# US 6,295,359 B1 · Method and apparatus for distributing keys to secure devices such as a postage meter > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 6,295,359 B1 - Document ID: US6295359B1 - Status: Granted - Kind: B1 - Application number: 09/082,698 - Filed: 1998-05-21 - Granted: 2001-09-25 - Earliest claimed: 1998-05-21 - Assignees: Pitney Bowes Inc. - Inventors: Robert A. Cordery; Frederick W. Ryan, Jr.; Ari P. Singer - Web page: https://patentgrep.com/patent/US6295359B1 ## CPC - G07F 7/1008: {Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system} - G06Q 20/341: {Active cards, i.e. cards including their own processing means, e.g. including an IC or chip} - G06Q 20/4097: {using mutual authentication between devices and transaction partners} - G07B 17/00733: {Cryptography or similar special procedures in a franking system} - G07B 2017/00758: {Asymmetric, public-key algorithms, e.g. RSA, Elgamal} - G07B 2017/00766: {Digital signature, e.g. DSA, DSS, ECDSA, ESIGN} - G07B 2017/00854: {Key generation} - G07B 2017/0087: {Key distribution} - G07B 2017/00887: {using look-up tables, also called master tables with pointers} - G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00}) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G07B: TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS ## Abstract A method for assigning keys to a plurality of devices in a public key cryptographic system includes generating a set of more than one master private keys; calculating for each master private key a corresponding master public key; installing in each of the plurality of devices a corresponding device private key derived as a linear combination of at least two of the master private keys from the set of master private keys whereby knowledge of the corresponding device private key installed in any one of the plurality of devices is not sufficient to determine the corresponding device private key of any other of the plurality of devices. A device public key can be calculated as a corresponding combination of the master public keys. ## Claims ### Claim 1 A method for assigning keys to a plurality of devices in a public key cryptographic system, the method comprising the steps of: a) generating a set of more than one master private keys; b) calculating for each master private key a corresponding master public key; c) installing in each of the plurality of devices a corresponding device private key derived as a linear combination of at least two of the master private keys from the set of master private keys whereby knowledge of the corresponding device private key installed in any one of the plurality of devices is not sufficient to determine the corresponding device private key of any other of the plurality of devices and wherein each of the plurality of devices uses its corresponding device private key to generate a signature. ### Claim 2 (depends on 1) A method as recited in claim 1 further comprising the steps of generating a set of more than one master public keys based on the set of more than one master private keys and calculating a device public key for each of the plurality of devices based on a combination of the master public keys. ### Claim 3 (depends on 1) A method as recited in claim 1, further comprising the steps of utilizing an algorithm to generate a matrix of coefficients, wherein each of the coefficients is associated with one of the master private keys and one of the plurality of devices and each of the plurality of devices has a row of coefficients associated therewith; deriving the corresponding device private key for any particular one of the plurality of devices by utilizing the row of coefficients for the any particular one of the plurality of devices to determine the linear combination of master private keys for the any particular one of the plurality of devices. ### Claim 4 (depends on 3) A method as recited in claim 3, wherein the algorithm utilized to generate the matrix of coefficients is such that a number of the plurality of devices corresponding secure device private keys that need to be compromised to compromise the security of at least one other of the plurality of devices is equal to a total number of the master private keys. ### Claim 5 (depends on 3) A method as recited in claim 3, wherein the algorithm utilized to generate the matrix of coefficients is such that a predetermined number of the corresponding device private keys less than a total number of master private keys but greater than one are needed to compromise the security of at least one other of the plurality of devices. ### Claim 6 (depends on 3) A method as recited in claim 3, wherein the algorithm utilized to generate the matrix of coefficients utilizes data which identifies a specific one of the plurality of devices. ### Claim 7 (depends on 6) A method as recited in claim 6, wherein the data is a serial number associated with the specific one of the plurality of devices. ### Claim 8 (depends on 6) A method as recited in claim 6, wherein the data is a special key identifier which is different from a serial number associated with a specific one of the plurality of devices. ### Claim 9 (depends on 3) A method as recited in claim 3, wherein each row of coefficients of the matrix has at most N non-zero coefficients where N is less than a total number of master private keys but greater than 1. ### Claim 10 (depends on 3) A method as recited in claim 3, wherein a total number of the master private keys is divided into separate sets of master private keys and the algorithm is such that the row of coefficients for the any particular one of the plurality of devices only has one non-zero coefficient associated with each of the separate sets of master private keys such that the corresponding device private key for the any particular one of the plurality of devices is derived based on a linear combination of one private master key from each of the separate sets of master keys. ### Claim 11 (depends on 10) A method as recited in claim 10, wherein the number of sets of master private keys is 4. ### Claim 12 (depends on 3) A method as recited in claim 3 wherein all of the coefficients are either 1 or 0. ### Claim 13 (depends on 1) A method as recited in claim 1, wherein the plurality of devices are postage meters.