Cryptographic key management and validation system

A Key Management System for generating, distributing and managing cryptographic keys used by a digital postage meter that employs cryptographic means to produce evidence of postage payment, the system comprising:

• a plurality of functionally distinct secure boxes communicatively coupled to each other, each of said secure boxes including means for performing one of key management functions for key generation, key installation, key verification and verification of the evidence of postage payment;
• computer means for providing system control, said computer means being communicatively coupled to said secure boxes and including means for facilitating communication among said secure boxes;
• a plurality of separate logical security domains, each of said security domains providing domain processes for key generation, key installation, key verification and verification of the evidence of postage payment produced by the digital meter within said domain using said key management functions;
• a plurality of domain archives communicatively coupled to said computer means and corresponding respectively to each of said security domains, said domain archives including means for securely and recording key status records and master keys for each domain;
• means for installing said master keys in the digital postage meter;
• and
• means for verifying said evidence of postage payment.

A Key Management System for generating, distributing and managing cryptographic keys used by a transaction evidencing device that employs cryptographic means to produce evidence of information integrity, the system comprising:

• a plurality of functionally distinct processes communicatively coupled to communicate with each other, each of said plurality of processes including means for performing one of key management functions for key generation, key installation, key verification and verification of the evidence of information integrity produced by the transaction evidencing device;
• computer means for providing system control, said computer means being communicatively coupled to said plurality of processes and including means for facilitating communication among said processes;
• a plurality of separate logical security domains, each of said security domains providing domain processes for key generation, key installation, key verification and verification of the evidence of information integrity produced by said transaction evidencing device within said domain using said key management functions;
• a plurality of domain archives communicatively coupled to said computer means and corresponding respectively to each of said security domains, said domain archives including means for recording key status records and master keys for each domain;
• means for installing said master keys in the transaction evidencing device;
• and
• means for verifying said evidence of information integrity.