EP1120751A1 - Franking machine with secure access - Google Patents

Abstract

The invention relates to a franking machine for franking mail and a method for protecting security-related functions and / or data of such a franking machine against unauthorized access. For repair or maintenance purposes or for importing software updates, it is sometimes necessary for individual people to have access to security-related functions and / or data, such as the accounting unit or postage data. In order to make this possible, but at the same time to rule out that unauthorized persons receive such access, who could then manipulate the franking machine, the invention provides that a security code (81, 82) requested during such access is encrypted in the security module (4) that the encrypted security code (S) is compared with an encrypted access code (Z) stored on a requested storage medium (11) and that if the encrypted security code (S) matches the encrypted access code (Z), access to the security-relevant functions and / or data is released. <IMAGE>

Description

The invention relates to a franking machine for franking mail according to the preamble of claim 1 and a method for protecting security Functions and / or data of a franking machine against unauthorized Access according to the preamble of claim 6.

Such a franking machine and such a method are, for example, from the EP 789 333 A2 known. The franking machine described there is with a Printer for printing the postage stamp on the mail, with a control unit to control the printing and peripheral components of the franking machine, with a billing unit for billing postal charges that are in Non-volatile memories are kept, and a cryptographic unit Secure postage data. The accounting unit and / or the The unit for securing the printing of the postage data can be operated by one Security module can be realized.

Franking machines are either independent special devices or they are increasingly conventional, if necessary with special hardware and software equipped computers used as franking machines. Security modules for Franking machines can be used as multi-chip modules or single-chip systems (for Example chip cards) can be realized. They are either structurally firm with the Franking machine connected, plugged into it or as an external device connectable.

To protect security-related functions and / or data such as the Billing function, postage data or cryptographic used The key is known to be an OTP (One Time Programmable) to use, on which sensitive data is stored in such a way that it cannot be read out become. The security module can also be burglarproof Safety housing must be encapsulated.

However, there are situations where it is necessary for certain people to have access to all or certain security-related functions and / or data enable. This is for example for repair or maintenance work Import of new software or other service purposes required. It must However, it can be reliably guaranteed that only the persons authorized to do so get such access.

From DE-OS 36 27 124 a franking machine is known in which Secure the operation before using a password. The Passwords of different users are stored in the franking machine and when you enter a password, it will be saved with the passwords compared. The franking machine is only released for franking if if the entered password matches the saved password.

A disadvantage of such a franking machine, however, is that one Person only needs to have a password to postage enable. As a protective mechanism for safety-related functions and / or This method is not suitable for data from a franking machine, however, since the The risk is too great that a person will get a password.

The invention is therefore based on the object of a franking machine create, with which only the authorized persons can access with great security on security-relevant functions and / or data. In addition, should a corresponding method for protecting a franking machine from unauthorized Access can be specified.

These tasks are performed by a franking machine according to claim 1 or solved by a method according to claim 6.

The invention is based on the idea of accessing security-relevant Functions and / or data to incorporate a double backup. Around To get the desired access, first enter a security code, which is first encrypted in the security module, and secondly, a storage medium, for example, a floppy disk or a chip card, on which an already encrypted access code is stored. This storage medium must also be fed to the reading unit so that the encrypted on it stored access code can be read invisibly for the user, which is then compared to the encrypted security code. Just if these two codes match, then the desired one Access released. It is therefore not enough just to have the security code still owning a storage medium with encrypted data stored on it Access code. Neither from the unencrypted security code alone only from the encrypted access code, which is under normal Circumstances cannot be read by a user, it is possible to achieve such access. Without knowing the encryption algorithm it is neither possible to convert the encrypted from the unencrypted security code Develop an access code to save it on a storage medium, it is still possible to get out of the encrypted access code if it succeeds read from a storage medium, the unencrypted security code develop. Additional protection is also provided by the fact that the Security code in unencrypted condition neither in the franking machine, such as this is the case with DE-OS 36 27 124, still on the required storage medium is saved.

The invention thus offers effective protection against unauthorized access security-related functions and / or data. Only one person, one knows certain security code and has a storage medium with it stored associated access code, can be in an inventive Franking machine get the desired access. The corresponding Security codes and access codes or the corresponding encryption are carried out by a central security agency, for example a postal service assigned, which also has the encryption algorithm and the stores encrypted access code on a storage medium. On one service programs, diagnostic data, Software updates or the like.

Access can also be made to special functions and / or data of the franking machine be restricted by means of the security and access code. To can from the central security office multiple security codes and with associated access codes are set up, each different Access permissions are assigned.

One embodiment of the invention provides that a User ID and a user password are used, being the user ID preferably the user name is used. User ID and User passwords are then required when accessing the franking machine to enter on a control unit, comparable to the registration process on a computer network. In a further training of it is also provided that the user password, which is neither in the franking machine nor is stored on the storage medium as a key for those in the security module encryption of the security code taking place is used. Everyone User who thus has access to security-related functions and / or Who wants to access data from a franking machine therefore has its own key.

In a further embodiment it is provided that the security module for Encryption of the security code using a standard encryption algorithm Is provided. This can be a DES algorithm, for example (DES = Data Encryption Standard), as described in "Applied Cryptography Protocols, Algorithms and source code described in C ", Bruce Schneier, Addison-Wesley is.

It is preferably provided in a further embodiment that the encrypted Access code is included on each storage medium with the security-relevant Functions and / or data read, written, deleted and / or changed should be. This serves to further increase protection against unauthorized persons or unwanted manipulation of a franking machine. For example not possible for a person who for any reason is in possession of the Security codes and a storage medium with associated encrypted Access code has arrived and thus gain access to the franking machine can, for example, the accounting software on another storage medium or copied accounting data or one contained on it itself software manipulated or overwritten.

A method for protecting a franking machine from unauthorized access to Security-relevant functions and / or data is specified in claim 6. This method can be used in a similar way to the franking machine and how be further developed as described above.

Figur 1

ein Blockschaltbild einer erfindungsgemäßen Frankiermaschine und

Figur 2

eine schematische Darstellung zur Erläuterung der Erfindung.

The invention is explained in more detail below with reference to the drawings. Show it:

Figure 1

a block diagram of a franking machine according to the invention and

Figure 2

a schematic representation to explain the invention.

Figure 1 shows a block diagram of a franking machine according to the invention with essential functional units. A control unit 1, for example a central one Microprocessor (CPU), controls the printing of postage stamps, what with the help a printer 2 takes place. The control unit 1 is via a control bus 3 which Contains address, data and control lines, with a security module 4 and with connected to the printer 2.

The control unit 1 is also connected via the control bus 3 to a non-volatile one Memory 5 and a memory 6 connected. There is a central one in memory 5 Control program for control unit 1 filed as a command sequence. Also are 5 templates in the memory for compiling the print image of the postage stamp saved. The control unit 1 loads the desired template into the Main memory 6 and processes the template according to the inputs of a Operator. After these entries, including the entry of the postage value counts, the desired print image is generated and stored in the working memory 6.

The operator can use a keyboard 7 connected to the control bus 3 Operate the franking machine and, for example, specify the print image. One of the Control unit 1 controlled display 8 informs the operator of the Processes in the franking machine. An input / output unit connected to the control bus 3 9 is connected to a reader 10, for example a Floppy disk drive, a chip card reader or another reader for Recording and reading a storage medium can be. In addition, the input / output unit 9 with drive elements (not shown) of the franking machine and connected to sensors that monitor the state of the franking machine. A transport and weighing system (not shown) for the mail item can also be found there be connected.

The security module 4 essentially comprises an accounting unit and a Encryption unit. With regard to the functioning and structure of the Settlement unit is referred to EP 789 333 A2 already mentioned.

The mode of operation of the invention will be explained in more detail with reference to FIG. 2. If a person, for example a service technician, because of a fault in the Franking machine, access to security-relevant functions and / or data, for example on the accounting unit or accounting data The following operations take place in a franking machine according to the invention: First of all, the person on the display 8 is asked as the security code name and enter the password in the input fields 81, 82. Using one on the Security module 4 installed and running encryption algorithm 41 the encrypted security code S is formed from these input data and fed to a test unit 42. In addition, in the reader (10 in Figure 1) Storage medium, in the example a disk 11, be inserted on the one encrypted access code Z is stored. This is from the disk 11th read out and also fed to the test unit 42. Then a comparison is made the encrypted security code S with the encrypted access code Z. If there is a match, access is then released, while at Access is denied. Access is also denied if either name 81 and / or password 82 are wrong or not on the the disk 11 stored access code Z belong. Even if there is no disk 11 no access is possible.

The franking machine can be designed such that access is only possible for as long is released, as is the storage medium 11 inserted into the reading device 10 is. For this purpose it can be provided, for example, that the encrypted access code Z read from disk 11 again and again at regular intervals and is compared with the security code S. This can, for example exclude that access is still possible even if the Authorized person moves away from the franking machine and also has removed diskette 11, but name 81 and password 82 still are entered.

As can be seen immediately, the franking machine and the inventive method also designed differently than shown in the figures his. For example, to store the encrypted access code Z a storage medium other than a floppy disk is used, and the Security code does not necessarily have to consist of name and password. The The franking machine is advantageously implemented on a commercially available machine PC with connected printer and possibly additional ones Hardware components.

The invention is not limited to the present embodiment because obviously other other embodiments developed or used can be, which - starting from the same basic idea of the invention - from of the invention are to be included.

Claims (6)

Franking machine for franking mail with a control unit (1) for controlling the components (2 to 10) of the franking machine, with a security module (4) for accounting postage data and for encrypting and decrypting data, with an operating unit (7) for operating the Postage meter and with a reading unit (9, 10) for reading data from a storage medium (11), the control unit (1) being designed to query a security code (81, 82) when accessing security-relevant functions and / or data of the postage meter ,
characterized in that the security module (4) is designed to encrypt the security code (81, 82), to compare the encrypted security code (S) with an encrypted access code (Z) stored on a requested storage medium (11) and to enable access to the security-relevant functions and / or data if the encrypted security code (S) matches the encrypted access code (Z). Franking machine according to claim 1,
characterized in that a user ID (81) and a user password (82) are used as the security code. Franking machine according to claim 2,
characterized in that the security module (4) is designed such that the user password (82) is used as a key for encryption. Franking machine according to one of the preceding claims,
characterized in that the security module (4) for encrypting the security code (81, 82) is equipped with a standard encryption algorithm. Franking machine according to one of the preceding claims,
characterized in that the encrypted access code (Z) is contained on each storage medium (11) with which security-relevant functions and / or data are to be read, written, deleted and / or changed. Method for protecting security-related functions and / or data of a postage meter machine against unauthorized access, the postage meter machine comprising a control unit (1) for controlling the components (2 to 10) of the postage meter machine, a security module (4) for billing postal charge data and for encrypting and decrypting Data, an operating unit (7) for operating the franking machine and a reading unit (10) for reading data from a storage medium (11), and a security code (81, 82) when accessing security-related functions and / or data of the franking machine is queried
characterized in that the security code (81, 82) is encrypted, that the encrypted security code (S) is compared with an encrypted access code (Z) stored on a requested storage medium (11) and that if the encrypted security code (S) matches the encrypted access code (Z) access to the security-relevant functions and / or data is released.

Images