System and method for authenticating indicia using identity-based signature scheme
View Patent ↗Methods and systems for verification of indicia that do not require key management systems, and in which revocation of key pairs is easily performed without adding costs to the verification process are provided. Indicia are generated and authenticated utilizing an identity-based encryption (IBE) scheme. A key generating authority generates a private key for a PSD, distributes the private key securely to the PSD, and provides public information for use by a verification service when verifying cryptographic digital signatures generated with the private key. The corresponding public key is a string consisting of PSD information that is provided as part of the indicium. The verification service can verify the signature of each indicium by obtaining the public key string from the indicium, and utilizing the key generating authority's public information.
1. A method for a verification system to authenticate an indicium generated by a metering device, the indicium including identification information associated with the metering device and a digital signature generated using a private key, the method comprising:
scanning the indicium using a scanner of the verification system to obtain the identification information included in the indicium;
generating a public key using a processing device of the verification system, the public key corresponding to the private key used for generating the digital signature, the processing device utilizing at least a portion of the identification information obtained from the indicium and public identifiers previously stored in a memory device and not utilizing any random seed value to generate the public key; and
verifying, using the processing device of the verification system, the digital signature using the generated public key,
wherein if the digital signature is successfully verified, the indicium is authenticated, and if the digital signature is not successfully verified, the indicium is not authenticated.
2. The method according to claim 1 , wherein the identification information includes at least one of a model number of the metering device, a serial number of the metering device, and a total of one or more registers maintained in the metering device.
3. The method according to claim 2 , wherein the identification information further includes an inspection date for the metering device.
4. The method according to claim 1 , wherein the identification information is a concatenation of any combination of a model number of the metering device, a serial number of the metering device, a total of one or more registers maintained in the metering device, and an inspection date for the metering device.
5. The method according to claim 1 , wherein the digital signature is generated using the private key and a cryptographic algorithm, and verifying the digital signature further comprises:
retrieving at least one parameter associated with the cryptographic algorithm; and
verifying the digital signature using the generated public key and the at least one parameter associated with the cryptographic algorithm.
6. The method according to claim 1 , wherein the metering device is a postage meter and the indicium evidences payment of postage for a mail piece.
7. A system for authenticating an indicium generated by a metering device, the indicium including identification information associated with the metering device and a digital signature generated using a private key, the system comprising:
a scanning device that scans the indicium to obtain the identification information included in the indicium;
a processing device that generates a public key that corresponds to the private key used for generating the digital signature utilizing at least a portion of the identification information obtained from the indicium and public identifiers previously stored in a memory device and not utilizing any random seed value; and
the processing device that verifies the digital signature using the generated public key,
wherein if the digital signature is successfully verified, the indicium is authenticated, and if the digital signature is not successfully verified, the indicium is not authenticated.
8. The system according to claim 7 , wherein the identification information includes at least one of a model number of the metering device, a serial number of the metering device, and a total of one or more registers maintained in the metering device.
9. The system according to claim 8 , wherein the identification information further includes an inspection date for the metering device.
10. The system according to claim 7 , wherein the identification information is a concatenation of any combination of a model number of the metering device, a serial number of the metering device, a total of one or more registers maintained in the metering device, and an inspection date for the metering device.
11. The system according to claim 7 , wherein the digital signature is generated using the private key and a cryptographic algorithm, and the processing device
retrieves at least one parameter associated with the cryptographic algorithm; and
verifies the digital signature using the generated public key and the at least one parameter associated with the cryptographic algorithm.
12. The system according to claim 7 , wherein the metering device is a postage meter and the indicium evidences payment of postage for a mail piece.