14 July 1997
Source: http://www.access.gpo.gov/su_docs/aces/aces140.html

    [Federal Register: July 14, 1997 (Volume 62, Number 134)]
    [Notices]
    [Page 37631]
    From the Federal Register Online via GPO Access [wais.access.gpo.gov]
    [DOCID:fr14jy97-128]

    =======================================================================
    -----------------------------------------------------------------------

    POSTAL SERVICE

    Specifications for Information Based Indicia Program ``Key
    Management Plan''

    AGENCY: Postal Service.

    ACTION: Notice of proposed specifications with request for comments.

    -----------------------------------------------------------------------

    SUMMARY: Historically, postage meters have been mechanical and
    electromechanical devices that (1) maintain through mechanical or
    electronic ``registers'' (postal security devices) an account of all
    postage printed and the remaining balance of prepaid postage, and (2)
    print postage postmarks (indicia) that are accepted by the Postal
    Service as evidence of the prepayment of postage. A proposed
    specification has been developed on these subjects, and is entitled
    ``Information Based Indicia Program (IBIP) Key Management Plan
    (Draft).'' The IBIP Key Management Plan is a document intended to
    provide information pertaining to the life cycle of the cryptographic
    keys used by the United States Postal Service (USPS) Information Based
    Indicia Program (IBIP). The U.S. Postal Service is seeking comments on
    this specification.
        The Postal Service also seeks comments on intellectual property
    issues raised by the Key Management Plan if adopted in present form. If
    an intellectual property issue includes patents or patent applications
    covering any implementations of the specifications, the comment should
    include a listing of such patents and applications and the license
    terms available for such patents and applications.

    DATES: Comments on the Key Management Plan must be received on or
    before October 14, 1997. Comments addressing intellectual property
    issues must be received on or before August 28, 1997.

    ADDRESSES: Copies of the Key Management Plan may be obtained from:
    Terry Goss, United States Postal Service, 475 L'Enfant Plaza SW, Room
    8430, Washington DC 20260-6807. Mail or deliver written comments to:
    Manager, Metering Technology Management, United States Postal Service,
    475 L'Enfant Plaza SW, Room 8430, Washington DC 20260-6807. Copies of
    all written comments may be inspected and photocopied between 9 a.m.
    and 4 p.m., Monday through Friday, at the above address.

    FOR FURTHER INFORMATION CONTACT: Terry Goss, (202) 268-3757.

    SUPPLEMENTARY INFORMATION: The Information Based Indicia Program (IBIP)
    is a Postal Service initiative supporting the development and
    implementation of a new form of postage indicia. An ``IBIP Postal
    Security Device'' provides cryptographic signature, financial
    accounting, indicium creation, device authorization, and audit
    functions.
        The goal for IBIP is to provide an environment in which customers
    can apply postage through new technologies that improve postal revenue
    security. This requires a new form of postage indicia and the adoption
    of standards to facilitate industry investment and product development.
        The Key Management Plan is used to define the generation,
    distribution, use, and replacement of the cryptographic keys used by
    the USPS, Product/Service Providers, and Postal Security Devices (see
    61 FR 34460, July 2, 1996). The management of cryptographic keys is the
    most critical function associated with cryptographic security. Security
    afforded by the cryptographic algorithms in use cannot be guaranteed if
    the cryptographic keys are not generated, disseminated, stored, used,
    and ultimately destroyed in a secure manner. The intent of this Key
    Management Plan is to address all of these issues with respect to IBIP.
        It is emphasized that this proposed draft standard is being
    published for comment and is subject to final definition.
        Although exempt from the notice and comments requirements of the
    Administrative Procedure Act (5 U.S.C. 553 (b),<Copyright>) regarding
    proposed rulemaking by 39 U.S.C. 410(a), the Postal Service invites
    public comments on the proposed specification.
    Stanley F. Mires,
    Chief Counsel, Legislative.
    [FR Doc. 97-18415 Filed 7-11-97; 8:45 am]
    BILLING CODE 7710-12-P

    [Federal Register: July 2, 1996 (Volume 61, Number 128)]
    [Notices]
    [Page 34460-34461]
    From the Federal Register Online via GPO Access [wais.access.gpo.gov]
    [DOCID:fr02jy96-95]

    =======================================================================
    -----------------------------------------------------------------------

    POSTAL SERVICE

    Specifications for Postal Security Devices and Indicia
    (Postmarks)

    AGENCY: Postal Service.

    ACTION: Notice of proposed specifications with request for comments.

    -----------------------------------------------------------------------

    SUMMARY: Historically, postage meters have been mechanical and
    electromechanical devices that (1) maintain through mechanical or
    electronic ``registers'' (postal security devices) an account of all
    postage printed and the remaining balance of prepaid postage, and (2)
    print postage postmarks (indicia) that are accepted by the Postal
    Service as evidence of the prepayment of postage. Two proposed
    specifications have been developed on these subjects, and are entitled
    ``Information Based Indicia Program (IBIP) PSD Specification'' and
    ``Information Based Indicia Program (IBIP) Indicia Specification.'' The
    U.S. Postal Service is seeking comments on these specifications.
        The Postal Service also seeks comments on intellectual property
    issues raised by the specifications if adopted in present form. If an
    intellectual property issue includes patents or patent applications
    covering any implementations of the specifications, the comment should
    include a listing of such patents and applications and the license
    terms available for such patents and applications.

    DATES: Comments on the two specifications must be received on or before
    September 30, 1996. Comments addressing intellectual property issues
    must be received on or before July 15, 1996. A general meeting on this
    subject is being planned for mid-July in Washington, DC. All persons
    who have expressed an interest in the proposed specifications will be
    invited to attend the meeting. This meeting will focus solely on
    technical aspects of the two specifications. Interested parties may
    submit questions by July 1, 1996 which will be considered for
    incorporation into the meeting presentations.

    ADDRESSES: Copies of the Indicium and Postal Security Device
    Specifications may be obtained from: Terry Goss, United States Postal
    Service, 475 L'Enfant Plaza SW, Room 8430, Washington, DC 20260-6807.
    Mail or deliver written comments to: Manager, Retail Systems and
    Equipment, United States Postal Service, 475 L'Enfant Plaza SW, Room
    8430, Washington, DC 20260-6807. Copies of all written comments may be
    inspected and

    [[Page 34461]]

    photocopied between 9 a.m. and 4 p.m., Monday through Friday, at the
    above address.

    FOR FURTHER INFORMATION CONTACT: Terry Goss at (202) 268-3757.

    SUPPLEMENTARY INFORMATION: There are approximately 1.5 million postage
    meters in use in the United States which collectively account for
    approximately $20 billion in postal revenue annually. The manufacture
    and use of postage meters is governed by Postal Service regulations
    (see 39 CFR Part 501; Domestic Mail Manual P030). For several years
    USPS has been actively proposing a solution of the problem of
    inadequate postage meter security. To respond to the threat of
    fraudulent use of meters by physical tampering, USPS intends to
    decertify and remove from the market, in risk-driven phases, all
    postage meters using mechanical registers. Another problem USPS has
    faced is that currently available meter indicia are susceptible to
    counterfeiting. The Postal Service is exploring using current
    technology special purpose units such as computers and independent
    printers to provide prepaid postage.
        The Information Based Indicia Program (IBIP) is a Postal Service
    initiative supporting the development and implementation of a new form
    of postage indicia. This IBIP specification is intended to address the
    counterfeiting threat. USPS envisions that the new indicium standard
    may eventually support new or existing products and services. Specific
    products and services have not been determined. An ``IBIP indicium''
    substitutes for a postage stamp or a postage meter imprint as evidence
    of the fact that postage has been paid on mailpieces. An ``IBIP Postal
    Secure Device'' provides cryptographic signature, financial accounting,
    indicium creation, device authorization, and audit functions.
        The goal for IBIP is to provide an environment in which customers
    can apply postage through new technologies that improve postal revenue
    security. The IBIP indicia is expected eventually to replace all
    metered postage imprints that rely on letter press printing technology.
    This requires a new form of postage indicia and the adoption of
    standards to facilitate industry investment and product development.
        The Postal Security Device will provide security services to
    support the creation of the new ``IBIP indicium.'' The PSD provides
    security-critical functions for IBIP customers. The PSD will be a
    hardware component for use with either a computer-based or postage
    meter-based host system. Each PSD will be a unique security device. The
    PSD core security functions are cryptographic digital signature
    generation and verification, and the secure management of the registers
    that track the remaining amount of money available for indicium
    creation ( i.e., descending register) and the total postage value used
    by the PSD ( i.e., ascending register). The PSD will be a tamper-
    resistant device that may contain an internal random number generator,
    various storage registers, a date/time clock, and other circuits
    necessary to perform these functions. The PSD will comply with Federal
    Information Processing Standard (FIPS) 140-1 and will be validated
    through the National Institute of Standards and Technology (NIST)
    Computer Systems Laboratory's Cryptographic Module Validation Program.
        It is emphasized that this proposed standard is being published for
    comments and is subject to final definition. In particular, evaluation
    of alternative digital signing, printing standards, and symbology is
    continuing.
        Although exempt from the notice and comment requirements of the
    Administrative Procedure Act (5 U.S.C. 553 (b), (c)) regarding proposed
    rulemaking by 39 U.S.C. 410 (a), the Postal Service invites public
    comments on the proposed specifications.
    Stanley F. Mires,
    Chief Counsel, Legislative.
    [FR Doc. 96-15778 Filed 7-1-96; 8:45 am]
    BILLING CODE 7710-12-P