EP1037172B1 - Method for the automatic installation of franking machines and apparatus for carrying out said method - Google Patents

Description

The invention relates to a method for the automatic installation of franking devices, according to the preamble of claim 1, and an arrangement according to the preamble of claim 13. The method is suitable for users of all types of mail processing systems, billing or security modules, postage meters or PC Franking facilities suitable. The solution aims at the rapid availability of a franking device for a customer, from the purchase of the device.

Before a postage meter can be used as intended, usually some country, carrier and customer-specific data must be stored in the franking machine at the dealer. For franking machines of type T1000, a special EPROM is inserted by the dealer or service technician for such an installation (see US 5,734,571 and EP 762 335 A2 Method for changing the data loaded in memory cells of an electronic postage meter machine). A common approach is to deposit an identification number at the same time in a data center in order to later identify the calling meter. Collecting customer data is also known from other devices.

The inclusion of a remote data center is also common. From the US 5,233,657 is already a loading of data before commissioning a postage meter known. For changing of advertising clichés is already in the US 4,831,554 proposed a telephone communication. in the US 4,933,849 Already a date-dependent change of stamp images (with city stamp and with value stamp) is communicated, which were loaded at an earlier time by modem. From the US 5,161,109 is already a loading of databases known. A standard database is used to store data, wherein a record is transmitted periodically from the franking machine to the central office. Then the data record is updated there in the central office and then sent back to the franking machine (down loading).

According to the EP 780 803 A2 After initialization, the possibility is provided for news or carrier-specific advertising to be provided by a data center if there is an order in the data center for this purpose. The customer must have previously concluded a contract with the service provider or operator of the data center.

From the US 5,077,660 Furthermore, a method for changing the configuration of the franking machine is known, wherein the franking machine can be switched by means of a suitable input via a keyboard from the operating mode in a configuration mode and a new meter type number can be entered, which corresponds to the desired number of features. The franking machine generates a code for communication with the computer of the data center and the input of the identification data and the new meter type number in the aforementioned computer, which also generates a corresponding code for transmission and input to the postage meter, in which both codes are compared. If both codes match, the franking machine is configured and switched to the operating mode. As a result, the data center always has accurate records of the respectively set meter type for the corresponding franking machine. However, security depends solely on the encryption of the transmitted code.

In addition, from the EP 388 840 A2 a comparable security technique for setting a postage meter known to clean them of data, without the franking machine has to be transported to the manufacturer. Again, security depends solely on the encryption of the transmitted code.

The object is to develop a technical method for automatic installation and associated arrangement, in particular a corresponding franking device. The customer who has purchased a pre-initialized franking device through a dealer distribution should be enabled to fully operate the franking device without having to call a customer service or service technician and without visiting the post office.

The object is achieved for the method with the features of claim 1 and for the arrangement with the features of claim 13. During production, machine data is stamped into the franking device in a known manner when the franking device is pre-initialized.

The machine data is the serial number and / or identification number.
Request data is already generated when the franking device preloads a credit in advance of its use. It is advantageous if, during the charging process, the franking device additionally performs a billing of the desired service of the data update for an installation of stamp image data.
The record transmitted for automatic installation may contain a customer-specific advertising cliché or an advertising cliché selected from among a number of advertising clichés, including customer data, if this has been agreed during the sale.

The customer data (for example, place of use, cliché request, service / maintenance contract) are transmitted as part of the production of a first communication by postcard, by telephone or similar communication directly or possibly via a dealer to the data center. The data center is preferably designed as a first special service center (data update server), which can also transmit other configuration data and postage fee table data if required. The same or a second data center can be designed as a recharging center for credits. Usually, the second (teleporto) data center transmits the credit required for franking in the form of reload data.
The same or a third data center can be designed as a reloading center for rate tables and for further information.

It is contemplated that the data center will provide a means of transmission to provide customized records. The transmission of the data record then takes place by sending the data carrier.

Thus, a customer-specific data record can be delivered to the customer via a smart card or other modern medium.

Advantages arise in particular for low-cost machines that are sold by a dealer. The time from the order / purchase of the customer to the first franking process can be drastically reduced. Due to the transmission of data for a country-specific value stamp image, the country variants can be replaced by a single variant, for example by a European variant of the franking device.

Figur 1,

Perspektivische Ansicht einer einer Frankiermaschine von hinten rechts,

Figur 2,

Blockschaltbild der Steuerung einer Frankiermaschine,

Figur 3,

Flußdiagramm für eine Kommunikation per Modem,

Figur 4,

Flußdiagramm für eine Kommunikation per Voice,

Figur 5,

Flußdiagramm für eine halbautomatische Kommunikation per Modem,

Figur 6,

Flußdiagramm für eine alternative Kommunikation.

Advantageous developments of the invention are characterized in the subclaims or are presented in more detail below together with the description of the preferred embodiment of the invention with reference to FIGS. Show it:

FIG. 1,

Perspective view of a franking machine from the back right,

FIG. 2,

Block diagram of the control of a franking machine,

FIG. 3,

Flowchart for a communication via modem,

FIG. 4,

Flow chart for voice communication,

FIG. 5,

Flow chart for semi-automatic communication via modem,

FIG. 6,

Flowchart for an alternative communication.

In the FIG. 1 shows a perspective view of a franking machine of the JetMail® type from the rear right. This franking machine consists of a meter 1 and a base 2. The latter is equipped with a smart card write / read unit 70, which is arranged behind the guide plate 20 and accessible from the housing upper edge 22. After switching on the franking machine by means of the switch 71, a chip card 49 is inserted from top to bottom in the insertion slot 72. A supplied standing on the edge letter 3, which rests with its surface to be printed on the guide plate is then printed according to the input data with at least a franking stamp 31 and a city stamp 32. The letter feeding opening is bounded laterally by a transparent plate 21 and the guide plate 20.

The FIG. 2 shows a block diagram of a postage meter, which with a chip card read / write unit 70 for reloading change or. User data or customer data by chip card and with a printing device 2, which is controlled by a control device 1 equipped. The control device 1 has a motherboard 9 equipped with a microprocessor 91 with associated memories 92, 93, 94, 95. The program memory 92 contains an operating program at least for printing and security-related components of the program for a predetermined format change of a portion of the user data.
The RAM RAM 93 is used for volatile intermediate storage of intermediate results. NVM 94 non-volatile memory is used for non-volatile caching of data, such as statistical data organized by cost center. The calendar / clock module 95 also contains addressable but non-volatile memory areas for the non-volatile intermediate storage of intermediate results or also known program parts (for example for the DES algorithm). It is provided that the control device 1 is connected to the chip card write / read unit 70, wherein the microprocessor 91 of the control device 1 is programmed, for example, to load the payload N from the memory area of a chip card 49 for their application in corresponding memory areas of the franking machine , A first chip card 49 inserted in a slot 72 of the chip card write / read unit 70 allows reloading of a record in the postage meter machine for at least one application. The smart card 49 contains, for example, the user data for setting a cost center.

The control device 1 forms the actual meter with the means 91 to 95 of the aforementioned motherboard 9 and also includes a keyboard 88, a display unit 89 and an application-specific circuit ASIC 90 and the interface 8 for the postal security module PSM 100. The security module PSM 100 is about a control bus to the aforementioned ASIC 90 and the microprocessor 91 and via the parallel μC bus at least with the means 91 to 95 of the motherboard 9 and connected to the display unit 89. The control bus carries lines for the signals CE, RD and WR between the security module PSM 100 and the aforementioned ASIC 90. The microprocessor 91 preferably has a pin for an output from the security module PSM 100 interrupt signal i, other connections for the keyboard 88, a serial interface Sl-1 for the connection of the chip card read / write unit 70 and a serial interface Sl-2 for the optional connection of a MODEM. By means of the MODEM, for example, the credit stored in the non-volatile memory of the postal security device PSM 100 can be increased.

The postal security device PSM 100 is surrounded by a secured housing. Before each franking imprint, a hardware settlement is carried out in the postal security module PSM 100. Billing is independent of cost centers. The postal security module PSM 100 can be designed internally as in the European application EP 789 333 A3 was described in more detail.

Alternatively, a variant without postal security module PSM 100 can be realized. In such a variant, the processor 91 takes over the tasks of the security module.
It is contemplated that the ASIC 90 may include a serial interface circuit 98 to a post-stream powered device, a serial interface circuit 96 to the sensors and actuators of the printing device 2, a serial interface circuit 97 to the print control electronics 16 for the printhead 4, and a serial interface circuit 99 to one has the printing device 20 in the post-stream downstream device. Of the DE 197 11 997 an embodiment variant for the peripheral interface can be removed, which is suitable for multiple peripheral devices (stations). It is entitled: Arrangement for communication between a base station and other stations of a mailing machine and their emergency shutdown. The interface circuit 96 coupled to the machine base interface circuit 14 provides at least one connection to the sensors 6, 7, 17 and to the actuators, such as the drive motor 15 for the roller 11 and a cleaning and sealing station RDS 40 for the ink jet printhead 4 , as well as to the label dispenser 50 in the machine base. The basic arrangement and the interaction between the inkjet printhead 4 and the RDS 40 are the DE 197 26 642 C2 removable, entitled: Arrangement for positioning an ink jet printhead and a cleaning and sealing device.

One of the arranged in the guide plate 20 sensors 7, 17 is the sensor 17 and is used to prepare the pressure release during letter transport. The sensor 7 is used for initial letter recognition for the purpose of triggering the letter transport. The transport device consists of a conveyor belt 10 and two rollers 11,11 '. One of the rollers is equipped with a motor 15 drive roller 11, another is the follower tension roller 11 '. Preferably, the drive roller 11 is designed as a toothed roller, according to the conveyor belt 10 is designed as a toothed belt, which ensures the unambiguous power transmission. An encoder 5, 6 is coupled to one of the rollers 11, 11 '. Preferably, the drive roller 11 is firmly seated with an incremental encoder 5 on an axis. The incremental encoder 5 is designed for example as a slotted disk, which cooperates with a light barrier 6, and outputs via the line 19 an encoder signal to the motherboard 9 from. The gundetische structure of the printing device, for example, was already in DE 196 05 014 C1 and DE 196 05 015 C1 explained in more detail.

It is envisaged that the individual printing elements of the print head are connected within its housing with a print head electronics and that the print head for a purely electronic pressure can be controlled. The pressure control is based on the path control, whereby the selected stamp offset is taken into account, which is entered by keyboard 88 or if necessary by chip card and stored in memory NVM 94 non-volatile. A planned imprint thus results from stamp offset (without printing), the franking print image and possibly further print images for advertising clichés, shipping information (optional prints) and additional editable messages. The nonvolatile memory NVM 94 has a plurality of memory areas. among them are those which save the loaded postage fee tables non-volatile.
The smart card write / read unit 70 consists of an associated mechanical support for the microprocessor card and contact unit 74. The latter allows a secure mechanical support of the smart card in the read position and clear signaling of reaching the reading position of the smart card in the contacting unit. The microprocessor card with the microprocessor 75 has a programmed read capability for all types of memory cards or smart cards. The interface to the franking machine is a serial interface in accordance with the RS232 standard. The data transfer rate is min. 1.2 K baud. The power supply is switched on by means of a switch 71 connected to the mainboard. After the power supply has been switched on, a self-test is carried out. In this case, a requirement for automatic installation can be determined. After installation, a ready message will be displayed.
The modem 83 is advantageous above all for credit recharge, but according to the invention is also used to load further user and customer data. Usually, the reloading tasks to be performed are divided so that one part can be done by modem and another part by chip card. It is also a mixed method possible, which works at the same time with a smart card and with a voice communication by phone. The latter allows the credit balance recharge. The required print image data are of course not transmitted via voice, but are stored in the chip card, which is sent to the customer. The latter has to wait for their receipt.
It is particularly advantageous if the first-time installation is possible via modem, because then the waiting times are minimal and because the automatic installation can also be coupled with a credit-recharge.

• erste Kommunikation, mit Kommunikation der Frankiermaschine mit der Datenzentrale, umfassend ein Senden 320 der Anforderungsdaten, um die Nutz- und Kundendaten von der Datenzentrale anzufordern, mit Kommunikation der Datenzentrale mit der Frankiermaschine, umfassend ein Empfangen 220 der Anforderungsdaten in der Datenzentrale und umfassend ein Senden 225 der angeforderten Nutz- und Kundendaten an die Frankiermaschine, und mit Kommunikation, umfassend einen Schritt 325 zum Empfangen und Speichern der angeforderten Nutz- und Kundendaten, sowie
• zweite Kommunikation, mit Kommunikation 330 der Frankiermaschine mit der Datenzentrale, umfassend eine Übermittlung einer Information von der Frankiermaschine zur Datenzentrale, welche auf die gespeicherten Nutz- und Kundendaten bezogen ist, mit Kommunikation der Datenzentrale mit der Frankiermaschine, umfassend einen Schritt 230 zum Empfangen und Prüfen der Information in der Datenzentrale mittels einer aus den Nutz- und Kundendaten generierten Vergleichsinformation und umfassend einen Schritt 235 zum Senden einer OK-Meldung an die Frankiermaschine und mit Empfangen 335 einer OK-Meldung in der Frankiermaschine und Abgabe einer Bereitschaftsmeldung.

In the FIG. 3 Figure 4 is a flowchart for communication between postage meter and remote data center via modem and Communication network, which allows the first installation by modem alone. Prior to the start step 200, the production of the franking machine, in which machine data was stored, took place. These include the franking machine serial number and other identification data. In addition to the identification data ID, a secret franking machine-specific basic key BKEK is also generated and preferably stored in a read-only secured nonvolatile storage area of the franking machine in the postal security module PSM. The secret base key BKEK later allows the decryption of encrypted messages exchanged during communication with a key distribution center KDC to obtain session keys SK. Such of session keys SK can be changed at intervals and serve to exchange encryption keys KEK, which are changed from communication to communication. The KEK is the key, for example, for a DES encryption (Data Encryption Standard). When Vorinitialisierung the postage meter can of course in a simplified variant (without key distribution center KDC) a start key KEK be stored, which is needed for a first communication with the data center at least for credit recharge. At the same time as the pre-initialization of the franking machine, a code is also generated by a secret procedure. In step 200, a mirror data set for the aforementioned machine data associated with the generated code is transmitted and stored in the database DB of the data center (210). The code may be, for example, a number code. Upon completion of this first phase a, the manufactured franking machine may be sold and sold by the dealer. When selling phase b begins with the capture of customer data at the dealer, who also knows the number code. After the data transmission (phase b), the customer data assigned to the number code in the database DB of the data center is stored in the phase c. The service of the latter now consists of providing machine, user and customer data in such a way that the franking machine simultaneously with a first load of a credit at least also receives the payload, which are required for franking. If the buyer starts by turning on his franking machine (font 300) and as a result of a self-test (font 308) in the query 309 a requirement is recognized, then runs in the postage meter from an automatic installation routine. The required user data are prescribed by the postal carrier regulations and include at least the print image data for a stamp with temporary and local data (for example a city town stamp specific to the location) and a carrier, area or country-specific value stamp. In the first font 310 of the automatic installation routine, the creation of request data for such user and other customer data, such as advertising cliché data occurs. In the phase d then a transmission of the data set to the franking device takes place after receiving corresponding request data, which is explained in more detail with reference to the following steps:

• first communication, with communication of the postage meter machine with the data center, comprising sending request data 320 to request the payload and customer data from the data center, communicating with the data center with the postage meter, comprising receiving 220 the request data in the data center and comprising sending 225 the requested user and customer data to the postage meter machine, and with communication, comprising a step 325 for receiving and storing the requested user and customer data, as well as
• second communication, with communication 330 of the franking machine with the data center, comprising a transmission of information from the franking machine to the data center, which is related to the stored user and customer data, with communication of the data center with the postage meter, comprising a step 230 for receiving and checking the information in the data center by means of a comparison information generated from the user and customer data and comprising a step 235 for sending an OK message to the postage meter and with receiving 335 an OK message in the franking machine and delivery of a readiness message.

It is envisaged that in connection with the sending of an OK message in the data center, a registration (font 240) of the service takes place and that marking the stored data is registered as valid upon receipt of the OK message in the postage meter, as a note, that in the data center the service was registered for payment. In the non-volatile memory of the franking machine, a bit is set for the purpose of marking either in a secure area or corresponding data is stored by means of signature or MAC-secured data. The information to be checked is, for example, checksum or an encrypted checksum about the transmitted data.

• die Maschinennummer, die auf der Postkarte schon aufgedruckt bzw. aufgeklebt sein kann,
• die Adresse des Aufstellortes der Maschine mit Postleitzahl (PLZ),
• das vom Käufer bzw. Bediener aus einer Vielzahl ausgewählte eine gewünschte StandardKlischée.

In the FIG. 4 a flow chart for a communication between postage meter and a remote data center by voice and vice versa by voice and disk is shown. In the manufacture of the franking machine, in which machine data has been stored, a mirror data set for the abovementioned machine data is stored in a data carrier. At the same time as the pre-initialization of the franking machine, a code is also generated by a secret procedure. This is also stored in the data carrier, for example a floppy disk or chip card, assigned to the mirror data record. The data carrier is transported to the data center (service center) to store the data in the database DB. After the start 400, a mirror data record for the abovementioned machine data assigned to the generated code in the database DB of the data center is therefore stored in the font 410. For example, the code may be a number code again. The database DB is connected to a chip card writing unit via a server. Upon completion of this first phase a, the manufactured franking machine may be sold and sold by the dealer. The customized record can be sent to the buyer via a chip card or other modern medium associated postage meter can be supplied. During the sale phase b begins with the capture of customer data at the dealer, who also knows the number code. The dealer stores in the phase c the detected customer data assigned to the number code in the database DB of the data center. The service of the latter now consists of providing machine, user and customer data in such a way that the franking machine receives at least the user data which is required for franking at the same time as a first loading of a credit. The buyer only pays the machine in the store and takes it home. From there, he / she will send a postcard if required, on which further information will be forwarded to the manufacturer FP:

• the machine number, which can already be printed or glued on the postcard,
• the address of the place of installation of the machine with postal code (zip code),
• the one selected by the buyer or operator of a variety a desired Standardklischée.

If this customer information has already been entered by the dealer under a number code, it is sufficient to specify the number code. He also issued a direct debit authorization for services of the data center with his signature. A double of the postcard goes to the bank, which certifies the authenticity of the signature and the creditworthiness of the customer. After a positive decision by the bank to the dealer or the operator of the database or franking machine manufacturer, the customer data is assigned to the data record in the data center. For this customer, the data of the possibly selected advertising clauses, the city stamp "Town Circle" and the country-specific stamp of value are compiled in a data record.
If the operator (buyer) starts his franking machine by switching on (font 500) and a requirement is recognized as a result of a self-test (font 508) in query 509, then an automatic installation routine runs in the franking machine. The required user data are prescribed by the postal carrier regulations and comprise at least the print image data for a site-specific city stamp and a carrier, area or country-specific value stamp. In a first step 520 of the automatic installation routine, a call is made to the operator at the data center and the number code is transmitted by voice. Alternatively, a sent letter can transmit the number code.

After the first communication of the operator of the franking machine with the data center, comprising a transmission 520 of the number code to request the user and customer data from the data center, the phase d begins. In phase d, a transfer of a data carrier with the desired data record to the operator of the franking device then takes place at the franking location, for example by sending a chip card. The data carrier (chip card) also contains information relating to the user and customer data to be transmitted. First, in the context of the first communication, the data center communicates with the operator of the postage meter machine, receiving 420 the number code in the data center and storing the requested user and customer data in a data carrier including sending it 425 to the operator of the franking machine. The latter waits for inbox of the data carrier, comprising a step 525 for receiving and storing the requested user and customer data in the postage meter machine. A second voice communication 530 of the operator of the postage meter machine with the data center, comprises a transmission of information from the operator of the postage meter machine to the data center, which is related to the stored user and customer data. In the second communication, comprising a step 430 for receiving, also checking the information in the data center by means of a comparison information generated from the user and customer data and comprising a step 435 for transmitting a voice message to the operator of the postage meter, wherein Connecting to the transmission of the voice message in the data center register (Step 440) of the service. Upon receipt 535 of the voice message, it is input to the postage meter and, if properly installed, the delivery of a ready message.

The FIG. 5 shows a flowchart for a semi-automatic communication by modem. If it is recognized after the self-test 508 on the page of the franking device in the font 509 that an installation is required, a message is sent to the operator in the font 510 regarding the user and customer data, which are still reloadable. At the same time an input by the operator is possible, which is why the latter step is also referred to below as input 510. The difference to the variants already explained is that after the input step 510 in the transmission step 520 of the franking machine, the entered further customer requests or information are transmitted to the data center next to the number code, due to which additional data is added to the record in the latter. For example, only the data for the city and value stamp have been agreed at the dealer and only at the installation site, the operator decides on an additional advertising cliché, which he selects or compiles, for example, from a catalog. The selected cliche or cliché part are assigned code which can be transmitted in the transmission step 520 as further data to the data center. The user interface 88, 89 is equipped to execute a corresponding operator input. After receiving in step 420 corresponding further data and the number code, the addition is performed by the data center at least in a further step 421 if both the agreed payment mode and the user and customer data already stored in the data record permit such. The steps 510 and 520 on the postage meter side and the steps 420 and 421 on the side of the data center may be executed repeatedly (not shown) in accordance with the plurality of possible inputs. A number of further - not shown - steps 422 to 424 may be provided to itteratively the Review and complete the record before submitting. It is further provided that the data center acknowledges each or at least one of the inputs. This can be done by an OK message, which is transmitted to the franking machine. The acquisition of further customer data (phase b), then takes place from the data center immediately before the first installation of the franking machine.

Of course, this requires a number of user data, which are stored in the database of the data center, in order to be able to make a selection of the user data that the customer requests as customer data in the context of the first communication. The storage and provision of customer data assigned to the number code (phases c and d) is then also carried out by the data center immediately before the first installation of the franking machine.
In the limiting case, initially only the mirror data record is stored in step 410 in the data center. All other customer data recorded, stored and provided in phases b), c) and d), however, are only added after the purchase of the franking machine during the first communication by modem (step 420, 421).

• erste Kommunikation der Datenzentrale mit einer Frankiermaschine, umfassend ein Versenden (Schritt 425) des Datenträgers (49) mit den angeforderten Nutz- und Kundendaten an die Frankiermaschine,
• Durchführung eines Schrittes (525) zum Laden und Speichern der angeforderten Nutz- und Kundendaten in der Frankiermaschine und
• zweite Kommunikation (Schritt 530) der Frankiermaschine mit der Datenzentrale, umfassend eine Übermittlung einer Information von der Frankiermaschine zur Datenzentrale, welche auf die gespeicherten Nutz- und Kundendaten bezogen ist.

In the FIG. 6 Figure 3 is a flow chart for alternative communication between the postage meter and a remote data center and vice versa and using a data carrier. The steps are essentially the same as in the variant according to FIG. 4 , In contrast to the variant after FIG. 4 The steps 420 and 520 are omitted since the data center is informed by the merchant which buyer needs which data so that the chip card can be sent immediately after the machine, user and customer data have been provided. The franking machine then of course has a corresponding chip card reading unit. Of course, the alternative communication for confirming the reception at the franking location can also take place via other communication and transmission means. In contrast to the variant after FIG. 4 Steps 435 and 535 are also omitted because of the data center each - but also a failed - action is registered and thus there is sufficient monitoring of user behavior. The method then comprises the steps:

• first communication of the data center with a franking machine, comprising sending (step 425) of the data carrier (49) with the requested user and customer data to the franking machine,
• Performing a step (525) of loading and storing the requested user and customer data in the postage meter and
• second communication (step 530) of the postage meter machine with the data center, comprising a transmission of information from the postage meter machine to the data center, which is related to the stored user and customer data.

Between the above-mentioned step 530 and the ready message in step 540, further steps 536 to 539, not shown, may be present, which are carried out in connection with the reloading of a credit in the postage meter machine. The latter can be done in a manner known per se, whereby the mail registers and other registers of the non-volatile memory are queried. As part of such a query, the information can be queried, which is related to the loaded user and customer data.

The arrangement for carrying out the method is characterized in that a processor 91 or a security module 100 of a franking device is programmed to perform a self-test to determine whether an automatic installation is to be performed or not carried out in the case of an earlier installation Load a custom record into non-volatile memory 94 and issue a ready message for franking after successful installation of a custom record or a ready message after non-execution. In the latter case, an earlier installation has already been assumed. The processor 91 or the security module 100 of a franking device is programmed to form and send request data for loading to request, receive and store the payload and customer data from the data center, and perform additional communication of information from the meter to the data center relating to the stored payload and customer data and receive an OK message before issuing the ready message.

It is envisaged that the franking device is a franking machine with an internal printer or a PC meter with an external printer. In the case of the PC meter, communication via modem and INTERNET is particularly suitable.

Alternatively, processor 91 or security module 100 of the meter is programmed to load a custom record from smart card 49 and store it in nonvolatile memory 94. The loading is accompanied by voice communication or other suitable communications with the data center, with information checked by the data center related to the stored customer-specific data record.

The invention is not limited to the present embodiment, since obviously other other embodiments of the invention can be developed or used, starting from the same basic idea of the invention, which are encompassed by the appended claims.

Claims (17)

1. A method for the automatic installation of franking units into which machine date were stored during the manufacturing, with a transmission of a data record from a data central to the franking location after receipt of respective request data or input from the franking machine, characterized by the following steps prior to the above-mentioned request and transmission of a data record:

   a) Storage of a mirror data record assigned to a number code at the data central, wherein the mirror data record corresponds to the machine data that were store in the franking unit during its pre-initialization;

   b) Transmission of registered customer data of a sold franking unit to the data central from the customer of a franking-machine manufacturer after the purchase or from the dealer upon sale of the franking unit;

   c) Storage of the customer data at the data central assigned to the number code;

   d) Provision of a specific machine- or customer-related data record at the data central assigned to the number code, said data record comprising at least data for a specific stamp with temporary and local data;

   e) Transmission of the specific customer-related data record to the franking location after receipt of respective request data or input at the data central and loading of the specific customer-related data record into a non-volatile memory (94) of the franking unit when, as a result of a self-test, there is determined a requirement to carry out an automatic installation routine in the franking unit; and

   f) Issue of a ready message for franking after installation.
2. A method according to claim 1, characterized in that the transmission of the data record is effected by a franking unit installed at the franking location.
3. A method according to claim 2, characterized in that the transmission of the data record is made by modem, wherein the request data are generated in the franking unit and transmitted by modem to the data central.
4. A method according to claim 1, characterized in that the data record is transmitted via data carrier to an operator of a franking unit at the franking location.
5. A method according to claim 4, characterized in that the transmission of the data record is accompanied by a voice communication with the data central.
6. A method according to claims 1 to 5, characterized in that the data central that is designed as a special service central with data-update server (DS) and database (DB) transmits also further configuration data, information and/or postage fee table data.
7. A method according to claims 1 to 6, characterized in that the transmission of the data record is effected in connection with a credit reload.
8. A method according to claims 4 to 5, characterized in that the transmission of the specific customer-related data record is effected by shipment of the data carrier when the number code was transmitted to the data central before.
9. A method according to claims 1 to 3, characterized in that the transmission of the data record is effected by modem, wherein a message to the operator is generated in the franking unit for the input of further data that then are transmitted to the data central for requesting a specific customer-related data record.
10. A method according to claim 7, characterized in that, when the franking unit carries out the loading of a credit before it is used, it generates additional request data for requesting a specific customer-related data record.
11. A method according to claims 1 to 3, characterized by the following steps:

    ■ first communication,

    - with communication of the franking machine with the data central, comprising a sending (320) of request data in order to request utilization and customer data from the data central;

    - with communication of the data central with the franking machine, comprising a receiving (220) of the request data at the data central and comprising a sending (225) of the requested utilization and customer data to the franking machine;

    - with communication, comprising a step (325) for receiving and storing the requested utilization and customer data by/in the franking machine; as well as

    ■ second communication,

    - with communication (330) of the franking machine with the data central, comprising a transmission of a piece of information from the franking machine to the data central that refers to the stored utilization and customer data;

    - with communication of the data central with the franking machine, comprising a step (230) for receiving and checking the information at the data central by means of comparison information generated from the utilization and customer data and comprising a step (235) for sending an OK-message to the franking machine; and

    - with receiving (335) of an OK-message by the franking machine and issue of a ready message.
12. A method according to claim 4, characterized by the following steps:

    - first communication of the data central with the franking machine, comprising a sending (425) of the data carrier with the requested utilization and customer data to the franking machine;

    - execution of a step (525) for loading and storing the requested utilization and customer data in the franking machine; and

    - second communication (530) of the franking machine with the data central, comprising a transmission of a piece of information from the franking machine to the data central that refers to the stored utilization and customer data.
13. An arrangement for the automatic installation of franking units equipped with a processor (91) and at least a non-volatile memory (94) into which machine data were stored during the manufacturing, characterized in that the processor (91) or a security module (100) is programmed for,

    - performing a self-test in order to determine whether an automatic installation is to be carried out or is not to be carried out if an installation was carried out before;

    - effecting a loading of a specific customer-related data record into the non-volatile memory (94) when it was determined, as a result of the self-test, that the execution of an automatic installation routine is required in the franking machine; and

    - giving a ready message for franking after the installation.
14. An arrangement according to claim 13, characterized in that the processor (91) or a security module (100) of a franking unit is programmed for generating and sending request data for loading in order to request utilization and customer data form the data central, for receiving and storing such data and for performing an additional transmission of a piece of information from the franking machine to the data central that refers to the stored utilization and customer data and for receiving an OK-message before issuing a ready message.
15. An arrangement according to claim 13, characterized in that a processor (91) or a security module (100) of the franking machine is programmed for effecting the loading of a specific customer-related data record from a chip-card (49) and the storing in the non-volatile memory (94) of the franking unit.
16. An arrangement according to claim 15, characterized in that the loading is accompanied by a voice communication with the data central, wherein the data central checks a piece of information that refers to the specific customer-related data record stored in the franking machine.
17. An arrangement according to claims 13 to 16, characterized i n that the franking unit is a franking machine with an internal printer or a PC franking machine with an external printer.

Images