AU771179B2 - Apparatus and method for issuing documents - Google Patents

Description

I r P/00/01l 128/5/91 Regulaflon 3.2(2)

AUSTRALIA

Patents Act 1990 COMPLETE SPECIFICATION STANDARD PATENT Application Number: Lodged: Invention Title: APPARATUS AND METHOD FOR ISSUING DOCUMENTS The following statement is a full description of this invention, including the best method of 11. mmi. .1ig it 'Knowv tom u s 1 r T I 1 Apparatus and Method for Issuing Documents Field of the Invention The present invention relates to dispensers for documents of value and, more particularly, to an automated apparatus and method for issuing negotiable instruments.

Background of the Invention Negotiable instrument dispensers, such as money order dispensing machines, are well known in the art. Money order dispensing machines ("MODs"), which are also referred to by various names such as "automatic money order dispensers" or "AMODs," or "RMODs" or "Deltas," allow for the issuance and sale of money orders at a wide variety of convenient locations. For example, MODs commonly are placed at convenience stores, check cashing agencies, grocery stores, financial institutions, and other retail and service outlets. The "issuer" of the money orders generally authorizes an "agent" the grocery store) to operate the MOD at each location. When a MOD is installed at a particular site, and periodically thereafter, blank money order forms (which are negotiable documents and are sometimes referred to as "negotiable stock") are loaded into a compartment within the MOD. As customers purchase money orders, the operator enters appropriate information amount), and the MOD prints the information on the forms and dispenses the completed money orders. The forms are typically numbered sequentially. When the MOD is loaded, the operator loading the fos enters the serial numbers of the first forms. As money orders are purchased, the MOD increments a counter to keep track of which forms have been printed on. The MODs also provide reports of MOD activity, either electronically or in printed form.

Issuers generally must closely manage their MODs. MODs typically include a number of mechanical components and, therefore, commonly malfunction.

Additionally, each MOD contains negotiable documents that may be used to impose financial liabilities on the issuer. To facilitate management of a widespread system of MODs, the MODs should have certain features.

MODs should be user-friendly. The individuals operating the MODs clerks at a convenience store) typically have little or no technical training.

Moreover, it may be important for a large number of employees of a particular agent, such as a retail store, to operate a particular MOD. It is not practical for an issuer to provide training to each individual who will operate an MOD. Unfortunately, many conventional MODs are not sufficiently easy to use. For example, it is often difficult to properly reload the MODs with negotiable stock. Conventional MODs are also often bulky and difficult to install at agent sites. MODs should also incorporate security features to prevent unauthorized usage and minimize the risk that counterfeit money orders will be created. Most conventional MODs incorporate relatively primitive and limited security measures. For example, the compartment containing the blank negotiable documents generally is locked, and may be opened only with a physical key. This security measure can prevent some types of unauthorized access, but permits free access to anyone who has obtained the key. It also does not provide any record of who accessed the negotiable documents and what activity took place during such access. Consequently, it is often difficult to determine in a timely manner whether documents have been removed and whether misuse may have occurred..

Accordingly, there is a need for an improved system for negotiable instruments that provides one or more advantages over prior systems.

SUMMARY OF THE INVENTION According to the invention there is provided an apparatus for issuing documents of value, including: a vault for receiving document of value substrates; a printer, coupled with said, vault, for printing on said document of value substrates, said printer receiving said document of value substrates from said vault; a printer access controller configured for receiving an access code and further configured for making a determination whether said access code authorizes a physical access to said vault and selectively permitting said physical access to said vault responsive to said determination. Embodiments of the present invention provides an improved system for documents of value. Embodiments of the present invention can provide more convenient, and secure means for negotiable instruments or other documents of value.

Preferably the present invention allows for embodiments having many i: advantages, including the following: They allow for easy loading of the machine. (ii) They are user friendly.

(iii) They provide secure storage of money orders.

Many additional advantages of the present invention will become apparent to those skilled in the art based on the present disclosure.

B R E- r D E QCo 1- 10N 0 11 1HE 131W-11 A complete understanding of the present invention may be gained by considering the following detailed description in conjunction with the accompanying drawing(s). Some of the drawings relate to a MOD and are described below in order to present a better understanding of the present invention.

FIG. 1 shows one embodiment of a negotiable instrument dispenser for use according to the present invention.

FIGS. 2(c) and 2(d) are a flow chart illustrating an exemplary document loading process for a negotiable instrument dispenser according to the present invention and a MOD.

FIGS. 3(c) and 3(d) are a flow chart illustrating an exemplary process for a sale or vendor payment using a negotiable instrument dispenser according to the present invention and a MOD.

FIG. 4 is a flow chart showing an exemplary power cycle of a negotiable instrument dispenser.

FIG. 5 is a flow chart showing an exemplary download notification and callback procedure according for use with the present invention. DESCRIPTION OF THE PREFERRED EMBODIMENTS In preferred embodiments, an operator uses a control terminal to operate a document dispenser (preferably, a negotiable instrument dispenser) which provides a more convenient, secure, user-friendly, and efficient means for loading, selling and reporting information relating to negotiable document. The control terminal is connected to a printer/vault housing negotiable stock, signaling

I:

to print a money order and to unlock the vault as necessary. Blank money order forms are packaged in pre-defined bundles with bar code serial numbers (MICR, OCR or other encoding techniques may be used), and are stored in the vault unit of the printer. The control terminal keeps track of which forms have been printed on and other usage information. The activity of the negotiable instrument dispenser is .1 1 p automatically recorded by the control terminal in an electronic "journal" in memory) and periodically reported to a central computer.

An exemplary automatic money order dispenser 10 for use with the present invention is shown in FIG. 1. MOD 10 consists of two separate parts: a control terminal 12 and printer/vault 14. Installation at an agent/user site simply involves connecting these two parts together, and then connecting them to a telephone line to permit data transfer, and to an electrical outlet for power.

Control terminal 12 has three main functions: to communicate with the issuer's central computer the host system); to control printer/vault 14 in accordance with pre-defined rules and user instructions; and to control all other system activity. From the standpoint of a user, it consists of a keypad 16, a display 18, and an optional telephone handset 20. MOD 10 uses ordinary phone lines to transmit activity to the central computer for quick and efficient record keeping. s.

Control terminal 12 also records in its memory a "journal" or activity log, which keeps track of its usage information as described further herein. Control terminal 12 keeps track of all transactions until it automatically "uploads" that information to the host computer at the issuer's central control facility at the end of each business day or at various times throughout the day. The see transaction information preferably is stored in an internal nonvolatile memory (which may be implemented by either a volatile memory with a battery backup or a conventional nonvolatile memory). The control terminal also includes conventional programmable processor hardware so that it can be programmed to perform the processes described herein.

An operator uses keypad 16 on control terminal 12 to initiate any transactions with MOD 10. The steps that must be performed for each transaction are relatively simple. Instructions on performing all transactions preferably are described in a user guide provided to the agent.

The operator enters commands by pressing keys or keypad 16.

Preferably, keypad 16 has three types of keys: Function Keys. These keys are used to initiate the type of transaction desired sales, void, report, cancel).

Numeric Keys. through are numeric keys. A user presses these when he needs to enter an amount or code.

Alphanumeric Keys. These keys are used in vendor payment transactions. Keypad 16 can be implemented by those skilled in the art using any conventional keypad technology, including for example softkeys.

Display 18 provides users with important information and prompts users through the steps of each procedure. Display 18 can be implemented by those skilled in the art using alphanumeric display technology. Display 18 is usually at the "status screen." This is the starting point of all functions available on the terminal. If the display screen shows a different message before a user begins a transaction, or a user becomes confused midway through a transaction, he or she simply presses "CANCEL" to return to this status screen. The status screen displays the current date and time, along with the number of I: documents in the printer and the number of transactions in the current day's files for various products applications in same terminal money orders, utility remittance, .oo• phone card, payroll and gift certificates).

Printer/vault 14 preferably comprises a printer portion that contains conventional MOD printer and a vault portion locked to the printer portion. The blank money order forms are stored in the vault portion of printer/vault 14.

Printer/vault 14 is activated by control terminal 12. Based on commands input by the operator, money orders are automatically imprinted with the amount specified through control terminal 12 and dispensed to the operator. Printer 14 preferably contains a bar code reader, and the blank money order forms preferably are coded with bar code serial numbers. MICR technology may also be used for this purpose in a conventional manner. It will be apparent based on the present disclosure that any conventional OCR technology will also suffice.

S I 7 1. Loading Procedure In order to permit the system to determine whether a black document is at the beginning, middle or end of a pack or bundle, the blank documents are prepackaged in sets of a predetermined size 400 documents) and given serial numbers commencing with a multiple of the pack size 400, 800, 1200, etc). The remaining documents are in serial order 400-799 in one packet).

The system can therefore easily determine the location of a particular document within a pack and how many documents remain in the pack.

Printer/vault 14 of MOD 10 is loaded with negotiable stock at the agent/user site. During loading, and in accordance with the present invention the terminal requests a security code. The user inputs a security code using control terminal 12, and the security code is verified to have access rights for the load function. If the current user has rights to the load function, control terminal 12 sends a signal to the printer/vault 14 to unlock the vault (preferably using a solenoid or conventional electro-mechanical lock) from the printer unit, allowing the user to remove the vault. Display 18 prompts the user to remove the vault. If the user fails to remove the vault within a pre-defined time, the printer unit will relock the vault. Access to the vault will not be granted without the re-entry of an authorized access code. i" After the vault is removed from the printer unit, the user can load a pack of negotiable documents into the vault and re-attach the vault to the printer. After the vault is re-attached to the printer unit, control terminal 12 signals the printer to load the first form and perform a bar-code read on the pre-printed bar code on the form. The pre-printed bar code preferably includes numeric and/or alpha 25 characters. Upo I reading the nre-pnrinted hbar code, the nrinter returns the 4 UIId LtL I J U IU .I u numeric (or alpha, or alphanumeric) value to control terminal 12. Control terminal 12 determines whether the returned numeric value is appropriate and responds appropriately.

The MOD, of the present example, performs the following. After control terminal 12 signals the printer to load a form and read the pre-printed bar code, the printer begins to load a form. If the leading edge of a document is not recognized, the printer will respond to control terminal 12 that no documents have been recognized. Control 8 terminal 12 displays an error message that no documents were detected and requests the user to reload the forms.

When the leading edge of a document is recognized, the printer attempts to detect an under bar which indicates the position of the pre-printed bar code. If the under bar is not detected within a predetermined number of steps, the printer returns a message to control terminal 12 indicating that the under bar was not detected. The terminal displays an error message that there was a loading error and requests that the user reload the forms. In this manner, the terminal can detect whether the documents were loaded upside-down or backwards. Control terminal 12 signals the printer to return the form to the vault.

Once the under bar is detected, the printer attempts to read the pre- printed bar code on the form. If the bar code is read successfully, the printer returns the appropriate values to the terminal. The terminal calculates the number of items i" remaining in the pack, determines whether this load was of a full or partial pack; and verifies that the value is in the proper format. The terminal also verifies that the value passes all appropriate check digit verifications, displays a successful load message to i: the user, signals the printer to return the form to the vault, and makes appropriate entries in the journal who opened the printer; time; whether a full pack or partial pack was loaded).

Whenever a document is read, control terminal 12 compares the current serial number to the expected serial number. If the current serial number is different than the expected serial number, the terminal determines if the current serial number is in the same pack as the expected serial number. If the current serial number is in the same pack as the expected serial number, the terminal records a missing serial number or range of serial numbers in its internal memory to indicate that items are missing from the pack. If the current serial number is not in the same pack as the expected serial number, the terminal records a missing range from the expected serial number to the end of the pack. The terminal then determines if there are missing items from the pack from the current serial number. If items are missing from the new pack to the current serial number, the terminal records a missing range of serial numbers from the beginning of the new pack to the current serial number.

The terminal also determines if the current serial number is the beginning of a pack, or if it is an item from the middle of a pack or if that serial number is already recorded in the journal. If the current item is the beginning of a new pack, the terminal records that a full pack has been loaded. If the current item is in the middle of a pack, the terminal records a partial pack has been loaded. If the serial number was previously recorded in the journal, the document is voided by printing "void" on the document. Again, this activity is entered into the journal.

The procedure for loading documents in the exemplary MOD is described in more detail herein in connection with FIGS. 2(a) 2. Issuance.

During the issuance of negotiable documents, control terminal 12 signals printer 14 to load a form. Printer 14 begins to load a form. If the leading edge of a document is not recognized within a predetermined number of steps within the printer, the printer responds to the terminal that no documents have been recognized. i: The terminal displays an error message that no documents were detected and requests that the user load new forms or reload the current set of forms. The terminal signals o the printer to unload the form and return it to the vault.

Once the leading edge is recognized, the printer attempts to detect an under bar which indicates the position of the pre-printed bar code. If the under s not detected within a predetermined number of steps, the printer returns a message indicating to the terminal that the under bar was not detected. The terminal displays an error message that the under bar was not detected on the form and requests that the user reload the forms. The terminal signals the printer to return the form to the vault.

Once the under bar is detected, the printer advances a predetermined number of steps and attempts to read the pre-printed bar code on the form. If the bar code is read successfully, the printer returns the appropriate value to the terminal. The terminal verifies that the value is in the proper format and verifies that the value passes all appropriate check digit verifications. The terminal compares the current serial number to the expected serial number. If the current serial number is different than the expected serial number, the terminal determines whether the current serial number is in the same pack as the expected serial number. If the current serial number is in the same pack as the expected serial number, the terminal records a missing range from the expected serial number to the end of the pack. The terminal then determines if there are missing items from the pack from the current serial number. If items are missing from the new pack to the current serial number, the terminal records a missing range of serial numbers from the beginning of the new pack to the current serial number.

If the bar code is not successfully read within a predetermined number i" of retries, the printer returns an error message to the terminal indicating that the value could not be ascertained from the pre-printed bar code. The terminal displays an error message that the bar code is unreadable, then signals the printer to print void on the remainder of the item and records the expected serial number as a void. The terminal then signals the printer to load the next form and attempt the sale. This process continues until a readable form is recognized in the printer or until a pre-configured number of items has been voided due to unreadability. When a readable form is recognized, control terminal 12 instructs the printer to print designated data on the document and make the appropriate journal e- Th. MOT) then dispenses the documents.

The procedure for issuing negotiable documents is described further herein in connection with FIGS. 3(a) 3(d).

3. Other Features.

The control terminal records a list of security codes and their associated rights in a memory. The control terminal allows a user to define each security profile with a unique set of configurable rights, increasing the flexibility of the security of the device. For example, certain operators may be allowed to perform 11 all possible functions and others may be allowed to perform only a few functions, such as sales and voids.

In the case of a vendor payment, the money order is used to pay a vendor of the agent. This option is made available to some agents to permit them to allow employees to pay vendors without the need to maintain large amounts of cash on the premises. If an agent has been granted the optional vendor payment capability, the operator can, in many systems, enter any vendor name using the alphanumeric keypad. In other systems, the operator may be limited to selecting from a predetermined list of vendors. In such a system, a plurality of vendor names may be stored in the memory within the terminal for printing on the payee line of the negotiable documents.

Memory within control terminal 12 records a list of fees associated with ranges of dollar values. The user can configure the terminal to calculate a fee based on the amount requested or a percentage of the face amount. The terminal records four different ranges of values associated with a fee.

The reading of a specific pre-printed bar code for each item ensures the proper transaction posting of each sale item. The missing item detection allows for a solid, traceable audit trail.

As described herein, the embodiment of the present invention utilizes software to unlock and lock the vault based on a pre-defined set of rules. For example, the vault may only be unlocked upon entry of an appropriate security code. The software monitors and relocks the vault if it has not been opened of are predetermined period of time. This software lock/unlock feature also helps to provide a traceable audit trail with respect to printer access. The flexible, completely configurable security parameters allow the user to define which rights are accessible by employees.

In the exemplary MOD software determines any break in sequence of the documents, registering these breaks as missing items. This is printed on all reports, which serves as an early warning notice for possible fraud.

12 According to the present invention, the security code which allows access to sensitive areas of the application is dynamic. It changes daily based on a predetermined algorithm. The algorithm may be a function of the date, and/or a predetermined identification code. This prevents an agent from learning the code on one day while troubleshooting and re-using it at a later date.

Procedure for document loading with bar code logic is now described in connection with FIG. FIG. FIG. and FIG. 2(d).

Initially, the system is in an idle mode, displaying the "status" or idle screen as shown in Step 100. In the present invention, in Step 102, the user enters a code (for example, function to indicate that he or she wishes to load documents into the printer/vault. The system then displays "Enter User Code" in Step 104 and the user enters a user access code (single character or multicharacter) in Step 106. In Step 108, the system determines whether the user has the rights to load documents (not all users will have such a right). If the user does i not have such rights, the system will display "Access Denied" as shown in Step 110 and will return to the idle screen in Step 112. If, in Step 108, the system determines based on the access code that the user has the right to load documents, the document vault is unlocked in Step 114, and the system displays "Printer Unlocked, Remove M.O. Vault" in Step 116. The system also makes i: appropriate journal entries.

After displaying this message, a configurable timer is set (preferably five seconds), allowing the user to remove the vault, as indicated in Step 118. In Step 120, the system senses whether the vault has been removed during the predetermined time period. If not, the vault is re-locked to the printer, the system return s to Step 104 indicatinn in its displav that the user should re-enter his or her user's code and try again. If the user removes the vault as shown in Step 122, the system displays "Load Money Orders and Replace Vault" in Step 124. In Step 126, the user loads documents and reattaches the vault. The system then checks in Steps 128 to determine whether an idle timer has expired or the user has pressed cancel. If so, the system returns to an idle screen. If not, the system determines whether the vault has been replaced and, if not, returns to Step 124 indicating on its display that the user should load money.

13 orders. If the vault has been replaced in Step 130, the system moves on through Node 132 (shown for convenience in both FIG 2(a) and FIG to Step 134.

In Step 134, in an exemplary MOD, the document is advanced under the print head and the bar code is read. If, in Step 136, the leading edge of the document has not been located, the system will display "Printer Error-Unreadable Bar Code". in Step 138, return the documents to the vault in Step 140 (setting a vault empty flag), and return to the idle screen in Step 141.

If the leading edge of a document has been detected in Step 136, the system will determine in Step 142 whether the bar code underbar has been located and, if not, will display "Printer Error Unreadable Bar Code" (or "U-Bar Undetected") in Step 144, thereafter moving on to Steps 140 and 141 as previously described. This detects documents that have been incorrectly positioned in the printer/vault placed upside down or backwards). If the underbars has been located in Step 142, the system will determine in Step 146 whether the bar code was successfully read. If not, the system will determine whether the bar code exceeded a configurable and predetermined retry limit in Step 148 and, if not, will return to Step 134. If so, the system will display "Printer Error Unreadable Bar Code" in Step 150 and move on to Steps 140 and 141 as previously described, i.: If, in Step 146, the system determines, that the bar code was read successfully, the system will check in Step 152 to determine whether the D.O. number matches a predetermined number. (The D.O. number is the first two numbers of the document serial number). If not, the system in Step 154 will display "Printer Error-D.O. Does Not Match" and move on to Steps 140 and 141 as previnously described. If the D.O. number does match the predetermined number in Step 152, the system willcheck in 156 to determine whether the check digit is correct and, if not, the system will display in Step 158 "Printer Error Check Digit Incorrect" and move on to Steps 140 and 141 as previously described.

14 If the check digit in Step 156 is correct, the system will display "Documents Successfully Loaded" in Step 160, make sure that the vault flag is not set to empty in Step 162 and move on through Node 164 to Step 166.

In Step 166, the system determines whether the serial number of the document which last issued as a money order was the last item in the previous pack of documents. If so, the system determines in Step 176 whether the new document the document just read after loading) is the first serial number in a pack. If so the system posts a "Full Pack Load" entry into its memory (also referred to as a journal) in Step 178 and returns to the idle screen in Step 180. If the current document is not the first serial number in a pack, the system posts a "Partial Pack Load" entry into the journal in Step 182 and moves on through Node 184 to Step 186. If, in Step 166, the system determines that the last issued document was not the last item in the previous pack, the system checks its memory in Step 168 to determine whether there were any items missing from the previous pack and, if not, moves on to Step 176 previously described. If there were items missing from the previous pack, the system checks in Step 170 to determine whether there is more than one serial number missing from the previous pack. If not, the system posts in Step 172 a single missing item and moves on to Step 176 as previously described. If there: is more than one serial number missing from the previous pack, the system posts, in Step 174, a missing range item showing the first and last serial numbers. After posting the missing range in Step 174, the system moves on to Step 176 as previously described. This missing range information is printed on all reports and can be transmitted to the host.

In Step 186, the system determines whether there are any serial numbers missing from the current pack. If not, the system returns to an idle screen in Step 188. If so, the system checks in Step 190 to determine whether there are more than one serial number missing from the current pack. If not, the system posts in Step 192 a single missing item with the serial number and moves on to Step 188 as previously described. If there is more than one serial number missing from the current pack, the system posts in Step 194 a missing range item showing the first and last serial number and moves on to Step 188 as previously described.

The sale or vendor payment with bar code logic is now described in connection with FIG. FIG. FIG. 3(c) and FIG. 3(d).

In Step 200, the system displays an idle screen. In Step 202, the user presses a function key indicating a "sale" or "vendor payment." In Step 204, the system displays "Enter User Code" and, in response, in Step 206, the user enters his or her user code in accordance with the present invention. In Step 208, the system checks to determine whether the user has rights to perform a sale or vendor transaction and, if not, displays "Access Denied" in Step 210. The system subsequently returns to an idle screen in Step 212.

If, in Step 208, the system determines that the user does have a right to conduct a sale or vendor transaction, the system and user follow previously established functions to obtain information necessary to conduct the sale or vendor transaction, these procedures being performed in Step 214, after which the system moves through Node 216 to Step 218. In Step 218, a document is advanced to the printer. The system checks in Step 220 to determine whether the leading edge has been located. If not, in Step 222, the system unloads the document from under the print head and sets the vault empty flag, thereafter displaying in Step 224 "Printer Error L. Edge, Please Check and Reload" and subsequently returns to the idle screen, Step 226. If the leading edge for the document is located in Step 220, the system checks in Step 228 to determine whether the underbar is located and, if not, unloads the document from under the print head in Step 230 and sets the vault empty flag. In Step 232, the system then displays "Printer Error U. Bar, Please Check and Reload", and subsequently moves to Step 226 as previously described.

If, in Step 228, an underbar has been located, the system moves through Node 234 to Step 236.

In Step 236, the document is advanced under the print head and the bar code is read. If the system determines in Step 238 that the bar code was not read successfully, the system checks in Step 240 to determine whether the bar code 16 exceeded configurable retry limit. If not, the system returns to Step 236. If so, the system displays in Step 242 "Unreadable, Voiding Item," prints "Void" on the document in Step 244, posts the voided document to a record in its memory journal) in Step 246 and checks to determine whether a predetermined maximum number of unsuccessful reads has occurred in Step 248. If not, the system moves through Node 215 and 216 to Step 218. If so, the system displays iin Step 252 "Unreadable Items, Please Check and Reload" or "Unreadable Items Please Call the Help Desk" and in Step 254 sets MO vault empty flag, thereafter returning to the idle screen in Step 256.

If the bar code was read successfully in Step 238, the system moves through Node 251 to Step 258.

In Step 258, the system determines whether the D.O number matches the predetermined value in the terminal. If not, the system displays in Step 260 "Printer Error D.O. Does Not Match", unloads the document frornm under the print head and sets the vault empty flag in Step 262 and returns to the idle screen in Step 264. If the D.O. number does match the terminals in Step 258, the system determines in Step 266 whether the digit is correct and, if not, displays "Printer Error Check Digit Incorrect" in Step 268 and moves on through Step 262 as previously described. If the check digit is correct, the system determines in Step 270 whether the serial number is the next serial number expected and, if so, posts this document as a sale into the journal in Step 276, prints the remaining portion of the document in Step 280, and returns to the idle screen in Step 264.

If, in Step 270, the system determines that the serial number is not the next serial number expected, the system checks to see whether more than one serial number is missing in Step 272 and, if not, posts a single missing item with the serial number into the journal in Step 274 and moves on to Step 276 as previously described. If there is more than one serial number missing in Step 272, the system posts a missing range of items showing the first and last serial number into the journal in Step 278 and moves on to Step 276 as previously described.

a 17 The power cycle with bar code logic is now described in connection with FIG. 4.

In Step 300, the system is turned on. In Step 302, the system determines whether the printer power was cycled and, if not, returns to an idle screen in Step 304. If the printer power was cycled, a document is advanced under the print head in Step 306 and bar code is read. If the bar code is read successfully in Step 316, the system checks to determine whether the D.O. number matches the terminal's number in Step 318 and, if so, determines whether the check digit is correct in Step 322. If the check digit is correct, the system unsets the vault empty flag in Step 326, removes the document from under the print head (and optionally checks for missing items) in Step 314, and returns to the idle screen, making appropriate journal entries.

If the bar code was not read successfully in Step 316, the system checks in Step 308 to determine whether the bar code has exceeded the configurable retry limit and, if not, returns to Step 306. If so, the system displays in Step 310 "Printer Error Unreadable Bar Code", sets the vault empty flag in Step 312, unloads the document from under the print head in Step 314, and returns to the idle screen in Step 304.

If, in Step 318, the D.O. number does not match the terminal's, the system displays in Step 320 "Printer Error D.O. Does Not Match" and moves on to Step 312 as previously described. If, in Step 322, the check digit is not correct, the system displays in Step 324 "Printer Error Check Digit Incorrect" and moves on to Step 312 as previously described.

The download notification and call back procedure of a related aspect of the present invention is now described in connection with FIG. 5. In Step 400, the terminal transmits to the host system all of the data stored in its journal.

In Step 402, the host processes sales data on-line and, in Step 404, the host performs a match on device I.D. to a "Notification List". In Step 408, the host system determines whether the current device I.D. is on a "Notification List" and, if not, sends a recorded response in Step 410 and disconnects the call. If, in Step 408, the device I.D. is on the notification list, the system sends a recorded response in Step 412 with notification and disconnects the call. In Step 414, the terminal checks to determine whether the notification was for a scheduled or immediate callback. If the notification was for an immediate callback the system moves on to Step 420, which will be described hereafter. If the notification was for a scheduled callback, the terminal waits in an idle loop checking for the current time to equal the scheduled time in Step 416, and when the current time equals the scheduled time, moves on in Step 418 to Step 420.

In Step 420, the terminal determines the notification was for initialization, program load or printer load. If the notification was for a printer load, the terminal calls the host system in Step 422 to pull in a printer firmware enhancement and, after the download is complete, the disconnect is in Step 428. If the terminal determines in Step 420 that the notification was for a program load, the terminal calls the host system in Step 424 and downloads a terminal software enhancement. After the download is complete, the call is disconnected in Step 428.

The notification can also be for multiple procedures initialization and download). The notification may also be dependent on the unique code or version associated with each MOD, which is transmitted to the host system during the call.

If the terminal determines in Step 420 that the notification was for initialization, the terminal calls the host system in Step 426 and downloads a terminal configuration modification, thereafter disconnecting the call in Step 428.

A previously issued document may also be reinserted to be voided by the user. The bar code reader will verify that the appropriate document is being voided.

Claims (22)

1. An apparatus for issuing documents of value, including: a vault for receiving document of value substrates; a printer, coupled with said vault, for printing on said document of value substrates, said printer receiving said document of value substrates from said vault; a printer access controller configured for receiving an access code and further configured for making a determination whether said access code authorizes a physical access to said vault and selectively permitting said physical access to said vault responsive to said determination.

2. An apparatus as claimed in claim 1, wherein said access code identifies the individual seeking access to the printer.

3. An apparatus as claimed in claim 1 or 2, wherein: said access code is received in connection with a procedure requiring a physical access to the vault, and said determination is based on said procedure and said access code.

4. An apparatus as claimed in claim 1 or 2 or 3, wherein a time at which the printer is accessed is recorded.

An apparatus as claimed in claim 4, wherein the printer automatically issues a periodic report indicating the times at which the printer has been "••accessed and the operator who accesses the printer.

6. An apparatus as claimed in claim 4 or 5, wherein the access codes and access times are stored in a non-volatile memory. S

7. An apparatus as claimed in claim 6, wherein the nonvolatile memory includes a volatile memory and a battery back-up.

8. An apparatus as claimed in claim 1, wherein a plurality of individuals have individually assigned access codes, some of the access codes permitting access to the printer.

9. An apparatus as claimed in claim 8, wherein the access codes assigned to at least one high security individual permits the high security individual to perform activities that are not allowed to the other individuals.

An apparatus as claimed in one of claims 1 to 9, wherein the printer access controller permits access to at least a portion of the printer upon receipt of any of a plurality of access codes, and further wherein the access code includes different security clearance levels.

11. An apparatus as claimed in claim 1, wherein the access code can be altered.

12. An apparatus as claimed in claim 11, wherein the access code is altered periodically.

13. An apparatus as claimed in claim 12, wherein the access code is altered automatically. °ooo Si

14. An apparatus as claimed in any one of claims 11 to 13, wherein the access code is a function of the date and/or a unique code identifying the machine. S.. An apparatus for issuing documents of value as claimed in any one of claims 1 to 14, including: a control terminal, said control terminal configured for modification of a portion of the apparatus with steps including: connecting with a host system; receiving notification of a modification; thereafter receiving said modification; and modifying a portion of said apparatus in accordance with said modification. a 19 It should be noted that the present invention relates to any document of value, whether or not the document is negotiable. It should also be noted that, upon user command, a previously issued document may also be reinserted into the printer to be voided. The bar code reader will verify the serial number to make certain that the correct document is being voided. The present invention encompasses all subject matter within the scope of the claims.

Accordingly, the present invention is not limited to the preferred embodiments described above. "cnmprises/cmaprising" when used in this specification is taken to specify the presence of stated features, integers, steps or canponents but does not preclude the presence or addition of one or more other features, integers, steps, components or groups thereof I 22

16. An apparatus as claimed in claim 15, wherein notification of a modification includes an indication for the control terminal to connect with the host system at a later time to receive the modification.

17. An apparatus as claimed in claim 15 or 16, wherein the modification includes a software enhancement.

18. An apparatus as claimed in any one of claims 15 to 17, wherein the modification includes a terminal configuration modification.

19. An apparatus as claimed in any one of claims 15 to 18 further including a printer under the control of the control terminal and the modification includes a printer firmware enhancement.

An apparatus as claimed in any one of claims 15 to 19, wherein the step of modifying a portion of said apparatus in accordance with said modification occurs at a predetermined time received in the notification of a modification.

21. An apparatus as claimed in any one of claims 15 to 20, wherein the control S *999.. terminal is further configured to detect and record deviations from an expected order of the codes uniquely associated with the substrates upon receipt of a command to issue a document of value.

22. An apparatus as claimed in claim 1, substantially as herein described with reference to at least one of the accompanying drawings. DATED this 19th day of December 2001 FIRST DATA CORPORATION WATERMARK PATENT TRADE MARK ATTORNEYS 290 BURWOOD ROAD HAWTHORN VICTORIA 3122 AUSTRALIA RCS/AJL/AXO