital signature; said postal security device preparing a second message authentication code using said signed PSD key record and said secret key and sending said signed PSD key record and said second message authentication code to said infrastructure; said infrastructure authenticating said signed PSD key record using said second message authentication code; said infrastructure authenticating said PSD public key using said second digital signature; said postal security device generating a random nonce, storing said random nonce, and sending said random nonce to said infrastructure; said infrastructure encrypting said random nonce using said secret key and sending the encrypted random nonce to said postal security device; and said postal security device decrypting said encrypted random nonce using the secret key and comparing said decrypted random nonce to said stored random nonce.
Claim 2
Independent Claim
352 words
A method of mutually authenticating a postal security device and an infrastructure, said infrastructure initializing said postal security device, said postal security device having a unique identification number, a PSD public key, and a PSD private key corresponding to said PSD public key, said infrastructure having a provider public key and a provider private key corresponding to said provider public key, the method comprising: said infrastructure obtaining said unique identification number of said postal security device and deriving a secret key from said unique identification number and a master key; said infrastructure preparing a signed provider key record using said provider public key and said provider private key, said signed provider key record including said provider public key and a first digital signature; said infrastructure creating a first message authentication code using said signed provider key record and said secret key and sending said signed provider key record and said first message authentication code to said postal security device; said postal security device authenticating said signed provider key record using said first message authentication code; said postal security device authenticating said provider public key using said first digital signature; said postal security device preparing a signed PSD key record using said PSD public key and said PSD private key, said signed PSD key record including said PSD public key and a second digital signature; said postal security device preparing a second message authentication code using said signed PSD key record and said secret key and sending said signed PSD key record and said second message authentication code to said infrastructure; said infrastructure authenticating said signed PSD key record using said second message authentication code; said infrastructure authenticating said PSD public key using said second digital signature; said postal security device generating a random nonce, storing said random nonce, and sending said random nonce to said infrastructure; said infrastructure encrypting said random nonce using said secret key and sending the encrypted random nonce to said postal security device; and said postal security device decrypting said encrypted random nonce using the secret key and comparing said decrypted random nonce to said stored random nonce.
Claim 3
Dependent Claim
59 words
A method according to claim 1 , said first digital signature being created by creating a first hash of said provider public key and encrypting said first hash using said provider private key, said second digital signature being created by creating a second hash of said PSD public key and encrypting said second hash using said PSD private key.
Claim 4
Dependent Claim
82 words
A method according to claim 2 , said postal security device authenticating said provider public key by creating a third hash using said provider public key, decrypting said encrypted first hash to obtain said first hash, and comparing said first hash to said third hash, and said infrastructure authenticating said PSD public key by creating a fourth hash using said PSD public key, decrypting said encrypted second hash to obtain said second hash, and comparing said second hash to said fourth hash.
Claim 5
Dependent Claim
43 words
A method according to claim 1 , said first message authentication code being created by encrypting said signed provider key record using said secret key, said second message authentication code being created by encrypting said signed PSD key record using said secret key.
Claim 6
Dependent Claim
38 words
A method according to claim 4 , said first message authentication code being a portion of the encrypted signed provider key record, and said second message authentication code being a portion of the encrypted signed PSD key record.
Claim 7
Dependent Claim
39 words
A method according to claim 5 , said portion of the encrypted signed provider key record being a least significant 8 bytes thereof, said portion of the encrypted signed PSD key record being a least significant 8 bytes thereof.
Claim 8
Dependent Claim
28 words
A method according to claim 1 , said method further comprising said postal security device storing said provider public key and said infrastructure storing said PSD public key.
Claim 9
Dependent Claim
86 words
A method according to claim 1 , said postal security device authenticating said signed provider key record by creating a third message authentication code using said signed provider key record and said secret key and comparing said first message authentication code to said third message authentication code, and said infrastructure authenticating said signed PSD key record by creating a fourth message authentication code using said signed PSD key record and said secret key and comparing said second message authentication code to said fourth message authentication code.
Claim 10
Dependent Claim
81 words
A method according to claim 1 , further comprising: said infrastructure generating a second random nonce, storing said second random nonce, and sending said second random nonce to said postal security device; said postal security device encrypting said second random nonce using said secret key and sending the encrypted second random nonce to said infrastructure; and said infrastructure decrypting said encrypted second random nonce using the secret key and comparing said decrypted second random nonce to said stored second random nonce.
Claim 11
Dependent Claim
69 words
A method according to claim 1 , further comprising: said infrastructure generating a random nonce, storing said random nonce, and sending said random nonce to said postal security device; said postal security device encrypting said random nonce using said secret key and sending the encrypted random nonce to said infrastructure; and said infrastructure decrypting said encrypted random nonce and comparing said decrypted random nonce to said stored random nonce.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2014-03-21 | 2014-09-20 | 2015-03-22 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2018-03-21 | 2018-09-20 | 2019-03-22 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2022-03-21 | 2022-09-20 | 2023-03-22 | $7700.00 | Window Closed / Lapsed |