EP0789333B1 - Machine d'affranchissement - Google Patents

Machine d'affranchissement Download PDF

Info

Publication number
EP0789333B1
EP0789333B1 EP97100534A EP97100534A EP0789333B1 EP 0789333 B1 EP0789333 B1 EP 0789333B1 EP 97100534 A EP97100534 A EP 97100534A EP 97100534 A EP97100534 A EP 97100534A EP 0789333 B1 EP0789333 B1 EP 0789333B1
Authority
EP
European Patent Office
Prior art keywords
printer
postage
meter machine
postage meter
machine according
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
EP97100534A
Other languages
German (de)
English (en)
Other versions
EP0789333A3 (fr
EP0789333A2 (fr
Inventor
Peter Dr. Rieckhoff
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Francotyp Postalia GmbH
Original Assignee
Francotyp Postalia GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Francotyp Postalia GmbH filed Critical Francotyp Postalia GmbH
Publication of EP0789333A2 publication Critical patent/EP0789333A2/fr
Publication of EP0789333A3 publication Critical patent/EP0789333A3/fr
Application granted granted Critical
Publication of EP0789333B1 publication Critical patent/EP0789333B1/fr
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00362—Calculation or computing within apparatus, e.g. calculation of postage value
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G07B2017/00258—Electronic hardware aspects, e.g. type of circuits used
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00362—Calculation or computing within apparatus, e.g. calculation of postage value
    • G07B2017/00427—Special accounting procedures, e.g. storing special information

Definitions

  • the invention relates to a franking machine for franking from Postgut, with a printer for printing a postage stamp to the Postgut, a central control system for controlling the pressure and peripheral components of the franking machine, a billing unit for billing postal charges, and with at least one non-volatile memory for storage of postage data, with the accounting unit on the Accesses postage data according to a predetermined control program, and wherein the accounting unit as a digitally working electronic circuit arrangement is realized.
  • a central microprocessor controls the franking process in such a way that first a settlement in the Settlement unit takes place and then the postage stamp is printed on the mail.
  • the Postage data changed.
  • the postage data is mostly in a descending and an ascending register saved.
  • the value of the descending register is indicated by the accounting unit for each franking process by the value of the Postage stamp to be printed based on a starting value reduced.
  • the value of the ascending register is increased by the Value of the postmark to be printed increased.
  • the accounting unit changes the postage data by processing a given one Control program, which as a command sequence centrally in stored in a program memory designed as a read-only memory is.
  • the control program is then processed by a further microprocessor contained in the accounting unit.
  • Printer monitoring for the optional transfer of print data to the printer depending on monitored sizes in the security module is included (e.g. EP 0 513 880 A2).
  • Printer monitoring is powered by a third microprocessor, which is a printer control program processed, controlled.
  • the printer control program is in turn central as a command sequence in a printer program memory stored.
  • the known protective measures fail if the command sequence in the printer program memory is changed becomes.
  • Billing unit and printer monitoring are known Franking machines to a signal line Module bus connected.
  • the signals via this module bus Accounting unit of the printer monitoring among other things, a successful one Billing. Will the above measures bypassed, so lies the module bus and especially the one mentioned Signal line free and it can be in the signal flow from the outside be intervened.
  • a franking machine for franking is known from EP-A-0 657 817 A1 known from Postgut according to the preamble of claim 1.
  • the franking machine contains a microprocessor, one ASIC module and a memory unit with several memories.
  • a billing unit is software-technically by the Microprocessor realizes the postage data in the Storage unit managed.
  • the ASIC module is programmable in such a way that with a single building block several different Types of franking machines can be controlled (cf. FIG. 1 and associated description; page 2, lines 35 to 40; Page 3, lines 21 to 30).
  • the object of the invention is a franking machine with increased Specify security, especially when printed Postage stamp corresponding to the postage Faces monetary value.
  • This task is for a franking machine of the type mentioned Art solved in that the control program of the accounting unit in the form of firmly linked electronic Gate is specified, and that a variety of gates on at least one user-specific component as integrated circuit is realized.
  • the invention is based on the knowledge that it is essential It is more complex to change a control program that is in the form firmly linked electronic gates (e.g. AND gates, OR gate, NOT gate) is specified and thus no command memory and command counter needed as one stored in a central command memory in the form of a ROM Command sequence.
  • a control program according to the invention which is firmly in shape with each other linked electronic gate is specified, so that the control program in space and time in the gates distributed, however, can only be removed by removing Links, inserting links or gates change.
  • the control program of a franking machine according to the invention is realized exclusively by gate modules, without a central command memory at risk of manipulation use. There are also a command counter, an address bus, a Address control, etc., i.e. Modules for the operation of a Microprocessor system not required to run the control program to execute for billing.
  • the franking machine with the accounting unit according to the invention is therefore realized in such a way that each printed postage stamp there is a monetary value corresponding to the postage value, because the billing data is described in the above Before printing a postage stamp for the postage value be changed and only paid fees as postage data are saved.
  • the Printer monitoring print data according to a printer control program that also in the form of a fixed link electronic gate is specified and preferably with the accounting unit in a single integrated circuit is realized.
  • This measure is based on the consideration that also the printer control program and the connections between Printer monitoring and accounting unit before external intervention must be protected. This also results in the printer monitoring the one designed according to the invention Effects called accounting unit.
  • the embodiment according to the invention both units equally protected. Feeding signals into the Connection lines between accounting unit and printer monitoring for the purpose of unauthorized manipulation is excluded because these lines are part of the integrated Are circuit and thus only by destroying the circuit can be exposed. Protection is increased if the integrated circuit is housed in an encapsulated housing is. The encapsulation can e.g. through a locked Steel cassette can only be reached by post authorized persons have access.
  • the housing and thus the user-specific component with a chemically resistant and mechanically difficult to remove Potting compound is shed, even after removal the housing has direct access to the accounting unit, the memory for postage data and printer monitoring prevented.
  • Sensors are distributed in the sealing compound arranged, a removal of the potting compound can be recognized become. In particular, temperature sensors, humidity sensors and pressure sensors applied. Register one If these sensors remove the sealing compound, the Process control of the accounting unit and / or the printer monitoring blocked.
  • the franking machine is operated only after releasing the blockages by one of the post authorized person or a service technician possible.
  • the printer monitoring switches a transmission unit takes effect when an enable signal, generated by the accounting unit, a carried out billing signals. Because the accounting unit in the invention no longer changed in their mode of operation an enable signal is only generated if the Billing was actually carried out. Because the release signal additionally on one that is not accessible from the outside Line runs in the integrated block, it is ensured that a corresponding monetary value after printing the postage stamp faces. Only when the release signal has been generated the transmission unit is activated so that at all printing can begin. Also becomes a clock generator for generating a print clock signal and a control unit only then to control the printer by the pressure monitoring activated when the release signal is present, so there is a triple protection that prevents that printing takes place without an enable signal.
  • a lock signal can be generated, the back calculation of postal charges by the accounting unit prevented.
  • the number of print data transferred is determined so that the lock signal is generated as soon as first parts of the postage value were printed. In this case the mail is already considered franked. This measure gives on the one hand, the operator of the franking machine longer time to cancel a started print and on the other hand, prevents partial franking is carried out and the retroactive accounting is then carried out.
  • the object of the invention set further above will continue by a franking machine with the features of the claim 15 solved.
  • the protective effect is with this franking machine increased because one on internal connecting lines integrated circuit from the outside without destroying the integrated Circuit cannot be accessed.
  • the security this franking machine will be further improved if the internal bus system between the accounting unit and the Printer monitoring already through the use of the integrated Technology is protected.
  • This type of connecting line brings greater protection to both a control program, which is processed by a microprocessor and in one Command memory is stored, as well as in a control program, that in the form of firmly linked electronic Gate is specified.
  • a print image 10 is shown, which on Postage, e.g. on paper of an envelope, with a franking machine is printed according to the invention.
  • the printed image 10 exists from a postage stamp image 12, a date stamp image 14 and an advertising image 16.
  • the upper right corner of the Print image 10 can be used as the origin of an xy coordinate system can be selected, the one designated by x at the intersection horizontal x-axis and one labeled y vertical y-axis.
  • the postage stamp image 12 shows a postage value 18 from DM 1.00.
  • the date stamp image 14 shows the current date which the printed image 10 is printed on the mail, and in Advertising image 16 is a text element "advertising" for advertising purposes displayed.
  • the printed image 10 is composed of pixels corresponding to the xy coordinate system composed.
  • the pixels form in the y direction Columns with a length of 240 pixels.
  • pixels located one below the other are one byte summarized so that 30 bytes form a column.
  • a Column A is defined by an x position, with increasing x-value for the first time pixels of the postage value 18 in occur in a column.
  • column A denotes a column-wise printing of the printed image 10 starting with the x-value zero the first column, the pixels of the postage value 18 contains.
  • a column B is at an x position, which is behind the highest x value of a column for the advertising image 16.
  • Column B has an x value that is the maximum length in the x direction of the printed image 10.
  • FIG. 2 shows a block diagram of the franking machine with essential electrical functional units.
  • a central one Microprocessor 30 controls the printing of the printed image 10 is printed using a printer 32.
  • the microprocessor 30 is via a control bus 34, the address, data and control lines contains, connected to a security module 36, which in turn is connected to printer 32.
  • the microprocessor 30 is thus not directly connected to the printer 32, but only via the security module 36 Structure of the security module 36 is shown below with reference to FIG Figure 3 explains.
  • the microprocessor 30 is also connected via the control bus 34 a non-volatile memory 38 and a working memory 40 connected.
  • a central control program is in the memory 38 filed as a command sequence for the central microprocessor 30.
  • In the memory 38 are templates for compiling the Print image 10 saved.
  • the microprocessor 30 loads the desired template in the working memory 40 and edited the template according to the input of an operator. After these entries, including the entry of the postage value 18 counts, the desired print image 10 is generated and stored in the working memory 40.
  • the non-volatile memory 38 does not, however, contain any command sequences for accounting for Postal charges.
  • the keyboard 42 can be connected to the control bus 34 Operator operate the franking machine and e.g. the Specify print image 10.
  • One controlled by the microprocessor 30 Display 44 informs the operator of the processes in the franking machine.
  • An input / output unit 46 connected to the control bus 34 is with not shown drive elements of the franking machine and connected to sensors that monitor the state of the postage meter monitor. Is on the input / output unit 46 also the transport system, not shown, for transporting connected to the postal service.
  • FIG. 3 shows a block diagram of the security module 36.
  • the security module 36 is in a closed position Housing that is filled with a potting compound. Thereby are also accesses to one contained in the security module 36 Accounting unit 60 and a printer monitor 62 difficult.
  • the security module 36 also contains one Interface 64 through which it is connected to the control bus 34 is.
  • Printer monitor 62 transmits from the microprocessor 30 at the interface 64 provided print data for Printer 32.
  • the accounting unit 60, the printer monitor 62 and the Interface 64 are on a user-specific module 66 implemented as an integrated circuit.
  • the accounting unit 60 bills postal charges before each franking process through, which correspond to the postage value 18.
  • the postage data are in duplicate in two non-volatile memories 68 and 70 in registers REG 0 to REG 3 saved.
  • the registers REG 0 to REG 3 each contain a descending and an ascending register.
  • microprocessor 30 transmits the postage value 18 via the Control bus 34, the interface 64 and a module bus 72 for Accounting unit 60.
  • the accounting unit 60 stands with memories 68 and 70 via a memory bus 74 in connection.
  • the accounting unit checks whether billing is possible by postage value 18 with the current value of the descending register in the register REG 0 is compared. There is an arithmetic overrun of the permitted range of values, for example by that a positive remaining credit as the current value in descending Register for negative remaining credit reduced would, the security module 36 is blocked.
  • the accounting unit leads the settlement by the postage value 18 in each of the registers REG 0 to REG 3 from the value of the descending Register deducted and the value of the ascending register is added.
  • the settlement unit 60 After the settlement has been carried out, the settlement unit 60 an enable signal F, which via an internal bus 76 to Printer monitoring 62 is transmitted.
  • the connecting lines of the bus 76 are only as internal connecting lines of the user-specific module 66 realized and are located inside the user-specific Module 66.
  • the printer monitor 62 the structure of which is shown below 6 is explained, printing is only possible if the enable signal F is present. Only in this case can they Pixels of the printed image 10 as print data in succession from Microprocessor 30 via interface 64 and printer monitoring 62 are transferred to printer 32.
  • the security module 36 contains a microprocessor ⁇ P which a sequential control system AS10 and one in one Read-only memory 77 (ROM) program stored as a command sequence executing.
  • the read-only memory 77 is internal ROM executed in the microprocessor ⁇ P. After the programming process a readout lock is set in the microprocessor ⁇ P, by blowing out a readout channel.
  • Such microprocessors ⁇ P are also known as OTP processors (ONE TIME PROGRAMMABLE).
  • sequence control AS10 With the help of the sequence control AS10, it is possible to view the postage data authorized in registers REG 0 to REG 3 reload. Reloading is done by an authorized Operator first using the keyboard 42 a code key enters. Reloading can also be done via a remote data connection respectively.
  • the sequence control AS10 is with the Module bus 72 connected and can therefore the accounting unit 60 Control so that it changes the registers REG 0 to REG 3.
  • the registers REG 0 to REG 3 3 a default amount for the current value of the descending register added. A total value stored in a sum register is also increased by the default value. The ascending register remains unchanged.
  • the microprocessor ⁇ P gives the accounting unit 60 via the Module bus 72 also specifies the number of bytes to reach column A and column B to printer 32 become.
  • the microprocessor ⁇ P takes these values Commissioning of the franking machine from the read-only memory 77th
  • a reset unit 78 sets the module 66 and the sequence control AS10 after switching on the franking machine in a defined start state.
  • FIG. 4 shows a block diagram of the accounting unit 60
  • accounting unit 60 acts as an authorized unit via the memory bus 74 to the memories 68 and 70 in which the postage data in the registers REG 0 to REG 3 are stored. Accordingly, the accounting unit 60 and especially your control program will be particularly protected.
  • the accounting unit 60 is controlled by a controller 90.
  • the controller 90 contains the control program of the accounting unit 60 in the form of a variety of firmly linked electronic gate.
  • the accounting unit 60 can Control program of the accounting unit without using a central one Process the command memory in the form of a ROM.
  • a command counter, an address bus, an address control etc. i.e. Modules for the operation of a microprocessor system not required to run the control program for to carry out the settlement. How the control works is explained further below with reference to FIG. 5.
  • the accounting unit 60 also contains an operational work 92, which contains an adder 94.
  • the operations plant 92 will controlled by controller 90 and added or subtracted the postage value 22 contained in a postage register 96 into one from a register value taken from the memories 68 or 70.
  • the respective state of the accounting unit 60 is shown in a status register 98 is stored.
  • the control bus 34 optionally becomes 100 by the controller 90 or the module bus 92 is connected to the memory bus 74. about the control bus 34, however, the memories 68 and 70 can only be used for Service purposes can be read.
  • the controller 90 is connected to the internal bus 76, so that on the one hand when processing the tax program of Control 90 control signals to the printer monitor 62 the internal bus 76 are transmitted and on the other hand at Execution of the control program also takes signal states into account are generated by the printer monitor 62 become.
  • Figure 5 shows a representation of the hierarchy of sequential controls AS1 to AS8 of the controller 90, the arrows mean that the sequence control from which the arrow originates, the sequence control to which the arrow points is superior.
  • the controller 90 contains the control program, which is fixed in form linked electronic gates is specified. To implement the control program in the form of gates proceeded as follows: Starting from a schedule of the Control program is the link in a circuit design the electronic gate is determined. The control program is divided into sections for which the design process was carried out individually. The result of the design process are several, in the present case eight circuit arrangements, one of the sequential controls AS1 up to AS8.
  • the circuit arrangements of the sequential controls AS1 to AS8 are integrated on module 66 Technology realized so that subsequent changes the gate links and thus the control program are excluded, which affects the security of the franking machine increased against unauthorized manipulation.
  • An essential one The technical feature is that the sequential controls AS1 to AS8 not on a central command memory, e.g. a ROM, access. Rather, they are necessary Commands that perform the control function on a A large number of gates that are permanently linked to one another. These gates are distributed over the integrated circuit, i.e. a change of commands requires an intervention in the areally distributed gates, which is practically impossible.
  • Another characteristic of the sequential controls AS1 to AS8 is the lack of a central control unit for processing of orders.
  • the sequence controls AS1 to AS8 are sequential circuits, which depend on a clock signal their switching states change in the way given by their association.
  • the sequence controls AS1 to AS4 form the higher-level Control of the controller 90 and thus the accounting unit 60.
  • the sequence controls AS5 to AS8 carry out the concrete calculation the data for the registers REG 0 to REG 3 as well as the control memory 68 and 70 through. Anytime only one of the sequential controls AS1 to AS8 is active.
  • each Sequence control AS2 to AS8 is triggered by a special start signal from a higher-level process control, e.g. the AS1, started and reports the completion of its task by special end signal back. Is a sequence control AS2 up to AS8 active, the higher-level process control waits on this end signal.
  • the sequence control AS1 is a higher-level control for the sequence controls AS2 to AS8. Depending on the through the microprocessor 30 given accounting task "accounting" or The sequence controls AS2 to AS8 are "recalculated” in one sequence specified by the sequence control AS1 activated.
  • the sequence controller AS2 controls the update of the four Register REG 0 to REG 3. To do this, it activates depending on the accounting task either the sequential controls AS3 or AS4 four times in a row.
  • the sequence control AS3 controls this Invoicing, where the postage data before printing be updated.
  • the sequence control AS4 controls Back calculation, in which the printing process is interrupted prematurely and the registers REG 0 to REG 3 return to their value be reset before the last settlement.
  • the sequence control AS3 or AS4 activates when accounting or recalculate the sequence control AS5 to a single one to calculate the register REG 0 to REG 3. Because the register REG 0 to REG 3 each contain eight bytes, activates the Sequence control AS5 the sequence control AS6, which calculate a byte can, exactly eight times in a row, so that each byte is calculated. The sequence control AS6 in turn is activated to calculate a byte the sequential control system AS7, the one Reads bytes from memory 68 or 70. After calculation The sequence control AS8 activated and written by the AS6 sequencer in the memory 68 or 70.
  • FIG. 6 shows a block diagram of the printer monitor 62.
  • the printer monitor 62 includes print release control 110, which is also in the form of firmly linked electronic Gate is specified, and a sequence control AS9 forms.
  • the sequence control AS9 monitors the printing process, by allowing printing only when the accounting unit 60 did the billing and over the bus 76 the release signal F to the pressure release controller 110 sends. Only possible after the release signal F has been applied the print release controller 110 transfers print data from control bus 34 to printer 32, by activating one Transfer unit 112 that contains a shift register that transfers the print data serially to printer 32.
  • the Print data are provided by the microprocessor 30 and transmitted to printer 32 via security module 36. During this transmission, the microprocessor ⁇ P intervenes Sequence control AS10 not controlling on.
  • the printer monitor 62 also contains a clock unit 114 for generating the print clock.
  • the activation of the The printing cycle is again carried out by the pressure release control 110 by transmitting the print clock to printer 32.
  • a Counter / comparator unit 116 counts the transmitted pixels of the printed image 10. Created when printing column A the counter / comparator unit 116 a blocking signal S, which over the bus 76 is transmitted to the accounting unit 60. The lock signal S prevents back calculation in the accounting unit 60.
  • the counter / comparator unit When column B is printed, the counter / comparator unit generates 116 a blocking signal that is for immediate Interrupting the printing process leads and the security module 36 so far that only one authorized Operator can remove the blockage.
  • Figure 7 shows a flow chart of the operation of the accounting unit 60.
  • the controller 90 is switched on the reset unit 78 is set to a defined start state.
  • the controller 90 waits until through the microprocessor 30 of the postage value 22 into the postage register 96 is written (step 132). Is the postage value 18 in the postage register 96, then in a step 134 the billing, in particular also the process control AS3 is activated.
  • Step 138 Billing cannot be done because of postage are already completely used up, this will be signals to the microprocessor 30 and the franking process started ended (step 138).
  • Step 140 could the billing in Method step 134 are carried out in one Step 140 generates the enable signal F, which is transmitted via the bus 76 to the print release controller 110 of the printer monitor 62 is transmitted.
  • Activation is carried out in a method step 142 the sequential control system AS4 enables back calculation postage data is possible.
  • step 144 the accounting carried out at the request of the microprocessor 30 undone (step 146).
  • step 146 the backward calculation takes place in a step 148, in which the sequence controller AS4 in particular is activated.
  • the back calculation generates a back calculation signal R, via a line of bus 76 for printer monitoring 32 is transmitted, the printing of the printed image 10 when active Backward signal R immediately interrupts.
  • the controller 90 the accounting unit 60 returns after generating the back calculation signal R back to its starting state (step 130).
  • the printer monitor 62 uses a blocking signal S, this also via a line of the bus 76 to the accounting unit 60 is transmitted, signals that the pressure of the Column A has already been carried out, the sequence control is activated AS1 no longer the sequential control system AS4. So can the controller 90 of the accounting unit 60 no longer calculates back carry out. The controller 90 then returns to its Start state back (step 130).
  • FIG 8 shows a flow diagram of the printing process of the printer monitor 62.
  • the print release controller 110 may Only carry out control operations when the release signal F was generated by the accounting unit 60 (step 162).
  • the printer monitoring 62 Process print data (step 164).
  • the print release control 110 is in a waiting state in which is waiting for print data which the microprocessor 30 transfers interface 64 transmits.
  • step 166 If print data is available, this is done in a step 166 transferred to the printer 42, which starts printing the printed image 10 begins. With every transferred byte a counter becomes Z increased.
  • the counter / comparator unit 116 checks in a step 168 as to whether the counter Z has a value indicating that printing of column A has already started. is if this is the case, the back calculation is carried out in the accounting unit blocked by the printer monitor 62 the blocking signal S generated (step 170).
  • the counter / comparison unit 116 checks also whether the value of the counter Z indicates whether already with the Column B printing has started (step 172). Is this the If so, the security module 36 in a step 174 blocked, the franking process being aborted.
  • step 176 check the Printer monitoring 62 as to whether backward calculation has already taken place is by evaluating the backward calculation signal R (step 176). If the accounting carried out has been recalculated, which has generated the release signal F, the printing is ended and the printer monitor 62 returns to its start state (Step 160) back.
  • Step 170 checks whether a print end signal has already been sent by the Microprocessor 30 was generated. If this is not the case, then the printer monitor 62 is placed in a state that corresponds to that of step 166. Was the print end signal generated, the printer monitor 62 is in its start state (Step 160).
  • Steps 130 shown in the two flowcharts to 178 are not realized by a microprocessor, who processes a command sequence stored in a memory, but by changing the state of an electronic circuit. To one or more of steps 130 through 178 to change or skip, a new circuit arrangement the accounting unit 60 and the printer monitor 62 can be realized. Since it is in the circuit arrangements integrated circuits, this is only possible with great effort.
  • the security of the security module 36 is also increased by that the release signal F, the lock signal S and that Backward signal R can be exchanged via the internal bus 76, that on the integrated module 66 also in integrated Technology is executed. External access is only possible if module 66 is destroyed.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Mathematical Physics (AREA)
  • Theoretical Computer Science (AREA)
  • Devices For Checking Fares Or Tickets At Control Points (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Claims (22)

  1. Machine d'affranchissement pour l'affranchissement de courrier,
    avec une imprimante pour imprimer un timbre de valeur (10) sur le courrier,
    avec une commande centrale (30) pour commander l'impression ainsi que des composants périphériques (42 à 46) de la machine d'affranchissement,
    avec une unité de comptabilisation (60) pour comptabiliser des taxes d'affranchissement et avec au moins une mémoire non volatile (68, 70) pour mémoriser des données de taxe d'affranchissement,
    l'unité de comptabilisation (60) accédant aux données de taxe d'affranchissement conformément à un programme de commande (AS1 à AS8) prédéterminé et
    l'unité de comptabilisation (60) étant réalisée sous la forme d'un circuit électronique numérique,
    caractérisée en ce que
    le programme de commande (AS1 à AS8) de l'unité de comptabilisation (60) est prédéterminé sous la forme de portes électroniques combinées les unes avec les autres de manière fixe, et
    en ce qu'une pluralité de portes, sur au moins un composant (66) personnalisé, sont réalisées sous forme de circuit intégré.
  2. Machine d'affranchissement selon la revendication 1, caractérisée par un module de contrôle d'imprimante (62), qui déclenche l'impression en fonction d'un signal de déclenchement (F), le signal de déclenchement (F) étant généré par l'unité de comptabilisation (60) une fois la comptabilisation terminée.
  3. Machine d'affranchissement selon la revendication 2, caractérisée en ce que le module de contrôle d'imprimante (62) transmet des données d'impression à l'imprimante (32) conformément à un programme de commande d'imprimante (AS9), qui est également prédéterminé sous la forme de portes électroniques combinées les unes avec les autres de manière fixe.
  4. Machine d'affranchissement selon une des revendications précédentes, caractérisée en ce qu'au moins une partie du module de contrôle d'imprimante (62) et de l'unité de comptabilisation (60) est réalisée sous la forme d'un circuit intégré (66) unique.
  5. Machine d'affranchissement selon une des revendications précédentes, caractérisée en ce que le circuit intégré (66) est logé dans un boítier (36) encapsulé, de préférence moulé.
  6. Machine d'affranchissement selon une des revendications précédentes, caractérisée en ce que des mesures sont prévues qui, en cas de retrait de la masse moulée, empêchent la transmission des données d'impression à l'imprimante (32).
  7. Machine d'affranchissement selon une des revendications précédentes, caractérisée en ce que les données de taxe d'affranchissement sont mémorisées dans un registre descendant et/ou ascendant,
    la valeur du registre descendant, en fonction de la valeur de chaque timbre de valeur à imprimer, étant minorée de cette valeur et
    la valeur du registre ascendant étant majorée de cette valeur.
  8. Machine d'affranchissement selon une des revendications 2 à 7, caractérisée en ce que le module de contrôle d'imprimante (62) active une unité de transmission (112) qui transmet à l'imprimante les données d'impression à transmettre.
  9. Machine d'affranchissement selon une des revendications 2 à 8, caractérisée en ce que le module de contrôle d'imprimante (62) active une unité de synchronisation (114) pour produire un signal de synchronisation d'impression.
  10. Machine d'affranchissement selon une des revendications 2 à 9, caractérisée en ce que le module de contrôle d'imprimante (62) active une unité de pilote (112) qui pilote l'imprimante (32) en fonction des données d'impression.
  11. Machine d'affranchissement selon une des revendications 2 à 10, caractérisée en ce que le module de contrôle d'imprimante (62) compte les données d'impression transmises à l'imprimante (32).
  12. Machine d'affranchissement selon la revendication 11, caractérisée en ce que le module de contrôle d'imprimante (62) après un nombre prédéterminé de données d'impression transmises génère un signal de blocage (S).
  13. Machine d'affranchissement selon la revendication 11 ou 12, caractérisée en ce que l'unité de comptabilisation (60) en fonction du signal de blocage (S) empêche une réintégration des taxes d'affranchissement.
  14. Machine d'affranchissement selon une des revendications 11 à 13, caractérisée en ce que le module de contrôle d'imprimante (62), après un nombre maximal prédéterminé de données d'impression transmises, génère un signal de blocage qui de préférence empêche la transmission de données d'impression supplémentaires à l'imprimante (32).
  15. Machine d'affranchissement pour l'affranchissement de courrier,
    avec une imprimante (32) pour imprimer un timbre de valeur (10) sur le courrier,
    avec une commande centrale (30) pour commander l'impression ainsi que des composants périphériques (42 à 46) de la machine d'affranchissement, avec une unité de comptabilisation (60) pour comptabiliser des taxes d'affranchissement et avec au moins une mémoire non volatile (68, 70) pour mémoriser des données de taxe d'affranchissement,
    avec un module de contrôle d'imprimante (62),
    l'unité de comptabilisation (60) accédant aux données de taxe d'affranchissement conformément à un programme de commande (AS1 à AS8) prédéterminé et signalant une comptabilisation exécutée au module de contrôle d'imprimante (62) par un signal de déclenchement (F) qui est transmis par l'intermédiaire d'au moins une ligne (76) assurant la liaison électrique entre l'unité de comptabilisation et le module de contrôle d'imprimante,
    et le module de contrôle d'imprimante (62) étant commandé par un programme de commande d'imprimante (AS9) qui déclenche l'impression seulement après obtention du signal de déclenchement (F),
    caractérisée en ce que
    des éléments de circuit électronique essentiels de l'unité de comptabilisation (60)
       et des éléments de circuit électronique essentiels du module de contrôle d'imprimante (62) sont placés dans un circuit intégré (66) unique personnalisé et en ce que la ligne (76) est conformée en ligne interne sur le circuit intégré (66).
  16. Machine d'affranchissement selon la revendication 4, caractérisée en ce qu'au moins un des programmes de commande (AS1 à AS10) est prédéterminé sous la forme de portes électroniques combinées les unes avec les autres de manière fixe.
  17. Machine d'affranchissement selon la revendication 15 ou 16, caractérisée en ce que le module de contrôle d'imprimante (62) active une unité de transmission (112) qui transmet les données à transmettre à l'imprimante (32).
  18. Machine d'affranchissement selon une des revendications 15 à 17, caractérisée en ce que le module de contrôle d'imprimante (62) active une unité de synchronisation (114) pour générer un signal de synchronisation d'impression.
  19. Machine d'affranchissement selon une des revendications 15 à 18, caractérisée en ce que le module de contrôle d'imprimante (62), après un nombre prédéterminé de données d'impression transmises, génère un signal de blocage (S).
  20. Machine d'affranchissement selon la revendication 19, caractérisée en ce que l'unité de comptabilisation (60) en fonction du signal de blocage (S) empêche une réintégration des taxes d'affranchissement.
  21. Machine d'affranchissement selon une des revendications 15 à 20, caractérisée en ce que le module de contrôle d'imprimante (62), après un nombre maximal prédéterminé de données d'impression transmises, génère un signal de blocage qui, de préférence, empêche la transmission de données d'impression supplémentaires à l'imprimante (32).
  22. Machine d'affranchissement selon une des revendications précédentes, caractérisée en ce que la machine d'affranchissement comprend un microprocesseur (µP) supplémentaire avec une mémoire de travail interne volatile et une mémoirc fixe (ROM) interne de préférence munie d'un verrou.
EP97100534A 1996-01-31 1997-01-15 Machine d'affranchissement Expired - Lifetime EP0789333B1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE19603467 1996-01-31
DE19603467 1996-01-31

Publications (3)

Publication Number Publication Date
EP0789333A2 EP0789333A2 (fr) 1997-08-13
EP0789333A3 EP0789333A3 (fr) 1998-12-30
EP0789333B1 true EP0789333B1 (fr) 2003-08-13

Family

ID=7784157

Family Applications (1)

Application Number Title Priority Date Filing Date
EP97100534A Expired - Lifetime EP0789333B1 (fr) 1996-01-31 1997-01-15 Machine d'affranchissement

Country Status (2)

Country Link
EP (1) EP0789333B1 (fr)
DE (1) DE59710554D1 (fr)

Families Citing this family (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE19757652B4 (de) 1997-12-15 2005-03-17 Francotyp-Postalia Ag & Co. Kg Frankiermaschine mit einer Chipkarten-Schreib-/Leseeinheit
DE19757648B4 (de) 1997-12-15 2005-03-10 Francotyp Postalia Ag Frankiermaschine mit einer Chipkarten-Schreib/Leseeinheit
DE19757649B4 (de) 1997-12-15 2005-10-20 Francotyp Postalia Ag Anordnung und Verfahren zum Datenaustausch zwischen einer Frankiermaschine und Chipkarten
DE19757653C2 (de) * 1997-12-15 2003-07-17 Francotyp Postalia Ag Verfahren und postalisches Gerät mit einer Chipkarten-Schreib/Leseeinheit zum Nachladen von Änderungsdaten per Chipkarte
DE19757651B4 (de) 1997-12-15 2005-06-23 Francotyp-Postalia Ag & Co. Kg Frankiermaschine mit einer Chipkarten-Schreib-/Leseeinheit
US6069616A (en) * 1997-12-30 2000-05-30 Rozum, Jr.; Andrew L. Postal security device with computer keyboard interface
DE29905219U1 (de) 1999-03-12 1999-06-17 Francotyp-Postalia AG & Co., 16547 Birkenwerder Sicherheitsmodul mit Statussignalisierung
DE19912781A1 (de) 1999-03-12 2000-11-23 Francotyp Postalia Gmbh Verfahren zum Schutz eines Sicherheitsmoduls und Anordnung zur Durchführung des Verfahrens
DE19928057B4 (de) 1999-06-15 2005-11-10 Francotyp-Postalia Ag & Co. Kg Sicherheitsmodul und Verfahren zur Sicherung der Postregister vor Manipulation
DE19912780A1 (de) 1999-03-12 2000-09-14 Francotyp Postalia Gmbh Anordnung für ein Sicherheitsmodul
EP1035518B1 (fr) 1999-03-12 2008-06-25 Francotyp-Postalia GmbH Ensemble de protection d'un module de sécurité
DE19913067A1 (de) 1999-03-17 2000-09-21 Francotyp Postalia Gmbh Verfahren zur automatischen Installation von Frankiereinrichtungen und Anordnung zur Durchführung des Verfahrens
DE19928061C2 (de) 1999-06-15 2003-08-28 Francotyp Postalia Ag Sicherheitsmodul zur Überwachung der Systemsicherheit und Verfahren
EP1067482B1 (fr) 1999-07-05 2012-11-14 Francotyp-Postalia GmbH Image imprimée
DE10003310A1 (de) 2000-01-27 2001-08-02 Francotyp Postalia Gmbh Frankiermaschine
DE10003309A1 (de) 2000-01-27 2001-08-02 Francotyp Postalia Gmbh Frankiermaschine mit Zugangssicherung
DE10260406B4 (de) * 2002-12-16 2007-03-08 Francotyp-Postalia Gmbh Verfahren und Anordnung zur unterschiedlichen Erzeugung kryptographischer Sicherungen von Mitteilungen in einem Hostgerät
DE102004027517B4 (de) 2004-06-03 2007-05-10 Francotyp-Postalia Gmbh Anordnung und Verfahren zur Ansteuerung eines Thermotransferdruckkopfes
DE102007016170A1 (de) 2007-04-02 2008-10-09 Francotyp-Postalia Gmbh Sicherheitsmodul für eine Frankiermaschine

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4675841A (en) 1974-12-23 1987-06-23 Pitney Bowes Inc. Micro computerized electronic postage meter system
US4301507A (en) 1979-10-30 1981-11-17 Pitney Bowes Inc. Electronic postage meter having plural computing systems
CA1206619A (fr) 1982-01-29 1986-06-24 Frank T. Check, Jr. Machine d'affranchissement electronique a memoire redondante
FR2611946B1 (fr) * 1987-02-27 1991-01-04 Smh Alcatel Machine a affranchir electronique comportant des valeurs limitant les affranchissements
FR2664407B1 (fr) * 1990-07-04 1992-09-11 Alcatel Satmam Machine a affranchir le courrier, comportant un circuit integre specifique constituant des interfaces.
GB2275914B (en) * 1993-03-12 1997-01-29 Gore & Ass Tamper respondent enclosure
US5397857A (en) * 1993-07-15 1995-03-14 Dual Systems PCMCIA standard memory card frame
US5552991A (en) * 1993-12-09 1996-09-03 Pitney Bowes Inc. Control system for an electronic pastage meter having a programmable application specific intergrated circuit
GB9401789D0 (en) * 1994-01-31 1994-03-23 Neopost Ltd Franking machine

Also Published As

Publication number Publication date
DE59710554D1 (de) 2003-09-18
EP0789333A3 (fr) 1998-12-30
EP0789333A2 (fr) 1997-08-13

Similar Documents

Publication Publication Date Title
EP0789333B1 (fr) Machine d'affranchissement
DE3688014T2 (de) Verfahren zur Steuerung von Frankiermaschinen.
EP0660269B1 (fr) Procédé pour améliorer la sécurité de machines à affrauchir
DE2916658C2 (fr)
DE3040570C2 (fr)
DE3040559C2 (fr)
DE19534528A1 (de) Verfahren zur Veränderung der in Speicherzellen geladenen Daten einer elektronischen Frankiermaschine
EP0762337A2 (fr) Procédé et dispositif pour augmenter la protection contre la manipulation de données critiques
DE69534122T2 (de) Frankiermaschine
DE3712181A1 (de) Frankiermaschinennachladesystem
DE69013544T2 (de) Einstellung einer entfernt aufgestellten Frankiermaschine für den Notfall.
DE19757649A1 (de) Anordnung und Verfahren zum Datenaustausch zwischen einer Frankiermaschine und Chipkarten
CH648424A5 (de) Frankiermaschine.
DE3884485T2 (de) Frankiermaschinensystem.
WO1989011134A1 (fr) Systeme electronique de calcul et d'enregistrement pour machines d'affranchissement
DE19928057B4 (de) Sicherheitsmodul und Verfahren zur Sicherung der Postregister vor Manipulation
DE69414891T2 (de) System zum Erfassen der Rotorbewegung
DE3426524C2 (de) Verfahren zur Steuerung der Abrechnungsvorgänge in einer elektronischen Frankiermaschine
EP0560714B1 (fr) Machine d'affranchissement
DE102004033598A1 (de) Verfahren zur Speicherung und Verwaltung von Daten und Anordnung zur Durchführung des Verfahrens
DE3040532C2 (de) Nachladbare elektronische Frankiermaschine
DE4217478A1 (de) Anordnung zur Erzeugung einer flexiblen Benutzeroberfläche für Frankiermaschinen
DE2954533C2 (fr)
DE69829600T2 (de) Frankiermaschine
DE19534529C2 (de) Verfahren zur Erhöhung der Manipulationssicherheit von kritischen Daten

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): CH DE FR GB IT LI

RBV Designated contracting states (corrected)

Designated state(s): CH DE FR GB IT LI

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): CH DE FR GB IT LI

17P Request for examination filed

Effective date: 19990108

17Q First examination report despatched

Effective date: 20001204

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: FRANCOTYP-POSTALIA AG & CO. KG

GRAH Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOS IGRA

GRAH Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOS IGRA

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Designated state(s): CH DE FR GB IT LI

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: RITSCHER & PARTNER AG PATENTANWAELTE

REF Corresponds to:

Ref document number: 59710554

Country of ref document: DE

Date of ref document: 20030918

Kind code of ref document: P

GBT Gb: translation of ep patent filed (gb section 77(6)(a)/1977)
ET Fr: translation filed
PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20040514

REG Reference to a national code

Ref country code: CH

Ref legal event code: PFA

Owner name: FRANCOTYP-POSTALIA AG & CO. KG

Free format text: FRANCOTYP-POSTALIA AG & CO. KG#TRIFTWEG 21-26#16547 BIRKENWERDER (DE) -TRANSFER TO- FRANCOTYP-POSTALIA AG & CO. KG#TRIFTWEG 21-26#16547 BIRKENWERDER (DE)

REG Reference to a national code

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: PATENTANWAELTE SCHAUMBURG, THOENES, THURN, LAN, DE

REG Reference to a national code

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG UND PARTNER PATENTANWAELTE MBB, DE

Effective date: 20150503

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG UND PARTNER PATENTANWAELTE MBB, DE

Effective date: 20150330

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG & PARTNER PATENTANWAELTE MBB, DE

Effective date: 20150330

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG & PARTNER PATENTANWAELTE MBB, DE

Effective date: 20150503

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG & PARTNER PATENTANWAELTE GBR, DE

Effective date: 20150503

Ref country code: DE

Ref legal event code: R082

Ref document number: 59710554

Country of ref document: DE

Representative=s name: SCHAUMBURG & PARTNER PATENTANWAELTE GBR, DE

Effective date: 20150330

Ref country code: DE

Ref legal event code: R081

Ref document number: 59710554

Country of ref document: DE

Owner name: FRANCOTYP-POSTALIA GMBH, DE

Free format text: FORMER OWNER: FRANCOTYP-POSTALIA GMBH, 16547 BIRKENWERDER, DE

Effective date: 20150330

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 20

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: IT

Payment date: 20160127

Year of fee payment: 20

Ref country code: DE

Payment date: 20160120

Year of fee payment: 20

Ref country code: CH

Payment date: 20160120

Year of fee payment: 20

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20160120

Year of fee payment: 20

Ref country code: FR

Payment date: 20160121

Year of fee payment: 20

REG Reference to a national code

Ref country code: CH

Ref legal event code: PCAR

Free format text: NEW ADDRESS: GARTENSTRASSE 28 A, 5400 BADEN (CH)

REG Reference to a national code

Ref country code: DE

Ref legal event code: R071

Ref document number: 59710554

Country of ref document: DE

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

REG Reference to a national code

Ref country code: GB

Ref legal event code: PE20

Expiry date: 20170114

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF EXPIRATION OF PROTECTION

Effective date: 20170114