DE102009004408A1 - Weighing device and method for providing digital data contents on the weighing device - Google Patents

Abstract

The invention relates to a method for providing digital data contents, in particular media contents, for goods offered for sale in a retail store on a weighing device, in which (a) accessing an access-secured server database using a first key, in which the individual Each associated digital data content is stored to download the associated digital data contents of selected goods from the server database, (b) the downloaded digital data contents are stored in an access-secured local database, (c) accessed using a second key to the local database in order to read the digital data contents associated with a called product from the local database, and (d) the read-out digital data contents are output at an output unit of the weighing device.

Description

The The present application relates to a method for providing digital data content, in particular media content, in one Retail business goods for sale at a weighing facility.

It is currently about it thought-out, weighing equipment, in particular scales at a sausage, meat, fish and / or cheese counter in a supermarket or a shop, to provide additional functionalities. In particular, it is considered on a display of a weighing device, a Customers, d. H. the buyer a goods, additional information to the respective weighed goods display, in particular automatically. For such additional information, then in the form of digital data, in particular media content, may be present For example, references to additional products or services (Cross-selling), recipe suggestions, Images, video clips, content declarations and / or the like act.

digital Data content can be copied quickly and easily. This is not always wanted. For example, a provider who has the aforementioned additional information Downloadable in a database from a server and paid to disposal represents an interest in the use and dissemination of the to control it offered digital data content such that the digital data contained only licensed users or weighing accessible are.

Of the present invention is based on the object such To allow control.

These The object is achieved by a method having the features of the claim 1 solved, and in particular in that (a) using a first key a secured server database is accessed in which the the individual goods respectively assigned digital data content are stored to the associated digital data content of selected goods download from the server database, (b) the downloaded ones digital data content stored in a secure local database (c) using a second key on the local database is accessed to the digital goods associated with a called product Read data content from the local database, and (d) the read out digital data content at an output unit of the weighing device be issued.

The Server database is access-protected or access-secured. On the server database can therefore only by using a first key be accessed. Preferably, the server database is access protected. Preferably, the first key comprises an authentication key or Customer key, in particular, a user ID and an associated password with which the licensed, especially internet-capable weighing device compared to the Provider of digital data content can authenticate. Basically but it is also possible that is a licensed weighing device by means of a certificate to the Server identified. Thus, you can only licensed weighing equipment access the server database.

The Connection between the weighing device and the database server is preferably done by means of a secure transmission protocol, for example https, d. H. the transfer The downloaded digital data content is cryptographically encrypted preferably a session key and / or a symmetric cryptosystem is used, and wherein the cryptographically encrypted digital data content on the weighing device side be decrypted by means of a cryptographic key. Provided both an authentication key and a session key are, put both keys each a part of the first key represents.

It can be selected to which goods the associated digital data content is downloaded should be. Preferably, this is an electronic shopping cart or shopping cart provided to select the goods whose associated digital Data content downloaded and stored in the local database should be. From the local database, the digital data content then called and output to the output unit. The Save in and own the call from the local database across from a method in which the digital data content in a call a product directly and directly from a server database provided be the advantage of a higher reliability. About that In addition, Internet traffic can be kept low. In addition, can a higher one Data security is ensured because it is not possible for third parties is to monitor access to the database, log and / or statistically evaluate.

The weighing device may be a single balance or a composite of several scales. The local database is assigned to the weighing device. In the case of a balance of scales, several balances can access a common local database or a separate local database can be provided for each balance. For example, a local database may be in an internal memory of a scale or in a separate external local server be.

Basically the weighing device a Client-server architecture. In particular, a scale, their assigned output unit for outputting the digital data contents is intended to be designed as a client. A server, in particular a separate server that includes or hosts the local database can access them, can then be designed to the method according to the invention, in whole or in part, as a service to the client put.

The local database is also access-protected or access-protected, so that access to the local database only by means of the second key can be. Preferably, the local database is access secured. Therefor may be the second key an authentication key, in particular a user ID and an associated password or only a password, to include the one associated with a called product read digital data content from the local database and output at the output unit of the weighing device. Uncontrolled access to the local database is thus not possible.

At least a part of the second key, in particular The aforementioned authentication key can be stored in a secure Area of the weighing device, in particular a security module, in particular a hardware security module, in particular a TPM (Trusted Platform Module), deposited or stored which makes hacker attacks more difficult.

Preferably are the digital data contents stored on the local database encrypted especially about the aforementioned security module. In particular, the encryption takes place via a Encryption key, the Part of the second key is.

Prefers includes the second key a device-specific or platform-specific keys or device key, with the digital data stored on the local database encoded are, with the device key in can be stored in the aforementioned security module. Especially is the aforementioned encryption key as a device-specific key trained. Here is the hardware of the weighing device in the device-specific key included. As a result, the digital data content to the respective weighing, especially the respective security module, bound. The digital Data content can So only on that weighing device or those weighing a weighing device or those weighing devices be played, for the digital data content has been downloaded. Especially may be the device specific key a multipart key and / or one or more key pairs.

Further preferred are the encrypted ones stored on the local database digital data content sealed, d. H. to a special hardware and / or software system configuration. This happens, for example, via a stored Hash value based on the specific system configuration, where a later one decryption the encrypted digital data content can only be made if the special System configuration is present. This can be prevented that one connected to a licensed weighing device unlicensed weighing device or other device that the specific hardware and / or Software system configuration does not have the sealed data can read. Preferably a password is given during the sealing, Specify this in particular when unsealing the owner or stored in the system configuration.

Prefers the aforesaid step (a) and / or (b) is performed by a first software module executing, wherein the term software module in particular one in itself closed and / or encapsulated software component which is on the weighing device installed and / or implemented, and / or separately accessible is, and / or a user interface as a menu has. More preferably, the aforementioned step (c) and / or (d) of executed at least one further, in particular second software module.

Of the second key can be a device specific or platform-specific keys or device key, required to start the at least one other software module is, with the device key turn can be stored in the aforementioned security module. Prefers becomes the second key, in particular the aforementioned device key, at queried and / or checked every start of the module. The second key or the part thereof may be in the installation of the at least one other Software module generated and / or requested by the database server become. The first and / or any other software module can also be installed on the aforementioned external server.

The digital data content in the server database and / or in the local database as container files present, d. H. in a file format, the various data formats may contain, for example, video, audio, image and / or text data.

The downloaded digital data content can with an electronic Timestamp and / or a given, especially infinite Runtime be provided. In particular, it is provided that after expiration the term, d. H. after extinction the license, the digital data content expires, for example be deleted from the second software module or just with reduced quality are dispensable.

Prefers a flag is provided that is used to determine whether the stored digital data contents subsequently, in particular without renewed Access to the server database, modified, especially edited and / or supplemented can. Unless supplements are allowed, the operator of the weighing device of the local database For example, add your own recipe suggestions or advertising content. there It is preferable if a subsequent change of the stored digital Data content is logged, especially in a history file. So it can be recorded as the original, from the server database downloaded digital data content. This is particularly advantageous when it comes to the digital Data content around legally required content declarations and the provider of the digital data content wishes to prove that the original downloaded digital data content in accordance with statutory provisions corresponded.

The read digital data content can be visual or audiovisual on a display unit of the weighing device are output, in particular on a screen, a display or a touch screen. But it is also possible that the digital data content to be output to a printer. This can z. B. advertising leaflets or Posters for the marketing of special goods, in particular for current ones Promotion campaigns, to be printed.

To another embodiment of the invention is the access to the Server database logs, especially in an access log of the server, especially in a log file. The can Access time and the selected Goods whose associated digital data content has been downloaded, be held. This makes it the provider of the digital Data content allows the topicality prove the digital data content it offers, as it does especially for legally required content declarations is beneficial.

Prefers Access to the server database is user-specific and / or country specific. The offered digital data contents may be different for different countries. For example - depending on Country - other information For example, to ingredients and / or allergens required and / or be prescribed. For example, the assignment to a country can be based on the aforementioned user ID.

The The application further relates to a computer program with program code means, to carry out the method as described above, when the program is executed on a computer of a weighing device.

The Application also relates to a computer program product with program code means, which are stored on a computer-readable medium to the Perform procedures as described above, if the computer program is executed on a computer of a weighing device.

The Registration finally concerns a weighing device for providing digital data content, in particular media content, to in a retail store goods designed to: (a) using a first key to access a secured server database in which the individual goods each assigned digital data content stored are to the associated digital data content of selected goods download from the server database, (b) the downloaded ones digital data content in an access-secured local database (c) using a second key to access the local database to that of a called product read out associated digital data contents from the local database, and (d) the read-out digital data contents at an output unit the weighing device issue.

advantageous Further developments of the device according to the invention arise in an analogous manner from the developments of the method according to the invention.

advantageous embodiments The invention are also in the subclaims, the description of the figures and the drawing indicated.

One not restrictive embodiment The invention is illustrated in the drawing and will be described below described. The sole figure of the drawing shows a schematic Representation of a weighing device according to the invention and a database server.

The database server shown in the figure 11 includes a central database 13 , in the supplementary information to goods, which in a Einzelhan Delsgeschäft, in particular supermarket, are offered for sale. The additional information, which is available as digital media content and in the form of container files, ie as text, image, audio and / or video data, may be, for example, recipes, images, video clips, content declarations and / or advertising information relating to the respective ones Trade complementary products (cross-merchandising). The database server 11 with the database 13 is operated by a provider of digital media content. For reasons of data consistency, the provider provides the digital media content only to a single such database server.

The server database 13 is access-protected, in particular access-protected, and represents an encrypted container, wherein the server database 13 only an authentication key, namely a user ID and an associated password, can be accessed. The authentication key is part of a first key 31 , which is shown only symbolically in the figure. Without access via the user ID and password, the user sees only digital data salad. At the database server 11 is a https (secure hypertext transfer protocol) capable web server.

The weighing device shown in the figure in the form of a retail scale 15 is internet-enabled and includes a first software module 17 , The first software module 17 in turn, includes an https-enabled web browser 19 , so between the retail scale 15 and the database server 11 A secure https connection can be established to ensure secure transmission of encrypted data between the retail scale 15 and the database server 11 to ensure. In principle, however, another secure transmission protocol is possible, for example FTPS or FTPES.

The secure https connection is established using the familiar SSL handshake protocol, whereby the database server is authenticated 11 a certificate is used and then a symmetric session key is generated. The session key is also part of the first key 31 , The authentication of the retail scale 15 then takes place by means of the aforementioned user ID and the aforementioned associated password. The retail scale 15 This gives access to the server database 13 ,

To access the server database 13 must be obtained from the provider of the digital media content or the operator of the server database 13 to be licensed. The customer access then consists of the aforementioned user ID, ie a unique customer ID, and the aforementioned password.

The access takes place customer-specific and / or country-specific, ie the respective customer is not the entire contents of the server database 13 but only the part of the content associated with the respective customer ID. Based on the customer ID, an assignment can be made to the database contents visible to the respective customer. For example, information on ingredients or allergens required by law in a country may differ from one another. In the server database 13 Therefore, for the respective product several different versions of a content declaration can be deposited, the different versions are provided for different countries. A user from z. B. Italy can then be displayed a different version than a user from z. B. Germany. In particular, individual content from the server database 13 also displayed or not displayed, or it can be changed content displayed.

An electronic shopping cart allows the user of the retail scale 15 then select those goods, their associated digital media content downloaded and stored in an access-secured local database 25 the retail scale 15 in particular encrypted should be stored.

The digital media content bought or rented. The purchase of digital media content over a prepaid model with so-called credits, with the purchased digital media content has an unlimited duration. The rent over a flat rate model, with customers during the term of the flatrate get unlimited access to all digital media content.

Technically, the implementation is done by means of time stamps and / or run times, which are impressed on the selected digital media contents, before being sent to the retail scale 15 be transmitted. For the purchased digital media content, the term is infinite. In the flat rate model, the downloaded digital media content with a duration of z. B. 3 months from download provided. Before the expiry of the term, the retail scale asks 15 then at the server 11 whether the existing license agreement has been terminated or extended. This check is carried out with each connection of the retail scale 15 with the server 11 automatically and in the background. If the license agreement persists, the runtime will be in the local database 25 stored digital media content correspondingly extended. If the license agreement has been terminated, it will expire in the local database 25 stored digital media content, where the term "decayed" In particular, a deletion or a display with reduced quality should be understood. The diminished quality may consist, for example, in a reduced resolution, a reduced contrast or a visible watermark.

Each purchase or rental access of a user or a retail scale 15 on the server 11 will be in a log file of the server 11 logged. In this way, the server operator can prove that at which point in time a respective user downloaded which digital media content. In particular, this allows the timeliness of the digital media content at the time of downloading to be checked. For example, it is possible to check or prove whether or not content declarations have complied with the legal requirements at the time of downloading. At the same time, the purchased or leased digital media content is billed via an SAP interface of the server 11 ,

The local database 25 is also access protected. At the local database 25 For example, it can be an SQL or Firebird database. The downloaded digital data contents are stored there safely and can be accessed only using a second key 33 , which in turn is shown symbolically in the figure, are accessed. Access to the local database 25 , ie in particular the calling of the digital media content, is via a second software module 23 performed.

Like the server database 13 also puts the local database 25 an encrypted container to which access is obtained only via an authentication key in the form of a user ID and a password. The authentication key, part of the second key 33 is in a hardware security module 21 , in particular a TPM (Trusted Platform Module) stored. The authentication key is used to enable communication between the second software module 23 and the local database 25 ,

In addition, the second key includes a device key when installing the second software module 23 by request to the server 11 and then in the hardware security module 21 with the device key at each start of the second software module 23 is checked.

Additionally, those are in the local database 25 stored digital media content by means of an encryption key, which is also part of the second key 33 is encrypted, where the encryption key can also be one or more key pairs.

The encryption key is designed as a device-specific key, ie the hardware of the weighing device is included in the device-specific key. The in the local database 25 stored, encrypted digital data content can therefore only from that retail scale 15 be decrypted for which the digital data content has been downloaded. The encryption key may be, for example, an AES (Advanced Encryption Standard) cryptosystem. The encryption key or at least a private key of the encryption key is also in the hardware security module 21 saved.

In addition, those in the local database 25 stored digital data contents by means of a hash value, which is formed for example from the system configuration, as at the time of installation of the second software module 23 is present, and that can go into the aforementioned encryption, sealed, ie in the local database 25 stored digital data contents are bound to this hardware and / or software system configuration. The digital data contents can only be decrypted if this system configuration exists. This can prevent a unlicensed other device connected to a licensed weighing device from reading the sealed data. As a result, a digital rights management (DRM) can be realized.

In the shop scale 15 a flag is provided that determines whether the in the local database 25 stored digital data content edited and / or can be supplemented with their own content. For example, the customer may wish to have their own recipe suggestions or advertising content in the local database 25 to deposit. Such changes are recorded with a corresponding timestamp in a history file and in the local database 25 stored safely. This is to document the original version of the subsequently amended digital media content. Preferably, only purchased digital media content can be changed by the customer. By contrast, leased digital media content should not be changeable. Supplements are recorded in a separate record, which can then be displayed as a second layer together with the rented data. After expiration of the flatrate only the rented data becomes invalid. The changes or additions, however, remain available to the customer.

For updates to the server database 13 he follows a notification of the licensed customer or the licensed retail scales 15 that newer or more up-to-date digital media content is available. Customers can take over, but this is not mandatory.

To the digital media content associated with a product on one of the retail scales 15 associated display 27 output, the digital media contents associated with the respective product by means of the second software module 23 called and from the local database 25 read. At the display 27 It can be a touch screen, an additional display of the retail scale 15 , which is provided in addition to a display for displaying the name, the price and / or weight of the respective weighted goods, or a separate, to the retail scale 15 act on the connected screen.

If desired, displayed images can also be printed on a printer 29 printed out and given to the respective buyer. It can also be provided that images can be output via an HD graphics interface, for. B. advertising leaflets or posters to make current promotions. In particular, it can be provided that the images in the server database 13 are available in different quality and thus different price levels.

The retail scale 15 further comprises a load cell, not shown, which determines the weight of a product lying on her and passes it on to a processor unit, which is designed to display the weight of the goods on a display for the customer / seller. In addition, an input device or keyboard connected to the processor unit is provided, via which an identification number assigned to the item, for. B. PLU, in the retail scale 15 can be entered so that on the weight of a price for the goods can be calculated, which is then also displayed. The retail scale further includes a power supply for powering the retail scale and a label printer.

According to the invention, the license model explained above comprises a two-stage key. The first key is a customer or master key for access to the server database 13 and the second key is configured as a module or device key for playing the digital media content. A customer therefore receives a customer key and a device key. The retail scale described above allows the use and distribution of digital media content to be controlled.

11

server

13

Server database

15

retail scale

17

first Software Module

19

Web browser

21

Hardware Security Module

23

second Software Module

25

local Database

27

display

29

printer

31

first key

33

second key

Claims (20)

Method for providing digital data contents, in particular media contents, for goods offered for sale in a retail store on a weighing device ( 15 ) in which (a) using a first key ( 31 ) to an access-secured server database ( 13 ), in which the digital data contents respectively associated with the individual goods are stored in order to access the associated digital data contents of selected goods from the server database ( 13 (b) the downloaded digital data content in an access-secured local database ( 25 (c) using a second key ( 33 ) to the local database ( 25 ) is accessed by the digital data content associated with a retrieved item from the local database ( 25 ) and (d) the read-out digital data contents at an output unit ( 29 . 31 ) of the weighing device ( 15 ). Method according to claim 1, characterized in that the server database ( 13 ) and / or the local database ( 25 ) is always secured. Method according to claim 1 or 2, characterized in that the first key ( 31 ) and / or the second key ( 33 ) each comprise an authentication key, in particular a user identifier and an associated password. Method according to at least one of the preceding claims, characterized in that the second key ( 33 ) comprises a device-specific key. Method according to at least one of the preceding claims, characterized in that a security module ( 27 ), in particular a trusted platform module, is provided, in which the second Key ( 33 ) or a part thereof is deposited. Method according to at least one of the preceding claims, characterized in that the digital data contents to be downloaded are transmitted encrypted cryptographically and by means of a cryptographic key ( 31 ) are decrypted. Method according to at least one of the preceding claims, characterized in that the digital data contents to be read out are encrypted cryptographically and when read by means of a cryptographic key ( 33 ) are decrypted. Method according to at least one of the preceding claims, characterized in that step (a) and / or (b) of a first software module ( 17 ) and step (c) and / or (d) of at least one further software module ( 23 ) of the weighing device ( 15 ) is performed. Method according to claim 8, characterized in that the second key ( 33 ) or part of it every time you start the second software module ( 23 ) is queried and / or checked. Method according to claim 8 or 9, characterized in that the second key ( 33 ) or the part thereof when installing the second software module ( 23 ) is generated and / or requested. Method according to at least one of the preceding Claims, characterized in that the digital data contents respectively as container files. Method according to at least one of the preceding Claims, characterized in that the downloaded digital data contents with an electronic timestamp and / or a predetermined Runtime are provided. Method according to at least one of the preceding Claims, characterized in that a flag is provided which uses will determine whether the stored digital data contents are subsequently changed, in particular edited and / or supplemented, can be. A method according to claim 13, characterized; that a subsequent change the stored digital data content is logged. Method according to at least one of the preceding claims, characterized in that the read-out digital data contents on a particularly audiovisual display unit ( 29 ), in particular a screen, a display or a touch screen, and / or on a printer ( 31 ). Method according to at least one of the preceding claims, characterized in that the access to the server database ( 13 ), especially in an access log of the server ( 11 ). Method according to at least one of the preceding claims, characterized in that the access to the server database ( 13 ) is user-specific and / or country-specific. Computer program with program code means to the Method according to at least one of claims 1 to 17, when the program is executed on a computer of a weighing device. Computer program product with program code means, which are stored on a computer-readable medium to the Method according to at least one of claims 1 to 17, when the computer program is executed on a computer of a weighing device. Weighing device ( 15 ) for providing digital data content, in particular media content, to goods offered in a retail store, which is designed to (a) using a first key ( 31 ) to an access-secured server database ( 13 ), in which the digital data contents assigned to the individual goods are stored in order to access the associated digital data contents of selected goods from the server database ( 13 (b) the downloaded digital data content in an access-secured local database ( 25 ) (c) using a second key ( 33 ) to the local database ( 25 ) to access the digital data content associated with a retrieved item from the local database ( 25 ) and (d) the read-out digital data contents at an output unit ( 29 . 31 ) of the weighing device ( 15 ).