WO1986005612A1

WO1986005612A1 - System for the transmittal of an authorized volume to a user station such as, for example, an electrical appliance

Info

Publication number: WO1986005612A1
Application number: PCT/EP1986/000157
Authority: WO
Inventors: Hermann Stockburger; Adelbert Leber; Hans-Georg Winderlich (Deceased); Siegfried Bauer (Deceased)
Original assignee: Copytex Gmbh Sicherheitssysteme; Winderlich, Gregor (Heir Of Winderlich, Hans-Georg; BAUER, Cornelia (heir of BAUER, Siegfried (decease; BAUER, Julia (heir of BAUER, Siegfried (deceased)); BAUER, Eva (heir of BAUER, Siegfried (deceased))
Priority date: 1985-03-19
Filing date: 1986-03-19
Publication date: 1986-09-25
Also published as: AU5662186A; EP0218616A1; DE3509914A1

Abstract

The transmittal is effected by means of a data carrier (4) which is activated at an activating station (2). The activation station (2) and the evaluation station (1) are designed in such a way that consecutive data carriers (i, i + 1, ...) carry corresponding variable information (j, j + 1, j + 2 ...). The variable information is stored in the evaluation station. After each user operation the respective j item of information (in the series) after being read is replaced by the j + 1 information (and so on). In this way the possibility is eliminated that the information recorded in the data carrier will be duplicated or used more than once to release a user appliance.

Description

System for transferring an authorization volume to a consumption station, e.g. Electrical appliances

The invention relates to a system for transmitting an authorization volume or the data characterizing it to a consumption station, with an evaluation device with a reading device for an i-th data carrier having the authorization volume for releasing the consumption station and a system for transmission of an authorization volume or the data characterizing it to a consumption station, with an activation station with a writing device for writing information onto an i-th data carrier to be fed to an evaluation device.

In such a system, it is known to open gates with an authorization card or to put devices into operation. The gates or devices have one for this purpose

Evaluation device that checks the scope of authorization written on the authorization card. If it is to be avoided that the cards are duplicated or that they are used multiple times for actuating one and the same gate or device, the authorization cards must be equipped with security features. That makes it necessary - 2 -

Making the structure of the cards complicated. Furthermore, the evaluation devices need complicated measuring parts which measure, for example, the light transmittance in certain areas of the data carrier or the distribution of magnetic particles in the latter or the like, in order to determine the authenticity of the authorization card.

The object of the invention is to create a system of the type described at the outset with which the multiple use of one and the same data carrier or its duplication can be switched off in a simple manner without the data carrier having to be fitted with special security features and without that the evaluation device must have a special measuring device.

This object is achieved by a system of the type described at the outset, which according to the invention is characterized in that the evaluation device has a first memory for storing variable j-th information and a comparator which on the one hand is connected to the reading device and on the other hand is connected to the memory and, if the data read in via the reading device matches the stored data, emits an enable signal, and that the variable jth information in the first memory after it has been read out by a variable j + 1st information is replaced.

The system with an activation station of the type described above is characterized by a device for create j-th information to be written on the i-th data carrier.

Further features and advantages of the invention result from the description of exemplary embodiments with reference to the figures. From the figures show:

Fig. 1 is an illustration for explaining the system;

2 shows a first embodiment of an evaluation station; 3 shows another embodiment of the evaluation station;

4 shows a first embodiment of the activation station;

5 shows another embodiment of the activation station; and

Fig. 6 is a flow chart for explaining the flow in one embodiment of the system.

As shown in FIG. 1, the system has an evaluation station 1 and an activation station 2. The evaluation station 1 is connected on the output side to a consumer device 3. The consumer device can e.g. an electric

Device or an entire electrical home network with its connected consumer devices or a copier. As a rule, there are a large number of such evaluation stations with connected consumer devices, to which a single activation station is assigned. In the manner to be described, the activation station supplies data carriers 4 with which data are fed to the evaluation station 1. - 4 -

As can be seen from FIG. 2, the evaluation station 1 has a data carrier reading device 5 in the form of a card reader. This is connected on the output side to a memory 6 for variable information and to a second output with a comparator 7 and to a third output with a volume counter 8. The output of the memory 6 for variable information is connected to a second input of the comparator 7. Furthermore, an identifier memory 9 is provided in the form of a ROM memory, the output of which is connected to a third input of the comparator 7. The output of the comparator 7 is connected to one of the inputs of an AND gate 10. The output of the volume counter 8 is connected to the other input of the AND gate 10. The output of the AND gate is connected to the consumer device 3 via a line 11.

The volume counter 8 can be designed as a simple counter which can be set to a predetermined value by means of the input signal present and which counts down to zero or another predetermined value through the use of the consumer device.

The comparator 7 is designed such that it compares the output data supplied by the data carrier reading device 5 with the data from the variable information memory 6 and the

Identifier 9 compares the data supplied and, in the form of correspondence to be described below, supplies a positive output signal to the AND gli "ed 10. The consumer device 3 is connected via a line 12 to a reset input of the volume counter 8 in such a way that that the volume counter 8 is reset depending on the consumption.

The embodiment of the evaluation station 1 shown in FIG. 3 has a device 13 for generating variable information. Unlike guide die in the manner shown in Fig. 2 Aus¬ is the data carrier reading means 5 is output ^'tig not connected to the memory for variable information 6, but through a line 14 to a control input of the device 13. The device 13 is connected on the output side to the memory 6 for variable information. A control signal is supplied to the device 13 via the line 14 each time a data carrier is read out via the data carrier reading device 5.

The device 13 for generating the variable information generates successive output information as a function of an algorithm and the control signal supplied via the line 14.

The activation station 2 has a data carrier reading and writing device 15 in the form of a card reading and writing device. This is connected on the input side to a data input device 16 in the form of a keyboard. Furthermore, a memory 17 is provided for an identifier, which is connected on the input side to an output of the data carrier reading and writing device 15. The memory 17 is designed as a ROM memory. The memory 17 is connected on the output side to an input of a memory 18 for variable information. This is designed as a RAM memory. It is connected on the output side to an input of a device 19 for generating variable information. This device 19 is in turn connected on the output side to an input of the memory 18 for variable information and to the data carrier reading and writing device 15.

The memory 18 for variable information is addressed in each case by applying the identifier or address supplied by the memory for the identifier 17 and supplies the jth information associated with the identifier to the device 19 for generating variable information. The device 19 is designed in such a way that when the j-th information is created, it generates j + 1-th information depending on a predetermined algorithm. According to a first embodiment of the activation station 2, the device 19 supplies the j-th and the j + 1-th information for writing into the data medium and the j + 1-th information to the memory on the output side to the data carrier reading and writing device 15 ¬ cher 18, where the j-th information associated with the identifier is replaced by the j + 1-th information.

According to a modified embodiment of the activation station 2, the device 19 only supplies the data carrier reading and writing device 15 with the j-th information and at the same time the j + 1-th information to the memory 18, where the j-th information associated with the identifier is replaced by the j + 1 th information.

The embodiment of the activation station shown in FIG. 5 differs from that. Embodiment described above in that the data input device 16 as in the previous embodiment, is connected to the data carrier reading and writing device 15 and additionally to the input of the memory 17 for the identifier. Furthermore, the memory 17 for the identifier is connected with an output to an input of the data carrier reading and writing device 15. In this embodiment, the identifier is supplied via the data input device 16 as an address to the memory 17 for the identifier. The memory 17 provides as in the example shown in Fig ^". 4 embodiment, addressed se to the memory 18 as well as the identifier itself to the trägerlese- Daten¬ and write device 15th

A first method for transmitting an authorization volume or the data characterizing it to a consumption station and the mode of operation of the above-described embodiments of the system for the embodiment shown in FIGS. 2 and 5 are described below. A data card is used as data carrier 4. However, it is also possible to use other types of data carriers.

First reproducing device via the Datenein¬ 16 the identity of the evaluator 1, is to be transferred to ^"an entitlement volumes and the Be¬ emption volume even be entered in the activation station. The identifier is a composite operated for each of the system Auswertesta ^ tion singular designation The authorization volume can have a fixed scope for each card, for example the authorization to consume 100 kWh. In this case the authorization volume does not have to be entered separately and written down on the data card. On the other hand, it is possible for ^ different cards to be issued for different operators - then the scope of the authorization volume is entered. The identifier and, if appropriate, the authorization volume are then written by means of the data carrier reading and writing device 15 onto a data card inserted therein. The identifier is also fed to the memory 17 for calling up a j-th variable information associated with the identifier, for example the value x. This j-th information is supplied to the device 19 for generating a j + 1-th information, for example the value x + 1. The j-th information is written onto the data carrier at a first location and the j + 1-th information at a second location. At the same time, the j + 1 th information supplied by the device 19 is output to the memory 18. In this, the new j-th information assigned to the identifier is written in by the device j + 1-th information.

The activation station can thus be used to create a large number of data carriers, each of which carries continuous first and second information for an evaluation station having a unique identifier. This information is, of course, written down in a manner known per se so that it cannot be easily recognized by a third party. The data carriers themselves do not require any security features.

The activation station 2 is preferably designed so that its operation is only possible if the authorization to operate is proven. For this purpose, the authorization can take place, for example, via the data input device 16 by entering an identifier on a keyboard or also via a data card. When entering via a the operator as Activation station 2 has a valid master data card, which verifies the authenticity of the card and the PIN data of the operator and releases the activation station when the security requirements are met.

The operator of the consumer device 3 now receives the data carrier 4 described in the activation station in the manner described above. He enters it into the evaluation station 1. The data, ie the identifier, the j-th and the j + 1-th information and, in the case of variable authorization scopes, the authorization volume are read out there using the data carrier reading device 5. The data for the identifier and the variable information are fed to the comparator 7. There it is first checked whether the identification data match the identification data of this special evaluation station stored in the identification memory 9. If this is not the case, the card will be returned. If there is a match, it is further checked whether the jth information read out matches the jth information stored in the variable information memory 6. If this is not the case, the data carrier is returned. If they match, the readout data is gen about the scope of authorization to the volume counter 8. übertra¬, whereby the latter is placed on a the scope of authorization ^'entspre-- sponding value. With uniform fixed volumes of, for example, 100 kWh, the counter is set to this fixed only by means of a pulse. ert. ^ In the case of variable volumes, the data for setting the transferred volume are supplied to the volume counter 8, so that the latter is set to the corresponding value.

Furthermore, the variable information memory becomes the j + 1 th Information is supplied, and the j + 1-th information is written in the memory 6 in place of the previous j-th information.

The comparator 7 delivers a positive output signal in the described match. The volume counter 8 also delivers a positive output signal after adjustment to the consumption volume, whereupon the AND gate 10 emits an enable signal which enables the consumption device 3 so that a consumer can use the device

The volume of consumption is indicated to the volume counter by the consumption device via line 12. The volume counter is switched back to a final value according to consumption. If this end value is reached, the output signal of the volume counter 8 becomes negative, as a result of which the AND gate no longer emits an enable signal and the consumer device 3 is put out of operation. It is now necessary to transfer a new authorization volume using a data carrier. It is impossible that the previous card is used again because it still has the original j-th information in the first position and the j + 1-th information in the second position. The card is rejected as insufficient, since it is determined in the comparator that the jth information to be read from the first position, namely the value x, does not match the jth information written in the variable information memory 6, namely the value x + 1. This prevents the same card from being used several times for the same evaluation station. In the same way, the card cannot be used for several devices at the same time, since the Identifiers would not match. Rather, a new volume transmission is only possible with a data card to be generated by the activation station in the next step, in which the identifier in the manner described above and the value x + 1 in the first position as j-th information and as j in the second position + 1st information, the value x + 2 and, if appropriate, data for the volume to be transferred are written.

If the embodiment of the activation station shown in FIG. 4 is used instead of the activation station shown in FIG. 5, the method changes insofar as data carriers are used in this embodiment, each of which has already written the identifier associated with the evaluation station. In this case, the identifier is not entered separately via the data input device 16. The identifier already recorded on the data carrier 4 to be activated is read out via the data carrier reading and writing device 15 and fed to the memory 17 for the identifier. Via this, the variable jth information associated with the respective identifier is called up in the memory 18. Otherwise there is agreement with the procedure and mode of operation described above.

If the embodiment of the evaluation station shown in FIG. 3 is used, it is sufficient if the j-th information, ie the value x, is recorded on the data carrier 4 activated by the activation station. As in the above example, the comparator 7 first checks whether the data read by the data carrier reading device 5 for identification and the j-th information at the first position with the identification in the identification memory 9 and that in the memory 6 for variable information - stored jth information match. If this is not the case, the data carrier is rejected. In the case of agreement, however, the data carrier reading device 5 gives a pulse via the line 14 to the device -13 for generating the variable information. This has the same algorithm as the device 19 for generating the variable information in the activation station 2. Triggered by the pulse delivered via line 14, it generates the j + 1-th information, ie the value x + 1, and delivers it to memory 6 for variable information, where the previous j-th value, namely x, is replaced by the j + 1 value supplied by the device 13, namely x + 1. Otherwise, the method and mode of operation correspond to the embodiments described above.

In the embodiments described above, an identifier assigned to the individual evaluation stations is always used. In a simplified embodiment, the use of the identifier and the part required for its processing in the activation station and the evaluation station can be dispensed with if the individual variable information of the various consumer devices, for example the values x, y, z, ... , sufficiently different from each other that there is no fear in., specific application that operators pick up an i-th card only until x by a fold use from the value + m = y has become ^', and Card could then be used simultaneously to unlock a second consumer device. This possibility is completely excluded by using the identifier.

Claims

PATENT CLAIMS

1. System for transmitting an authorization volume or the data characterizing it to a consumption station, with an evaluation device with a reading device for an i-th data carrier having the authorization volume for releasing the consumption station, characterized in that the evaluation device (1) ei¬ NEN first memory (6) for storing a variable J-th information, and a comparator (7), which is connected on the one hand to the reading device (5) and on the other hand to the memory (6) and if the read in via the reading device matches Emits data with the stored data, has and that in the first memory (6) the variable j-th information is replaced by a variable j + 1-th information after it has been read out and that a second memory (9) with one of the evaluation device, est assigned identifier is provided, which is connected to the comparator (7), and that the Freiga besignal is only issued if a read-out identifier matches the stored identifier.

2. System according to claim 1, characterized in that the i-th data carrier has the j-th information, and that the evaluation device has a device for generating the j + 1-th information.

3. System according to claim 2, characterized in that the device is designed as a counter.

4. System according to one of claims 1 or 3, characterized in that an i + 1-th data carrier has the j + 1-th information instead of the j-th information.

5. System according to claim 1 or 2, characterized in that the i-th data carrier has the j-th and the j + 1-th information and that the j + 1-th information in the first memory (6) for Replacing the jth information is readable.

6. System according to any one of claims 2 to 4, characterized in that the data carrier has the identifier.

7. System according to one of claims 1 to 6, characterized in that an i + 1-th data carrier, the identifier, a j + 1-th information which corresponds to the j + 1-th information of the i-th data carrier, and has a j + 2nd information.

8. System for transmitting an authorization volume or the data characterizing it to a consumption station, with an activation station with a writing device for writing information onto an i-th data carrier to be fed to an evaluation device, characterized by a device for generating an i- th data carrier to be written in and a device for replacing the jth information with a j + 1th information.

9. System according to claim 8, characterized by a memory for storing an identifier of the evaluation device, the j-th or j + 1-th information being associated with the identifier.

10. System according to claim 8 or 9, characterized in that the j-th and the j + 1-th information are written on the i-th data carrier.

11. System according to one of claims 9 or 10, characterized in that the identifier is written on the data carrier.

12. System according to one of claims 8 to 11, characterized in that a plurality of evaluation devices associated with the activation station are provided, each having different identifiers from one another.