EP0775986B1 - Method and apparatus for redundant postage accounting data files - Google Patents

Description

FIELD OF THE INVENTION

The present invention generally relates to a method and apparatus for maintaining redundant postage accounting data files. More specifically, the present invention relates to the maintenance of postage accounting data in both a security postage meter (SMD) and a general purpose computer (GPC).

PRIOR ART

Historically, postage meters have been dedicated stand-alone devices that only allow postage stamps to be printed on envelopes or labels (in the case of packages) and reside at the user site. As such, these devices could provide postage only for that particular site and it was necessary for the user to physically transport the device to a post office for credit restoration (increasing the postage value contained in the meter vault). These were security devices that contained mechanical (later electronic) accounting registers that dispensed postage in isolation from other systems. An advance over these systems has been the ability to re-certify a postage meter via codes communicated to the user. These codes were produced by either the manufacturer or the postal authority once the customer had made a payment.

In contrast, modern electronic postage meters can often be recredited directly by an authorized party at the site (at the user location) via a communication link. A system that performs a postage meter credit restoration operation in this manner is known as a Computer Postage Maker Credit System (or "CMRS"). The party having the authority to restore the postage meter's credit and to bill the customer (usually the manufacturer or the postal authority) can therefore make an access to the postage meter and perform a credit restoration of the postage meter.

Postage accounting data can be accumulated and read at more sophisticated electronic postage meters that have recently become available. These frankers allow record expense information automatically and provide periodic posting reports for postage purchased. These reports can even include a detailed accounting of postage expenses (for example, postage reports concerning expenses incurred by different departments in a company).

However, problems exist even in the most modern franking systems. Large users who can maintain a number of postage meters at various locations (often at a distance from one another) can not obtain a single consolidated report from current systems without manually compiling data from franking machines and individual databases. In addition, a user whose postage data is corrupted or destroyed may not be able to reconstruct the postage accounting data lost.

OBJECT AND DEFINITION OF THE INVENTION

The present invention as defined by the subject of claims 1 and 5 provides an apparatus and method for maintaining redundant postage accounting data files. Redundant postage accounting report data is maintained by means of the present invention by first creating a data file on a postage meter (eg, an SMD) to store postage accounting data. . A second data file is created on a computer that can communicate with the SMD (which can be either remote or local to the computer). For each transaction that updates the postage accounting data stored in the GDS, the data file residing in the computer is updated to reflect the change.

According to a postage accounting reporting system of the present invention, a postage transaction is recorded in a data file residing in a postage meter (such as an SMD) and in a second data file. residing in a computer. The present invention thus allows support departmental accounting and centralization of remote postage accounting.

Preferably, the second file is read-only and a consolidated credit restoration payment report for activities in a plurality of postage meters is generated in the computer.

A more detailed understanding of the nature and advantages of the present invention may be realized by reference to the remaining portions of the description and drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

• Fig. 1 is a diagram showing an example of a modular postage accounting system;
• Fig. 2 is a flow chart showing a specific embodiment of the present invention, more specifically the maintenance of redundant postage accounting data files;
• Fig. 3 is a flow chart showing a specific embodiment of the present invention, more specifically the actions that take place following the printing of a postage; and
• Fig. 4 is a flowchart showing a specific embodiment of the present invention, more specifically the restoration of postage credits.

DESCRIPTION OF A PREFERENTIAL EMBODIMENT

In the near future, systems will allow the use of existing general-purpose computing resources to achieve postage at a user site, allowing efficient and economical printing of postage stamps. These systems will postage at a user location as a result of a request and are exemplified by the system described in the C, "Method and Apparatus for a Modular Postage Accounting System" application. Shah and K. Robertson. Using well-known techniques for data encryption within what is known as "proven systems", these postage delivery systems use ordinary computers and printers to print printed stamps. encrypted postage while maintaining and updating postage accounting data within the GPC memory. By isolating the three basic franking registers in a separate device (the SMD), all functions other than a global postage accounting can then be performed in a GPC. The security of SMD registry data and the validation of postage printing transactions will depend on standard encryption techniques and physical security.

Figure 1 is a diagram showing an example of a Modular Postage Accounting System (MPAS) 1. MPAS 1 consists of three main components: a Computer Postage Maker Credit Recovery System (CMRS) 105 , a ZIP Code Information System (ZCIS) 191 and an Open System Franking System (OSMD) 5. The first component, CMRS 105, is a modem-based communication system between a modern electronic meter. (not shown) and a credit repair station computer 120. The operation of the well-known CMRS 105 is subject to government standardization. The operation of CMRS 105 is therefore not discussed in detail here. The second component, ZCIS 191, provides computer access to national and international ZIP codes. The ZCIS 191 is a commercially available system, and there are about 150 installations in the United States. As a result, its operation will not be treated in detail either. The final component, the OSMD 5, performs all the functions traditionally associated with conventional postage meters and may include a Safety Postage Device (SMD) 10, a GPC 20, an electronic scale 40 and a digital printer 60. The SMD 10 performs the accounting functions generally associated with the traditional franking machine. The SMD 10 generates encrypted postage stamps for transmission by the computer to the digital printer 60 and for subsequent printing on a mail item (for example, the mail item). mail 100).

A security communication link 30 connects the SMD 10 to the GPC 20. The security communication link 30 may be any information transfer mechanism provided that it is protected from unauthorized interception, such as a RS-232C serial communication line or a direct internal connection on the GPC 20. These techniques must be combined with the encryption of the franking information. The SMD 10 contains two accumulator-fed memories (unrepresented BAMs) for nonvolatile storage of the postage accounting information. This postage information, as is well known in the art, typically consists of an ascending register, a descending register and a checksum register (none of these registers are shown). As is well known in the art, an ascending register holds a value equal to the postage value used, a descending register maintains a value equal to the postage value which remains unused and a checksum register maintains there sum of the ascending register and the descending register. The SMD 10 may also contain a real-time clock and a memory (none of these elements are shown). The encryption can be achieved by means of a wired encryptor or by means of a software algorithm (for example the algorithms known per se or RSA). The SMD 10 may contain postage accounting information for one or more departments in an organization of a customer, which departments may be widely dispersed geographically.

The GPC 20 is also connected to a communication interface device 50 which provides access to a CMRS 105 via a communication medium 110. A communication device 130 allows a credit repair station computer 120 to communicate with the computer. GPC 20 and SMD 10 to perform credit restorations (to add a postage value to the SMD 20), posting / auditing and other functions, as needed. Optionally, the GPC 20 and the SMD 10 may communicate with a ZCIS 150 computer. The ZCIS 150 computer is connected to the communication medium 110 via a communication interface device 160. A CD-ROM device 180 which holds information national and international postal ZIP codes is also connected to the ZCIS 150 computer.

As is well known in the art, a system such as this requires operating software (not shown). The software residing on the GPC 20 allows the GPC 20 to communicate with the CMRS 105, the SMD 10, the digital printer 60 and optionally, with the electronic scale 40. Software with these capabilities is commercially available and therefore is not described in detail here. The protocol used by CMRS 105 (which supports communication between SMD 10, GPC 20 and CMRS 105) is also well known and is subject to US government use standards. Software residing on SMD 10 is also well known and is similar to that disclosed in US Patent 4,484,307 to Quatse et al.

A communication between the GPC 20 and the SMD 10 is bidirectional. The GPC 20 sends control commands and information requests to the SMD 10. In return, the SMD 10 can send human-readable data (in response to information requests), printed stamps, etc. postage (in response to postage requests, which printed stamps are encrypted) or both. For example, the postage is requested by a user (not shown) by means of the postage information entered by the user in the GPC 20. The GPC 20 sends this information in association with the class / mail service as well as any other necessary values (eg insurance) as well as the destination ZIP code at SMD 10.

In turn, the SMD 10 responds by generating a security stamping stamp file (via encryption) in association with a license number and transmitting this information to the GPC 20. The GPC 20 takes the information produced by SMD 10 and builds a postage stamp printing file comprising two-dimensional code, graphic information and human readable data. The postage stamp printing file, in combination with optional information (such as address information, ZIP code coding and any user-defined information), is transmitted to the customer. printer 60 for printing. The printer 60 then prints the postage stamps and other information on an envelope (mail item 100), a label (not shown) or any other means on which postage is to be affixed. GPC 20 can also access CMRS 105 to redefine SMD 10 for audit by postal authorities and for other purposes. This allows credit restoration (the entry of postage credit) in a manner similar to that of conventional electronic postage meters.

Alternatively, the SMD 10 may reside at the CMRS site and communicate with a credit repair station computer 120 via a security communication link (not shown). In this configuration, the GPC 20 and the credit repair station computer 120 communicate on a communication medium 110 on a transactional basis. When the postage is desired, the GPC 20 communicates the request to the credit repair station computer 120, which in turn sends the request to the SMD 10. The SMD 10 then returns a postage stamp file which is sent to GPC 20 for printing. Because the machine time per transaction is higher for this configuration, queries can be submitted together to reduce the machine time.

The present invention uses the previously described interface between the SMD 10 and a computer (either the GPC 20 or the credit repair station computer 120) to maintain postage accounting information, which can then be used. to create reports. A record of each transaction, moving totals, or both are maintained in the GPC 20, credit repair station computer 120, or both, comparing stored accounting information to moving totals residing in the SMD 10. The postage accounting reports can then be accessed by authorized parties such as the user's accounting department, the manufacturer or the postal authority.

Maintaining records in MPAS is shown in Figure 2 and typically occurs as follows. First, data files are created in the SMD 10 and either the GPC 20 or the credit repair station computer 120, or both (depending on the needs of the user). This creates redundant postage accounting data files, as shown in step 200 of Fig. 2. At step 210, the user performs a transaction request. When a transaction is requested, a decision is made at step 220 to define whether the user has requested a print transaction or a credit restore transaction. Other transactions can be done at this level but they are not represented for the sake of clarity. The patent application entitled "Method and Apparatus for a Modular Postage Accounting System" of C. Shah and K. Robertson, which was filed concurrently with this application, describe a complete listing of these communications.

If the user selects a print transaction, the system performs print processing (step 230). As shown in Fig. 3, the print processing starts (step 300) by debiting the postage amount of the credit stored in the BAMs (step 310) and then performing a check to make sure that the data has been entered with success (step 320). At step 330, redundant postage accounting data files are updated by debiting the appropriate accounts. These data files contain the Mail Accounting Report (MAR) data, which details the use of postage by department. Again, the data files are checked to ensure that the data has been entered successfully (step 340). At step 350, a print process is completed.

If the user selects a credit restoration transaction, the system performs credit restoration processing (step 240). As shown in Fig. 4, the credit restoration process begins (step 400) by crediting (or "restoring credit") the SMD 10. The credit restoration is performed by increasing the postage value held in the BAMs. the postage value purchased (step 410). At step 420, the values are checked to ensure that the data input has been successful. At step 430, redundant postage accounting data files are updated by crediting the appropriate accounts. These data files contain the Postage Credit Restoration Payment (PRRR) registration data, which maintains a history of postage credit restorations that have been completed. Again, the data files are checked to ensure that the data has been entered successfully (step 440). At step 450, a credit restoration process is then completed. If no other transaction is pending, the system returns to its standby state, as reflected by step 250 in Figure 2.

The present invention thus allows automatic maintenance of redundant postage accounting report data. This data may reside on the GPC 20, on the station computer 120 credit restoration or both. This makes six scenarios possible: the SMD 10 and redundant postage accounting data files are on the same computer (either the GPC 20 or the Credit Restore Station computer 120), the SDM 10, and the files. redundant postage accounting data are on different computers, or the redundant postage accounting data files are on both computers (the SMD being either on the GPC 20 or on the recovery station computer). credit 120). The maintenance of the redundant postage accounting report data on the credit repair station computer 120 is the most interesting scenario because there is less opportunity for violation since access can be easily controlled. and that users are limited to read-only access (and in addition, they can only access their own data files). For large users, the SMD 10 could also reside on the credit repair station computer 120. The advantage of this approach is that large users who can maintain a number of postage meters in various locations, have the option of obtaining a single consolidated report from the mainframe data, and destroyed or corrupt postage accounting report data can be restored from equally reliable data residing on the credit repair station computer 120. Just as with a CMRS postage meter, the postage credit restoration transactions are controlled by the credit repair station computer 120 located at the headquarters of the company. , which is interfaced with the GPC 20 via a modem and telephone line. Therefore, the existing link between the GPC 20 and the credit repair station computer 120 may be exploited to provide another source for accounting data.

Of course, the redundant postage accounting data files can be maintained on both the GPC 20 and the credit repair station computer 120 to provide maximum redundancy. However, this configuration penalizes the most machine time per transaction, given the communication and update required for each transaction. The choice of configuration will therefore be based on the customer's requirements because certain configurations are detrimental to these communications in any way.

Although the above is a complete description of specific embodiments of the invention, various modifications, other constructions and their equivalents may be used. For example, the redundant postage accounting data files and the SMD 20 may be located in multiple locations. In addition, multiple transactions can be submitted together to improve efficiency. Therefore, the description mentioned above should not be considered as limiting the scope of the invention as defined by the claims.

Claims (9)

1. A method for maintaining redundant postage accounting report data in an open postage system (5), characterized in that it comprises the steps of:

   creating a first file of data on a security postage device (10) for storing postage accounting data;

   creating a second file of data on a computer (20, 120), said computer being coupled to said security postage device through a security communications link protected by encryption against any unauthorized interception (30), in order to maintain a redundant data file; and

   updating said second data file in order to reflect changes in said first data file.
2. The method according to claim 1, characterized in that the encryption is produced by a wired encrypter or by means of a software algorithm of the DES or RSA type.
3. The method according to claim 1, characterized in that said second data file only allows read access.
4. The method according to claim 1, characterized in that a consolidated credit recovery payment report concerning activities in a plurality of security postage devices is generated in said computer.
5. A system for generating a postage accounting report in an open postage system, characterized in that a postage transaction is recorded in a first data file lying in a security postage device (10) and in a second data file lying in a computer (20,120), said computer being coupled with said security postage device through a security communications link protected by encryption against any unauthorized interception (30), in order to maintain a redundant data file.
6. The system according to claim 5, characterized in that the encryption is produced by a wired encrypter or by means of a software algorithm of the DES or RSA type.
7. The system according to claim 5, characterized in that access to the second data file is only read access.
8. The system according to claim 5, characterized in that a consolidated credit recovery payment report concerning activities in a plurality of security postage devices (10) is generated in said computer (20, 120).
9. The system according to any of claims 4 to 6, characterized in that the computer is a general use computer (20) or a credit recovery station computer (120).

Images