System and method for generating personalized postage indica

A system and method for printing a postage meter stamp, including a desired postage amount and a personalized postage indicia, onto a piece of mail. A user takes a postal storage device to the Post Office in order to obtain a replenishment of the amount of postage stored within the postage storage device. A desired amount of postage is entered into the storage device by a postal employee through a processor-based system. The user is then able to access this stored postage at the user's location through a complementary processor-based system. The user is also able to create or to select one of a variety of graphical configurations of postage indicia to be imprinted as the postage meter stamp on a piece of mail.

REFERENCE TO RELATED APPLICATIONS 
This application is related to concurrently filed, copending, commonly 
assigned patent application, entitled "SYSTEM AND METHOD FOR PRINTING 
PERSONALIZED POSTAGE INDICIA ON GREETING CARDS", Ser. No. 08/540,658, 
(Attorney Docket No. P0004) which is hereby incorporated by reference 
herein. 
TECHNICAL FIELD OF THE INVENTION 
This invention relates, in general, to a portable postage storage device 
that can be coupled to processor-based systems to receive and retrieve an 
amount of authorized postage and the printing of a personalized postage 
indicia. More specifically, the invention relates to a system and method, 
under the control of a general purpose computer, for automatically 
calculating the amount of postage due for a particular piece of mail and 
imprinting that amount of postage in a personalized configuration of a 
meter stamp on an item of mail. 
BACKGROUND OF THE INVENTION 
Presently, it is common for individuals or businesses to have residing 
within their offices a postage meter rented from a commercial business 
such as, for example, Pitney Bowes. This arrangement is very convenient, 
since letters may be addressed, postage applied, and mailed directly from 
the office without requiring an employee to physically visit the U.S. Post 
Office and wait in line in order to apply postage to what is often a quite 
significant volume of outgoing mail, or to manually apply stamps to each 
piece of mail in which case mail is slower because it has to go through a 
postage cancelling machine. 
Quite naturally, postage meters were developed to relieve the manual 
application of stamps on mail and to automate the above process. 
Nevertheless, a postage meter residing within an office is not all that 
convenient and efficient as it may first seem to be. First, a postage 
meter may not be purchased, but must be rented. The rental fees alone are 
typically over twenty dollars per month. For a small business, this can be 
quite an expense to incur year after year. Second, a postage meter must be 
adjusted, serviced and replenished manually; e.g., each day the date must 
be adjusted manually, periodically the stamp pad must be re-inked, and 
when the amount of postage programmed within the postage meter has 
expired, the postage in the meter must be replenished. To be replenished, 
a postage meter must be manually unplugged, placed into a special case 
(the meter is of a significant weight), and an employee must visit a U.S. 
Post Office to have the meter reprogrammed with additional postage. Upon 
arrival at the U.S. Post Office, a teller must cut the seal, replenish the 
meter with a desired amount of postage, and reseal the meter before 
returning it to the employee. The meter must then be returned to the 
office and powered up. 
A slightly more expensive meter (rental of approximately $30.00 more) works 
in the following manner: 1) a user sets up an account with Pitney Bowes, 
2) 7 to 10 days before a user requires any postage, the user deposits with 
the meter owner the amount of postage required, 3) the user then calls the 
owner (7 to 10 days later) and they issue instructions as to the manual 
pushing of a variety of buttons on the meter (programming) which will 
replenish the postage amount on the meter. Nonetheless, the meter must be 
taken to the Post Office every 6 months. 
Thus, in addition to the monthly rent, the servicing and replenishing of 
the meter requires the time and expense of at least one employee to take 
the meter to the U.S. Post Office to have it checked. Of course, this 
procedure results in down-time wherein the postage meter is not available 
to the business for the application of postage to outgoing mail. In 
addition, because of the monthly rent and the size of these devices, it is 
generally not practical for businesses to have more than one postage meter 
to alleviate this down-time. 
As previously mentioned, the alternative to a business, especially a small 
business, is to forego the advantages of a postage meter and to buy 
sheets, or books, of stamps. Without a doubt, this is not a sufficient 
solution. Since a variety of denominations of stamps are generally 
required, applying two 32.cent. stamps to a letter requiring only 
40.cent., will begin to add up over time. Additionally, it is difficult 
for a business to keep track of stamp inventories and stamps are subject 
to pilferage and degeneration from faulty handling. Moreover, increases in 
the postal rate (which seem to occur every three years) and the 
requirement for variable amounts of postage for international mail, makes 
the purchase of stamps even more inefficient and uneconomical. 
Because of different postage zones, different classes of mail, different 
postage required by international mail and the inefficiency of maintaining 
stamps within an office, it is important to have an automatic postage 
system, such as the aforementioned inefficient and relatively expensive 
postage meter. 
However, the traditional postage meter does not allow the individual or 
business to take advantage of commemorative stamps designed and printed by 
the Post Office. Although individuals often purchase and collect various 
editions of commemorative stamps, businesses will generally forego buying 
commemorative stamps because the large variety of stamps available would 
only complicate their stamp inventory. 
Since the outside of an envelope is usually the first contact a mail 
recipient has with the sender, it is desirable to make a good "first 
impression" on the mail recipient. It is also desirable for a commercial 
user to add a message unique to his or her business and perhaps even 
tailored on a recipient-by-recipient basis. 
Accordingly, there is a need in the art for a system and method that 
provides the automatic placement of postage on mail at locations other 
than a U.S. Post Office, while not requiring the use of a traditional 
postage meter, and which allows for the addition of unique postage indicia 
to be printed along with the postage. 
One major problem with any system in which a portable memory is used for 
controlling available values in a computer system, such as the amount of 
postage available to a user, is the maintenance of strict controls on the 
"filling" of the memory. Any such controls must have as a component the 
ability to create an audit trail and the ability to withstand unauthorized 
usage. 
Another problem facing any CPU based system with a portable memory to store 
postage is that the system should optimally interface with a user friendly 
operating environment that is flexible and can be coupled to other 
programs such as a word processing or graphics program. 
Thus, it is one object of the invention to provide a system and method 
whereby various configurations of postage indicia can be established by 
the user of the portable memory device. 
It is a further object of the invention to provide a system and method 
whereby the user can select from several configuration of postage indicia 
which he/she desires to print on an item of mail. 
It is a still further object of the invention to provide a system and 
method whereby a user can import personalized, or customized, postage 
indicia graphics into the interface program which allows a CPU to read a 
portable memory device, and to print this customized indicia on a piece of 
mail. 
SUMMARY OF THE INVENTION 
These and other objects and features are accomplished in a preferred 
embodiment of the present invention, in which a processor-based system is 
a personal computer ("PC") located within a business' office or an 
individual's home. The PC stores a program, hereinafter referred to as the 
"E-STAMP" program, which requests input from the user on the amount of 
desired postage and the configuration of the desired postage indicia and 
subsequently prints on an envelope, a letter or a label through a printer, 
or a special purpose label-maker, coupled to the PC the desired postage 
indicia designating the appropriate amount of postage. The desired amount 
of postage is printed as a meter stamp and may contain encrypted 
information for security purposes or may be customized as desired by the 
user. The E-STAMP program interfaces with the user through the display 
screen and the keyboard, or mouse, of the PC. 
In the preferred embodiment of the present invention, the E-STAMP program 
may be coupled to a graphics program residing within the processor-based 
system, thus allowing the customer to select a personalized graphic design 
for the postage meter indicia to be printed on the mail. The user can 
construct his/her own design using any of the well-known drawing programs, 
such as, for example, Macromedia's FreeHand program, which is hereby 
incorporated by reference herein; or the user can select from an 
established data base of graphics, either self-designed or obtained from 
either the post office on the portable postage memory or from other 
graphics suppliers via diskette data loaded into a general application 
program running on the PC. 
Furthermore, the E-STAMP program may also be programmed to print the 
address, return address and meter stamp on correspondence. This 
correspondence can then be placed in envelopes with cutouts or glassine 
paper at the appropriate areas so that the address, return address and/or 
meter stamp can be visualized through the envelope. 
In another preferred embodiment of the present invention, a touch memory 
utility ("TMU") button, manufactured by, for example, Dallas 
Semiconductor, Dallas, Tex., is utilized for transferring the purchased 
amount of postage from the U.S. Post Office to the processor based system 
at the user's office. Typically, a user will physically take the TMU 
button to (or purchase from) a U.S. Post Office location, that Post Office 
having a system complementary to the one installed on the customer's PC. A 
postal worker will interface the TMU button with the system residing at 
the Post Office in order to replenish the amount of postage programmed 
within the button in an amount requested and purchased by the customer. 
The customer may also select from a variety of postage meter stamp designs 
that the Post Office can input into the portable memory device. The user 
may also call a number (an authorized Post Office telephone number) and 
have the Post Office transfer the required amount of postage by modem. 
The Post Office may also elect to sell disposable TMU buttons pre-loaded in 
various denominations. These disposable TMU buttons may be sold either at 
the Post Office window or through machines in the Post Office lobby. The 
Post Office may sell a variety of TMU buttons that have been loaded with 
postage meter stamps of different designs, such that when the TMU button 
is coupled to the E-STAMP program that a specific design of postage meter 
stamp will be printed on the letter, envelope, or label. 
The customer will then physically carry the button back to the 
processor-based system, couple the button to a corresponding receiving 
apparatus coupled to the processor-based system so that portions of the 
stored postage may be downloaded to the E-STAMP program upon a request by 
the customer. Upon invocation of the E-STAMP program by the customer, the 
program will inform the customer of the newly obtained amount of postage 
via the display screen. 
In yet another preferred embodiment of the present invention, the display 
screen coupled to the processor-based system employs a "windows" type 
display for interfacing with the user. Through the display screen, the 
E-STAMP program will request a password from the user and the amount of 
postage the user wishes to apply to a piece of outgoing mail or 
corresponding label for subsequent application to a package or envelope. 
The user will enter the desired amount of postage, the program will 
retrieve this postage stored within the TMU button, and the E-STAMP 
program will print a meter stamp through a coupled printing device onto 
the outgoing mail or label. 
In still yet another preferred embodiment of the present invention, the 
E-STAMP program may be coupled to a word processing program residing 
within the processor-based system. As a result, the application of the 
meter stamp may be made in conjunction with the word processing program, 
which has the capability to print envelopes, separately or in conjunction 
with the printing of a corresponding letter produced by the word 
processing program. 
In another preferred embodiment of the present invention, the 
aforementioned TMU buttons are specially manufactured by Dallas 
Semiconductor for use in conjunction with E-STAMP programs, i.e., unique 
serial numbers specific to the E-STAMP program are embedded within each 
TMU button. These serial numbers are then provided to the U.S. Post Office 
for programming into their corresponding POSTAGEMAKER program and system. 
Thus, a form of security is provided since only the TMU buttons specially 
manufactured for use with the E-STAMP program are able to receive or 
retrieve data pertaining to postage amounts, as previously described. 
Additionally, a special password could be dedicated for use with the 
POSTAGEMAKER program so that access is only provided to users entering the 
correct password. As a result of the aforementioned, the U.S. Post Office 
can be assured that only authorized users are able to obtain postage 
replenishment, and that users are unable to replenish their postage within 
the TMU button without cooperation from the U.S. Post Office. The 
aforementioned serial numbers and passwords may also allow a user and the 
U.S. Post Office to track postage used by every company, department, 
employee, etc. Other software programs may also be configured to access 
the E-STAMP program so that spread sheets and/or graphs may be produced 
providing statistics on postage use within a business. 
In addition, the E-STAMP program can be used to encode a variety of 
information within the postage meter stamp using symbol technology. Such 
information would be machine readable and can be used to identify meter 
stamp forgeries. The E-STAMP program may also encode a variety of 
information into a bar code that is printed separately from the postage 
meter stamp. For example, the E-STAMP could automatically produce ZIP+4 
coding and print the appropriate PostNet bar code on the envelope. 
Currently, a customer who prints the appropriate PostNet bar code on 
letters only has to pay 29.5.cent. per meter stamp rather than 32.cent. 
per stamp. Thus use of the E-STAMP program is not only more convenient 
than a conventional postage meter but it can also save the user money on 
postage. 
In an alternative embodiment of the present invention, the E-STAMP program 
is able to automatically calculate the correct postage to place on a 
letter, parcel or label as a function of the class, zone and weight of the 
particular item to be mailed. One embodiment of the present invention 
includes a balance coupled to the processor-based system so that mail can 
be placed on the balance and the weight of the mail automatically entered 
into the E-STAMP program for calculating the correct postage for that 
mail. 
In this application there is referred to the situation where it is said 
that postage (or postage values) are stored in a memory, or where postage 
values are refilled in a portable memory. Often there is reference to the 
situation where postage, or postage values, are removed from, or obtained 
from a portable memory. Of course, what is being referred to is the 
storage of data values which represent values of postage indicia. During 
the postage printing operation the amount of postage indicia that the 
printing system will be allowed to print is controlled by the "values" of 
the data stored in the portable memory at the time the printing operation 
is performed. There is no actual transfer of values as such, but rather a 
matching of data to see that the stored amount is equal to or more than 
the requested amount to be printed. This is but one step in the 
verification process. 
The foregoing has outlined rather broadly the features and technical 
advantages of the present invention in order that the detailed description 
of the invention that follows may be better understood. Additional 
features and advantages of the invention will be described hereinafter 
which form the subject of the claims of the invention. It should be 
appreciated by those skilled in the art that the conception and the 
specific embodiment disclosed may be readily utilized as a basis for 
modifying or designing other structures for carrying out the same purposes 
of the present invention. It should also be realized by those skilled in 
the art that such equivalent constructions do not depart from the spirit 
and scope of the invention as set forth in the appended claims.

DETAILED DESCRIPTION OF THE INVENTION 
The present invention provides for a portable postage storage device, 
described in more detail below, that can be coupled to a processor-based 
system at both the customer's site and at the U.S. Post Office. Throughout 
the remainder of this description, reference is made to the U.S. Post 
Office. Note, however, that the present invention may be implemented 
within any country and with respect to any postal system. 
The present invention will allow an individual to purchase a desired amount 
of postage at a U.S. Post Office, such postage being stored within a 
postage storage device. The user may then invoke a processor-based system 
to access and retrieve a portion of the stored amount of postage via a 
program stored on a processor-based system, such program hereinafter 
referred to as the "E-STAMP" program. The E-STAMP program requests input 
from the user on the weight of the item to be mailed, the addressee's 
address, etc. The E-STAMP program will utilize the information that was 
entered to calculate the amount of desired postage for an item to be 
mailed and print a meter stamp on an envelope, label or letter through a 
printer or special purpose label maker coupled to the processor-based 
system. 
The postage storage device can also be coupled to a processor-based system 
located at the U.S. Post Office. Particular Post Office sites will have 
installed a system complimentary to the E-STAMP system installed on the 
customer's PC. The program installed at the U.S. Post Office, hereinafter 
referred to as the "POSTAGEMAKER" will allow a postal worker to interface 
the postage storage device with the processor-base system residing at the 
Post Office in order to replenish the amount of postage programmed within 
the postage storage device in an amount requested and purchased by the 
customer. 
Copending patent application entitled "SYSTEM AND METHOD OF CONTROLLING THE 
DISPENSING OF AN AUTHENTICATED INDICIA," filed Aug. 16, 1995, Ser. No. 
08/516,010 (Attorney Docket No. P00CP2) and patent application entitled 
"SYSTEM AND METHOD FOR CONTROLLING THE STORAGE OF DATA WITHIN A PORTABLE 
MEMORY" filed Aug. 16, 1995, Ser. No. 08/515,988 (Attorney Docket No. 
P00CP3), both of which are hereby incorporated by reference, and are 
representative of the type of system which would be the best mode for use 
of this invention. 
Referring to FIG. 1A, there is illustrated a processor-based system 10 
utilized for implementing the present invention, specifically the 
aforementioned E-STAMP and POSTAGEMAKER programs. System 10 includes 
chassis 11 enclosing processor ("CPU") 12 and disk drive 14. System 10 is 
a general purpose computer, such as an IBM compatible (or Apple MacIntosh) 
controlled by any general purpose operating system such as DOS or UNIX. 
Coupled to CPU 12 is display 13, keyboard 15 and mouse 16. Furthermore, 
system 10 is adapted for coupling with a postage storage device 18, such 
as the preferred embodiment touch memory utility ("TMU") button 182 
illustrated in FIG. 1B. Postage storage device 18 is coupled to the 
processor-based system 10 through a postage storage device receptor 17. 
The postage storage device may be any memory device having some residual 
data capability, where that memory device can provide sufficient security 
measures to efficiently limit access to the memory of the device to 
authorized users. For example, since algorithms can be used to control 
access to the memory device, a standard "diskette" can be used if desired. 
Postage storage devices 18 may be initially assigned to a user when he 
acquires a copy of the E-STAMP program, or disposable devices, such as TMU 
buttons 182, may be preloaded in various denominations and meter stamp 
indicia and sold either over the counter or in existing stamp machines at 
Post Office locations. The Post Office may also select to sell pre-loaded 
postage storage devices 18, on which the customer pays a deposit, that can 
be exchanged for another postage storage device 18 or returned for the 
deposit whenever postal storage device 18 is depleted of postage. All 
postal locations may sell pre-loaded postal storage devices 18 or the Post 
Office may elect to designate particular postal locations for selling such 
devices. 
The Post Office may also sell disposable postal storage devices 18 through 
machines in the Post Office lobby or in various locations. The postal 
machine may sell postal storage devices of different denominations and 
that have been loaded with postage meter stamps of different designs, such 
that when the postal storage device 18 is coupled to the E-STAMP program 
that a specific design of a postage meter stamp will be printed on a 
letter, envelope, or label. 
The preferred embodiment, TMU button 182, incorporates a small disk having 
a memory. TMU button 182 is a small, light-weight, portable, essentially 
non-breakable device available from Dallas Semiconductor, Dallas, Tex. A 
TMU button 182 may be coupled to processor-based system 10 through button 
holder 172. In a preferred embodiment of the present invention, a batch of 
TMU buttons will be manufactured with specifically designated serial 
numbers for use solely with the present invention. 
An advantage of the preferred embodiment (the TMU button 182) is that a TMU 
button 182 is small enough and light enough that several may be carried in 
one hand. Furthermore, the TMU button 182 is sufficiently durable to be 
sent through interoffice mail. The fact that the portable memory is 
universally usable with any PC equipped with a button holder 172 allows 
the per unit cost of TMU buttons 182 to be lower. 
Additional alternative embodiments of the postage storage device 18 are 
illustrated in FIG. 1B. One alternative postage storage device 18 is a 
smart disk 188 incorporating its own electronic modules capable of 
read/write operations. One embodiment of such a smart disk 188, Smart 
Disk.TM., can be obtained from Smart Disk Security Corporation, Naples, 
Fla. The Smart Disk.TM. looks like a floppy disk and fits into a typical 
PC's floppy disk drive, such as disk drive 178, connected either 
externally or internally to processor-based system 10; however, Smart 
Disk.TM. has its own microprocessor that provides secure, password 
protected storage. One advantage of the Smart Disk.TM. is that it can 
operate in a standard PC disk drive without modification to the disk drive 
or PC. Smart Disk.TM. provides security for stored postage with an 
encrypted password and the encryption algorithm. 
Another type of postage storage device 18 is a smart card 186, a plastic 
card embedded with a microchip. The microchip contains mathematical 
formulas that encrypt computer data to secure access to that data (i.e., 
postage) and verify a user's identity before allowing access to the data. 
One drawback in the currently available smart cards 186 is that they 
require an expensive interface, such as smart cart interface 176. 
Still another type of postage storage device 18 is a PCMCIA card 184. 
PCMCIA cards are currently used on notebook computers for modular storage 
and communication. Both external and internal add-on hardware 174 (i.e., 
card slots) are available for PCs. 
The portable memory can contain data fields with specific information, such 
as passwords, stored therein at particular locations. The portable memory 
could also contain, for example, a timer, a counter, a graphics program, a 
bar code program, or any one of a plurality of other "active" elements 
such as microprocessors, counters, number generators, or coprocessors 
which can be incorporated into the operation of the system. 
The postal storage device 18 may be used on a variety of processor-based 
systems 10. Processor-based systems 10 may be located in an individual's 
home, at any business location, or may even be present in a Post Office 
lobby for after hour usage. In a preferred embodiment, system 10 is an IBM 
compatible PC. In an alternative embodiment, system 10 could be part of a 
main-frame computer or system 10 could be part of a network system. 
Typically, a user will buy a postage storage device 18, containing a small 
quantity of postage, with a copy of the E-STAMP program. The user will 
then install the E-STAMP program on the user's processor-based system 10. 
FIG. 2 illustrates one embodiment of user instructions and screen prompts 
to be followed by the user during the installation of the E-STAMP program. 
The instructions and screen prompts illustrated in FIG. 2 reflect the 
installation of the E-STAMP program in a "windows" operating environment 
on a PC equipped with a TMU button 182 and button holder 172. Of course, 
other means could be employed for implementing the present invention 
within a processor-based system 10. 
The user installation instructions 201 inform the user how to pull up the 
E-STAMP installation program. Once the installation program is initiated, 
screen 203 will appear. Screen 203 instructs the user to connect the TMU 
holder 172 to a serial or parallel port and to insert the TMU button 182 
into the holder 172. The user is then instructed to turn on a printer 19 
that has been coupled to the processor-based system 10 and check to see 
that the printer 19 is supplied with paper. Screen 203 further requests 
that the user prepare the following information: the user's full name and 
address, an identification number for the user (i.e., an employer 
identification number (EIN#), if the user is a business or organization; 
or a social security number (SS#), if the user is an individual), the 
user's zip code, the user's telephone number and the user's fax number. 
The next screen, screen 205 displays the Post N Mail License Agreement with 
its legal terms and conditions. Acceptance of the terms and conditions set 
out in the license agreement is indicated when the user continues with the 
installation program. 
Next, screen 207 will appear and display the E-STAMP serial number and TMU 
serial number. At this time the user-specific information requested in 
screen 203 should be entered into the E-STAMP program. Once the user has 
entered the user-specific information, screen 209 will appear warning the 
user to carefully verify the correctness of the entered information. 
After verifying the information added into the E-STAMP program, screen 211 
will remind the user to ensure that a coupled printer 19 is on line. The 
user information entered into the E-STAMP program will then be 
incorporated into a user registration form, one embodiment of which is 
illustrated in FIG. 3. The E-STAMP registration form will be printed in 
triplicate. The user is instructed to sign and mail two copies of the 
registration form to the creator of the E-STAMP program, Post N Mail, Inc. 
and to retain one copy of the registration form. Screen 211 also informs 
the user that a registration card will be mailed to the user in order that 
the user may access TMU refilling stations. 
The E-STAMP installation program continues with screen 213, which describes 
the progress being made in installing the E-STAMP program, and screen 215, 
which informs the user when the E-STAMP program installation has been 
completed. 
Referring to FIG. 3, there is illustrated a preferred embodiment of the 
E-STAMP registration form. The registration form includes information such 
as the TMU button serial number 31, the E-STAMP serial number 32, the date 
and time that the E-STAMP program was installed 33, and user-specific 
information 35 (e.g., name, address, telephone and fax numbers, and 
identification number), and a copy of the Post N Mail License Agreement 38 
having an identified location for the user to sign. A preferred embodiment 
of the E-STAMP registration form will also contain all of the information 
needed to specifically identify the TMU button 182, E-STAMP program, and 
registered user in an encrypted format 37. The encrypted information 37 
will be in a machine-readable graphical security interface such as a 
standard bar code. 
The standard bar code contains white and dark areas in the form of bars 
that can be read by a laser scanner. The laser scanner illuminates the 
white and dark areas with a light of a certain frequency. The light is 
reflected back to the laser scanner in such a way as to indicate the 
pattern of white and black areas within the bar code. Since white areas 
reflect much more light than dark areas do, a perpendicular scan of the 
bar code will allow the scanner to translate the reflected light into the 
coded information. More than 20 linear bar code languages have been 
developed, each with its own specifications for how many bars and spaces 
make up a character, how characters are to be arranged, whether the 
characters can be letters as well as numbers, and so forth. The most 
widely-used bar code is the Universal Product Code (UPC) seen on everyday 
grocery items. The standard bar code currently used by the Post Office is 
POSTNET ZIP+4 described in Postal Service Publication number 67. 
More sophisticated graphical security interfaces have been developed over 
the last decade, such as Intermec Corporations' Code 49 and Laserlight 
System Inc.'s Code 16K. A major advantage of these more sophisticated 
graphical security interfaces is that they contain an error-correction 
formula which can often recover the entire message even if parts of the 
code have been torn or damaged. 
A preferred embodiment of encrypted information 37 is a graphical security 
interface developed by Symbol Technologies of Bohemia, N.Y. and is called 
PDF417, a portable data file. PDF417 is a graphical security interface 
constructed from data units called "words," each of which is 17 modules 
long. Bars are made from filling in up to six consecutive modules and each 
unit has four separate bars and four spaces. In essence, PDF417 can stack 
the equivalent of up to 90 one-dimensional bar codes, each just three 
hundredths of an inch high. Thus, the PDF417 symbology is more complicated 
to produce and scan than is the typical one-dimensional bar code and 
allows for a denser coding of information. Because the PDF417 symbology 
specification includes sophisticated protocols for error-correction, the 
actual density of information is highly variable, but can be ten times the 
amount of information found in U.S.P.S. PostNet bar code, per square inch. 
PDF417 is available from Symbol Technologies, Inc., 116 Wilbur Place, 
Bohemia, N.Y. 11716 and the operation of the PDF417 is detailed in PDF 
Primer obtained from Symbol Technologies, Inc. and is hereby incorporated 
herein by reference. 
When Post N Mail, Inc. receives the signed Post N Mail License Agreement 
from the user, the encrypted information 37 can be scanned with a laser 
scanner so that the information contained therein can be automatically 
transferred to a registered user's database. When the encrypted 
information 37 has been transferred to the registered user's database, a 
registration card containing a Post N Mail (PNM) serial number will be 
printed and mailed to the registered user. 
The user may then take that registration card with the user's TMU button 
182, or other postage storage device 18, to the Post Office to be 
registered with the Post Office. Until the TMU button 182 has been 
registered with the Post Office, the POSTAGEMAKER program will not 
recognize TMU button 182 as being an authorized postage storage device 18. 
To register a TMU button 182, or other postage storage device 18, a postal 
worker must enter the information on the PNM registration card into the 
POSTAGEMAKER program. Such information will include the PNM serial number, 
EIN# number or SS#, TMU button serial number, and the address and 
telephone number of the registered user. Once all of this information has 
been entered into the system, the POSTAGEMAKER program will then recognize 
TMU button 182 and allow a postal worker to replenish the amount of 
postage stored within button 182 at the request of the user in a manner to 
be discussed below. 
System 10 may be utilized at a customer site for permitting a user to 
retrieve postage stored within postage storage device 18, via the E-STAMP 
program, for subsequent printing as a postage meter stamp onto a piece of 
mail through printer 19, coupled to system 10. The utilization of the 
E-STAMP program by a customer will be further described below. 
Alternatively, a pair of systems 10 may be linked together through Public 
Switched Network ("PSN") 102 via modem 101 or directly through digital 
telecommunications trunks (not shown). Processor based systems 10 located 
at different U.S. Post Offices may be linked via PSN 102 in a conventional 
well known manner (such as through modem 101) so that information may be 
shared between the various Post Offices. Generally, a copy of the 
POSTAGEMAKER program will be stored within at least one processor-based 
system at selected U.S. Post Office locations. PSN linkage of 
processor-based systems 10 by the Post Office and the customer, or user, 
will allow the sharing of information between the various Post Offices and 
will allow a customer to call a number (an authorized Post Office number) 
and have the Post Office transfer the required amount of postage to a 
postage storage device 18 installed at a customer site by modem. 
The process for validating the postage storage device 18 using the Post 
Office POSTAGEMAKER program is described in the above-identified 
co-pending patent application (Attorney Docket No. P004) entitled System 
and Method for "Printing Personalized Postage Indicia on Greeting Cards". 
Referring to FIG. 4A, there is illustrated a preferred embodiment of a 
display screen shown on display 13 to a U.S. Post Office employee when 
accessing the present invention on system 10. Of course, the particular 
display aspects illustrated in FIG. 4A may be modified in any one of 
numerous ways. Also, in a preferred embodiment of the present invention, 
processor-based system 10 will provide for input from a user via keyboard 
15 and mouse 16. However, other various forms of input available to 
processor-based systems may be utilized, such as a light pen or a 
touch-sensitive screen (both not shown). 
At the upper right-hand corner of display screen 40, there is indicated a 
POSTAGEMAKER serial number, in this example "77014-9998-44." This serial 
number may include the zip code of the Post Office location, or may be 
selected at random. This serial number may also include a designation of a 
particular system 10 or a designation of the postal employee performing 
the transaction. 
In the upper left-hand corner of display screen 40 is illustrated a TMU 
serial number, in this example "2 128 176 32 0 0 0 175." This serial 
number represents eight bytes of information stored within TMU button 182, 
each byte may represent any number from 0 to 255. A TMU serial number is 
specifically assigned to and will identify a specific TMU button 182. 
Thus, display screen 40 indicates that the postal employee has coupled an 
authorized TMU button 182 to a processor-based system 10 which 
incorporates the POSTAGEMAKER program. 
The use of the POSTAGEMAKER program in conjunction with a database program 
will allow the Post Office to generate records indicating all E-STAMP 
authorized postage by Post Office location (or zip code), Post Office 
employee, TMU serial number, etc. This type of information can be easily 
compiled to determine Post Office sales, market forecasts, etc. 
Typically, the first two numerals (bytes) within the TMU serial number are 
assigned by the button (or memory) manufacturer. The third byte is 
selected by the U.S. Postal System and identifies TMU buttons 182 
specifically designed for the POSTAGEMAKER program, excluding other TMU 
buttons 182 not designed for the POSTAGEMAKER program, such as disposable 
buttons, and assisting in the exclusion of any other means for accessing 
the POSTAGEMAKER program. As a result, the present invention may be 
designed so that only authorized TMU buttons 182 may access the 
POSTAGEMAKER program for replenishment of postage as will be discussed 
below. 
The remainder of the TMU serial number is basically the sequential serial 
number of that particular TMU button 182 in particular. 
As the POSTAGEMAKER program reads the information stored within TMU button 
182, the TMU serial number and the information in blocks 401 and 402 are 
displayed on display 13. The "TMU Verification" information in block 401 
shows the date and Post Office location where the last addition of postage 
was electronically stored within button 182. As shown within box 401 of 
FIG. 4A, coupled TMU button 182 currently contains a postage balance of 
$6.72, which is most likely a portion of the postage that was input into 
button 182 at 3:18 p.m. on Oct. 30, 1993, at the Post Office having an ID 
number of "77090-2765-65." It may be observed that this serial number is 
different from the POSTAGEMAKER serial number shown at the upper 
right-hand corner of display screen 40, indicating that these numbers 
represent two different Post Office locations, and that button 182 was 
formerly coupled to a processor-based system 10 at Post Office 
"77090-2765-65" but is currently coupled to a processor-based system 10 
residing at Post Office "77014-9998-44". 
Box 401 also shows the expiration date of button 182, the user's PNM 
registration number, the user's E-STAMP serial number, and a strike and 
dollar counter check as will be described in more detail below. 
Box 402 is also displayed on screen 10 and itemizes the quantity of postage 
of designated values that has been used and subtracted from the postage 
stored in button 182. For example, box 401 of FIG. 4A shows that $500.00 
worth of postage was initially added to button 182 and that $6.72 worth of 
postage remains in button 182. This means that $493.28 worth of postage 
has been deducted from button 182. Box 402 of FIG. 4A shows that postage 
valued from $0.01 to $0.29 was subtracted from the amount of stored 
postage 991 times, that postage valued from $0.30-$0.40 was subtracted 166 
times, that postage valued from $0.41-$0.45 was subtracted 122 times, that 
postage valued at $1.00-$1.99 was subtracted 14 times and that postage 
valued at more than $3.00 was subtracted 16 times. 
In a manner to be discussed in detail below with respect to FIG. 5, the 
first password (i.e., BCLINTON) is entered into the POSTAGEMAKER software 
in box 403. That password will be used to generate other passwords as 
described below and checked against the information stored in button 182. 
If the Post Office requests it, an extra password can be included to 
access and start the POSTAGEMAKER program. When the correct password for 
button 182 is entered into POSTAGEMAKER (i.e., BClinton), a string of 
numerals are generated as shown in block 404. In a preferred embodiment of 
the present invention, the first several numerals within block 404 
represent the current time and date. A second string of numerals represent 
the POSTAGEMAKER serial number and the Post Office identification number. 
The remainder of the 45 bytes are generated randomly by the POSTAGEMAKER 
program. This generation of random numbers is detailed below. 
Thereafter, a second password is generated from the numbers within block 
404 through the application of an algorithm, an example of a second 
password is illustrated in block 405. These numbers are used as a second 
password to assist in the random generation of numerals within block 406. 
In a preferred embodiment of the present invention, fourteen of the 45 
bytes or numerals within block 406 represent a button usage analysis 
(i.e., how much of what value of postage has been used); three numerals 
(bytes) represent the number of strikes (or uses) that have been made and 
subtracted from a starting point of 2,500,000; and four numerals (bytes) 
represent the dollar value of postage used and subtracted from a starting 
point of $2,500,000. The remainder of the numerals are generated randomly 
by the POSTAGEMAKER program. 
Thereafter, another algorithm utilizes the numerals generated within block 
406 to derive the third password displayed within block 407. If all is 
correct, the cursor will then stop within block 408 so that the postal 
employee may enter a desired amount of postage in U.S. dollars as 
requested by the user owning TMU button 182 currently coupled to the 
POSTAGEMAKER program. In a preferred embodiment of the present invention, 
four bytes represent the amount of postage entered by the postal worker, 
ten bytes represent user-specific information, five bytes represent the 
user's zip code, three bytes represent the original postage amount, three 
bytes represent the number of strikes (or times that the postal storage 
device has been accessed), four bytes represent the accumulated value of 
postage taken from the postage storage device, and three bytes represent 
the expiration date of button 182. Button 182 may be programmed to expire 
at any time desired by the Post Office. The Post Office may desire that 
postage storage devices 18 expire every six months in order to maintain a 
valid registration with updated information. 
None of the numbers described above, or the passwords generated therefrom, 
are displayed on the screen. However, POSTAGEMAKER utilizes information 
from button 182 to generate numerals in blocks 406 and 408 to generate the 
usage analysis log illustrated in block 402 and to perform a counters 
check illustrated in block 401. The counters check adds the number of 
strikes subtracted from 2,500,000 (see block 406; descending strike 
counter) to the number of strikes made (see block 408; ascending strike 
counter). If these numbers are accurate, their sum should equal 2,500,000. 
A similar dollar counter check is also performed. The TMU button 182 is 
initialized to recognize 2,500,000 strikes and $2,500,000 worth of 
postage. Whenever a user has used 2,500,000 strikes or used $2,500,000 
worth of postage, the postage storage device must be returned to the Post 
Office, or exchanged for a new one. 
As shown in block 408, the user has desired to add $500.00 worth of postage 
to TMU button 182. This amount has been entered by the employee. 
Subsequent to entering the $500.00 amount, the postal employee will press 
button 409 to initialize the system. An optional aspect of the 
initialization process would be to allow a customer to select one or more 
graphic configurations of postage indicia to be input into TMU button 182. 
The postage indicia may include standard indicia and/or a number of 
designs such as those on the commemorative stamps printed by the Post 
Office. A customer may select a button with one design, or several 
designs. 
The postage storage device 18 may be programmed with instructions to be 
read by the E-STAMP program. For example, if more than one graphical 
configuration of a postage indicia has been stored in the postage storage 
device then the E-STAMP may be instructed to display each of those 
graphical configurations to the consumer and allow the consumer to select 
the one that they want printed on their mail. In addition, the postage 
storage device may also be programmed to select a particular postage 
indicia only within a particular time period. For example, a "Valentine's 
Day" postage indicia may be programmed to be printed only on or before 
February 14th and not afterward. 
Once the appropriate amount of postage and the desired postage indicia has 
been selected, the postal employee may press button 410 to "write" the 
$500.00 amount into TMU button 182 coupled to system 10. 
Alternatively, a user may maintain an account with the Post Office or a 
credit card account which will be automatically charged for postal charges 
printed using TMU button 182. In this situation, a set money value will 
not be entered into TMU button 182, but rather an authorization to debit a 
particular account will be entered into TMU button 182. 
Immediately thereafter, display screen 42, illustrated in FIG. 4B, is shown 
to the postal employee. Display screen 42 is similar to display screen 40 
except for the new information within block 411 which now shows that TMU 
button 182 contains $506.72 worth of postage, which was updated at 10:45 
a.m. on Dec. 15, 1993 by the POSTAGEMAKER program located at Post Office 
location "77014-9998-44." Note that in this embodiment the postage 
original (block 411) and usage analysis log (block 412) are re-zeroed 
whenever new postage is added to TMU button 182. 
Referring next to FIG. 5, there is illustrated a flow diagram of the 
aforementioned method of providing security within the present invention. 
First, in block 510, the TMU serial number is accessed by the security 
program within the present invention. If the TMU serial number is not one 
specifically assigned to the U.S. Postal Service, the process will not 
proceed to step 520. In step 520, the program will write a password 
provided by the creator of the program. Thereafter, at step 530, the 
aforementioned data is produced and displayed within block 404. The random 
numerals will be produced as a function of the entered password. 
Thereafter, in step 540, a first algorithm selected by the U.S. Postal 
Service will operate on the data within block 404 to produce a second 
password (step 550). This second password, displayed within block 405, is 
used within step 560 to generate a second set of data (the numerals 
displayed within block 406). A second algorithm within step 570, utilizes 
the second set of data to produce a third password (step 580). Once the 
above is written on the TMU button 182, the Post Office employee will be 
able to store postage to TMU button 182 by adding the desired amount 
within block 408 (step 590). Thereafter at step 505, write button 410 is 
"depressed" to thereby store postage within TMU button 182. 
Referring next to FIG. 6, there is illustrated the algorithm used within 
the present invention, and described with respect to FIG. 5. Note that the 
TMU serial number may be incorporated into the algorithm(s) to make each 
TMU button unique. For a given 8-byte password, "p1" represents the first 
byte of that password. For a given 45-byte data area, "d1" represents the 
first byte of that data. The "mod operator" stands for the modulus, or 
remainder, of a division. 
Once the required amount of postage has been transferred to the TMU button 
182 the user may then physically carry the button back to the user's 
business location and couple TMU button 182 to a processor-based system 10 
through button holder 172. 
Before data within the postage storage device 18 can be accessed and used 
by the customer, the postage storage device 18 must be validated by the 
E-STAMP program. 
Upon validation of the postage storage device by the E-STAMP program, the 
customer's processor-based system 10 can access the postal amount stored 
in TMU button 182 and down-load portions of the stored postage to the 
E-STAMP program to be used for printing postage meter stamps on pieces of 
mail. 
Referring next to FIG. 7, there is illustrated a flow diagram of the 
process employed within processor-based system 10 configured for allowing 
a user to print a postage meter stamp. 
As previously discussed, the E-STAMP program may be a stand alone program, 
or it may be associated and coupled with other programs, as for example a 
word processor or graphics program. Therefore, the E-STAMP program may be 
started directly (step 702) or through a word processor program also 
residing on the processor-based system 10 (step 701). Thereafter, at step 
703, the E-STAMP program shows display 80, illustrated and described with 
respect to FIG. 8, to the user. 
Next, in step 704, as shown in FIG. 7, the E-STAMP program verifies the TMU 
serial number associated with TMU button 182 coupled to processor-based 
system 10. If TMU button 182 has not been inserted within its holder 172, 
at step 705, a message is flashed to the user to insert TMU button 182. If 
the wrong TMU button, or a TMU button not programmed for use with the 
E-STAMP program, has been inserted and coupled to system 10, a warning is 
flashed to the user to insert an authorized, or valid, TMU button 182 as 
illustrated in box 706. The process of TMU verification represented by box 
704 includes several steps as follows: 
Step 1--Serial number is verified. 
Step 2--E-STAMP will match its Password 1 (BCLINTON) with the TMU's 
Password 1. If ok, 
Step 3--E-STAMP will read information in Data 1 (block 530) and process it 
through algorithm 1. 
Step 4--If the results of step 3 match Password 2, E-STAMP will proceed to 
Data 2 (block 560). 
Step 5--E-STAMP will read information in Data 2 and process it through 
algorithm 2. 
Step 6--If the results of step 5 match Password 3, E-STAMP will then be 
able to access Data 3 which contains postage amount and proceed to step 
707. 
If a valid TMU button is coupled to system 10, at step 707, the information 
within TMU button 182 is read and the information is verified, for example 
the ascending and descending counters are added together for verification 
and the expiry data is verified if the postal balance is greater than 
$2.01. In addition, the zip code, E-STAMP serial number and user 
identification number are verified. If all of the information checks out 
the TMU button's serial number is displayed in conjunction with the 
E-STAMP serial number in the top right corner of screen 80 (see 801), FIG. 
8. The remaining postage balance residing within TMU button 182, is 
displayed within block 806. 
Next, at step 708, return address box 803 is completed automatically or 
manually. The address within 803 may be automatically entered from the 
adjoining word processor program, the address may be selected from a 
drop-down box (not shown), or the address may be manually input. Any 
entered address may be saved within the E-STAMP program and added to the 
drop down menu. Additionally, if a return address is not desired, it may 
be omitted. 
Thereafter, in step 709, the contents of address box 805 are entered in a 
manner similar to the contents of return address 803. 
Next, at step 710, the user may select the print format by the use of box 
804. As illustrated, the postage meter stamp may be printed on a label 
through printer/label maker 19, or a choice may be made to print the 
postage meter stamp on an envelope inserted within printer 19, which may 
be chosen to be a standard size or a nonstandard size as selected by the 
user. Note that if the postage meter stamp is to be printed on a label, it 
may be desired that the return address within 803 and the address within 
box 805 not be printed. 
Alternatively, the postage meter stamp, a bar code, and the addresses 
within boxes 803 and 805 may all be printed on a flyer, a pamphlet, a 
postcard or sheet of paper. Whenever the meter stamp is printed on a 
letter, along with the addresses in boxes 803 and 805, that letter may be 
folded so that the meter stamp will show through an opening or window 901, 
in the top right hand corner of a specially designed envelope 900 
illustrated in FIG. 9. Envelope 900 may be a standard or non-standard size 
with any number of windows as designed by the user. Typically, envelope 
900 will have a first window 901 in the top right hand corner for the 
printed postage meter stamp to show through. Envelope 900 may also have 
other windows for the addressee's name and address (903) and for a return 
address (902) to show through. Envelop 900 may have glassine paper, or 
other transparent covering material 904, covering the described windows 
such that the postage meter stamp and other imprinted information is 
protected from inadvertent detachment and adverse conditions (such as 
inclement weather). 
Thereafter, in step 711, the user enters the weight of the package or 
letter associated with the postage meter stamp. This weight may be entered 
manually, or automatically through the use of scale 103 coupled to 
processor-based system 10 in a manner well known in the art. The weight of 
the package or letter will appear in box 810. In step 712, the user 
selects the class of mail from the choices shown in box 809. 
At step 713, the user may select whether or not to print selected data in a 
bar coded message. The user may select to have all mail imprinted with a 
standard Post Net Zip+4, as described in Postage Service Publication 67, 
as shown in box 814. If the user selects Post Net, the E-STAMP program can 
automatically generate the appropriate Post Net bar code from the 
addressee's zip code. The Post Office encourages the use of Post Net bar 
codes, as it allows mail to be automatically sorted for distribution. 
The user may also select other types of graphical security interfaces, such 
as Symbol's Portable Data File Code (the PDF417 symbology) as described 
above. Using a selected graphical security interface, a user can encrypt a 
great deal of information into a small space. Graphical security 
interfaces may also be imported into the E-STAMP program from another 
application program running on the same processor-based system 10. 
In addition, selected information may be incorporated within the meter 
stamp using a graphical security interface. A preferred embodiment will 
print the postage meter stamp utilizing Symbol's Portable Data File code 
(the PDF417 symbology) as described above. An encrypted postal meter stamp 
may include any combination of the following information: the day, the 
date, the postage storage device serial number, the E-STAMP serial number, 
the sender's zip code, the addressee's zip code, the expiration date of 
the postage storage device, the cumulative values of the strike and dollar 
counters, PNM registration number, the user's identification number, and 
the Post Office identification number. The postage meter stamp may contain 
this encrypted information incorporated within an insignia or design, or 
it may appear as a background for the postage amount printed in a visually 
recognized form. 
By printing the postal meter stamp with encrypted information within the 
stamp, the Post Office can scan the postal meter stamp to verify that an 
item of mail has been posted with authorized postage. 
Next, at step 714, the user may select a U.S. postal zone or alternatively 
elect that the particular piece of mail is to be sent to Canada, Mexico or 
some other international designation as depicted in box 808. User 
selection of the international designation in box 808 will result in a 
drop down menu to allow the user to enter the country of designation and 
allow the E-STAMP program to automatically calculate the necessary 
postage. 
The E-STAMP program will automatically incorporate the aforementioned 
entered parameters--weight, class, zone--in order to correctly calculate 
the correct postage to print in conjunction with the meter stamp and to 
deduct from the postage amount stored within TMU button 182. 
Note that during the selection of the various parameters within display 80, 
the E-STAMP program may be implemented to update the postage amount 
displayed within meter display 806 as each parameter is chosen on 
essentially a real-time basis. 
In step 715, the user is provided with box 802 to insert the location from 
which the mail is to be sent. If no location is entered, the location of 
the PC with the E-STAMP program coupled to the TMU button 182 is 
automatically entered into box 802. The location entered into box 802 may 
be utilized by the E-STAMP program to calculate the correct postage. 
The date that the mail is stamped is automatically adjusted every day by 
the E-STAMP program and will prevent post-dating or pre-dating mail. This 
information is added within display 811 or may be encrypted within the 
postage meter stamp as described above. 
In step 716, the user is provided with a message box 812 to allow the user 
to add an optional message or greeting (e.g., "Happy Holidays") to be 
printed next to the meter stamp. This message may be changed at any time 
by the user, directly or by a "merge" command in conjunction with a word 
processing or graphics program coupled to the E-STAMP program. 
At step 717, the user may select the configuration of postage indicia 
desired. Box 816 will allow the user to select a standard postage indicia 
such as shown in the top right hand corner of screen 80, FIG. 8, or to 
select another postage indicia. Selection of the "Other" option in Box 816 
allows the user to select a postage indicia that has been previously 
stored within the E-STAMP program or to import a new postage indicia using 
a "merge" command in conjunction with a word processing or graphics 
program coupled to the E-STAMP program. Any imported indicia may be saved 
within the E-STAMP program and added to a drop-down menu. Importation can 
be from any data base, including the portable memory, a modem and remote 
memory, or from a data base preloaded in the main processor's memory and 
operating in cooperation with the CPU. The user may then change, add a new 
indicia, or otherwise select which indicia is desired for a given piece of 
mail. The user can use any well-known graphics program for this purpose, 
including Macromedia's FreeHand.sub.-- program, which is hereby 
incorporated by reference herein. 
As discussed, Box 816 also allows the user to select and create a postage 
indicia. If the user selects this option, a new screen 160 will appear, 
such as seen in FIG. 16, giving the user a selection menu for the type of 
indicia that the user desires to create. Once the user selects a type of 
indicia, a new screen 170 will appear with at least one sample indicia 
such as seen in FIG. 17. 
In a preferred embodiment, there is more than one sample indicia. The user 
may click on the desired indicia and then the user has the option of 
personalizing the indicia by clicking on "Personalize" (box 1702). The 
indicia may be personalized with information such as the name of the 
person whose birthday it is (box 1704) and which birthday (38th) that 
person is celebrating (box 1706). Once an insignia has been created that 
the user likes, the user clicks on "Select" (box 1708) and the selected 
indicia will be printed as part of the postage meter stamp on a piece of 
mail. The E-STAMP user may then choose to add the selected indicia to the 
E-STAMP program or to delete it. 
In step 718, the E-STAMP program utilizes the input/output ports of 
processor-based system 10 to send to printer/label maker 19, the correct 
data pertaining to the meter stamp, the postage indicia, the encrypted 
message, the authorized amount of postage, the return address, the 
addressee's address, etc. to be printed on an envelope, letter, card or 
label. 
The amount of postage printed on the meter stamp is automatically deducted 
from the amount stored within TMU button 182. Other information is also 
automatically updated including the usage record for this particular 
serial number of TMU button 182 and any other information, such as the 
addressee, the postage amount, the date, and the original denomination. 
The aforementioned steps may be repeated for a subsequent piece of mail, or 
the user may decouple TMU button 18 from system 10. 
The data accumulated by the E-STAMP program on addressee, class of mail, 
amount of postage, date of posting the mail, etc. can be exported to 
another application program operating on the same processor-based system 
as E-STAMP. Such data will allow E-STAMP users like lawyers, accountants, 
advertising agencies, etc., who bill their clients for postage to keep 
track of postage expenses on a per client basis. 
POSTAGE AND INDICIA UPDATING CONTROL 
TMU button 182 includes several memory sections, each section including an 
ID area, a password area and a data area. Access to a given data area is 
controlled by a password written into the corresponding password area. As 
discussed in further detail below, there are at least three different 
options for programming the memory areas of a given postage storage device 
18: master buttons (Level 1) which are provided to a limited number of 
supervising Post Office personnel; employee buttons (Level 2) which are 
provided to authorized Post Office employees who perform refill and 
registration operations on customers' postage buttons; and postage buttons 
(Level 3) which allow the customer (user) to print an authorized amount of 
postage indicia using a separate system controlled by the user. 
The master, employee and postage buttons are all validated by the Post 
Office/Refill Station software during refill operations. Each postage 
button (Level 3) is validated by the customer's E-STAMP software prior to 
the commencement of any indicia printing operations. The sequences for 
validating the master, employee and postage buttons using the Post 
Office/Refill Station software are depicted in FIGS. 10A, 10B and 10C. The 
sequence for validating a postage button using the customer's E-STAMP 
software is described below. 
Referring first to FIGS. 10A, 10B and 10C, the Post Office validation 
procedure for a button coupled to system 10 begins at Step 1000 with the 
initiation of the Post Office/Refill Station software. For discussion 
purposes, assume only one TMU button 182 has been coupled to system 10 at 
this point. At Step 1001, the software reads the unique serial number of 
the button and verifies that that serial number falls within a range 
assigned by the button manufacturer to the Post Office; if it does not, an 
error occurs and processing halts at Step 1002. If the serial number falls 
into the specified range, then at Steps 1003-1005, an analysis of the 
button identification code stored in the first identification (ID) area 
(as will be discussed with respect to FIGS. 11-13) of button 182 is 
performed to determine whether the button has been programmed as a master, 
employee or postage button. If no type code is found in the first ID area, 
then a blank button is identified at Step 1006 and complete programming is 
required. 
For purposes of discussion, the assumption is made that the first button 
182 master (MTR) button has been coupled to system 10. The data areas and 
fields for a TMN button 182 programmed as a master button are described 
pictorially in FIG. 11. For a master button, ID area 1100 stores the 
master button type code (MTR). First password area 1101 stores a "fixed" 
password which has been written-in by the Post Office and controls access 
to first data area 1102. As used herein "fixed password" refers to a 
password which may be periodically changed by the Post Office, through the 
master button holder, but is not regenerated with each refill as are the 
"generated passwords" described below. 
First data area 1102 includes a button type code field (in this case 
programmed with the master button code), holding data identifying the 
creation date and time of the button, the creating employee, the site and 
workstation to which the button is assigned, and a field for data 
specifying the time out period for Post Office/Refill Station software 
operation if that software is left running but unused. 
Second password area 1103 stores a "fixed" password written by the Post 
Office which controls access to second data area 1104. Second data area 
1104 includes a transaction counter which counts the number of 
transactions (refills) which occur while the master button is coupled to 
system 10 and a second button type code field. 
Third password area 1105 stores another "fixed" password written by the 
Post Office allowing access to third data area 1106. Third data area 1106 
holds the master button user's personal password which allows the user to 
log-in, as described below at Step 1107. 
When the Post Office/Refill Station software queries a master button 182 at 
Step 1003, FIG. 10A, the code for a master button is returned (read) from 
first ID area 1100. In the preferred embodiment, a prompt is then given on 
the display screen of system 10 and the user of the master button in 
response inputs the user's personal password at Step 1007. If at Step 
1008, the personal password matches that stored in the third data area of 
the master button, then processing continues; otherwise an error results 
at Step 1009. 
Next, at Step 1010, the button is presented with a first password by the 
Post Office/Refill Station software; if this password matches the first 
fixed password written into first password area 1101, then access to first 
data area 1102 is allowed, otherwise processing halts. In the preferred 
embodiment, if a match with the password in the corresponding password 
area does not occur when a password (either "fixed" or "generated") is 
presented by system 10 software to a given button 182, the button responds 
by returning a string invalid data without interruption. 
Assume access to first data area 1102 is allowed, at Step 1011, the Post 
Office/Refill Station software queries the button and if a master button 
type code (MTR) is returned from the button type field of first data area 
1102, processing continues to Step 1013, otherwise an error occurs at Step 
1012. 
At Step 1013 the button is presented with a second password; if this 
password matches the second fixed password written into second password 
area 1103, then access is gained to second data area 1104. At Step 1014, 
the Post Office/Refill Station software queries button 182 and if a master 
button type code (MTR) is returned from the type field of second data area 
1104, then the master button is validated at Step 1015, otherwise an error 
occurs at Step 1016. When master button validation occurs at Step 1015, a 
main menu is presented on the screen of system and the master button user 
can then start the Post Office/Refill Station software operation upon 
insertion and validation of an employee button. 
Next, an employee TMU button 182 is preferably coupled to system 10. The 
data and fields for a TMU button 182 programmed as an employee button are 
described pictorially in FIG. 12. For an employee button, ID area 1200 
carries an employee type code (EMP). First password area 1201 stores a 
"fixed" password which has been written by the Post Office under master 
button control and allows controlled access to first data area 1202. 
First data area 1202 includes a button type code field, fields holding data 
identifying the creation date and time of the button, the using employee, 
the site and workstation of the user, and the creating master button. 
Second password area 1203 stores a second fixed password, written by the 
Post Office under master button user control, which controls access to 
second data area 1204. 
Second data area 1204 includes a button type code field, a field holding 
data indicating the total amount of postage issued by the button, and a 
field holding data indicating the date the button was last used. 
Third password area 1205 stores a fixed password, written by the Post 
Office under master button user control, which allows an employee's 
personal password to be written into third data area 1206. 
When the Post Office/Refill Station software queries an employee button at 
Step 1004 (FIG. 10A), the code for an employee button (EMP) is returned 
(read) from first ID area 1200 (FIG. 12). In the preferred embodiment, a 
prompt is given on the screen of system 10 and the employee at Step 1017 
inputs a personal password (i.e., logs-in). If the personal password 
matches that stored in the third data area 1206 (FIG. 12) of the employee 
button at Step 1018, then processing continues, otherwise an error results 
at Step 1019. 
Next, at Step 1020 (FIG. 10A), the button is presented with a first 
password by the Post Office/Refill Station software; if this password 
matches the first "fixed" password written into first password area 1201 
(FIG. 12) then access to first data area 1202 is allowed. At Step 1021 
(FIG. 10A), the Post Office/Refill Station software queries the button and 
if an employee type code (EMP) is returned from the type field of first 
data area 1202 (FIG. 12) processing continues to Step 1023 (FIG. 10A), 
otherwise an error occurs at Step 1022. 
At Step 1023 (FIG. 10A) the button is presented with a second password; if 
this password matches the second "fixed" password written into second 
password area 1203 then access is gained to second data area 1204. At Step 
1024, the Post Office/Refill Station software queries the button and if an 
employee button type code (EMP) is returned from the type field of second 
data area 1204 then the employee button is validated at Step 1025, 
otherwise an error occurs at Step 1026. When employee button validation 
occurs at Step 1025, an employee menu is presented on the screen of system 
10. The employee may now enter the purchased amount of postage into a 
validated postage button. 
Assume that a postage TMN button 182 is next coupled to system 10. The data 
fields and areas for a button programmed as such is depicted in FIG. 13. 
For a postage button, the I.D. area 1300 stores the postage button type 
code (PST). The first password area 1301, holds the first generated 
password, generated, by applying a first hash algorithm (preferably chosen 
by the system managing company and similar to those illustrated in FIGS. 
4A and 4B) to the numerical sequence comprising the unique TMU serial 
number assigned to that button. The first data areas and fields memory 
section 1302 is updated by the Post Office/Refill Station software at each 
refill with data indicating the refill conditions, including the time, 
date, and site of the refill. Also included as part of programmed refill 
data is an identification code unique to the Post Office or refill 
station, a refill add amount data indicative of the amount of postage 
purchased by the customer, and a refill balance field which holds data 
indicating the balance within the button after the last refill. First data 
field 1302 also includes a field which is programmed with the serial 
number of the authorized user's (customer's) software, a button type code 
field, and a first string of random numbers described above. 
Second password area 1303 of a postage button holds a second generated 
password which is updated with each refill by operating on the string of 
random data in first data area 1302 with a second hash algorithm, similar 
to the second level algorithm depicted in FIGS. 4A and 4B. Second data 
area 1304 for a postage button, includes fields holding usage history and 
analysis data, a field holding data indicating the last access date, a 
strike down-counter which decrements by from a predetermined initial value 
by one each time an indicia is printed, an amount down-counter which 
decrements from a predetermined initial value by the postage amount used 
as each indicia is printed, an update flag, and a second string of random 
numbers. 
The usage analysis field is divided into a number of categories according 
to postage amount. The tally in each category is incremented by one each 
time that category's corresponding postage amount is used. The usage 
analysis field is preferably cleared each time postage is added. The usage 
history field is also divided into a number of categories representing the 
type of postage being printed (i.e., first class, priority, third class, 
fourth class, express, special, international). The tally in a given 
category in the usage history is incremented by one before each printing 
of an indicia of the corresponding type. 
The update flag in the second data area 1304 and another update flag in the 
third data area 1306 keep track of updates. The update flags also indicate 
whether or not the refill operation was performed in the right order. For 
a valid button, these two flags are equal. If these update flags are not 
equal, perhaps due to a power failure or program interrupt, the button 
becomes invalid for use. In the preferred embodiment, the refill order of 
events are: read button (decript), change information (encript), write 
button area 3, update area flag, write button area 2, update area flag, 
update customer file, and print. 
Third password area 1305 holds the password generated with each refill by 
operating on the 11 bytes of random data from first data area 1302 and 5 
random bytes from second data 1304. Third data area 1306 includes a field 
which holds data indicating the balance available, a field indicating the 
user zip code, a field holding a personal or business identification 
number of the user, the registration number of the customer's printing 
software, a field holding data indicating the expiration date (the last 
possible date for the next refill), the update flag described above and a 
field containing data indicating the total postage used on the last access 
date. 
Data area 3 also contains a strike up-counter, an amount up-counter, and a 
reprint counter. The strike up-counter increments by one from a 
predetermined initial value each time an indicia is printed, the amount 
up-counter increments from a predetermined initial value by the postage 
amount printed at each use. The reprint counter counts the number of 
reprints made since the last refill (the customer software will allow for 
the reprint of the indicia for the last address and envelope printed). 
When the Post Office/Refill Station software queries a postage button at 
step 1005 (FIG. 10A), the postage button type code (PST) is returned from 
first password area 1300 (FIG. 13). Next, at step 1027 (FIG. 10A) the Post 
Office/Refill Station software transmits to the button a password 
generated by applying the first hash algorithm to the numerical sequence 
of the TMU serial number for the given button 182. If the password 
generated by the Post Office/Refill Station software matches that stored 
in first password area 1300, access to first data area 1302 is allowed and 
processing continues at step 1028; otherwise a string of invalid data is 
received from the button. 
At step 1028 (FIG. 10A), the Post Office/Refill station software reads the 
button type field in first data area 1302. If the button returns the 
proper postage button code processing continues; otherwise an error occurs 
at 1029 and processing halts. 
Next, the Post Office/Refill Station software reads the second and third 
password areas using the second and third hash algorithms, examples of 
which are shown in FIGS. 4A and 4B. Specifically, the Post Office/Refill 
Station software takes the string of random data acquired by gaining 
access to a first data area 1302 and applies the second hash algorithm 
thereto. The resulting password is then transmitted to the button and if a 
match occurs with the password in second password area 1303, access is 
gained to second data area 1304; otherwise a string of invalid data is 
received from the button. The Post Office/Refill Station software then 
takes the 11 bytes of random data from first data area 1302, 5 bytes of 
random data from second data area 1304 and applies the third hash 
algorithm thereto. The resulting password is transmitted to the button and 
if a match occurs with the password held in third password area 1305, 
access is gained to third data area 1306; otherwise a string of invalid 
data is received from the button. 
At step 1030 (FIG. 10B), the Post Office/Refill Station software reads the 
system managing company registration number field in third data area 1306 
of the button. Assuming that the data in this field is equal to zero (step 
1031), then an initial button has been detected. The processing proceeds 
to step 1032 and Post Office/Refill Station software reads the usage 
analysis field of second data area 1304. At step 1033, the totals in the 
usage analysis field are checked against an expected initial value. If the 
totals are not true, then the button is corrupted and processing stops at 
step 1034. Otherwise, the processing continues with step 1035, where the 
balance available field in third data area 1306 (FIG. 13) is read. In the 
preferred embodiment, the balance available field initially is set to two 
dollars. If at step 1036, the Post Office/Refill Station software 
determines that the balance in the balance available field is less than or 
equal to two dollars, the processing continues; otherwise the button is 
determined to be corrupted and an error occurs at step 1037. 
At step 1038 (FIG. 10C), the value in the strike up-counter of third data 
area 1306 (FIG. 13) is added to the value in the strike down-counter of 
second data area 1304. Since the strike down-counter always decrements 
from a predetermined initial value by one each time an indicia is printed 
and the strike up-counter always simultaneously increments by one from an 
initial value, their total must always equal the same value N. Thus, if at 
step 1039 the sum of the values in the strike up- and down-counters equals 
predetermined value N processing continues; otherwise the button is 
determined to be corrupted at step 1040. 
Next, at step 1041 (FIG. 10C) the value in the amount down-counter of data 
area 2 and the value in the amount up-counter in data area 3 are summed. 
Since the value in the amount up-counter increments by the amount of 
postage printed with each indicia from an initial value and the amount 
down simultaneously decrements (by the same amount), the sum of their 
values must always equal the same value Z. Thus, at step 1042, if the 
total of the amount counter data read from the button does not equal 
predetermined value Z, processing is halted at 1043 and the button 
determined corrupted; otherwise, at step 1044, the initial postage button 
is validated. 
At step 1045 (FIG. 10C), customer software serial number, last access date, 
balance available, user zip code, customer personal identification, system 
managing company registration number, expiration data and reprint counter 
value are displayed and checked visually. The initial button is then ready 
for initial data input, including input of the customer registration 
number received from the system managing company and the purchased amount 
of postage. 
Returning to step 1031 (FIG. 10B), if the system managing company 
registration number in third data area 1306 is not equal to zero, then a 
used postage button has been detected and processing precedes to step 
1046. At steps 1046 and 1047, the usage analysis totals are again read and 
checked as described above for steps 1031 and 1033. If the totals are not 
true, then an error results at 1048 since the button has been corrupted; 
otherwise, the processing continues with step 1049. 
At step 1049 (FIG. 10B), the balance available field of third data area 
1306 and refill balance field of first data area 1302 are read. At step 
1050, a check is made to determine if the balance available is less than 
or equal to the refill balance. If not, a corrupted button is detected at 
step 1051. If the check at step 1050 reveals that the button is valid, 
then at steps 1052-1054 (FIG. 10C) a test of the strike counter data is 
performed as was described above for steps 1038-1040. Similarly, at steps 
1055-1057 a check is made of the values in the amount counter as was also 
described above at steps 1041-1043. 
Once all the checks of the use button are completed, validation takes place 
at Step 1058 (FIG. 10C). Then, at step 1059 the E-STAMP serial number, 
last access date, balance available, user zip code, customer and personal 
identification, system managing company registration number, expiration 
date, and reprint counter value are displayed and checked visually. 
In the case of a validated initial button, the Post Office employee can 
then put the system managing company registration number, which has been 
duly issued to an authorized customer and presented to the Post Office, 
into the button. The employee can also put into the button the amount of 
postage purchased by the customer. In the case of a validated previously 
used button, the Post Office employee can put in the amount of postage 
purchased. 
With each refill operation, the Post Office/Refill Station software 
automatically updates the data in the data fields on the postage button 
refilled including the random data strings. This data, with the exception 
of the generated passwords and the random number strings, along with the 
serial number of the refilling master button, the identification number 
from the employee identification button is read and stored by the Post 
Office/Refill Station software. This allows the Post Office to track each 
refill operation being performed. At this point, new or modified indicia 
can be added to the portable memory, for subsequent use by a user at 
his/her PC. 
As described above, at least the second and third passwords in each postage 
button are updated with each refill. Each initial button is blank and all 
these passwords must be programmed-in. A password, which is preferably 
generated applying a first hash algorithm to the unique TMU serial number 
assigned to each button, is written into password area 1. This first 
password is preferably generated by the system managing company. 
By presenting button 182 with an independently generated matching first 
password, the Post Office/Refill Station software is allowed access to 
data area 1 of the button. The Post Office/Refill Station software then 
generates and writes a string of bytes of random data into first data area 
1302. Next, the Post Office/Refill Station software applies a second 
algorithm, such as the second level algorithm depicted in FIGS. 4A and 4B, 
to generate a second password which is written into the second password 
area of the button being programmed. Subsequently, matching the second 
password allows access to second data area 1304 of the button by the Post 
Office/Refill Station software and the customer's software. Next, the Post 
Office/Refill Station software generates and writes a string of random 
data into the second data area. The Post Office/Refill Station software 
applies a third algorithm, such as the third level algorithm of FIGS. 4A 
and 4B, to the random data in second data area 1304 to generate a third 
password which is written into the third password area of the button. 
Matching the third password allows access to the associated third data 
area 1306. Thereafter, the strings of random data in the first and second 
data areas, and correspondingly the second and third passwords, are 
updated with each refill of the button by the Post Office using the Post 
Office/Refill Station software once initial reading and access has been 
accomplished. 
Whenever a customer brings a TMU button 182 to the Post Office/Refill 
Station to be loaded with an amount of postage, the postal employee may 
provide that customer with a selection of graphic configurations for the 
postal meter stamp. The customer may select one or more configurations and 
have the postal employee transfer the selected configurations into the 
memory of TMU button 182. 
Alternatively, the Post Office may program disposable TMU buttons 182 to be 
sold over-the-counter or through automatic vending machines. Disposable 
TMU buttons 182 would be preloaded with various monetary values of postage 
(e.g., $1, $5, $10, $20). These TMU buttons 182 would be directly obtained 
from the manufacturer and would be initially loaded with postage values by 
the Post Office. They could have different graphical presentations for the 
entire button, or for selection by a user on a use by use basis. 
Only authorized Post Office employees would be able to load postage into 
disposable TMU buttons 182. Both a valid master (MTR) button and a valid 
employee (EMP) button would have to be coupled to the Post Office's system 
10 (POSTAGEMAKER) before disposable TMU buttons 182 could be filled with 
postage. 
Not only may the Post Office load TMU buttons 182 with various monetary 
values of postage, but the Post Office may also load postage storage 
devices 18 with different configurations of postage indicia. These 
configurations could be similar to the various graphic configurations 
printed on commemorative stamps sold by the Post Office. These 
configurations could be generated from scanned images or could be 
programmed using a variety of graphics programs. 
Selected configurations can be imported into the E-STAMP program once the 
user's E-STAMP program has validated TMU button 182. For example, if the 
user were to select the "Other" option in box 816, FIG. 8, the user would 
have an option to import the postage indicia configurations from TMU 
button 182 or from a graphics program coupled to the E-STAMP program by 
using a "merge" command. 
PORTABLE MEMORY VALIDATION 
Referring next to FIGS. 14A and 14B, the customer validation procedure for 
a postage button coupled to the customer's system 10 begins at Step 1400 
with the initiation of the customer software program. At Step 1401, the 
software reads the unique serial number of the button and verifies that 
that serial number falls within a range assigned by the button 
manufacturer to the Post Office; if it does not, an error occurs and 
processing halts at Step 1402 otherwise processing continues to Step 1403. 
When the customer software queries a postage button (portable memory) at 
step 1403, the postage button type code (PST) should be returned from 
postage button first password area 1300 (FIG. 13) and processing continues 
to step 1406, otherwise an error occurs at step 1404. Next, at step 1406 
the customer software transmits to the button a password generated by 
applying a first hash algorithm to the numerical sequence of the TMU 
serial number for the given button 182. If the password generated by the 
customer software matches that stored in first password area 1301, access 
to first data area 1302 (FIG. 13) is allowed and processing continues at 
step 1407; otherwise a string of invalid data is received from the button 
as described above. 
At step 1407, the customer software reads the button type field in first 
data area 1302. If the button returns the postage button code previously 
known by the software loaded on the customer's computer then processing 
continues, otherwise an error occurs at step 1408 and processing halts. 
Assuming the correct button code is read at step 1407, at step 1409 the 
customer software reads the second password area 1303 using a second hash 
algorithm, an example of which is shown in FIGS. 4A and 4B. Specifically, 
the customer software takes the string of random data acquired by gaining 
access to a first data area 1302 and applies the second hash algorithm 
thereto. The resulting password is then transmitted to the button and if a 
match occurs with the password in second password area 1303, access is 
gained to second data area 1304; otherwise a string of invalid data is 
received from the button. If access to second data area 1304 is gained at 
step 1409, then at step 1410 the customer software reads the last access 
date field of second data area 1204. If the last access date written into 
this field is before the current date processing continues, otherwise an 
error occurs at step 1411. 
Next, at step 1412 the customer software attempts to gain access to third 
data area 1306 (FIG. 13) of the postage button coupled to the customer's 
system 10. In this instance, customer software then takes 11 bytes of 
random data from first data area 1302 and 5 bytes of random data from 
second data area 1304 and applies the third hash algorithm thereto. The 
resulting password is transmitted to the button and if a match occurs with 
the password held in third password area 1305, access is gained to third 
data area 1306; otherwise a string of invalid data is received from the 
button. 
Assuming access to third data area 1306 (FIG. 13) is gained at step 1412, 
at step 1413 the customer software reads the balance available field of 
third data area 1306 and the refill balance field of first data area 1304. 
If the balance available is less than or equal to the refill balance then 
processing continues, otherwise a corrupted button is detected at step 
1414. For an uncorrupted button, the user zip code written into the user 
zip code field of third data area 1306 is read and compared at step 1415 
with the user zip code assigned to the customer's software and stored on 
the customer's computer. If they match processing continues, otherwise an 
error occurs at step 1416 since a postage button cannot be used outside 
the zip code assigned to the corresponding customer software. This feature 
is (like all security levels in the system) optional, and can be modified 
to include several zip codes, if desired. 
For example, disposable TMU buttons 182 would generally not be limited to 
use within a specific zip code. 
At step 1417, the customer software reads the value in the amount 
up-counter of third data area 1306 and compares it with a corresponding 
amount value totalled and stored by the customer software. The amount up- 
and down-counters in each button are never cleared during the life of the 
button. Thus, if the amount in the button amount up-counter is greater 
than or equal to the amount in the customer software file the button 
passes at step 1417, otherwise an error occurs at step 1418. A similar 
test is performed at step 1419 where the customer software reads the value 
in the strike up-counter and compares it with a corresponding strike tally 
kept by the customer software. Again, since the strike counters are never 
cleared, the value in the strike counter must be greater than or equal to 
the total in the software file, otherwise at step 1420 an error occurs. 
At step 1421, the value in the strike up-counter of third data area 1306 is 
added to the value in the strike down counter of second data area 1304. 
Since the strike down-counter always decrements from a predetermined 
initial value by one with the printing of each indicia and the strike 
up-counter always increments by one from an initial value simultaneously, 
their total must always equal the same value N. Thus, if at step 1422 the 
sum of the values in the strike up- and down-counters equals predetermined 
value N processing continues, otherwise the button is determined to be 
corrupted at step 1423. 
Next, at step 1424 the value in the amount down-counter of second data area 
1304 and the value in the amount up-counter in third data area 1306 are 
summed. Since the value in the amount up-counter increments by the amount 
of the postage used with the printing of each indicia from and initial 
value and the amount down-counter simultaneously decrements from an 
initial value by the same amount, the sum of their values must always 
equal the value Z. Thus, at step 1425, if the total of the amount counter 
data read from the button equals value Z, then processing continues, 
otherwise an error occurs at step 1426 and processing is halted. 
At step 1429, the customer software reads the last access date written into 
the corresponding field in second data area 1304. If the recorded last 
access date is the same as or before the present date the button passes, 
otherwise an error occurs at step 1430. This prevents the entering of 
random data into the portable memory. 
At step 1431, the expiration date written into the expiration date field of 
third data area 1306 is read to determine if the button has expired. If 
the current date is before the expiration date, the button is still valid, 
otherwise at step 1432 the button is determined to be expired. 
At step 1433 a check is made of the update flags described above. The 
update flag in second data area 1304 must be equal to the update flag in 
third data area 1306, otherwise an error has occurred during the update 
sequence and processing stops at 1434. 
If the postage button 182 coupled to the customer's system 10 passes the 
last test at step 1433, the button is validated at step 1435 and the 
customer can now print postage indicia up to the refill balance available. 
FIG. 15A shows a block diagram of data and/or instructions being imported 
(1501) from any other application program (not shown) running on 
processor-based system 10. This data importation would be accomplished in 
the manner now well known in the art. This imported data is transferred 
into the central system, 1502, for modifying the CPU information, or the 
data stored on the portable memory. An example of such imported data would 
be the importation of graphical configurations from a TMU button 182 or 
from another application program or from modem 101 (FIG. 1) into the 
E-STAMP program to be printed on a piece of mail as the meter stamp. 
Another example is the importation of encrypted information into the 
E-STAMP program either as a bar coded message to be printed separately 
from the postage meter stamp or as a part of the postage meter stamp. 
FIG. 15B shows the reverse, in blocks 1503 and 1504, where data and/or 
instructions are exported from the E-STAMP or POSTAGEMAKER system to any 
other application running on the same CPU. An example of this exportation 
of data would be the export of information on addressee, amount of 
postage, person to be billed for postage, etc., to a database program 
whereby a user could generate client billing information and keep track of 
user's overall expenditure of postage. Another example of exported 
information would be the transfer of information from the POSTAGEMAKER 
program to a database program to compile sales records and market 
forecasts for the Post Office by postal location. 
This import or export of data as shown in FIGS. 15A and 15B could be to or 
from a remote CPU over modem 101 (shown in FIG. 1). 
The aforementioned E-STAMP and POSTAGEMAKER programs have been shown and 
described with respect to a "windows" operating environment on a PC. Of 
course, other means could be employed for implementing the present 
invention within a processor-based system. 
Although the present invention and its advantages have been described in 
detail, it should be understood that various changes, substitutions and 
alterations can be made herein without departing from the spirit and scope 
of the invention as defined by the appended claims.