Patent Application
20070179901
The disclosed embodiments relate to a secure gateway to a postal service provider infrastructure that provides access to different services.
A high volume postal customer may use a meter which incorporates a Postal Security Device (PSD) to secure the proof of payment of postal indicia. In an exemplary application, indicia may be applied to mailing items that identifies the value of the postage applied and other information. A customer may purchase postage and the purchased value may be stored in the PSD. As the postage indicia is applied to items, the value applied may be deducted from the stored value. Once postage indicia is applied, the item may then be dropped into the collection stream of the particular postal system and subsequently processed for delivery. A customer generally purchases postage, may download new features, and accesses other services by having the meter communicate with a postal service infrastructure, either automatically or manually.
It would be advantageous to authenticate a user attempting to utilize services provided by a postal services infrastructure and, if necessary, to allow the user to authenticate the postal services provider. It would also be advantageous to provide or prohibit services based on identifying data associated with the requesting user.
The disclosed embodiments are directed to a secure gateway to a postal services infrastructure. The secure gateway includes a server for receiving credentials from a meter and operable to authenticate the meter utilizing the credentials, and circuitry for providing services from information associated with the authenticated meter.
In another embodiment, a method of providing postal services includes receiving credentials from a meter, authenticating the meter using the credentials, and providing postal services using information about the authenticated meter.
In other embodiments the credentials may include a digital certificate and a message encrypted with a private key. The information associated with the authenticated meter may be included in the digital certificate. The information associated with the authenticated meter may also be included in a services list stored by the meter or may be included in a services list stored by the secure gateway.
The foregoing aspects and other features of the disclosed embodiments are explained in the following description, taken in connection with the accompanying drawings, wherein:
The disclosed embodiments provide a secure gateway to services offered by a postal service infrastructure, where access to certain services is provided or prohibited based on results of a one or two way authentication, identifying data associated with the requesting entity, or a combination of both.
The system 100 includes equipment at a customer site 110 and a postal service infrastructure 115. The equipment located at the customer site generally includes a meter or other computing device 117 that includes an application 120 that houses a Transport Layer Security (TLS) or Secure Sockets Layer (SSL) client 125, a certificate store 130, and one or more public key private pairs 135 allowing secure TCP/IP communications.
Storage device 220 may store machine readable program code which is adapted to cause microprocessor 215 to perform the functions of the disclosed embodiments. Storage device 220 may utilize optical, magnetic, semiconductor, electronic, or other types of suitable devices to store the program code.
Microprocessor 215 typically also performs electronic accounting functions in relation to franking items. Data associated with the accounting functions may be stored in registers for an accumulated total value of credit entered into the PSD, an accumulated total value of charges dispensed by the PSD by franking items, a count of the number of items franked, and a count of the number of items franked with a charge in excess of a predetermined value. The various registers may be located in storage device 220.
The franking functions performed by the microprocessor 215 typically include providing an indication, funds, or other authorization to produce indicia, and reporting the number of items, value marked and other parameters to the accounting functions. Such indication, funds, or other authorization are referred to herein as indicia services.
The control functions performed by microprocessor 215 may include utilizing the communications port 210 to communicate with the postal service provider 115. Communications port 210 generally includes an interface 225 and support circuitry 230 for communicating with the postal service provider infrastructure 115 through one or more networks 235.
Referring to
Referring to
The meter's digital certificate integrated with the encrypted message are sent to the gateway 140 (block 415). The SSL/TLS server 145 authenticates the identity of the meter 117 by authenticating the content of the encrypted message by decrypting the message using the meter's public key as identified by the digital certificate (block 420). This process provides a one-way authentication that the gateway 140 may use to allow the meter 117 to access certain services. The one-way authentication establishes that the gateway 140 is communicating with a meter that may legitimately utilize the services of the postal services infrastructure 115. The meter 117 and the SSL/TLS server 145 may exchange further messages signaling or alerting each other as to the one way authentication (block 425).
For other services, two way authentication may be required by the meter 117 or the gateway 140 or both. For two way authentication, the SSL/TLS server 145 may generate a digital certificate, or may obtain a digital certificate from the certificate database 175, where the certificate binds the gateway's identity to one or more gateway public keys. The SSL/TLS server 145 may also generate a message encrypted with one or more of the gateway's private keys. The gateway 140 may obtain the one or more public key private key pairs from the hardware security module manager 150, key management system 160, or device keying manager 170.
The gateway's digital certificate integrated with the encrypted message are sent to the meter 117 (block 430). The meter 117 authenticates the identity of the gateway 140 by authenticating the content of the encrypted message by decrypting the message using the gateway's public key as identified by the digital certificate (block 435). This process provides a two-way authentication that the gateway 140 may use to allow the meter 117 to access other services. The two-way authentication establishes that the gateway 140 is communicating with a meter that may legitimately utilize the services of the postal services infrastructure 115, and also establishes that the meter 117 is communicating with a gateway that may legitimately offer services.
In one embodiment, the two-way authentication may allow the gateway to provide access to services provided as a result of the one-way authentication process described above, in addition to services provided as a result of the two-way authentication process. The meter 117 and the gateway 140 may exchange further messages signaling or alerting each other as to the two-way authentication.
Upon authentication, the gateway 140 may utilize various techniques to ascertain the services that may be utilized by the meter 117. Generally, the gateway 140 includes circuitry or programs that utilize information associated with the meter 117 to determine the services the meter may utilize. In one embodiment, the meter's digital certificate may include information describing the services the meter 117 is permitted to use. Thus, upon completing a one-way authentication, the gateway may determine which services the meter may access and may determine if two-way authentication is required.
In another embodiment, the meter may store a services list 240 within storage device 220 describing the permitted services. A services list 175 (
Upon establishing a connection to the gateway 140, the meter presents a message for service. The message 300 may have various forms, for example, the meter 117 may present a Uniform Resource Locator (URL) for the desired service as shown in
The gateway analyses the message for service 300 to determine if the request is permitted using the techniques described above. If the service is allowed, the service router routes the message or URL to the appropriate destination service.
The hardware security module manager 150 is responsible for maintaining a dynamic list of a set of hardware security modules 180 that are currently available. Each hardware security module 180 is capable of generating public/private key pairs under the direction of the key management system 160. There may be multiple hardware security modules 180.
The key management system 160 generally provides key and certificate management services required by the gateway 140 in combination with the device keying manager 165. The key management system may be used to store and retrieve keys and certificates for postal service infrastructure users including meter 117. The device keying manager 165 may be responsible for all of the business logic necessary for re-keying meter 117 as required. For example, in one embodiment, a new certificate and public key private key pair may be generated by the gateway 140 after each transaction with the meter 117 and transmitted to the meter 117 for use with the next transaction.
It should be understood that the foregoing description is only illustrative of the invention. Various alternatives and modifications can be devised by those skilled in the art without departing from the invention. Accordingly, the present invention is intended to embrace all such alternatives, modifications and variances which fall within the scope of the appended claims.
