EP0952560A2 - Procédé de rechargement du solde postal d'une machine à affranchir électronique - Google Patents

Procédé de rechargement du solde postal d'une machine à affranchir électronique Download PDF

Info

Publication number
EP0952560A2
EP0952560A2 EP99250081A EP99250081A EP0952560A2 EP 0952560 A2 EP0952560 A2 EP 0952560A2 EP 99250081 A EP99250081 A EP 99250081A EP 99250081 A EP99250081 A EP 99250081A EP 0952560 A2 EP0952560 A2 EP 0952560A2
Authority
EP
European Patent Office
Prior art keywords
franking
memory
data
personal computer
credit
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP99250081A
Other languages
German (de)
English (en)
Other versions
EP0952560A3 (fr
Inventor
Enno Bischoff
Daniel Denes
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Francotyp Postalia GmbH
Original Assignee
Francotyp Postalia GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Francotyp Postalia GmbH filed Critical Francotyp Postalia GmbH
Publication of EP0952560A2 publication Critical patent/EP0952560A2/fr
Publication of EP0952560A3 publication Critical patent/EP0952560A3/fr
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00016—Relations between apparatus, e.g. franking machine at customer or apparatus at post office, in a franking system
    • G07B17/0008—Communication details outside or between apparatus
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00016—Relations between apparatus, e.g. franking machine at customer or apparatus at post office, in a franking system
    • G07B17/0008—Communication details outside or between apparatus
    • G07B2017/00145—Communication details outside or between apparatus via the Internet
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00016—Relations between apparatus, e.g. franking machine at customer or apparatus at post office, in a franking system
    • G07B17/0008—Communication details outside or between apparatus
    • G07B2017/00153—Communication details outside or between apparatus for sending information
    • G07B2017/00161—Communication details outside or between apparatus for sending information from a central, non-user location, e.g. for updating rates or software, or for refilling funds
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G07B2017/00201—Open franking system, i.e. the printer is not dedicated to franking only, e.g. PC (Personal Computer)
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00733—Cryptography or similar special procedures in a franking system
    • G07B2017/00935—Passwords

Definitions

  • the invention relates to a method for reloading a postage credit into an electronic franking device, in particular into a credit memory of a data processing device of the electronic franking device, which comprises means for reconciling a credit balance with a billing unit in a remote data center in the data network.
  • the method is suitable for users of electronic franking devices who have a personal computer available locally, and can be used as an alternative to the known specification methods.
  • remote data processing of data, information and services takes place in a central supercomputer (remote computing) which can communicate with a large number of remote user devices. Every network participant can access the data offered in a few seconds and exchange messages with other participants. It is disadvantageous that the data exchange carried out via the Internet is not adequately protected in relation to the transmission of security data, for example as in the case of a money transfer. Protection from counterfeiters and manipulators is not guaranteed by the network provider, which means that everyone must ensure their own security.
  • Existing protective measures which are used in the processing of money transactions, such as keeping a bank account or cashless online shopping, guarantee security in theory, but in practice they do not always have their full effect everywhere. This is evidenced by communications about the way pirates work and their track record.
  • a franking machine provided with credit generates a stamp which contains at least the postage value, the fee for the transport.
  • the postage value is usually the transport fee prepaid by the sender and user of the franking machine, which is taken from a refillable credit memory of the franking machine and used to clear the mail item.
  • a new one can be stored in the credit memory of the franking machine Amount of money can be loaded into the franking machine using known methods.
  • remote value specification methods have also long been known, in which credit is to be loaded into the franking machine by data exchange between a franking machine and a data center, which is usually operated by the franking machine manufacturer.
  • measures are provided by which the user of the franking machine is reliably prevented from loading reloading amounts unnoticed from the data center into the franking machine. It is disadvantageous that this remote charging method is not available 24 hours a day and that high charges are incurred for connections that have been established. In addition, the number of available telephone lines is limited to a fixed number.
  • a semi-automatic remote operator value setting method has long been known, see US 3792446, in which the user of the franking machine can enter into a dialogue with his data center from his office telephone, in order to top up the franking machine with new franking credit. Via this connection, the user of the franking machine receives input instructions in the form of code numbers from an employee of the data center, which, after input into the franking machine, release a certain postage reload amount.
  • US 3792446 it is described that the data center transmits a key number to the user of the postage meter machine after an authorization dialog, which the user enters into the same in order to initiate a reloading process with a predetermined reloading amount and to unlock the franking machine.
  • Another option for loading credit into the fee memory of a franking machine is an automatic, modem-based remote value specification method.
  • the remote value is set by automatically exchanging the setting code via modem communication.
  • DE 4422263 A1 describes that in a few steps between the franking machine and the data center, code numbers are exchanged which correspond to a desired credit request and code numbers which automatically increase the credit in the credit memory by the requested amount.
  • the coordination of the data stock between the electronic franking machine and the data center takes place automatically via a modem connection. Security against manipulation is ensured by keeping the keys used secret. In this way, the keys used to determine the code numbers are changed after each transaction.
  • the use of the method is on the one hand very customer-oriented but on the other hand very material-intensive, since when using digital private branch exchanges and telephone systems in ISDN operation, the franking machine can only be connected to a separate TAE telephone or fax connection.
  • the number of available modem lines in the data center of the franking machine manufacturer is also technically limited.
  • the remote value specification procedure involves two transaction steps.
  • a value change mode is set on the franking machine in order to receive a new default value from the data center and to store it in the default memory of the franking machine.
  • code is exchanged between the user of the franking device and the data center and the code returned by the data center is entered into the franking machine.
  • the default value is stored in the respective default memory of the franking device and the data center.
  • code is also exchanged with the data center and encrypted settings are provided by the data center for the franking machine, which have the effect that the default value stored in the default memory is added to the value still present in the credit memory.
  • Speech recognition methods do not work correctly in relation to the speech recognition rate, this leads to a time-consuming dialogue and possibly to increased connection fees.
  • Another disadvantage is the limitation of the number of available lines.
  • the shortcomings for the known remote value specification methods are that there is no 24-hour availability, the number of available lines is limited, high fees are incurred and the functionality is limited
  • a PC-based franking system is proposed, for example, in US 5510992.
  • the default procedure provided for this is a rechargeable portable postage storage device (button) which can be coupled to a data processing system (PC installed in the office) in order to receive and deliver credit.
  • the postage storage device can be reloaded at the post office with a desired postage amount, as described or purchased in US 5606507.
  • the combination of PC, postage storage device and a printer coupled to the PC enables access to a part of the stored credit by reading from the memory of the postage storage device and prints the desired amount as postage or postage-like characters with the help of a word processing program on an envelope, letter or label.
  • a corresponding program communicates with the user of the PC-based franking system via a screen display and the keyboard.
  • a desired postage amount can also be used for the PC via a Modem connection can be purchased and used as known from US Patent 5,319,562.
  • additional measures for example a secure module, are required in order to protect the data management and data billing in relation to monetary data against manipulation.
  • the PC transmits the postage amount to be applied to a letter to the PC printer which is not in a secure area.
  • Password hierarchies are established in a known manner, which ensure the authorized use of the franking machine.
  • a large amount of information from the stamp imprint is encrypted in order to detect misuse and counterfeit postage stamps.
  • the disadvantage of using a postage memory that can be removed from the PC franking device is that it must be recharged at the post office counter or that a new memory must be purchased there.
  • the connection of the PC franking device to a data processing system by means of a modem for reloading the charge memory essentially comprises the disadvantages mentioned for the above-mentioned remote value specification methods. These consist of the fact that the functionality is limited and the number of available telephone lines is limited. From European patent 475776 it is known that a portable device is used to recharge a franking machine, which can be connected to the franking machine for communication and to a remote data center for communication. The transportable device is connected to the franking device in order to receive parameters from it. A message is formed from this data in the portable device.
  • the device is then separated from the franking machine and transported to a telephone station and connected to it.
  • the message formed is transmitted via the telephone line from the device to the data center, which in response sends a recharge code to the portable device.
  • this device is again connected to the franking machine and the recharge code is transmitted, as a result of which the franking machine is recharged.
  • the method can only be carried out with a high expenditure of time, since it is provided to physically separate the connection from the transportable device to the franking machine before a connection of this device to the data center is established via a telephone station.
  • the communication link between the portable device and the Data center are physically separated after data reception before the device is connected to the franking machine again.
  • the use of the portable device is also not very user-friendly because it always has to be transported to the franking machine or to a telephone station. If a single transportable device is also used for a number of franking machines, there are unnecessary waiting times or downtimes during which the franking machine is not ready for operation.
  • the aim of the invention is to find a service-oriented, customer-friendly and cost-effective method for replenishing amounts of money in franking machines or PC frankers, which enables fast, flexible and 24/7 remote value transmission.
  • the application of the method is to be carried out in a network environment between an existing teleportodata center and local facilities, which are already available in a modern office with mail transport tasks.
  • the invention is based on the object of specifying an alternative method for reloading amounts of money into a franking device, in which a user of a franking device securely and easily requests a fee value transmission from a teleporto data center to the franking devices assigned to it via a data network and the reloading of the franking device in a convenient manner enables.
  • An alternative remote value specification method is proposed with which the database of a credit memory of a franking device is coordinated between the franking device and a remote teleportodata center and, after successful coordination, the franking device is loaded with new credit.
  • the franking device manufacturer provides a service for remotely reloading the franking device via the Internet.
  • An electronic franking machine or a PC franking device with a secured device that protects at least one credit memory and a billing unit against manipulation is used as the franking device for clearing mail pieces to be conveyed.
  • the use of the Franking device should be tied to the fact that it is replenished with sufficient credit and that the credit was acquired by a teleporto data center of the product manufacturer as part of a prepayment system before the franking was carried out.
  • the transactions required for this which relate to the coordination of the credit balance between the franking device and the teleportodata center, are carried out by modifying the voice method proposed by the applicant, as described in DE 4422263.
  • the modification relates to the implementation of the remote value specification in the globally available data network Internet.
  • the Internet does not support the security against manipulation of the credit necessary for the communication between the franking device and the teleporto data center, but it also does not restrict any protective mechanisms developed for franking devices, teleporto data centers and for the data transmission links.
  • the known security measures on the side of the franking device and the teleportodata center can advantageously be used for the transmission of security-relevant data in the data network.
  • the main advantage of downloading a franking device with credit using the online medium Internet is that with appropriate network access, the teleportodata center with its services can be reached from anywhere in the world, communication with the teleportodata center is relatively short, the dialogue is less time-consuming and an availability of 24 hours a day is guaranteed.
  • the fixed connection of the franking device to a commercially available personal computer also offers the advantage that the credit transfer is monitored by the personal computer by controlling the credit request and the reloading process as a switching station between the franking device and the teleportodata center by means of a special control program. For example, it can be provided in the program sequence that the credit request is temporarily stored in the personal computer and is only automatically transmitted to the teleportodata center at a point in time with a lower network load, for example at night.
  • FIGS. 2a + 2b show a schematic representation of a remote value specification method with a change in the specification value.
  • FIG. 1 shows a block diagram of a with a local personal computer 20 which is physically connected to a franking device 10. Both devices form a workstation 1 on the user side.
  • An interface device comprises a line connection 8, which connects the serial interface 9 of the franking device 10 to the serial interface 25 of the personal computer 20.
  • the personal computer 20 of the workstation 1 is equipped with a modem 23, via which a network connection via the Internet to a remote workstation 2 is to be established.
  • the workstation 2 comprises a server station 30 and a data center, which are connected to one another via lines.
  • the data center is hereinafter referred to as teleportodata center 40.
  • the franking device 10 comprises a data processing device 11 with a CPU 12, which has a credit memory 13, a default value memory 14 and a cryptographic device 18, which includes a key memory 19.
  • the CPU 12 is connected to the credit memory 13, the default value memory 14, the cryptographic device 18 and the serial interface 9.
  • the data processing device 11 is connected via the CPU 12 to an input device 15, a display device 16 and a printing device 17.
  • the franking device is connected to the serial interface 25 of the personal computer 20 via the serial interface 9.
  • the personal computer 20 comprises a data processing device 24, a display device 21 connected to it and an input device 22.
  • the personal computer is equipped with a modem, with which one automatically Connection to the Internet can be established.
  • the personal computer (20) communicates with the server station 30 via a modem connection.
  • the server station 30 comprises a server 31 set up on the Internet with at least one modem 32 connected.
  • a number of modem devices make it possible to reach the teleportodata center from several workstations 1.
  • the server 31 is connected to a data processing device 41 of the teleportodata center 40.
  • the data processing device 41 with a CPU 42 comprises a default value memory 43, an accounting memory 44 and a cryptographic device 45, which includes a key memory 46.
  • the default value memory 43, the accounting memory 44 and the cryptographic device 45 are connected to the CPU 42.
  • the teleporto data center 40 is connected to the server 31 of the server station 30 via an interface (not shown).
  • the connections between the franking device 10 and the personal computer 20, the personal computer 20 and the server station 30, the server station 30 and the teleportodata center 40 are designed for unidirectional data exchange.
  • the workstations 1 and 2 communicate in the Internet data network in order to coordinate the data stock in the franking device 10 with that of the teleporto data center 40.
  • the invention is also applicable to a PC franking device if the personal computer is equipped with a secure module.
  • the module should also include the data processing device 11 used in a conventional manner for a franking device 10 in order to keep and process security-relevant data in a protected manner.
  • a PCI card installed in the computer is advantageous.
  • the fact that an external printer has to be connected to the PC franking device in order to carry out franking does not restrict the use of the method.
  • the only difference from the preferred application of the invention is that the data exchange within the workstation 1 can be implemented via internal line and interface connections.
  • the workstation 1 is only a franking device 10 with an internal or external modem, via which a connection to the Internet can be established.
  • this franking device data exchange via the Internet is possible Teleportodata center 40, possible according to the inventive method.
  • the display device and the input device of the franking device are advantageously adapted to the special conditions on the Internet. For example, user guidance transmitted via the Internet should be able to be displayed by means of the display device and the requirements to be formed for the reloading of the franking device should be editable by the input device.
  • FIGS. 2a and 2b The sequence of the method according to the invention for reloading a postage credit into an electronic franking device 10 will now be explained with reference to FIGS. 2a and 2b.
  • the procedural steps which are carried out in the franking device 10, in the personal computer 20, in the server station 30 and in the teleportodata center 40 are grouped in columns from left to right in the figures.
  • the method shown in FIG. 2a for changing the default value and for reloading the postage credit begins by establishing the connection between the franking device 10 and the personal computer 20 via the serial interfaces 9 and 25 (S1).
  • a function key on the franking device 10 is actuated in order to set the remote value specification function.
  • the franking device 10 is set from the franking mode to the remote value setting mode (S2).
  • the personal computer 20 is to be set up for a remote value specification. This can be done before the franking device 10 is set up or immediately thereafter.
  • the user of the workstation 1 selects the Internet address of the franking device manufacturer (S3) and receives the home page transmitted by the server station 30.
  • the display device 21 which is a monitor, for example, a hyper-text-like user interface is presented, with the support of which the user of the workstation 1 can make a selection of services.
  • the menu item "Teleporto remote value specification" must be selected (S4).
  • a display is displayed on the display device 21, which supports the processes for remote value specification by means of context-sensitive assistance to avoid.
  • a postage call number, an identification number which characterizes the franking device 10 is then entered into the input device 15 of the franking device 10 and the entry is entered with a Key Tl provided for this purpose is confirmed on the input device 10.
  • the franking device verifies the identification number and, on successful verification, displays the preset value stored in the preset value memory 14 on the display device 16. If this value is to be changed, the old value is overwritten with a new default request and the desired default value change is confirmed by a confirmation button T2.
  • a first setting code is formed in the cryptographic device 18 from the postage call number, the confirmed default request and further information, for example the residual value of credit queried from billing registers, according to a key K1 that is stored in the key memory 19 of the franking device 10 (S5).
  • a suitable user program controls the data transfer between the franking device 10 and the personal computer 20 in such a way that the first setting code is automatically transmitted to the personal computer 20 together with the unencrypted data which were used to form the first setting code.
  • the personal computer 20 compiles the received data for a first request by taking the data into the provided mask fields and displaying them by the display device 21. Further information can be entered via the input device 22. Corrections in the editing mode are also possible using the input device 22 (S6). After the data check and any necessary data processing has been completed, the first transaction that contains the default value change is started. For this purpose, a key of the input device 22 has to be actuated or a button of the displayed user interface on the display device 21 has to be activated by a mouse click (S7). Another embodiment of the invention provides that the start of the remote value specification is carried out automatically after the data required for this have been acquired. The advantage here is that user input can be omitted.
  • the first request is transmitted from the personal computer 20 to the server 31 of the server station 30 set up on the Internet via the Internet. From the server 31, the data of the first request are forwarded to the teleporto data center 40 via a correspondingly secured connection (S8).
  • the setting code is calculated using the transmitted unencrypted identification number, the default value and the additional information, for example the remaining credit value, and compared with the first setting code. Verification of the first Setting code takes place in the teleportodata center 40 with the key K1 stored in the key memory 46. If the verification is negative, the process is terminated and repeated if necessary. If the request to change the default value of the franking device 10 can be verified in the teleporto data center 40, the method is continued.
  • the check of the first setting code is shown in step (S9).
  • the default value is stored in the default value memory 43 of the teleportodata center 40.
  • the data processing device 41 in the teleporto data center 40 then calculates from the identification number, the additional information and the first key.
  • a newly calculated key K2 can be integrated into the calculation of the second setting code, from which the franking device 10 later extracts the second setting code.
  • the key K2 is to be stored in the key memory 46 in the teleporto data center 40. Since this key is accessed in the event of a subsequent request, a secure transmission of the data from the teleportodata center 40 to the workstation 1 is supported.
  • the teleporto data center 40 transmits the second setting code via a secure connection line to the server 31 (S10), which as a switching station forwards this to the personal computer 20 via the Internet to the workstation 1.
  • the personal computer 20 transmits the received second setting code directly to the franking device 10. This can be done automatically by a suitable program.
  • the second setting code is verified by the cryptographic device 18 by means of the key K1 stored in the key memory 19. If the verification is successful, the second setting code causes the requested default value to be stored in the default value memory 14 of the franking device 10. The old default value is overwritten and is therefore deleted (S11). In the event that the verification is negative, the process is terminated and must be initiated again.
  • the second setting code transmitted by the teleportodata center 40 contains a second key K2
  • this is extracted by means of the cryptographic device 18 and stored in the key memory 19 instead of the old key.
  • the first transaction is completed when the default value is changed.
  • the user of the workstation 1 can optionally decide to end the method by resetting the franking device 10 into the franking mode by pressing a function key, or to continue the method by storing the one stored in the default value memory 14 Default value confirmed.
  • the user receives a request via the display device 21 of the personal computer 20 to terminate the connection to the Internet.
  • Fi. 2 b shows the sequence of how the reloading process is initiated as a second transaction step immediately following a change in the default value.
  • the procedural steps to be carried out in this transaction essentially correspond to the sequence described above.
  • the reloading process is initiated with the default value stored in the default value memory 14.
  • a third setting code is formed from the identification number of the franking device 10, the default value and additional information, which for example represents the residual value in the credit memory, by means of the key stored in the key memory 19. This step is shown as S13 in FIG. 2b.
  • the franking device 10 automatically transmits this third setting code, together with the unencrypted data that was used to form the third setting code, to the personal computer 20 (S14).
  • the personal computer 20 compiles the received data into a second request. After the compilation has been made and any necessary additions have been made, the second request is started by actuating a start button on the input device 22 or by activating a button (S15). The second request is transmitted to the server 31 of the remote workstation via the Internet. The request is forwarded from the server 31 to the data processing device 41 of the teleportodata center 40 (S16). The third setting code is verified in the teleporto data center 40. For this purpose, a calculation is carried out using the data transmitted without encryption, based on the key stored in the key memory 46, and the result is compared with the transmitted setting code. If the test result is negative, the procedure is terminated.
  • the teleporto data center 40 calculates a fourth setting code, which optionally consists of the identification number, the default value and one Additional information is formed by means of the key in the key memory 46 (S17).
  • this key K1 may have been changed into a key K2 by the first transaction.
  • a recalculated key K3, from which the franking device 10 must extract the fourth setting code can preferably also be integrated into the calculation of a fourth setting code. This key then replaces the key K2 and is stored in its place in the key memory 46.
  • the teleportodata center 40 transmits the fourth setting code to the server 31 (S18).
  • the server uses the online medium Internet, the server sends the encrypted setting code to the personal computer 20 and forwards the received information to the franking device 10, preferably automatically (S19).
  • the fourth setting code is verified by the cryptographic device 18 by means of the key K1 stored in the key memory 19 (S20).
  • the key K1 may have been changed by the first transaction into a key K2, which in this case is a valid key in the key memory 19. If the teleporto data center transmits a new key K3 with the fourth setting code, this setting code and the key K3 must be extracted.
  • the new key K3 replaces the key used in the key store 19 for the second transaction. It is advantageous if 40 old and new keys are stored in the data center. If the fourth setting code is successfully verified, the default value stored in the default memory 14 is added to that in the credit memory 13 of the franking device.
  • a broken line in FIG. 2b shows how the remote value can be specified without changing the specified value.
  • the preparation of the workstation 1 for a credit reload includes steps 1 to 4. With these method steps, the franking device 10 is connected to the personal computer 20, in parallel a connection is established via the personal computer 20 to the server 30 via the Internet.
  • the "teleport remote value specification" function is selected by means of the user interface transmitted by the server 30. With this selection, the workstation 1 is prepared for a remote reloading of the franking device 10. With the following input it is decided that a remote value specification should be carried out without changing the default value.
  • the method indicated by FIG. 2 is also to be used if the franking device 10 is preset with a fixed default value and a change in the default value is not possible.
  • the entered postage request number is confirmed with the key T1 of the input device 22 and the default value stored in the default memory 14 is displayed by means of the display device 16.
  • the continuation of the method is initiated by pressing the key T2 of the input device 22 with the displayed default value.
  • the remote value specification method then runs as described above from step 13 to step 20 and is ended in that the franking device 10 is reset to readiness for franking and the connection to the Internet is cleared in the personal computer 20.
  • the reloading process can be repeated as often as required with the stored default value.
  • a remote value setting completed with the change in the default value can also be requested at a later time, credit in the amount of the default value.
  • the invention is not restricted to this embodiment.
  • further data can be exchanged between a franking device 10 and a teleporto data center 40 in order to check the correctness of the accounting of franking operations in the franking device and the teleporto data center.
  • a key used for cryptography can be formed from already encrypted data and setting code to increase the security of the data transmission.
  • the new key is transmitted to the work station 1 together with the setting code thus determined, as described.
  • a credit reload or change of default value can be carried out in the franking device 10 with the corresponding setting code and then store the key for subsequent transactions in the key memory 19. It is not necessary to extract this key from a code number.
  • a separate transmission of the keys and the setting code represents an alternative security mechanism. The same applies to the transmission of requests from the personal computer to the Internet server. Encrypted and unencrypted data can be separated from one another and transmitted in two steps. In this case, the teleporto data center 40 must summarize the separately transmitted data before verification. If a setting code transmitted by the franking device 10 is checked by the teleportodata center 20 and the result is negative, the check is repeated again with the key used in the franking device 10 in the immediately preceding transaction.
  • a further embodiment provides that all keys used for the coordination of data stocks between a number of workstations 1 and a teleportodata center 40 are managed in a database of the teleportodata center 40.
  • a secret key must be agreed for the respective cryptographic devices 18 and 45.
  • the personal computer can comprise its own cryptographic device with a key store in order to transmit code numbers with a request that uniquely identify the personal computer 20 as a component of the workstation 1.
  • the invention also provides for data to be entered by means of the input device of the personal computer 20, which data are initially transmitted to the franking device 10 in a first step. With this data, the franking device 10 forms a setting code for the change in the default value or topping up the credit. This setting code is further processed as described in the invention. A further binding of the personal computer 20 to the franking device 10 is thus realized. Credit on It is considerably more difficult to load teleporto data center 40 into franking device 10. Furthermore, it is proposed to temporarily store the requirements and setting code in the personal computer 40 and only to forward them automatically to the franking device 10 or to the teleporto data center 40 after a preset time. The advantage is that the transactions described are carried out in periods in which no postage is paid.
  • the combination of devices according to the invention which has access to the Internet, has a number of advantages over traditional remote value specification methods for franking devices.
  • the franking device does not require its own modem for this combination of devices.
  • Coupling the franking device with a personal computer with Internet access allows the user of a franking device to use the services offered by the franking device manufacturer under graphic user interfaces which are completely context-sensitive and can be operated by the mouse.
  • Security mechanisms have been implemented for the known remote value specification methods in order to largely rule out manipulation of data and devices to be exchanged.
  • DES encryption can also be used to protect an Internet connection against "eavesdropping".
  • the workstation is a PC franking device
  • data exchange for changing the value of the default value and transferring the default value to the credit memory are simplified.
  • An external interface device is not required
  • Such franking operations can be controlled automatically by a single program.
  • a major advantage is that credit for a franking device can be requested from anywhere in the world via the Internet from a single data center.
  • the remote value specification can be carried out around the clock , conveniently and with the standard devices available in a modern office.
EP99250081A 1998-04-21 1999-03-17 Procédé de rechargement du solde postal d'une machine à affranchir électronique Withdrawn EP0952560A3 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE19818708 1998-04-21
DE1998118708 DE19818708A1 (de) 1998-04-21 1998-04-21 Verfahren zum Nachladen eines Portoguthabens in eine elektronische Frankiereinrichtung

Publications (2)

Publication Number Publication Date
EP0952560A2 true EP0952560A2 (fr) 1999-10-27
EP0952560A3 EP0952560A3 (fr) 2001-03-07

Family

ID=7865894

Family Applications (1)

Application Number Title Priority Date Filing Date
EP99250081A Withdrawn EP0952560A3 (fr) 1998-04-21 1999-03-17 Procédé de rechargement du solde postal d'une machine à affranchir électronique

Country Status (2)

Country Link
EP (1) EP0952560A3 (fr)
DE (1) DE19818708A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2360120A (en) * 2000-03-01 2001-09-12 Alan Haslehurst Apparatus for printing postage indicia
WO2011073527A1 (fr) 2009-12-18 2011-06-23 Itella Oyj Système, procédé et service permettant d'ajouter des fonds à un service prépayé

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE19958941B4 (de) 1999-11-26 2006-11-09 Francotyp-Postalia Gmbh Verfahren zum Schutz eines Gerätes vor einem Betreiben mit unzulässigem Verbrauchsmaterial
DE10019085A1 (de) 2000-04-10 2001-12-06 Francotyp Postalia Gmbh Anordnung und Verfahren zum Bereitstellen einer Mitteilung beim Laden von Dienstleistungsdaten für ein Endgerät
DE10114533A1 (de) * 2001-03-21 2002-10-02 Francotyp Postalia Ag Frankiermaschine mit einer Datenübertragungseinrichtung
DE102004014427A1 (de) 2004-03-19 2005-10-27 Francotyp-Postalia Ag & Co. Kg Verfahren für ein servergesteuertes Sicherheitsmanagement von erbringbaren Dienstleistungen und Anordnung zur Bereitstellung von Daten nach einem Sicherheitsmanagement für ein Frankiersystem

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3792446A (en) 1972-12-04 1974-02-12 Pitney Bowes Inc Remote postage meter resetting method
DE2820658A1 (de) 1978-05-11 1979-11-15 Pitney Bowes Vorrichtung und verfahren zur portoausstattung einer mikrocomputergekoppelten frankiermaschine
DE4422263A1 (de) 1994-06-24 1996-01-04 Francotyp Postalia Gmbh Verfahren zum Abstimmen des Datenbestandes zwischen einer elektronischen Frankiermaschine und einem Datenzentrum
US5510992A (en) 1994-01-03 1996-04-23 Post N Mail, L.C. System and method for automatically printing postage on mail
US5606507A (en) 1994-01-03 1997-02-25 E-Stamp Corporation System and method for storing, retrieving and automatically printing postage on mail
US5625839A (en) 1991-07-31 1997-04-29 Ascom Autelca Ag System for testing if destination address transmitted with data packet is a valid address before storage of data into memory of electronic postage meter

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE4446667C2 (de) * 1994-12-15 1998-09-17 Francotyp Postalia Gmbh Verfahren zur Verbesserung der Sicherheit von Frankiermaschinen bei der Guthabenübertragung
AU727477B2 (en) * 1996-10-02 2000-12-14 Stamps.Com Inc. System and method for retrieving postage credit over a network

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3792446A (en) 1972-12-04 1974-02-12 Pitney Bowes Inc Remote postage meter resetting method
DE2820658A1 (de) 1978-05-11 1979-11-15 Pitney Bowes Vorrichtung und verfahren zur portoausstattung einer mikrocomputergekoppelten frankiermaschine
US5625839A (en) 1991-07-31 1997-04-29 Ascom Autelca Ag System for testing if destination address transmitted with data packet is a valid address before storage of data into memory of electronic postage meter
US5510992A (en) 1994-01-03 1996-04-23 Post N Mail, L.C. System and method for automatically printing postage on mail
US5606507A (en) 1994-01-03 1997-02-25 E-Stamp Corporation System and method for storing, retrieving and automatically printing postage on mail
DE4422263A1 (de) 1994-06-24 1996-01-04 Francotyp Postalia Gmbh Verfahren zum Abstimmen des Datenbestandes zwischen einer elektronischen Frankiermaschine und einem Datenzentrum

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2360120A (en) * 2000-03-01 2001-09-12 Alan Haslehurst Apparatus for printing postage indicia
WO2011073527A1 (fr) 2009-12-18 2011-06-23 Itella Oyj Système, procédé et service permettant d'ajouter des fonds à un service prépayé

Also Published As

Publication number Publication date
DE19818708A1 (de) 1999-11-04
EP0952560A3 (fr) 2001-03-07

Similar Documents

Publication Publication Date Title
DE19652294C2 (de) Elektronisches Übertragungssystem und Verfahren
EP1240632B1 (fr) Procede et systeme de transaction de paiement
DE69631706T2 (de) System zum Ermöglichen des Bestellens und Bezahlens von Dienstleistungen mittels eines Kommunikationsnetzwerkes
DE69636457T2 (de) Gesichertes kommunikationssystem mit vernetzten geheimcodes
DE69533486T2 (de) Verfahren und telekommnikationssystem für benutzergebührenabrechnung
DE19731304B4 (de) Verfahren zur Statistikmodusnachladung und zur statistischen Erfassung nach Statistikklassen bei der Speicherung eines Datensatzes
DE29624480U1 (de) System zum Ermöglichen des Bestellens und Bezahlens von Dienstleistungen mittels eines Kommunikationsnetzwerkes
EP1281588A2 (fr) Procédé de transmission d'un code de verrouillage ou d'ouverture et unités associées
DE10213072A1 (de) Verfahren zum Betrieb eines einem Mobilfunknetz zugeordneten Abrechnungssystems zur Abrechnung einer kostenpflichtigen Benutzung von Daten und Datenübertragungsnetz
EP0952560A2 (fr) Procédé de rechargement du solde postal d'une machine à affranchir électronique
DE19940448A1 (de) Verfahren und Vorrichtung zur Ausgabe virtueller Wertmarken
EP1577840A2 (fr) Procédé de gestion à l'aide d'un serveur pour le contrôle de la sécurité des services et dispositif pour fournir des données en fonction de la gestion de la sécurité dans un système d'affranchissement
EP0855069B1 (fr) Procédé de paiement sans espèces pour les services pouvant être commandés à travers un réseau réparti de transmission de données
EP0969420A2 (fr) Procédé pour sécuriser la transmission de données de service à un terminal et dispositif pour la mise en oeuvre de ce procédé
DE19641776C2 (de) Computerprogrammgesteuertes Verfahren zum gesicherten Aufbau einer Wähl-Leitungsverbindung und zur gesicherten Datenübertragung zwischen einem Chipkarten-Terminal und einer zentralen Datenverarbeitungsanlage
DE69636612T2 (de) Zahlungsverfahren in einer Datenübertragungsanordnung und Anordnung zu dessen Implementierung
DE10136603A1 (de) Verfahren und System zur telekommunikationsgestützten Entrichtung und Abrechnung von Gebühren
EP1486088B1 (fr) Procede de mise en oeuvre et de facturation de fonctions wim dans des terminaux de communication mobiles
DE3619566C2 (fr)
WO2003012701A2 (fr) Procede de paiement d'un service propose par l'intermediaire d'un reseau de donnees
EP1388138B1 (fr) Procede et dispositif de paiement de donnees pouvant etre appelees par l'intermediaire d'un reseau de donnees
WO2001081875A2 (fr) Procede de paiement securise de livraisons et de services dans des reseaux ouverts
DE10213073B4 (de) Verfahren zum Abrechnen einer kostenpflichtigen Benutzung von Daten und Datenübertragungsnetz
EP1371038B1 (fr) Procede et dispositif permettant d'effectuer au moins une transaction a titre onereux
EP1378843A1 (fr) Méthode et système de traitement de données pour la communication sécurisée entre l' administration et le public

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): CH DE FR GB IT LI

AX Request for extension of the european patent

Free format text: AL;LT;LV;MK;RO;SI

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE

AX Request for extension of the european patent

Free format text: AL;LT;LV;MK;RO;SI

17P Request for examination filed

Effective date: 20010714

AKX Designation fees paid

Free format text: CH DE FR GB IT LI

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: FRANCOTYP-POSTALIA AG & CO. KG

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20041001