EP0939384A2 - Postage printing system having secure reporting of printer errors - Google Patents
Postage printing system having secure reporting of printer errors Download PDFInfo
- Publication number
- EP0939384A2 EP0939384A2 EP99102826A EP99102826A EP0939384A2 EP 0939384 A2 EP0939384 A2 EP 0939384A2 EP 99102826 A EP99102826 A EP 99102826A EP 99102826 A EP99102826 A EP 99102826A EP 0939384 A2 EP0939384 A2 EP 0939384A2
- Authority
- EP
- European Patent Office
- Prior art keywords
- printer
- postage meter
- postage
- memory
- printing system
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Images
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
- G07B17/00193—Constructional details of apparatus in a franking system
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00016—Relations between apparatus, e.g. franking machine at customer or apparatus at post office, in a franking system
- G07B17/0008—Communication details outside or between apparatus
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
- G07B17/00314—Communication within apparatus, personal computer [PC] system, or server, e.g. between printhead and central unit in a franking machine
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00016—Relations between apparatus, e.g. franking machine at customer or apparatus at post office, in a franking system
- G07B17/0008—Communication details outside or between apparatus
- G07B2017/00153—Communication details outside or between apparatus for sending information
- G07B2017/00169—Communication details outside or between apparatus for sending information from a franking apparatus, e.g. for verifying accounting
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00016—Relations between apparatus, e.g. franking machine at customer or apparatus at post office, in a franking system
- G07B17/0008—Communication details outside or between apparatus
- G07B2017/00153—Communication details outside or between apparatus for sending information
- G07B2017/00177—Communication details outside or between apparatus for sending information from a portable device, e.g. a card or a PCMCIA
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
- G07B17/00193—Constructional details of apparatus in a franking system
- G07B2017/00201—Open franking system, i.e. the printer is not dedicated to franking only, e.g. PC (Personal Computer)
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
- G07B17/00314—Communication within apparatus, personal computer [PC] system, or server, e.g. between printhead and central unit in a franking machine
- G07B2017/00322—Communication between components/modules/parts, e.g. printer, printhead, keyboard, conveyor or central unit
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
- G07B17/00314—Communication within apparatus, personal computer [PC] system, or server, e.g. between printhead and central unit in a franking machine
- G07B2017/00338—Error detection or handling
Definitions
- This invention relates to value dispensing systems, such as postage printing systems.
- the invention is applicable to a postage printing system comprising a mailing machine base, a secure accounting meter detachably mounted to the base and a printer also detachably mounted to the base wherein the meter and the printer are manufactured to be interchangeable while still providing for secure mutual authentication.
- a value printing system is a postage printing system including an electronic postage meter and a printer for printing a postal indicia on an envelope or other mailpiece.
- Electronic postage meters for dispensing postage and accounting for the amount of postage used are well known in the art.
- the postage printing system supplies proof of the postage dispensed by printing a postal indicia which indicates the value of the postage on an envelope or the like.
- the typical postage meter stores accounting information concerning its usage in a variety of registers.
- An ascending register tracks the total amount of postage dispensed by the meter over its lifetime. That is, the ascending register 15 incremented by the amount of postage dispensed after each transaction.
- a descending register tracks the amount of postage available for use.
- the descending register is decremented by the amount of postage dispensed after each transaction.
- the postage meter inhibits further printing of indicia until the descending register is resupplied with funds.
- the accounting module and the printer portion of a postage printing system have been located within a single secure housing.
- Examples of this type of postage printing systems are PostPerfect® and model 6900 Postage Meter available from Pitney Bowes, Inc. of Stamford, Connecticut, USA.
- the communications between the accounting module and the printer may be either secure or nonsecure.
- the accounting module and the printer are contained within the same secure housing, they are dedicated to each other and are not interchangeable with other postage meters.
- Recent efforts have been undertaken to a provide postage printing system including a detachable postage meter (accounting module) and a printer which are physically separated from each other. This configuration provides some benefits to the customer.
- the printer since the printer is not incorporated into the postage meter, the printer may be purchased by the customer (some postal authorities require that postage meters be rented only). As another example, customers may use interchangeable postage meters with the same printer to provide increased operational flexibility and advantages. Since this type of postage printing system does not locate the postage meter and the printer within the same secure housing, the communication lines between the postage meter and the printer are generally nonsecure. Using nonsecure communication lines between the postage meter and the printer creates a risk of loss of postal funds through fraud. For example, when data necessary to print a valid postal indicia is transferred over the nonsecure communication lines from the postage meter to the printer, it is susceptible to interception, capture and analysis.
- the data may be retransmitted at a later time back to the printer in an attempt to fool the printer into believing that it is communicating with a valid postage meter. If successful, the result would be a fraudulent postage indicia printed on a mailpiece without the postage meter accounting for the value of the postage indicia.
- postage meters are regulated by a controlling postal authority, they are subject to periodic inspection. During a physical inspection, the postage meter may be scrutinized for physical evidence of tampering, such as: broken security seals, scratches on the accounting printed circuit board, etc. Additionally, a remote inspection of the postage meter may be performed by having the postage meter store fault information for subsequent uploading to a data center.
- a postage printing system including a postage meter and a printer in communication with but physically separate from the printer that allows for the interchangeability of postage meters with printers and detects fraudulent attempts to print postage with the printer.
- the postage printing system includes a printer and a postage meter.
- the printer includes a memory, a print device for printing a postal indicia and a controller in operative communication with the printer memory and the print device.
- the postage meter includes a memory and is physically separable from and in operative communication with the printer.
- the printer controller detects a fault condition, stores a record of the fault condition in a history file within the printer memory and, following a successful mutual authentication between the printer and the postage meter, uploads the history file from the printer memory to the postage meter memory for subsequent reporting to a data center.
- a method of reporting error conditions in a postage printing system including a printer and a postage meter, the printer including a memory, a print means for printing a postal indicia and a control means in operative communication with the printer memory and the print means, the postage meter physically separable from and in operative communication with the printer.
- the postage evidencing system 100 includes a mailing machine base 110, a postage meter 120 and a printer 160.
- the mailing machine base 110 includes a variety of different modules (not shown) where each module performs a different task on a mailpiece (not shown), such as: singulating (separating the mailpieces one at a time from a stack of mailpieces), weighing, moistening/sealing (wetting and closing the glued flap of an envelope) and transporting the mailpiece through the various modules.
- singulating separating the mailpieces one at a time from a stack of mailpieces
- weighing moistening/sealing
- moistening/sealing wetting and closing the glued flap of an envelope
- the postage meter 120 (smart card, housing containing a circuit board, or the like) is detachably mounted to the mailing machine base 110 by any conventional structure (not shown) and includes a microprocessor 130 having a memory 132, a clock 122 and a vault or accounting unit 140 having a non-volatile memory (NVM) 142.
- the clock 122 is in communication with the microprocessor 130 for providing real time clock data.
- the vault 140 holds various accounting and postal information (not shown), such as: an ascending register, a descending register, a control sum register and a postal identification serial number in the NVM 142.
- the vault 140 is also in communication with the microprocessor 130 for receiving appropriate read and write commands from the microprocessor 130.
- the microprocessor 130 is in operative communication with the mailing machine base 110 over suitable communication lines (not shown). Additionally, the microprocessor 130 of the postage meter 120 is in operative communication with a remote data center 50 over suitable communication lines, such as a telephone line 70. The data center 50 communicates with the postage meter 120 for the purposes of remote inspection, downloading of postal funds to the vault 140 and other purposes described in more detail below.
- the printer 160 is also detachably mounted to the mailing machine base 110 by any conventional structure (not shown) and includes a controller 162 having a memory 164, a print mechanism 166 and a clock 168.
- the controller 162 is in operative communication with the microprocessor 130 of the postage meter 120 and the print mechanism 166 over suitable communication lines.
- the memory 164 has stored therein an identification serial number that is unique to the printer 160.
- the clock 168 is in communication with the controller 162 for providing real time clock data.
- the print mechanism 166 prints a postal indicia (not shown) on a mailpiece (not shown) in response to instructions from the postage meter 120 which accounts for the value of the postage dispensed in conventional fashion.
- the print mechanism 166 may be of any suitable design, such as: rotary drum, flat impression die, thermal transfer, ink jet, electrophotographic or the like.
- the postage meter 120 and the printer 160 are provided with secret cryptographic keys which are necessary for mutual authentication to ensure that: (i) the postage meter 120 will only transmit postal indicia print information to a valid printer 160; and (ii) the printer 160 will only execute postal indicia print information received from a valid postage meter 120.
- a mutual authentication routine involves the encryption and decryption of secret messages transmitted between the postage meter 120 and the printer 160. An example of such a routine can be found in aforementioned European Patent Publication No.
- the postage meter 120 is enabled to transmit postal indicia print information and the printer 160 is enabled to print a valid postal indicia.
- the postal indicia print information may also be encrypted or subject to error checking so as to discourage fraudulent attempts to manipulate the information, such as: printing a higher value postal indicia than was authorized by the postage meter 120.
- FIG. 2 in view of the structure of Fig. 1, an inspection routine 200 for identifying faults in the printer 160 of the postage printing system 100 of the present invention is shown.
- the controller 162 monitors the activity of the printer 160 and detects when a fault occurs in the printer 160.
- a fault may be any unanticipated or undesireable event, such as: the printer 160 being unable to authentic a postage meter 120 during a communication session (due to a fraudulent postage meter) or differences between the print information sent by the postage meter 120 and what was received by the printer 160.
- a suitable technique is described in concurrently filed copending European Patent Application No.
- the controller 162 stores a record in memory 164 indicative of the fault.
- the record contains: (i) a date/time stamp obtained from the clock 168 indicating when the fault occurred; (ii) an indication of the type of fault encountered; and (iii) the identification serial number of the printer 160.
- the associated records accumulate in a file so that a historical log of faults is kept by the printer 160.
- the records are stored in encrypted form or in protected memory to prevent tampering.
- the historical file is uploaded from the printer 160 to the postage meter 120 and stored in the NVM 142 at the occurrence of a predetermined event such as: system initialization after successful mutual authentication, or a given time of the day or week. In this manner, the historical file is only uploaded to a valid postage meter 120.
- the NVM 142 is structured to accumulate multiple historical files from a plurality of different printers.
- the historical file in the printer 160 is erased. This may be achieved either by the postage meter 120 issuing an appropriate command or by the printer controller 162 itself.
- the postage meter 120 uploads the historical file to the data center 50 at the occurrence of a predetermined event, such as: downloading of postal funds or remote inspections.
- a predetermined event such as: downloading of postal funds or remote inspections.
- appropriate action if necessary, can be taken, such as: reporting the historical file to the postal authority, sending a representative to perform a physical inspection at the customer's location, mailing a warning to the customer's location, or communicating to the population of postage meters that the identification serial number of the printer is no longer a valid printer so that any subsequent attempts at mutual authentication with the offending printer fail.
- the history file may be reported to more than one postage meter 120.
- the records stored within the printer 160 need not contain the indentification serial number of the printer 160 because the postage meter 120 knowns the indentification serial number of the printer 160 through the mutual authentication process.
- the postage meter 120 could attached the printer indentification serial number to the historical file when received.
- postage meter processor 130 and the printer controller 162 can be of any conventional design incorporating appropriate electronic hardware components and software.
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Devices For Checking Fares Or Tickets At Control Points (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
Description
- This application is related to concurrently filed copending European Patent Application No. xx/xxx,xxx entitled POSTAGE PRINTING SYSTEM INCLUDING PREVENTION OF TAMPERING WITH PRINT DATA SENT FROM A POSTAGE METER TO A PRINTER (client reference E-709)
- This invention relates to value dispensing systems, such as postage printing systems. The invention is applicable to a postage printing system comprising a mailing machine base, a secure accounting meter detachably mounted to the base and a printer also detachably mounted to the base wherein the meter and the printer are manufactured to be interchangeable while still providing for secure mutual authentication.
- One example of a value printing system is a postage printing system including an electronic postage meter and a printer for printing a postal indicia on an envelope or other mailpiece. Electronic postage meters for dispensing postage and accounting for the amount of postage used are well known in the art. The postage printing system supplies proof of the postage dispensed by printing a postal indicia which indicates the value of the postage on an envelope or the like. The typical postage meter stores accounting information concerning its usage in a variety of registers. An ascending register tracks the total amount of postage dispensed by the meter over its lifetime. That is, the ascending register 15 incremented by the amount of postage dispensed after each transaction. A descending register tracks the amount of postage available for use. Thus, the descending register is decremented by the amount of postage dispensed after each transaction. When the descending register has been decremented to some value insufficient for dispensing postage, then the postage meter inhibits further printing of indicia until the descending register is resupplied with funds.
- Traditionally, the accounting module and the printer portion of a postage printing system have been located within a single secure housing. Examples of this type of postage printing systems are PostPerfect® and model 6900 Postage Meter available from Pitney Bowes, Inc. of Stamford, Connecticut, USA. In this environment, the communications between the accounting module and the printer may be either secure or nonsecure. However, because the accounting module and the printer are contained within the same secure housing, they are dedicated to each other and are not interchangeable with other postage meters.
Recent efforts have been undertaken to a provide postage printing system including a detachable postage meter (accounting module) and a printer which are physically separated from each other. This configuration provides some benefits to the customer. For example, since the printer is not incorporated into the postage meter, the printer may be purchased by the customer (some postal authorities require that postage meters be rented only). As another example, customers may use interchangeable postage meters with the same printer to provide increased operational flexibility and advantages.
Since this type of postage printing system does not locate the postage meter and the printer within the same secure housing, the communication lines between the postage meter and the printer are generally nonsecure. Using nonsecure communication lines between the postage meter and the printer creates a risk of loss of postal funds through fraud. For example, when data necessary to print a valid postal indicia is transferred over the nonsecure communication lines from the postage meter to the printer, it is susceptible to interception, capture and analysis. If this occurs, then the data may be retransmitted at a later time back to the printer in an attempt to fool the printer into believing that it is communicating with a valid postage meter. If successful, the result would be a fraudulent postage indicia printed on a mailpiece without the postage meter accounting for the value of the postage indicia. - Generally, it is known to employ secret cryptographic keys in postage evidencing systems to prevent such fraudulent practices. This is accomplished by having the postage meter and the printer authenticate each other prior to any printing taking place. One such system is described in US Patent No. 5,799,290, entitled METHOD AND APPARATUS FOR SECURELY AUTHORIZING PERFORMANCE OF A FUNCTION IN A DISTRIBUTED SYSTEM SUCH AS A POSTAGE METER. Another such system is described in European Patent Publication No. 0,881,600, published on December 2, 1998, and entitled SYNCHRONIZATION OF CRYPTOGRAPHIC KEYS BETWEEN TWO MODULES OF A DISTRIBUTED SYSTEM.
- Another measure utilized to defeat fraud is inspection of the postage meter. Since postage meters are regulated by a controlling postal authority, they are subject to periodic inspection. During a physical inspection, the postage meter may be scrutinized for physical evidence of tampering, such as: broken security seals, scratches on the accounting printed circuit board, etc. Additionally, a remote inspection of the postage meter may be performed by having the postage meter store fault information for subsequent uploading to a data center.
- Although these inspection techniques work well, a problem exists when the postage meter and the printer are decoupled, as described above, in that the printer is not subject to inspection by the postal authority. Therefore, any fraudulent attempts to print postage with the printer would go undetected. For example, an unscrupulous user could attempt to build a counterfeit device to defeat the security features of the printer and supply the printer with print data signals in an attempt to print fraudulent postal indicias. Since such attempts would go unrecognized by the postal authority, the unscrupulous user would have the advantage of unlimited time to pursue this fraudulent activity.
- Therefore, there is a need for a postage printing system including a postage meter and a printer in communication with but physically separate from the printer that allows for the interchangeability of postage meters with printers and detects fraudulent attempts to print postage with the printer.
- Accordingly, it is an object of the present invention to provide a postage printing system with improved security and interchangeability which substantially overcomes the problems associated with the prior art.
In accomplishing this and other objects there is provided a postage printing system having an error reporting system. The postage printing system includes a printer and a postage meter. The printer includes a memory, a print device for printing a postal indicia and a controller in operative communication with the printer memory and the print device. The postage meter includes a memory and is physically separable from and in operative communication with the printer. The printer controller detects a fault condition, stores a record of the fault condition in a history file within the printer memory and, following a successful mutual authentication between the printer and the postage meter, uploads the history file from the printer memory to the postage meter memory for subsequent reporting to a data center. - In accomplishing this and other objects there is provided a method of reporting error conditions in a postage printing system, the postage printing system including a printer and a postage meter, the printer including a memory, a print means for printing a postal indicia and a control means in operative communication with the printer memory and the print means, the postage meter physically separable from and in operative communication with the printer.
- Therefore, it should now be apparent that the invention substantially achieves all the above objects and advantages. Additional objects and advantages of the invention will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. Moreover, the objects and advantages of the invention may be realized and obtained by means of the instrumentalities and combinations particularly pointed out in the appended claims.
- The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate presently preferred embodiments of the invention, and together with the general description given above and the detailed description of the preferred embodiments given below, serve to explain the principles of the invention. As shown through out the drawings, like reference numerals designate like or corresponding parts. In the drawings:
- Fig. 1 is a schematic representation of a postage printing system including a postage meter and a printer in accordance with an embodiment of the present invention; and
- Fig. 2 is a flow chart summarizing the major features of an inspection routine for identifying faults in the printer of the postage printing system according to an embodiment of the present invention.
-
- Referring to Fig. 1, a
postage printing system 100 in accordance with an embodiment of the present invention is shown. Thepostage evidencing system 100 includes amailing machine base 110, apostage meter 120 and aprinter 160. - The
mailing machine base 110 includes a variety of different modules (not shown) where each module performs a different task on a mailpiece (not shown), such as: singulating (separating the mailpieces one at a time from a stack of mailpieces), weighing, moistening/sealing (wetting and closing the glued flap of an envelope) and transporting the mailpiece through the various modules. However, the exact configuration of each mailing machine is particular to the needs of the user. Since a detailed description of themailing machine base 110 is not necessary for an understanding of the present invention, its description will be limited for the sake of clarity. - The postage meter 120 (smart card, housing containing a circuit board, or the like) is detachably mounted to the
mailing machine base 110 by any conventional structure (not shown) and includes amicroprocessor 130 having amemory 132, aclock 122 and a vault oraccounting unit 140 having a non-volatile memory (NVM) 142. Theclock 122 is in communication with themicroprocessor 130 for providing real time clock data. Thevault 140 holds various accounting and postal information (not shown), such as: an ascending register, a descending register, a control sum register and a postal identification serial number in theNVM 142. Thevault 140 is also in communication with themicroprocessor 130 for receiving appropriate read and write commands from themicroprocessor 130. Themicroprocessor 130 is in operative communication with themailing machine base 110 over suitable communication lines (not shown). Additionally, themicroprocessor 130 of thepostage meter 120 is in operative communication with aremote data center 50 over suitable communication lines, such as atelephone line 70. Thedata center 50 communicates with thepostage meter 120 for the purposes of remote inspection, downloading of postal funds to thevault 140 and other purposes described in more detail below. - The
printer 160 is also detachably mounted to themailing machine base 110 by any conventional structure (not shown) and includes acontroller 162 having amemory 164, aprint mechanism 166 and aclock 168. Thecontroller 162 is in operative communication with themicroprocessor 130 of thepostage meter 120 and theprint mechanism 166 over suitable communication lines. Thememory 164 has stored therein an identification serial number that is unique to theprinter 160. Theclock 168 is in communication with thecontroller 162 for providing real time clock data. Theprint mechanism 166 prints a postal indicia (not shown) on a mailpiece (not shown) in response to instructions from thepostage meter 120 which accounts for the value of the postage dispensed in conventional fashion. Theprint mechanism 166 may be of any suitable design, such as: rotary drum, flat impression die, thermal transfer, ink jet, electrophotographic or the like. - To provide for security of postal funds and to prevent fraud, the
postage meter 120 and theprinter 160 are provided with secret cryptographic keys which are necessary for mutual authentication to ensure that: (i) thepostage meter 120 will only transmit postal indicia print information to avalid printer 160; and (ii) theprinter 160 will only execute postal indicia print information received from avalid postage meter 120. Generally, a mutual authentication routine involves the encryption and decryption of secret messages transmitted between thepostage meter 120 and theprinter 160. An example of such a routine can be found in aforementioned European Patent Publication No. 0881600, published on December 2, 1998, and entitled SYNCHRONIZATION OF CRYPTOGRAPHIC KEYS BETWEEN TWO MODULES OF A DISTRIBUTED SYSTEM. However, since the exact routine for mutual authentication is not necessary for an understanding of the present invention, no further description is necessary. Once mutual authentication is successful, thepostage meter 120 is enabled to transmit postal indicia print information and theprinter 160 is enabled to print a valid postal indicia. As an additional measure, the postal indicia print information may also be encrypted or subject to error checking so as to discourage fraudulent attempts to manipulate the information, such as: printing a higher value postal indicia than was authorized by thepostage meter 120. - With the structure of the
postage printing system 100 described as above, the operational characteristics will now be described. Referring to Fig. 2 in view of the structure of Fig. 1, aninspection routine 200 for identifying faults in theprinter 160 of thepostage printing system 100 of the present invention is shown. At 202, thecontroller 162 monitors the activity of theprinter 160 and detects when a fault occurs in theprinter 160. A fault may be any unanticipated or undesireable event, such as: theprinter 160 being unable to authentic apostage meter 120 during a communication session (due to a fraudulent postage meter) or differences between the print information sent by thepostage meter 120 and what was received by theprinter 160. A suitable technique is described in concurrently filed copending European Patent Application No. xx/xxx,xxx entitled POSTAGE PRINTING SYSTEM INCLUDING PREVENTION OF TAMPERING WITH PRINT DATA SENT FROM A POSTAGE METER TO A PRINTER. (client reference E-709) Next, at 204, thecontroller 162 stores a record inmemory 164 indicative of the fault. Preferably, the record contains: (i) a date/time stamp obtained from theclock 168 indicating when the fault occurred; (ii) an indication of the type of fault encountered; and (iii) the identification serial number of theprinter 160. As faults occur, the associated records accumulate in a file so that a historical log of faults is kept by theprinter 160. Preferably, the records are stored in encrypted form or in protected memory to prevent tampering. Next, at 206, the historical file is uploaded from theprinter 160 to thepostage meter 120 and stored in theNVM 142 at the occurrence of a predetermined event such as: system initialization after successful mutual authentication, or a given time of the day or week. In this manner, the historical file is only uploaded to avalid postage meter 120. In the preferred embodiment, theNVM 142 is structured to accumulate multiple historical files from a plurality of different printers. Next, at 208, the historical file in theprinter 160 is erased. This may be achieved either by thepostage meter 120 issuing an appropriate command or by theprinter controller 162 itself. Next, at 210, thepostage meter 120 uploads the historical file to thedata center 50 at the occurrence of a predetermined event, such as: downloading of postal funds or remote inspections. Once thedata center 50 interrogates the historical file, appropriate action, if necessary, can be taken, such as: reporting the historical file to the postal authority, sending a representative to perform a physical inspection at the customer's location, mailing a warning to the customer's location, or communicating to the population of postage meters that the identification serial number of the printer is no longer a valid printer so that any subsequent attempts at mutual authentication with the offending printer fail. - Those skilled in the art will recognize that various modifications can be made without departing from the spirit of the present invention. For example, as an alternative, clearing the historical file in the
printer 160 could be delayed until after thepostage meter 120 has uploaded the historical log. Therefore, thepostage meter 120 will wait until the next successful mutual authentication with theprinter 160 before authorizing theprinter 160 to clear its historical file. In this manner, it is assured that the historical file is reported to thedata center 50 before being cleared. However, it is important that thepostage meter 120 only authorize clearing of that portion of the historical file that has been uploaded to thedata center 50. Thus, if additional records have been created, such as by use with anotherpostage meter 120, then these records are not cleared. Those skilled in the art will recognize that in this embodiment, it is possible that the history file may be reported to more than onepostage meter 120. As another example, the records stored within theprinter 160 need not contain the indentification serial number of theprinter 160 because thepostage meter 120 knowns the indentification serial number of theprinter 160 through the mutual authentication process. Thus, thepostage meter 120 could attached the printer indentification serial number to the historical file when received. - As yet another example, those skilled in the art will recognize that the
postage meter processor 130 and theprinter controller 162 can be of any conventional design incorporating appropriate electronic hardware components and software. - Many features of the preferred embodiment represent design choices selected to best exploit the inventive concept as implemented in a postage printing system having a postage meter, base and a printer. However, those skilled in the art will recognize that the concepts of the present invention can be applied to other postage printing system configurations that do not include a base, such as where the postage meter is a stand alone unit in operative communication with a printer. That is, the present invention is applicable to any postage printing system where the postage metering portion is remotely located from the printing portion. In this context, remote may mean adjacent, but not co-located within the same secure structure, or physically spaced apart.
- Therefore, the inventive concept in its broader aspects is not limited to the specific details of the preferred embodiment but is defined by the appended claims and their equivalents.
Claims (10)
- A postage printing system, comprising:a printer (160) including a memory (164), a print means (166) for printing a postal indicia anda control means (162) in operative communication with the printer memory and the print means; anda postage meter (120) physically separable from and in operative communication with the printer (160), the postage meter including a memory (132; 142); and the printer control means (162) for:detecting a fault condition;storing a record of the fault condition in a history file within the printer memory (164); andfollowing a successful mutual authentication between the printer (160) and the postage meter (120), uploading the history file from the printer memory to the postage meter memory.
- The postage printing system of claim 1, further comprising:a data center (50) in operative communication with the postage meter (120); and wherein:after establishing secure communications between the data center (50) and the postage meter (120), the postage meter being operable to upload the history file from the postage meter memory (132, 142) to the data center (50).
- The postage printing system of claim 1 or 2, wherein:the fault condition is a failed mutual authentication between the postage meter and the printer.
- The postage printing system of claim 3, wherein:following successful uploading of the history file from the postage meter memory to the data center, the postage meter authorizes clearing of the history file after a subsequent successful mutual authentication between the postage meter (120) and the printer (160).
- The postage printing system of claim 4, wherein:only a portion of the history file located within the printer (160) corresponding to the history filed that was previously uploaded to the data center (50) is cleared.
- A method of reporting fault conditions in a postage printing system, the postage printing system (100) including a printer (160) and a postage meter (120), the printer including a memory (164), a print means (166) for printing a postal indicia and a control means (162) in operative communication with the printer memory (164) and the print means (166), the postage meter (120) physically separable from and in operative communication with the printer (160), the postage meter including a memory (132, 142), the method comprising the step(s) of:detecting a fault condition;storing a record of the fault condition in a history file within the printer memory (164); andfollowing a successful mutual authentication between the printer (160) and the postage meter (120), uploading the history file from the printer memory to the postage meter memory.
- The method of claim 6, wherein:the postage printing system includes a data center (50) in operative communication with the postage meter (120); and further comprising the step of:after establishing secure communications between the data center (50) and the postage meter, uploading the history file from the postage meter (120) memory to the data center (50).
- The method of claim 6 or 7, wherein:the fault condition is a failed mutual authentication between the postage meter (120) and the printer (160).
- The method of claim 8, further comprising the step of:following successful uploading of the history file from the postage meter memory to the data center (50), authorizing clearing of the history file after a subsequent successful mutual authentication between the postage meter (120) and the printer (160).
- The method of claim 9, further comprising the step of:clearing only a portion of the history file that was previously uploaded to the postage meter (120) from the printer (160).
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US3239198A | 1998-02-27 | 1998-02-27 | |
US32391 | 1998-02-27 |
Publications (2)
Publication Number | Publication Date |
---|---|
EP0939384A2 true EP0939384A2 (en) | 1999-09-01 |
EP0939384A3 EP0939384A3 (en) | 2000-10-11 |
Family
ID=21864725
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP99102826A Withdrawn EP0939384A3 (en) | 1998-02-27 | 1999-02-26 | Postage printing system having secure reporting of printer errors |
Country Status (5)
Country | Link |
---|---|
EP (1) | EP0939384A3 (en) |
JP (1) | JPH11328463A (en) |
CN (1) | CN1236146A (en) |
AU (1) | AU750360B2 (en) |
CA (1) | CA2263246A1 (en) |
Families Citing this family (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7424458B2 (en) * | 2003-11-21 | 2008-09-09 | Pitney Bowes Inc. | Method and system for generating characterizing information descriptive of printed material such as address blocks and generating postal indicia or the like incorporating such characterizing information |
DE102004046051A1 (en) * | 2004-09-21 | 2006-03-30 | Deutsche Post Ag | Method and device for franking mailpieces |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP0516403A2 (en) * | 1991-05-29 | 1992-12-02 | Neopost Limited | Method of remote diagnostics for franking machines |
EP0780804A2 (en) * | 1995-12-19 | 1997-06-25 | Pitney Bowes Inc. | Token generation process in an open metering system |
EP0825564A2 (en) * | 1996-08-23 | 1998-02-25 | Pitney Bowes Inc. | Process and apparatus for remote system inspection of a value dispensing mechanism such as a postage meter |
-
1999
- 1999-02-26 CA CA 2263246 patent/CA2263246A1/en not_active Abandoned
- 1999-02-26 AU AU18480/99A patent/AU750360B2/en not_active Ceased
- 1999-02-26 EP EP99102826A patent/EP0939384A3/en not_active Withdrawn
- 1999-03-01 JP JP9796499A patent/JPH11328463A/en active Pending
- 1999-03-01 CN CN 99103629 patent/CN1236146A/en active Pending
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP0516403A2 (en) * | 1991-05-29 | 1992-12-02 | Neopost Limited | Method of remote diagnostics for franking machines |
EP0780804A2 (en) * | 1995-12-19 | 1997-06-25 | Pitney Bowes Inc. | Token generation process in an open metering system |
EP0825564A2 (en) * | 1996-08-23 | 1998-02-25 | Pitney Bowes Inc. | Process and apparatus for remote system inspection of a value dispensing mechanism such as a postage meter |
Also Published As
Publication number | Publication date |
---|---|
JPH11328463A (en) | 1999-11-30 |
EP0939384A3 (en) | 2000-10-11 |
AU750360B2 (en) | 2002-07-18 |
CN1236146A (en) | 1999-11-24 |
AU1848099A (en) | 1999-09-09 |
CA2263246A1 (en) | 1999-08-27 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP0927963B1 (en) | Closed system virtual postage meter | |
US7962423B2 (en) | Method and system for dispensing virtual stamps | |
CA1259704A (en) | System for detecting unaccounted for printing in a value printing system | |
EP0825561B1 (en) | Electronic postage meter system having internal accounting system and removable external accounting system | |
CA1258916A (en) | System for detecting unaccounted for printing in a value printing system | |
US5293319A (en) | Postage meter system | |
AU762710B2 (en) | Postage printing system including prevention of tampering with print data sent from a postage meter to a printer | |
EP0825565A2 (en) | Electronic postage meter system separable printer and accounting arrangement incorporating partition of indicia and accounting information | |
US5778066A (en) | Method and apparatus for authentication of postage accounting reports | |
AU2002330240A1 (en) | Method and system for dispensing virtual stamps | |
EP1022692A2 (en) | System and method for linking an indicium with a mailpiece in a closed system postage meter | |
US6188997B1 (en) | Postage metering system having currency synchronization | |
US6178412B1 (en) | Postage metering system having separable modules with multiple currency capability and synchronization | |
US6820065B1 (en) | System and method for management of postage meter licenses | |
US6427139B1 (en) | Method for requesting and refunding postage utilizing an indicium printed on a mailpiece | |
EP1064621B1 (en) | System and method for management of postage meter licenses | |
US7319989B2 (en) | Method and system for protection against replay of an indicium message in a closed system meter | |
AU750360B2 (en) | Postage printing system having secure reporting of printer errors |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
AK | Designated contracting states |
Kind code of ref document: A2 Designated state(s): DE FR GB IT SE |
|
AX | Request for extension of the european patent |
Free format text: AL;LT;LV;MK;RO;SI |
|
PUAL | Search report despatched |
Free format text: ORIGINAL CODE: 0009013 |
|
AK | Designated contracting states |
Kind code of ref document: A3 Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE |
|
AX | Request for extension of the european patent |
Free format text: AL;LT;LV;MK;RO;SI |
|
17P | Request for examination filed |
Effective date: 20010405 |
|
AKX | Designation fees paid |
Free format text: DE FR GB IT SE |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION HAS BEEN WITHDRAWN |
|
18W | Application withdrawn |
Effective date: 20030205 |