EP0789333A2 - Machine d'affranchissement - Google Patents

Machine d'affranchissement Download PDF

Info

Publication number
EP0789333A2
EP0789333A2 EP97100534A EP97100534A EP0789333A2 EP 0789333 A2 EP0789333 A2 EP 0789333A2 EP 97100534 A EP97100534 A EP 97100534A EP 97100534 A EP97100534 A EP 97100534A EP 0789333 A2 EP0789333 A2 EP 0789333A2
Authority
EP
European Patent Office
Prior art keywords
printer
franking machine
machine according
postage
unit
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP97100534A
Other languages
German (de)
English (en)
Other versions
EP0789333B1 (fr
EP0789333A3 (fr
Inventor
Peter Dr. Rieckhoff
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Francotyp Postalia GmbH
Original Assignee
Francotyp Postalia GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Francotyp Postalia GmbH filed Critical Francotyp Postalia GmbH
Publication of EP0789333A2 publication Critical patent/EP0789333A2/fr
Publication of EP0789333A3 publication Critical patent/EP0789333A3/fr
Application granted granted Critical
Publication of EP0789333B1 publication Critical patent/EP0789333B1/fr
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00362—Calculation or computing within apparatus, e.g. calculation of postage value
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G07B2017/00258—Electronic hardware aspects, e.g. type of circuits used
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00362—Calculation or computing within apparatus, e.g. calculation of postage value
    • G07B2017/00427—Special accounting procedures, e.g. storing special information

Definitions

  • the invention relates to a franking machine for franking mail, with a printer for printing a postage stamp on the mail, a central control for controlling the pressure and peripheral components of the franking machine, a billing unit for billing postal charges, and with at least one non-volatile memory for storing Postage fee data, wherein the accounting unit accesses the postage fee data according to a predetermined control program, and wherein the accounting unit is implemented as a digital electronic circuit arrangement.
  • a central microprocessor controls the franking process in such a way that billing takes place first in the accounting unit and then the postage stamp is printed on the mail item.
  • the postage data is changed during billing.
  • the postage data is mostly stored in a descending and an ascending register.
  • the value of the descending register is reduced by the accounting unit for each franking operation by the value of the postage stamp to be printed, starting from a starting value.
  • the value of the ascending register is increased by the value of the postmark to be printed.
  • the accounting unit changes the postage fee data by executing a predetermined control program, which is stored as a command sequence centrally in a program memory designed as a read-only memory.
  • the control program is processed by a further microprocessor contained in the processing unit.
  • known protective measures consist in housing the billing unit and the memory for the postage fee data in a security module that is difficult to access from the outside. Casting the security module further complicates mechanical interventions in the accounting unit.
  • optocouplers at the interface of the security module (see, for example, US 4,301,507 or DE 30 40 559 C2).
  • the known measures do not offer sufficient protection if the command sequence in the program memory of the processing unit is changed, e.g. by manipulating the content of the program memory from the outside.
  • Postage meter machines are also known, in which a printer monitor for the optional transfer of print data to the printer is included in the security module depending on monitored sizes (for example EP 0 513 880 A2).
  • Printer monitoring is controlled by a third microprocessor, which processes a printer control program.
  • the printer control program is in turn stored as a command sequence centrally in a printer program memory.
  • the known protective measures fail if the command sequence in the printer program memory is changed.
  • the accounting unit and printer monitoring are connected to a module bus consisting of signal lines.
  • the accounting unit of the printer monitoring signals, among other things, successful accounting via this module bus. If the above-mentioned measures are avoided, the module bus and in particular the signal line mentioned is exposed and the signal flow can be interfered with from outside.
  • the object of the invention is to provide a franking machine with increased security, in which in particular each printed postage stamp is countered by a monetary value corresponding to the postage value.
  • control program of the accounting unit is specified in the form of firmly linked electronic gates, and in that a large number of gates is implemented on at least one user-specific component as an integrated circuit.
  • the invention is based on the knowledge that it is much more complex to modify a control program which is specified in the form of firmly linked electronic gates (for example AND gates, OR gates, NOT gates) and thus does not require an instruction memory and instruction counter. as a command sequence stored in a central command memory in the form of a ROM.
  • a command memory and also the necessary programming device are in fact readily available commercially, so that the command sequence stored at a central point in the computing unit can be manipulated.
  • a control program according to the invention which is predetermined in the form of firmly linked electronic gates, so that the control program in space and time in the gates distributed, however, can only be changed by removing links, inserting links or gates.
  • control program of a postage meter machine is implemented exclusively by gate modules without using a central command memory which is at risk of manipulation. Also a command counter, an address bus, an address control, etc., i.e. Blocks for the operation of a microprocessor system are not required to execute the control program for the accounting.
  • the franking machine with the accounting unit according to the invention is therefore implemented in such a way that each printed postage stamp is countered by a monetary value corresponding to the postage value, since the accounting data are changed in the manner described above before the postage value is printed before each printing of a postage stamp and only paid fees are stored as postage data.
  • the printer monitor transmits print data in accordance with a printer control program, which is also specified in the form of firmly linked electronic gates and which is preferably implemented with the accounting unit in a single integrated circuit.
  • a printer control program which is also specified in the form of firmly linked electronic gates and which is preferably implemented with the accounting unit in a single integrated circuit.
  • both units are equally protected in the exemplary embodiment according to the invention.
  • Feeding signals into the connecting lines between the accounting unit and printer monitoring for the purpose of unauthorized manipulation is excluded, since these lines are part of the integrated circuit and can therefore only be exposed by destroying the circuit. Protection is increased if the integrated circuit is housed in an encapsulated housing.
  • the encapsulation can e.g. can be reached through a closed steel cassette, to which only persons authorized by Swiss Post have access.
  • the housing and thus the user-specific component is cast with a chemically resistant and mechanically difficult-to-remove casting compound, direct access to the accounting unit, the memory for the postage fee data and the printer monitoring is prevented even after the housing has been removed.
  • sensors are arranged in the potting compound, removal of the potting compound can be recognized. In particular, temperature sensors, humidity sensors and pressure sensors are used. If one of these sensors registers a removal of the sealing compound, the sequence control of the accounting unit and / or the printer monitoring is blocked. The franking machine can only be operated again after the blockages have been released by one of the post authorized person or a service technician possible.
  • the printer monitoring system activates a transmission unit when an enable signal which is generated by the accounting unit signals that accounting has been carried out. Since the accounting unit of the invention can no longer be changed in its mode of operation, an enable signal is only generated if the accounting has actually been carried out. Since the release signal also runs on a line in the integrated module that is not accessible from the outside, it is ensured that the printing of the postage stamp is offset by a corresponding monetary value. Only when the release signal has been generated is the transmission unit activated so that a printing process can begin at all. If a clock generator for generating a print clock signal and a control unit for controlling the printer are only activated by the pressure monitor when the release signal is present, this results in a threefold protection which prevents printing without an release signal.
  • a blocking signal can be generated which prevents the accounting unit from recalculating postal charges.
  • the number of transmitted print data is determined so that the lock signal is generated as soon as the first parts of the postage have been printed. In this case, the mail is considered franked.
  • this measure gives the operator of the postage meter machine a longer period of time to cancel a print that has started and, on the other hand, prevents partial franking from being carried out and then the back calculation being carried out.
  • the object of the invention set further above is further achieved by a franking machine with the features of patent claim 15.
  • the protective effect is increased in this franking machine, since internal connecting lines of an integrated circuit cannot be accessed from the outside without destroying the integrated circuit.
  • the security of this franking machine is further improved if the internal bus system between the accounting unit and the printer monitoring is already protected by the use of the integrated technology.
  • This type of connecting line provides greater protection both in the case of a control program which is processed by a microprocessor and is stored in a command memory, and in the case of a control program which is specified in the form of firmly linked electronic gates.
  • a print image 10 is shown, which on postal items, e.g. on paper of an envelope, is printed with a franking machine according to the invention.
  • the printed image 10 consists of a postage stamp image 12, a date stamp image 14 and an advertising image 16.
  • the upper right corner of the printed image 10 can be selected as the origin of an xy coordinate system, which at the intersection of a horizontal x-axis designated x and one designated y vertical y-axis.
  • the postage stamp image 12 shows a postage value 18 of DM 1.00.
  • the date stamp image 14 shows the current date on which the printed image 10 is printed on the mail item, and a text element "advertising" is displayed in the advertising image 16 for advertising purposes.
  • the printed image 10 is composed of pixels corresponding to the xy coordinate system.
  • the pixels form columns with a length of 240 pixels in the y direction. Pixels lying one below the other in the y direction are combined to form a byte, so that 30 bytes form a column.
  • a column A is defined by an x position in which pixels of the postage value 18 appear in a column for the first time as the x value increases.
  • column A denotes a column-by-column printing of the printed image 10 starting with the x value zero, the first column which contains pixels of the postage value 18.
  • a column B is located at an x position that lies behind the highest x value of a column for the advertising image 16.
  • Column B has an x value, which characterizes the maximum length in the x direction of the printed image 10.
  • FIG. 2 shows a block diagram of the franking machine with essential electrical functional units.
  • a central microprocessor 30 controls the printing of the printed image 10, which is printed using a printer 32.
  • the microprocessor 30 is connected via a control bus 34, which contains address, data and control lines, to a security module 36, which in turn is connected to the printer 32.
  • the microprocessor 30 is thus not directly connected to the printer 32, but exclusively via the security module 36.
  • the structure of the security module 36 is explained below with reference to FIG. 3.
  • the microprocessor 30 is connected via the control bus 34 to a non-volatile memory 38 and a working memory 40.
  • a central control program for the central microprocessor 30 is stored in the memory 38 as a command sequence.
  • Templates for compiling the printed image 10 are stored in the memory 38.
  • the microprocessor 30 loads the desired template into the working memory 40 and processes the template according to the inputs of an operator. After these entries, which also include the entry of the postage value 18, the desired print image 10 is generated and stored in the working memory 40.
  • the non-volatile memory 38 does not contain any instruction sequences for billing postage.
  • a keyboard 42 connected to the control bus 34 the operator can operate the franking machine and, for example, that Specify print image 10.
  • a display 44 controlled by the microprocessor 30 informs the operator of the processes in the franking machine.
  • An input / output unit 46 connected to the control bus 34 is connected to drive elements (not shown) of the franking machine and to sensors which monitor the state of the franking machine.
  • the transport system (not shown) for transporting the mail item is also connected to the input / output unit 46.
  • FIG. 3 shows a block diagram of the security module 36.
  • the security module 36 is located in a closed housing which is filled with a potting compound. This also makes access to an accounting unit 60 contained in the security module 36 and a printer monitor 62 more difficult.
  • the security module 36 also contains an interface 64, via which it is connected to the control bus 34.
  • Printer monitor 62 transmits print data provided by microprocessor 30 at interface 64 to printer 32.
  • the accounting unit 60, the printer monitor 62 and the interface 64 are implemented on a user-specific module 66 as an integrated circuit.
  • the billing unit 60 carries out a billing of postal charges corresponding to the postage value 18 before each franking operation.
  • the postage fee data are stored in duplicate in two non-volatile memories 68 and 70 in registers REG 0 to REG 3. Registers REG 0 to REG 3 each contain a descending and an ascending register.
  • the microprocessor 30 requests a billing before printing the printed image 10.
  • the microprocessor 30 transmits the postage value 18 via the control bus 34, the interface 64 and a module bus 72 to the accounting unit 60.
  • the accounting unit 60 is connected to the memories 68 and 70 via a memory bus 74.
  • the accounting unit checks whether billing is possible by comparing the postage value 18 with the current value of the descending register in register REG 0. If the permitted value range is exceeded arithmetically, for example by virtue of the fact that a positive remaining credit as the current value in the descending register would be reduced to a negative remaining credit, the security module 36 is blocked.
  • the accounting unit carries out the accounting by subtracting the postage value 18 in each of the registers REG 0 to REG 3 from the value of the descending register and adding it to the value of the ascending register.
  • the accounting unit 60 issues an enable signal F, which is transmitted to the printer monitor 62 via an internal bus 76.
  • the connecting lines of the bus 76 are implemented exclusively as internal connecting lines of the user-specific module 66 and are located inside the user-specific module 66.
  • the printer monitor 62 only enables printing if the release signal F is present. Only in this case can the pixels of the print image 10 be transmitted as print data in succession from the microprocessor 30 via the interface 64 and the printer monitor 62 to the printer 32.
  • the unauthorized access to them is made more difficult by the implementation of the accounting unit 60 and the printer monitor 62 in the user-specific module 66. Since the bus 76 between the accounting unit 60 and printer monitor 62 in the user-specific module 66 is realized, it is not accessible from the outside.
  • the security module 36 contains a microprocessor ⁇ P which implements a sequence control AS10 and which processes a program stored in a read-only memory 77 (ROM) as a command sequence.
  • the read-only memory 77 is designed as an internal ROM in the microprocessor ⁇ P. After the programming process, a readout lock is set in the microprocessor ⁇ P by blowing out a readout channel.
  • Such microprocessors ⁇ P are also known under the name OTP processor (ONE TIME PROGRAMMABLE).
  • sequence control AS10 With the help of the sequence control AS10 it is possible to reload the postage fee data in the registers REG 0 to REG 3 in an authorized manner. Reloading is carried out by an authorized operator who first enters a code key via the keyboard 42. Reloading can also take place via a remote data connection.
  • the sequence controller AS10 is connected to the module bus 72 and can thus control the accounting unit 60 in such a way that it changes the registers REG 0 to REG 3.
  • a default amount is added to each of the registers REG 0 to REG 3 to the current value of the descending register. A total value stored in a total register is also increased by the default value.
  • the ascending register remains unchanged.
  • the microprocessor ⁇ P also specifies to the accounting unit 60 via the module bus 72 the number of bytes which are transmitted to the printer 32 until column A and column B are reached.
  • the microprocessor ⁇ P takes these values from the read-only memory 77 when the franking machine is started up.
  • a reset unit 78 sets the module 66 and the sequence control AS10 in a defined starting state after the franking machine has been switched on.
  • FIG. 4 shows a block diagram of the accounting unit 60.
  • the accounting unit 60 accesses the memories 68 and 70 as an authorized component via the memory bus 74, in which the postage fee data are stored in the registers REG 0 to REG 3. Accordingly, the accounting unit 60 and in particular its control program must be particularly protected.
  • the accounting unit 60 is controlled by a controller 90.
  • the controller 90 contains the control program of the accounting unit 60 in the form of a large number of firmly linked electronic gates.
  • the accounting unit 60 can execute the control program of the accounting unit without using a central command memory in the form of a ROM.
  • a command counter, an address bus, an address control, etc., i.e. Blocks for the operation of a microprocessor system are not required to execute the control program for the accounting. The mode of operation of the control is explained below with reference to FIG. 5.
  • the accounting unit 60 also contains an operation unit 92, which contains an adder 94.
  • the operation unit 92 is controlled by the controller 90 and adds or subtracts the postage value 22 contained in a postage register 96 to a register value taken from one of the memories 68 or 70.
  • the respective state of the accounting unit 60 is stored in a status register 98.
  • the control 90 connects the control bus 34 or the module bus 92 to the memory bus 74 via a multiplexer 100. However, memories 68 and 70 can only be read via control bus 34 for service purposes.
  • the controller 90 is connected to the internal bus 76, so that, on the one hand, control signals are transmitted to the printer monitor 62 when the control program of the controller 90 is being processed and, on the other hand, signal states are also taken into account when the control program is being processed that are generated by the printer monitor 62.
  • FIG. 5 shows a representation of the hierarchy of sequential controls AS1 to AS8 of the controller 90, the arrows indicating that the sequential control from which the arrow originates is superior to the sequential control to which the arrow points.
  • the controller 90 contains the control program, which is specified in the form of firmly linked electronic gates.
  • the implementation of the control program in the form of gates is carried out as follows: starting from a flow chart of the control program, the linkage of the electronic gates is determined in a circuit design.
  • the control program is divided into sections for which the design process was carried out individually.
  • the result of the design process is a plurality of, in the present case eight, circuit arrangements, each of which realizes one of the sequential controls AS1 to AS8.
  • the circuit arrangements of the sequential controls AS1 to AS8 are implemented on the module 66 in integrated technology, so that subsequent changes to the gate links and thus the control program are excluded, which increases the security of the franking machine against unauthorized manipulation.
  • An essential technical feature is that the sequence controls AS1 to AS8 do not access a central command memory, for example a ROM. Rather, the necessary commands that perform the control function are distributed among a large number of gates that are permanently linked to one another. These gates are distributed over the integrated circuit, ie a change in commands requires an intervention in the gates distributed over the surface, which is practically impossible.
  • Another characteristic of the sequential controls AS1 to AS8 is the lack of a central control unit for processing commands.
  • the sequential controls AS1 to AS8 are sequential circuits which change their switching states depending on a clock signal in the manner predetermined by their combination.
  • the sequential controls AS1 to AS4 form the superordinate control of the controller 90 and thus the accounting unit 60.
  • the sequential controls AS5 to AS8 carry out the specific calculation of the data for the registers REG 0 to REG 3 and the control of the memories 68 and 70. Only one of the sequential controls AS1 to AS8 is active at any time.
  • Each sequence controller AS2 to AS8 is triggered by a special start signal from a higher-level sequence controller, e.g. the AS1, starts and reports the completion of its task with a special end signal. If a sequential control system AS2 to AS8 is active, the higher-level sequential control system waits for this end signal.
  • the sequence controller AS1 is a higher-level controller for the sequence controllers AS2 to AS8. Depending on the accounting task “accounting” or “recalculation” specified by the microprocessor 30, the sequence controls AS2 to AS8 are activated in a sequence predetermined by the sequence controller AS1.
  • the sequential control system AS2 controls the updating of the four registers REG 0 to REG 3. For this purpose, depending on the accounting task, it activates either the sequential control systems AS3 or AS4 four times in succession.
  • the sequence control AS3 controls the billing, in which the postage fee data is updated before the printing process.
  • the sequence control AS4 controls a back calculation, in which the printing process is interrupted prematurely and the registers REG 0 to REG 3 are reset to their value before the last settlement.
  • the sequence controller AS3 or AS4 activates the sequence controller AS5 when calculating or back-calculating, in order to calculate a single one of the registers REG 0 to REG 3. Because the register REG 0 to REG 3 each contain eight bytes, the sequence controller AS5 activates the sequence controller AS6, which can calculate a byte, exactly eight times in succession, so that each byte is calculated. The sequence controller AS6 in turn activates the sequence controller AS7, which reads a byte from the memory 68 or 70, in order to calculate a byte. After the calculation has been carried out in the operational unit 92, the sequence controller AS8 is activated by the sequence controller AS6 and writes a byte into the memory 68 or 70.
  • FIG. 6 shows a block diagram of the printer monitor 62.
  • the printer monitor 62 contains a print release control 110, which is likewise specified in the form of permanently linked electronic gates, and forms a sequence control AS9.
  • the sequence control AS9 monitors the printing process in that it only enables printing when the accounting unit 60 has carried out the accounting and sends the release signal F to the print release control 110 via the bus 76. Only after the release signal F has been applied does the print release control 110 enable the transfer of print data from the control bus 34 to the printer 32, by activating a transfer unit 112 which contains a shift register which transfers the print data serially to the printer 32.
  • the print data are provided by the microprocessor 30 and transmitted to the printer 32 via the security module 36. During this transmission, the microprocessor ⁇ P of the sequence control AS10 does not intervene.
  • the printer monitor 62 also contains a clock unit 114 for generating the print clock.
  • the print cycle is in turn activated by the print release control 110 in that the print cycle is transmitted to the printer 32.
  • a counter / comparator unit 116 counts the transmitted pixels of the printed image 10.
  • the counter / comparator unit 116 When column A is printed, the counter / comparator unit 116 generates a blocking signal S which is transmitted to the accounting unit 60 via the bus 76.
  • the blocking signal S prevents back calculation in the accounting unit 60.
  • the counter / comparator unit 116 When column B is printed, the counter / comparator unit 116 generates a blocking signal, which leads to the printing process being interrupted immediately and the safety module 36 is deactivated so far that only an authorized operator can release the blocking.
  • FIG. 7 shows a flowchart of the mode of operation of the accounting unit 60.
  • the controller 90 is set in a defined start state by the reset unit 78.
  • the controller 90 waits until the postage value 22 is written into the postage register 96 by the microprocessor 30 (step 132). If the postage value 18 is present in the postage register 96, billing takes place in a step 134, in particular by activating the sequence control AS3.
  • step 138 If the billing cannot be carried out because the postage has already been completely used up, this is signaled to the microprocessor 30 and the franking process started is ended (step 138). If the billing could be carried out in method step 134, the release signal F is generated in a step 140, which is transmitted via the bus 76 to the print release control 110 of the printer monitor 62. In a method step 142, activation of the sequence control AS4 is made possible, so that the postage fee data can be recalculated.
  • step 144 the settlement can be reversed at the request of the microprocessor 30 (step 146). If there is such a request, the calculation is carried out in a step 148, in which in particular the sequence control AS4 is also activated.
  • the back calculation generates a back calculation signal R, which is transmitted via a line of the bus 76 to the printer monitor 32, which immediately interrupts the printing of the printed image 10 when the back calculation signal R is active.
  • the controller 90 the accounting unit 60 returns to its starting state after generating the back-calculation signal R (step 130).
  • the sequence controller AS1 no longer activates the sequence controller AS4.
  • the controller 90 of the accounting unit 60 can therefore no longer carry out recalculation. In this case, the controller 90 returns to its start state (step 130).
  • FIG. 8 shows a flowchart of the printing process of the printer monitor 62.
  • the print release control 110 of the printer monitor 62 is set to its start state (step 160) by the reset unit 78.
  • the print release control 110 can only perform control operations when the release signal F has been generated by the accounting unit 60 (step 162).
  • the printer monitor 62 can process print data (step 164).
  • the print release controller 110 is in a waiting state in which it waits for print data that the microprocessor 30 transmits via the interface 64.
  • print data is available, it is transmitted in a step 166 to the printer 42, which begins printing the print image 10.
  • a counter Z is increased with each byte transmitted.
  • the counter / comparator unit 116 checks in a step 168 whether the counter Z has a value which indicates that the printing of column A has already started. If this is the case, the back calculation in the accounting unit is blocked by the printer monitor 62 generating the blocking signal S (step 170).
  • the counter / comparison unit 116 also checks whether the value of the counter Z indicates whether printing of the column B has already started (step 172). Is this the If this is the case, the security module 36 is blocked in a step 174, the franking process being terminated.
  • printer monitor 62 checks whether a backward calculation has already been carried out by evaluating backward signal R (step 176). If the accounting carried out, which generated the release signal F, has been recalculated, the printing is ended and the printer monitor 62 returns to its starting state (step 160).
  • a step 170 checks whether a print end signal has already been generated by the microprocessor 30. If this is not the case, the printer monitor 62 is set to a state which corresponds to that of step 166. If the print end signal has been generated, the printer monitor 62 is set to its start state (step 160).
  • steps in which the accounting unit 60 and the printer monitor 62 influence one another are double-framed.
  • This coupling of the two units via the release signal F, the stop signal S and the backward calculation signal R means that it is difficult to bypass the accounting unit or the printer monitoring.
  • the steps 130 to 178 shown in the two flowcharts are not implemented by a microprocessor that processes a command sequence stored in a memory, but by changes in the state of an electronic circuit arrangement. In order to change or skip one or more of steps 130 to 178, a new circuit arrangement of the accounting unit 60 and the printer monitor 62 must be implemented. Since the circuit arrangements are integrated circuits, this is only possible with great effort.
  • the security of the security module 36 is also increased by the fact that the release signal F, the blocking signal S and the backward calculation signal R are exchanged via the internal bus 76, which is likewise implemented in integrated technology on the integrated module 66. External access is only possible if module 66 is destroyed.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Mathematical Physics (AREA)
  • Theoretical Computer Science (AREA)
  • Devices For Checking Fares Or Tickets At Control Points (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
EP97100534A 1996-01-31 1997-01-15 Machine d'affranchissement Expired - Lifetime EP0789333B1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE19603467 1996-01-31
DE19603467 1996-01-31

Publications (3)

Publication Number Publication Date
EP0789333A2 true EP0789333A2 (fr) 1997-08-13
EP0789333A3 EP0789333A3 (fr) 1998-12-30
EP0789333B1 EP0789333B1 (fr) 2003-08-13

Family

ID=7784157

Family Applications (1)

Application Number Title Priority Date Filing Date
EP97100534A Expired - Lifetime EP0789333B1 (fr) 1996-01-31 1997-01-15 Machine d'affranchissement

Country Status (2)

Country Link
EP (1) EP0789333B1 (fr)
DE (1) DE59710554D1 (fr)

Cited By (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0927968A2 (fr) 1997-12-15 1999-07-07 Francotyp-Postalia AG & Co. Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
EP0927970A2 (fr) 1997-12-15 1999-07-07 Francotyp-Postalia AG & Co. Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
EP0927969A2 (fr) 1997-12-15 1999-07-07 Francotyp-Postalia AG & Co. Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
EP0930586A2 (fr) 1997-12-15 1999-07-21 Francotyp-Postalia AG & Co. Dispositif et méthode pour l'échange de données entre une machine d'affranchissement et des cartes à puce
EP1035517A2 (fr) 1999-03-12 2000-09-13 Francotyp-Postalia Aktiengesellschaft & Co. Procédé de protection d'un module de sécurité et ensemble pour mettre en oeuvre ledit procédé
EP1035518A2 (fr) 1999-03-12 2000-09-13 Francotyp-Postalia Aktiengesellschaft & Co. Procédé de protection d'un module de sécurité et ensemble pour mettre en oeuvre ledit procédé
EP1035516A2 (fr) 1999-03-12 2000-09-13 Francotyp-Postalia AG & Co. Système pour un module de sécurité
EP0927971A3 (fr) * 1997-12-15 2000-09-27 Francotyp-Postalia AG & Co. Procédé et dispositif postal avec une unité de lecture/écriture de cartes à puce pour le rechargement de données de changement dans une carte à puce
EP0927967A3 (fr) * 1997-12-30 2000-10-11 Micro General Corp. Dispositif de sécurité d'affranchissement avec interface de clavier d'ordinateur
EP1063619A1 (fr) 1999-06-15 2000-12-27 Francotyp-Postalia Aktiengesellschaft & Co. Module de sécurité et procédé pour protection du registre postal contre la manipulation
EP1067482A1 (fr) 1999-07-05 2001-01-10 Francotyp-Postalia Aktiengesellschaft & Co. Image imprimée
EP1069492A2 (fr) 1999-06-15 2001-01-17 Francotyp-Postalia Aktiengesellschaft & Co. Module et méthode de sécurité pour la surveillance de sécurité d'un système
EP1120751A1 (fr) 2000-01-27 2001-08-01 Francotyp-Postalia AG & Co. Machine à affranchir avec l'accès sécurisé
EP1120750A1 (fr) 2000-01-27 2001-08-01 Francotyp-Postalia AG & Co. Machine à affranchir
US6771179B1 (en) 1999-03-12 2004-08-03 Francotyp-Postalia Ag & Co. Kg Security module with status signaling
US6775656B1 (en) 1999-03-17 2004-08-10 Francotyp-Postalia Ag & Co. Method for automatic installation of franking devices and arrangement for the implementation of the method
DE10260406B4 (de) * 2002-12-16 2007-03-08 Francotyp-Postalia Gmbh Verfahren und Anordnung zur unterschiedlichen Erzeugung kryptographischer Sicherungen von Mitteilungen in einem Hostgerät
US7256804B2 (en) 2004-06-03 2007-08-14 Francotyp-Postalia Gmbh Arrangement and method for activation of a thermotransfer print head
EP1978463A2 (fr) 2007-04-02 2008-10-08 Francotyp-Postalia GmbH Module de sécurité pour une affranchisseuse

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4301507A (en) 1979-10-30 1981-11-17 Pitney Bowes Inc. Electronic postage meter having plural computing systems
US4675841A (en) 1974-12-23 1987-06-23 Pitney Bowes Inc. Micro computerized electronic postage meter system
EP0513880A2 (fr) 1982-01-29 1992-11-19 Pitney Bowes Inc. Systèmes à microprocesseur pour arrangements de machine à affranchir électronique
EP0665518A2 (fr) 1994-01-31 1995-08-02 Neopost Limited Machine à timbrer

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR2611946B1 (fr) * 1987-02-27 1991-01-04 Smh Alcatel Machine a affranchir electronique comportant des valeurs limitant les affranchissements
FR2664407B1 (fr) * 1990-07-04 1992-09-11 Alcatel Satmam Machine a affranchir le courrier, comportant un circuit integre specifique constituant des interfaces.
GB2297540B (en) * 1993-03-12 1997-01-29 Gore & Ass Tamper respondent enclosure
US5397857A (en) * 1993-07-15 1995-03-14 Dual Systems PCMCIA standard memory card frame
US5552991A (en) * 1993-12-09 1996-09-03 Pitney Bowes Inc. Control system for an electronic pastage meter having a programmable application specific intergrated circuit

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4675841A (en) 1974-12-23 1987-06-23 Pitney Bowes Inc. Micro computerized electronic postage meter system
US4301507A (en) 1979-10-30 1981-11-17 Pitney Bowes Inc. Electronic postage meter having plural computing systems
EP0513880A2 (fr) 1982-01-29 1992-11-19 Pitney Bowes Inc. Systèmes à microprocesseur pour arrangements de machine à affranchir électronique
EP0665518A2 (fr) 1994-01-31 1995-08-02 Neopost Limited Machine à timbrer

Cited By (33)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0927970A2 (fr) 1997-12-15 1999-07-07 Francotyp-Postalia AG & Co. Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
EP0927969A2 (fr) 1997-12-15 1999-07-07 Francotyp-Postalia AG & Co. Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
EP0930586A2 (fr) 1997-12-15 1999-07-21 Francotyp-Postalia AG & Co. Dispositif et méthode pour l'échange de données entre une machine d'affranchissement et des cartes à puce
EP0927968A2 (fr) 1997-12-15 1999-07-07 Francotyp-Postalia AG & Co. Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
US6418422B1 (en) 1997-12-15 2002-07-09 Francotype-Postalia Ag & Co. Postage meter machine with a chip card write/read unit and method for operating same
US6199752B1 (en) 1997-12-15 2001-03-13 Francotyp-Postalia Ag & Co. Postage meter machine with a chip card write/read unit and method for operating same
EP0927971A3 (fr) * 1997-12-15 2000-09-27 Francotyp-Postalia AG & Co. Procédé et dispositif postal avec une unité de lecture/écriture de cartes à puce pour le rechargement de données de changement dans une carte à puce
EP0927968A3 (fr) * 1997-12-15 2000-09-27 Francotyp-Postalia AG & Co. Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
EP0927970A3 (fr) * 1997-12-15 2000-09-27 Francotyp-Postalia AG & Co. Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
EP0930586A3 (fr) * 1997-12-15 2000-09-27 Francotyp-Postalia AG & Co. Dispositif et méthode pour l'échange de données entre une machine d'affranchissement et des cartes à puce
EP0927969A3 (fr) * 1997-12-15 2000-09-27 Francotyp-Postalia AG & Co. Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
EP0927967A3 (fr) * 1997-12-30 2000-10-11 Micro General Corp. Dispositif de sécurité d'affranchissement avec interface de clavier d'ordinateur
US6771179B1 (en) 1999-03-12 2004-08-03 Francotyp-Postalia Ag & Co. Kg Security module with status signaling
US6625741B1 (en) 1999-03-12 2003-09-23 Francotyp-Postalia Ag & Co. Kg Arrangement for a security module
US6954149B2 (en) 1999-03-12 2005-10-11 Francotyp-Postalia Ag & Co. Kg Method for protecting a security module and arrangement for the implementation of the method
EP1035517A2 (fr) 1999-03-12 2000-09-13 Francotyp-Postalia Aktiengesellschaft & Co. Procédé de protection d'un module de sécurité et ensemble pour mettre en oeuvre ledit procédé
EP1035518A2 (fr) 1999-03-12 2000-09-13 Francotyp-Postalia Aktiengesellschaft & Co. Procédé de protection d'un module de sécurité et ensemble pour mettre en oeuvre ledit procédé
EP1035516A2 (fr) 1999-03-12 2000-09-13 Francotyp-Postalia AG & Co. Système pour un module de sécurité
US7194443B1 (en) 1999-03-12 2007-03-20 Francotyp-Postalia Ag & Co. Method for protecting a security module and arrangement for the implementation of the method
US6775656B1 (en) 1999-03-17 2004-08-10 Francotyp-Postalia Ag & Co. Method for automatic installation of franking devices and arrangement for the implementation of the method
EP1063619A1 (fr) 1999-06-15 2000-12-27 Francotyp-Postalia Aktiengesellschaft & Co. Module de sécurité et procédé pour protection du registre postal contre la manipulation
US6362724B1 (en) 1999-06-15 2002-03-26 Francotyp-Postalia Ag & Co. Security module and method for securing computerized postal registers against manipulation
EP1069492A2 (fr) 1999-06-15 2001-01-17 Francotyp-Postalia Aktiengesellschaft & Co. Module et méthode de sécurité pour la surveillance de sécurité d'un système
DE19928057B4 (de) * 1999-06-15 2005-11-10 Francotyp-Postalia Ag & Co. Kg Sicherheitsmodul und Verfahren zur Sicherung der Postregister vor Manipulation
DE19928057A1 (de) * 1999-06-15 2000-12-28 Francotyp Postalia Gmbh Sicherheitsmodul und Verfahren zur Sicherung der Postregister vor Manipulation
US6698953B1 (en) 1999-07-05 2004-03-02 Francotyp-Postalia Ag & Co. Kg Print image with print elements having different security levels assigned thereto, and an apparatus and storage medium for producing such a print image
EP1067482A1 (fr) 1999-07-05 2001-01-10 Francotyp-Postalia Aktiengesellschaft & Co. Image imprimée
EP1120751A1 (fr) 2000-01-27 2001-08-01 Francotyp-Postalia AG & Co. Machine à affranchir avec l'accès sécurisé
EP1120750A1 (fr) 2000-01-27 2001-08-01 Francotyp-Postalia AG & Co. Machine à affranchir
DE10260406B4 (de) * 2002-12-16 2007-03-08 Francotyp-Postalia Gmbh Verfahren und Anordnung zur unterschiedlichen Erzeugung kryptographischer Sicherungen von Mitteilungen in einem Hostgerät
US7256804B2 (en) 2004-06-03 2007-08-14 Francotyp-Postalia Gmbh Arrangement and method for activation of a thermotransfer print head
EP1978463A2 (fr) 2007-04-02 2008-10-08 Francotyp-Postalia GmbH Module de sécurité pour une affranchisseuse
DE102007016170A1 (de) 2007-04-02 2008-10-09 Francotyp-Postalia Gmbh Sicherheitsmodul für eine Frankiermaschine

Also Published As

Publication number Publication date
EP0789333B1 (fr) 2003-08-13
DE59710554D1 (de) 2003-09-18
EP0789333A3 (fr) 1998-12-30

Similar Documents

Publication Publication Date Title
EP0789333B1 (fr) Machine d'affranchissement
DE69719479T2 (de) Datenverarbeitungssystemsicherheit
DE19534528A1 (de) Verfahren zur Veränderung der in Speicherzellen geladenen Daten einer elektronischen Frankiermaschine
EP0011685B1 (fr) Dispositif programmable de protection de mémoire pour des systèmes de microprocesseurs et circuit avec un tel dispositif
EP0512542A2 (fr) Circuit à micro-processeur protégeant les données pour des supports de données portables, par example cartes de crédit
DE69534122T2 (de) Frankiermaschine
EP0762337A2 (fr) Procédé et dispositif pour augmenter la protection contre la manipulation de données critiques
CH650602A5 (de) Elektronische frankiermaschine.
DE69013544T2 (de) Einstellung einer entfernt aufgestellten Frankiermaschine für den Notfall.
DE19860069B4 (de) Programmierbare Steuereinrichtung
CH648424A5 (de) Frankiermaschine.
DE69304672T2 (de) Frankiermaschine mit Geschichtsabspeicherung
WO1989011134A1 (fr) Systeme electronique de calcul et d'enregistrement pour machines d'affranchissement
WO2004114131A1 (fr) Procede de rechargement d'un logiciel dans le secteur d'amorçage d'une memoire morte programmable
DE3426524C2 (de) Verfahren zur Steuerung der Abrechnungsvorgänge in einer elektronischen Frankiermaschine
EP0560714A2 (fr) Machine d'affranchissement
DE102004033598A1 (de) Verfahren zur Speicherung und Verwaltung von Daten und Anordnung zur Durchführung des Verfahrens
DE3040532C2 (de) Nachladbare elektronische Frankiermaschine
DE19849810A1 (de) Anordnung zur Anpassung von Betriebsdaten und/oder Betriebsprogrammen
WO2004042592A2 (fr) Procede de controle securise d'une zone de memoire d'un microcontroleur faisant partie d'un dispositif de commande, et dispositif de commande pourvu d'un microcontroleur protege
DE69013628T2 (de) System zum Ermöglichen der Durchführung einer Zahlung mittels elektronische Karte, ohne Bestrugsgefahr, und Verfahren zur Verwendung eines solchen Systems.
DE10357032A1 (de) Verfahren zum Nachladen einer Software in den Bootsektor eines programmierbaren Lesespeicher
DE4340027A1 (de) Schreibschutz-Verfahren für einen nichtflüchtigen Schreib-/Lesespeicher in einem elektronischen Steuergerät
DE3139421A1 (de) Serielle ausgabeschaltung
EP1855252B1 (fr) Agencement et procédé destinés à la fabrication d'un affranchissement

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): CH DE FR GB IT LI

RBV Designated contracting states (corrected)

Designated state(s): CH DE FR GB IT LI

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): CH DE FR GB IT LI

17P Request for examination filed

Effective date: 19990108

17Q First examination report despatched

Effective date: 20001204

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: FRANCOTYP-POSTALIA AG & CO. KG

GRAH Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOS IGRA

GRAH Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOS IGRA

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Designated state(s): CH DE FR GB IT LI

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: RITSCHER & PARTNER AG PATENTANWAELTE

REF Corresponds to:

Ref document number: 59710554

Country of ref document: DE

Date of ref document: 20030918

Kind code of ref document: P

GBT Gb: translation of ep patent filed (gb section 77(6)(a)/1977)
ET Fr: translation filed
PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20040514

REG Reference to a national code

Ref country code: CH

Ref legal event code: PFA

Owner name: FRANCOTYP-POSTALIA AG & CO. KG

Free format text: FRANCOTYP-POSTALIA AG & CO. KG#TRIFTWEG 21-26#16547 BIRKENWERDER (DE) -TRANSFER TO- FRANCOTYP-POSTALIA AG & CO. KG#TRIFTWEG 21-26#16547 BIRKENWERDER (DE)

REG Reference to a national code

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: PATENTANWAELTE SCHAUMBURG, THOENES, THURN, LAN, DE

REG Reference to a national code

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG UND PARTNER PATENTANWAELTE MBB, DE

Effective date: 20150503

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG UND PARTNER PATENTANWAELTE MBB, DE

Effective date: 20150330

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG & PARTNER PATENTANWAELTE MBB, DE

Effective date: 20150330

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG & PARTNER PATENTANWAELTE MBB, DE

Effective date: 20150503

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG & PARTNER PATENTANWAELTE GBR, DE

Effective date: 20150503

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG & PARTNER PATENTANWAELTE GBR, DE

Effective date: 20150330

Ref country code: DE

Ref legal event code: R081

Ref document number: 59710554

Country of ref document: DE

Owner name: FRANCOTYP-POSTALIA GMBH, DE

Free format text: FORMER OWNER: FRANCOTYP-POSTALIA GMBH, 16547 BIRKENWERDER, DE

Effective date: 20150330

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 20

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: IT

Payment date: 20160127

Year of fee payment: 20

Ref country code: DE

Payment date: 20160120

Year of fee payment: 20

Ref country code: CH

Payment date: 20160120

Year of fee payment: 20

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20160120

Year of fee payment: 20

Ref country code: FR

Payment date: 20160121

Year of fee payment: 20

REG Reference to a national code

Ref country code: CH

Ref legal event code: PCAR

Free format text: NEW ADDRESS: GARTENSTRASSE 28 A, 5400 BADEN (CH)

REG Reference to a national code

Ref country code: DE

Ref legal event code: R071

Ref document number: 59710554

Country of ref document: DE

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

REG Reference to a national code

Ref country code: GB

Ref legal event code: PE20

Expiry date: 20170114

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF EXPIRATION OF PROTECTION

Effective date: 20170114