Postage metering system

A secure metering device (SMD) comprising:

• a memory configured to store information indicative of a current operating state of the SMD, wherein the current operating state is one of a plurality of valid operating states, wherein each of the plurality of valid operating states is associated with a set of permissible operations by the SMD;
• and
• a processor coupled to the memory and configured to operate in the operating state indicated by the information stored in the memory,
• wherein the plurality of valid operating states include an initialized state, a funded state, and a withdrawal state,
• wherein the withdrawal state is characterized, in part, by a restriction from updating content of a revenue register within the SMD.

A secure metering device (SMD) comprising:

• a memory configured to store information indicative of a current operating state of the SMD, wherein the current operating state is one of a plurality of valid operating states, wherein each of the plurality of valid operating states is associated with a set of permissible operations by the SMD;
• and
• a processor coupled to the memory and configured to operate in the operating state indicated by the information stored in the memory,
• wherein the plurality of valid operating states include an initialized state, a funded state, and a withdrawal state,
• wherein the withdrawal state is characterized, in part, by a restriction from updating content of a revenue register within the SMD,
• wherein the SMD makes a transition from the current operating state to a new operating state upon occurrence of a particular event or by performing a particular transaction,
• wherein the SMD transitions from the funded state to the withdrawal state by performing a withdrawal transaction.