14 July 1997
Source: http://www.access.gpo.gov/su_docs/aces/aces140.html

[Federal Register: July 14, 1997 (Volume 62, Number 134)]
[Notices]
[Page 37631]
From the Federal Register Online via GPO Access [wais.access.gpo.gov]
[DOCID:fr14jy97-128]

=======================================================================
-----------------------------------------------------------------------

POSTAL SERVICE

Specifications for Information Based Indicia Program ``Key
Management Plan''

AGENCY: Postal Service.

ACTION: Notice of proposed specifications with request for comments.

-----------------------------------------------------------------------

SUMMARY: Historically, postage meters have been mechanical and
electromechanical devices that (1) maintain through mechanical or
electronic ``registers'' (postal security devices) an account of all
postage printed and the remaining balance of prepaid postage, and (2)
print postage postmarks (indicia) that are accepted by the Postal
Service as evidence of the prepayment of postage. A proposed
specification has been developed on these subjects, and is entitled
``Information Based Indicia Program (IBIP) Key Management Plan
(Draft).'' The IBIP Key Management Plan is a document intended to
provide information pertaining to the life cycle of the cryptographic
keys used by the United States Postal Service (USPS) Information Based
Indicia Program (IBIP). The U.S. Postal Service is seeking comments on
this specification.
    The Postal Service also seeks comments on intellectual property
issues raised by the Key Management Plan if adopted in present form. If
an intellectual property issue includes patents or patent applications
covering any implementations of the specifications, the comment should
include a listing of such patents and applications and the license
terms available for such patents and applications.

DATES: Comments on the Key Management Plan must be received on or
before October 14, 1997. Comments addressing intellectual property
issues must be received on or before August 28, 1997.

ADDRESSES: Copies of the Key Management Plan may be obtained from:
Terry Goss, United States Postal Service, 475 L'Enfant Plaza SW, Room
8430, Washington DC 20260-6807. Mail or deliver written comments to:
Manager, Metering Technology Management, United States Postal Service,
475 L'Enfant Plaza SW, Room 8430, Washington DC 20260-6807. Copies of
all written comments may be inspected and photocopied between 9 a.m.
and 4 p.m., Monday through Friday, at the above address.

FOR FURTHER INFORMATION CONTACT: Terry Goss, (202) 268-3757.

SUPPLEMENTARY INFORMATION: The Information Based Indicia Program (IBIP)
is a Postal Service initiative supporting the development and
implementation of a new form of postage indicia. An ``IBIP Postal
Security Device'' provides cryptographic signature, financial
accounting, indicium creation, device authorization, and audit
functions.
    The goal for IBIP is to provide an environment in which customers
can apply postage through new technologies that improve postal revenue
security. This requires a new form of postage indicia and the adoption
of standards to facilitate industry investment and product development.
    The Key Management Plan is used to define the generation,
distribution, use, and replacement of the cryptographic keys used by
the USPS, Product/Service Providers, and Postal Security Devices (see
61 FR 34460, July 2, 1996). The management of cryptographic keys is the
most critical function associated with cryptographic security. Security
afforded by the cryptographic algorithms in use cannot be guaranteed if
the cryptographic keys are not generated, disseminated, stored, used,
and ultimately destroyed in a secure manner. The intent of this Key
Management Plan is to address all of these issues with respect to IBIP.
    It is emphasized that this proposed draft standard is being
published for comment and is subject to final definition.
    Although exempt from the notice and comments requirements of the
Administrative Procedure Act (5 U.S.C. 553 (b),<Copyright>) regarding
proposed rulemaking by 39 U.S.C. 410(a), the Postal Service invites
public comments on the proposed specification.
Stanley F. Mires,
Chief Counsel, Legislative.
[FR Doc. 97-18415 Filed 7-11-97; 8:45 am]
BILLING CODE 7710-12-P



[Federal Register: July 2, 1996 (Volume 61, Number 128)]
[Notices]
[Page 34460-34461]
From the Federal Register Online via GPO Access [wais.access.gpo.gov]
[DOCID:fr02jy96-95]

=======================================================================
-----------------------------------------------------------------------

POSTAL SERVICE

Specifications for Postal Security Devices and Indicia
(Postmarks)

AGENCY: Postal Service.

ACTION: Notice of proposed specifications with request for comments.

-----------------------------------------------------------------------

SUMMARY: Historically, postage meters have been mechanical and
electromechanical devices that (1) maintain through mechanical or
electronic ``registers'' (postal security devices) an account of all
postage printed and the remaining balance of prepaid postage, and (2)
print postage postmarks (indicia) that are accepted by the Postal
Service as evidence of the prepayment of postage. Two proposed
specifications have been developed on these subjects, and are entitled
``Information Based Indicia Program (IBIP) PSD Specification'' and
``Information Based Indicia Program (IBIP) Indicia Specification.'' The
U.S. Postal Service is seeking comments on these specifications.
    The Postal Service also seeks comments on intellectual property
issues raised by the specifications if adopted in present form. If an
intellectual property issue includes patents or patent applications
covering any implementations of the specifications, the comment should
include a listing of such patents and applications and the license
terms available for such patents and applications.

DATES: Comments on the two specifications must be received on or before
September 30, 1996. Comments addressing intellectual property issues
must be received on or before July 15, 1996. A general meeting on this
subject is being planned for mid-July in Washington, DC. All persons
who have expressed an interest in the proposed specifications will be
invited to attend the meeting. This meeting will focus solely on
technical aspects of the two specifications. Interested parties may
submit questions by July 1, 1996 which will be considered for
incorporation into the meeting presentations.

ADDRESSES: Copies of the Indicium and Postal Security Device
Specifications may be obtained from: Terry Goss, United States Postal
Service, 475 L'Enfant Plaza SW, Room 8430, Washington, DC 20260-6807.
Mail or deliver written comments to: Manager, Retail Systems and
Equipment, United States Postal Service, 475 L'Enfant Plaza SW, Room
8430, Washington, DC 20260-6807. Copies of all written comments may be
inspected and

[[Page 34461]]

photocopied between 9 a.m. and 4 p.m., Monday through Friday, at the
above address.

FOR FURTHER INFORMATION CONTACT: Terry Goss at (202) 268-3757.

SUPPLEMENTARY INFORMATION: There are approximately 1.5 million postage
meters in use in the United States which collectively account for
approximately $20 billion in postal revenue annually. The manufacture
and use of postage meters is governed by Postal Service regulations
(see 39 CFR Part 501; Domestic Mail Manual P030). For several years
USPS has been actively proposing a solution of the problem of
inadequate postage meter security. To respond to the threat of
fraudulent use of meters by physical tampering, USPS intends to
decertify and remove from the market, in risk-driven phases, all
postage meters using mechanical registers. Another problem USPS has
faced is that currently available meter indicia are susceptible to
counterfeiting. The Postal Service is exploring using current
technology special purpose units such as computers and independent
printers to provide prepaid postage.
    The Information Based Indicia Program (IBIP) is a Postal Service
initiative supporting the development and implementation of a new form
of postage indicia. This IBIP specification is intended to address the
counterfeiting threat. USPS envisions that the new indicium standard
may eventually support new or existing products and services. Specific
products and services have not been determined. An ``IBIP indicium''
substitutes for a postage stamp or a postage meter imprint as evidence
of the fact that postage has been paid on mailpieces. An ``IBIP Postal
Secure Device'' provides cryptographic signature, financial accounting,
indicium creation, device authorization, and audit functions.
    The goal for IBIP is to provide an environment in which customers
can apply postage through new technologies that improve postal revenue
security. The IBIP indicia is expected eventually to replace all
metered postage imprints that rely on letter press printing technology.
This requires a new form of postage indicia and the adoption of
standards to facilitate industry investment and product development.
    The Postal Security Device will provide security services to
support the creation of the new ``IBIP indicium.'' The PSD provides
security-critical functions for IBIP customers. The PSD will be a
hardware component for use with either a computer-based or postage
meter-based host system. Each PSD will be a unique security device. The
PSD core security functions are cryptographic digital signature
generation and verification, and the secure management of the registers
that track the remaining amount of money available for indicium
creation ( i.e., descending register) and the total postage value used
by the PSD ( i.e., ascending register). The PSD will be a tamper-
resistant device that may contain an internal random number generator,
various storage registers, a date/time clock, and other circuits
necessary to perform these functions. The PSD will comply with Federal
Information Processing Standard (FIPS) 140-1 and will be validated
through the National Institute of Standards and Technology (NIST)
Computer Systems Laboratory's Cryptographic Module Validation Program.
    It is emphasized that this proposed standard is being published for
comments and is subject to final definition. In particular, evaluation
of alternative digital signing, printing standards, and symbology is
continuing.
    Although exempt from the notice and comment requirements of the
Administrative Procedure Act (5 U.S.C. 553 (b), (c)) regarding proposed
rulemaking by 39 U.S.C. 410 (a), the Postal Service invites public
comments on the proposed specifications.
Stanley F. Mires,
Chief Counsel, Legislative.
[FR Doc. 96-15778 Filed 7-1-96; 8:45 am]
BILLING CODE 7710-12-P