EP1855252B1 - Agencement et procédé destinés à la fabrication d'un affranchissement - Google Patents

Agencement et procédé destinés à la fabrication d'un affranchissement Download PDF

Info

Publication number
EP1855252B1
EP1855252B1 EP07107954.5A EP07107954A EP1855252B1 EP 1855252 B1 EP1855252 B1 EP 1855252B1 EP 07107954 A EP07107954 A EP 07107954A EP 1855252 B1 EP1855252 B1 EP 1855252B1
Authority
EP
European Patent Office
Prior art keywords
franking
control module
information
module
imprint
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Not-in-force
Application number
EP07107954.5A
Other languages
German (de)
English (en)
Other versions
EP1855252A2 (fr
EP1855252A3 (fr
Inventor
Werner Kampert
Dirk Rosenau
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Francotyp Postalia GmbH
Original Assignee
Francotyp Postalia GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Francotyp Postalia GmbH filed Critical Francotyp Postalia GmbH
Publication of EP1855252A2 publication Critical patent/EP1855252A2/fr
Publication of EP1855252A3 publication Critical patent/EP1855252A3/fr
Application granted granted Critical
Publication of EP1855252B1 publication Critical patent/EP1855252B1/fr
Not-in-force legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G07B2017/00241—Modular design

Definitions

  • the present invention relates to an arrangement for producing a franking imprint, in particular a franking machine, according to the preamble of claim 1.
  • the invention further relates to a corresponding method which can be used in connection with the arrangement according to the invention.
  • Today's franking machines are generally equipped with a security module which contains the postal registers with the billing data, thus making or documenting the billing for the frankings, and executing a part of the more or less complex calculations for the determination of the respective franking print.
  • a number of postal carriers require the cryptographic protection of a portion of the printed data, so that the security module is often designed as a more or less elaborate and certified cryptographic module.
  • Certain postal carriers for example the postal authorities of certain states but also increasingly alternative postal carriers competing with the incumbent postal carriers, require, if at all, a very low degree of protection of the franking imprint and / or the billing data and thus a much smaller scope of the security module, since they receive their income secure in another way.
  • Another disadvantage of the conventional franking machine is that due to the security requirements, usually the base module with the printing unit and the security module form a unit that is not readily separable. Usually, the user of a conventional franking machine is not able to separate the security module from the base module without the functionality of the franking machine affect. Furthermore, not least because of the high security requirements, conventional franking machines are usually configured specifically for a particular mail carrier, so that their use is usually limited to frankings for mail, which is to be transported by just this mail carrier. If a conventional franking machine can be used for several mail carriers, then the security module would have to be configured in a complex manner for this purpose.
  • a generic arrangement for creating a franking imprint is for example from the EP 0 825 565 A2 in which a pluggable control module generates or stores security-relevant data for the franking or its billing.
  • the present invention is therefore based on the object to provide an arrangement or a method for creating a franking imprint of the aforementioned type, which or which does not have the disadvantages mentioned above or at least to a lesser extent and in particular the economic and flexible Use of franking machines allows.
  • the present invention solves this problem with an arrangement according to claim 1. It also achieves this object with a method according to claim 12.
  • the present invention is based on the technical teaching that an economical and flexible use of franking machines is made possible if the control module can be freely connected to the first processing unit by a user and the franking information is designed such that it forms at least part of the sequence of the generation of the franking imprint. With the thus achieved easy replacement of the control module by the user, it is possible to operate the base module with different control modules. Thus, for example by a user of the franking machine different security modules can be used for different mail carriers. It is also possible for different users to use the base module with the respective security module assigned to it. As a result, the use of the franking machine becomes much more flexible.
  • the advantage of using a franking information, which defines at least parts of the generation of the franking imprint, is that a very flexible design of the generation of the franking imprint, including its accounting, is possible, which makes it possible to use a single base module to produce a wide variety of franking imprints, if appropriate by a wide variety of methods to generate. Likewise, it is possible to implement or control different variants of the billing for one of the franking imprints.
  • the franking information can merely serve as simple switching information, which specifies that a variant of the impression generation stored in the base module is used.
  • simple switching information specifies that a variant of the impression generation stored in the base module is used.
  • the franking information can then serve, for example, merely as release information, which releases the generation of a corresponding franking imprint.
  • the base module has a base module program memory for storing at least one sequence program which is accessed by the first processing unit when generating the franking imprint.
  • the first processing unit is then configured to access the sequence program in dependence on the franking information for generating the franking imprint.
  • the franking information is designed such that it releases the access of the first processing unit to the sequence program and thus releases the generation of the corresponding franking imprint.
  • the base module program memory comprises at least a first sequence program and a second sequence program.
  • the first processing unit is then configured to access the first sequence program or the second sequence program depending on the franking information for generating the franking imprint.
  • the franking information can turn as simple switching information for switching between a first variant and a second variant of the impression generation can be used.
  • the two sequence programs for different franking and / or billing variants of a particular mail carrier can also stand here.
  • the two sequence programs for franking different mail carriers are available.
  • the first sequence program is associated with the generation of a franking imprint of a first mail carrier and the second sequence program is associated with the generation of a franking imprint of a second postal carrier.
  • the respective sequence program may already be preinstalled in the base module.
  • the first processing unit is adapted to receive the at least one sequence program from the control module and to write in the base module program memory.
  • the construction and the production of the base module thereby simplify considerably, since only a minimal basic program configuration is required.
  • no separate update of the usually stationarily installed base module is required because such an update is made to the respective control module connected to the base module. All that is required is to keep the corresponding mobile modules, which can be easily updated in any suitable way, up to date in order to be able to generate updated franking imprints.
  • the loading of the sequence program from the control module into the base module program memory of the base module can take place in any suitable manner. In particular, loading from both sides, i. H. triggered by both the control module and the base module. Furthermore, it can be provided that the user of the arrangement according to the invention triggers the loading of the sequence program from the control module into the base module program memory by a corresponding input via an interface of the device of the arrangement or the like. Preferably, however, it is provided that the loading of the sequence program takes place automatically upon the occurrence of a specific predefinable event during or after the connection of the control module to the first processing unit. In particular, establishing the connection between the control module and the first processing unit may represent the event that triggers the loading of the sequence program.
  • control module has a program memory for storing at least one sequence program, wherein the sequence program forms at least part of the franking information.
  • the first processing unit is in this case then designed to generate the Franking imprint to access the sequence program.
  • the effort for the base module again significantly reduced because it does not have to have a corresponding program memory.
  • This also has the advantage, inter alia with regard to manipulation security, that the program memory is accommodated in a control module, which is generally simpler to logically and / or physically secure.
  • no separate effort for the protection of a memory in the base module must be made against manipulation.
  • the base module can be operated with any control modules. In other arrangements not according to the invention, however, it can also be provided that the base module can only be operated with specific control modules. For this purpose, it is then preferably provided that the base module has a control data memory which can be connected to the first processing unit and in which control information is stored. The control information is then designed such that it releases the access of the first processing unit to the sequence program.
  • control information comprises an identifier for a specific control module or a specific group of control modules (eg, a specific type of control module) which may be freely selectable.
  • a specific control module e.g, a specific type of control module
  • sequence program memory comprises a first sequence program and a second sequence program and the first processing unit is configured to access the first sequence program or the second sequence program depending on the control information for generating the franking imprint.
  • the different sequence programs for different franking and / or Billing variants of a particular mail carrier can stand.
  • the first sequence program to be associated with the generation of a franking imprint of a first postal carrier
  • the second sequence program to be associated with the generation of a franking imprint of a second postal carrier.
  • the control information can be predefined in the basic module in these arrangements not according to the invention.
  • the base module has a presetting device which can be connected to the first processing unit, in particular a keyboard or the like, for inputting the control information.
  • the control module comprises further franking information.
  • This further franking information can then individually or in combination information for the design of the franking imprint (eg image components of the franking imprint), information for calculating the postage value of the franking imprint, in particular at least one postage table, user-specific information (eg advertising clichés, text messages, security-relevant data as cryptographic keys to be used, signatures or certificates etc.), information specific to at least one mail carrier (eg security relevant data such as cryptographic keys to be used, signatures or certificates etc.) and / or specific information (eg. B. additional services, etc.).
  • user-specific information eg advertising clichés, text messages, security-relevant data as cryptographic keys to be used, signatures or certificates etc.
  • information specific to at least one mail carrier eg security relevant data such as cryptographic keys to be used, signatures or certificates etc.
  • specific information eg. B. additional services, etc.
  • the control module has at least one billing memory for storing billing data for a generated franking impression. This makes it possible in a simple manner to allocate the costs of the franking generated in connection with the control module to the user of the control module.
  • the base module can have a correspondingly logically and / or physically secure billing memory.
  • this memory itself is not subject to any special security mechanisms, but only the billing data itself are made available in a correspondingly secured manner, for example in a form secured against unrecognized manipulation.
  • the control module may be connected to the first processing unit freely (ie, without appreciable obstacles) in any suitable manner. This is preferred Control module pluggable trained, as this a particularly simple and fast reliable connection can be achieved.
  • the control module can in principle be constructed in any suitable manner.
  • the control module is designed in the manner of a postal security module, since hereby in a known manner the postal security requirements, which are usually made by mail carriers, can be met.
  • the control module is preferably designed for carrying out cryptographic operations, in particular for encrypting and / or digitally signing data. These may be on the one hand to cryptographic operations in connection with the communication of the components of the inventive arrangement with each other or the inventive arrangement with other units, such as peripherals or remote data center, etc., act. However, these may also be cryptographic operations in connection with the creation and / or billing of the franking imprint. Accordingly, the control module is preferably designed for carrying out cryptographic operations on data of the franking imprint.
  • control module can in principle be constructed in any suitable manner or be formed by any suitable components or units.
  • control module is a smart card, since such smart cards already represent prefabricated, very compact units that also often already have a number of advantageous cryptographic functionalities.
  • the present invention further relates to a method for producing a franking imprint according to claim 12.
  • the franking machine 101 can be connected to a remote data center 103 via a communications network 102 and comprises a base module 104 and a control module connected thereto in the form of a security module 105.
  • the base module 104 is used in a conventional manner, on the one hand, to generate the franking imprint.
  • the base module 104 comprises a first processing unit in the form of a first processor 104.1, which is connected to a printing module 104.2.
  • the first processor 104.1 controls the printing module 104.2 in a well-known manner for generating the franking imprint on the respective mailpiece.
  • the first processor attacks 104.1, inter alia, to a program memory 104.3 of the base module 104, in which the sequence programs required for generating the franking imprint and, in addition, a part of the data required for generating the franking imprint and (eg postage tables, plate data, etc.) are stored.
  • a first sequence program is stored in the program memory 104.3, which comprises the corresponding regulations and data for a franking imprint of a first postal carrier.
  • a second sequence program is stored in the program memory 104.3, which comprises the corresponding regulations and data for a franking imprint of a second postal carrier.
  • these sequence programs are accessed on the basis of specific control data which defines for which postal carrier a franking imprint is to be generated.
  • the logical protection of the secure environment 106 is provided by an algorithm for checking the access authorization to the components of the security module 101. Access to the components of the security module 101 can be made externally only via the second interface 105.2 connected to the second processor, which is arranged at the transition from the secure environment 106 to the area outside the secure environment 106.
  • the second processor 105.1 accesses a cryptography module in the form of a memory 105.3 of the security module 101 likewise arranged in the secure environment 106.
  • the cryptography module 105.3 accommodates in a well-known manner corresponding algorithms and data for verification of access authorization to the security module. In the simplest case, this may be, for example, a stored password which the accessing person must enter in order to authorize himself. However, it can also be a corresponding algorithm for checking digital signatures or certificates, which the accessing person uses as part of his authorization.
  • the security module 105 supplies a further part of the data required for generating the franking imprint to the first processor 104.1 in a known manner.
  • This may be, for example, corresponding checksums, MACs, digital signatures or the like, which the second processor 105.1 of the security module 105 generates over certain data of the franking imprint. It is understood, however, that in other variants of the invention with lower security requirements for the franking imprint can also be provided that all data required to generate the franking imprint are created exclusively in the base module. It is equally understood that in other variants of the invention with higher security requirements for the franking imprint, if appropriate, a large part or even all of the data required to generate the franking imprint can also be generated in the security module.
  • the base module 104 first checks which security module is connected to it. For this purpose, the first processor 104.1 requests in a step 107.3 from the security module 105 a franking information which the security module 105 holds in a franking data memory 105.5 connected to the second processor 105.1.
  • the franking information includes, inter alia, an identifier K of the security module 105, which determines which postal carrier the security module 105 is assigned to, ie. H. for which mail carrier with the security module 105 franking imprints can be generated.
  • the security module is obviously associated with a particular mail carrier (eg, by appropriate coloration or other identification)
  • the franking information transferred from the security module to the base module only contains corresponding information regarding the course of the generation of the franking imprint and is generated automatically, ie without further checking, a franking imprint corresponding to the type of the security module.
  • checking the type of security module in other variants of the invention does not have to be done with each franking. Rather, it can be provided that this check only takes place once, for example when the franking machine is switched on, and is it only monitored in a suitable manner as to whether a separation of the security module from the base module took place. If such a separation has been detected then a re-examination of the type of safety module must take place.
  • the first processor 104.1 first transfers corresponding input data to the second processor 105.1 via the first interface 104.4 of the base module 104, which is connected to the second interface 105.2 of the security module 105, in a step 107.6.
  • the first processor 104.1 accesses the first or second sequence program in the program memory 104.3 corresponding to this identifier or this type of security module, depending on the identifier of the security module 105 transmitted in step 107.3. In the present case this is the first sequence program.
  • the relevant sequence program defines both the content and the accounting mode for the franking imprint.
  • the second processor 105.1 After the second processor 105.1 has checked the authorization of the first processor 104.1 for transferring the input data in the manner already described above, it processes this input data according to a predetermined scheme.
  • the second processor 105.1 checks in a step 107.7, inter alia, whether the input data satisfy certain conditions.
  • One of these conditions is that the date of the franking transmitted by the base module does not represent a date in the past, ie the current date or a date in the future.
  • the security module 105 may have corresponding real-time clock or another device with which the real-time can be reliably determined.
  • the security module is synchronized at predeterminable times or upon the occurrence of predefinable events with a correspondingly secure real-time source. The determination of the real time can then take place, for example, in a particularly simple manner by clock counting (eg, the timing of the second processor 105.1) or the like. It can be provided to prevent tampering that compliance with a frequency tolerance and / or the complete operation of the clocking are monitored.
  • the franking is aborted by the security module 105 and jumped back to the step 107.2. Otherwise, the second processor 105.1 generates corresponding output data in a step 107.8, which it then transfers back to the first processor 104.1 via the interfaces 105.2 and 104.4.
  • the second processor 105.1 Immediately before or after the transfer of the output data to the first processor 104.1, the second processor 105.1 generates accounting data which are used for billing the franking imprint to be generated. As with conventional postage meters, the billing data is stored in the billing memory 105.4 within the secure environment 106 of the security module 105.
  • the billing data are also transferred via the interfaces 105.2 and 104.4 to the first processor 104.1 and from this to a first processor 104.1 FIG. 1 Not shown, connected to the first processor - billing memory of the base module, ie outside the secure environment 106 can be stored in accordance with unrecognized manipulation manner secured. This can be done, for example, by the second processor of the security module providing the billing data with a digital signature, which it generates in a well-known manner, at least over part of the billing data while accessing the cryptography module 105.3. It is understood, however, that in other variants of the invention, other well-known mechanisms for securing the billing data from undetected manipulation may be used.
  • the billing data in the billing memory 105.4 of course also include data representing the currently available credit. These data are introduced into the billing memory 104.5 via the security module 105 in a reloading process in the course of a communication between the franking machine 101 and the remote data center 103.
  • the credit data can already be secured by the remote data center 103 in a corresponding manner.
  • the credit data transmitted by the data center 103 are first prepared and secured accordingly in the security module 105 and then stored in the billing memory 105.4.
  • step 107.10 it is then checked whether the procedure should be terminated. If this is the case, the process flow is terminated in a step 107.11. Otherwise, jump back to step 107.2.
  • the first sequence program may have been incorporated in the program memory 104.3 in any suitable manner.
  • the franking information in the franking data memory 105.5 of the security module 105 comprises the first sequence program and the first sequence program is loaded into the program memory 104.3 as soon as the base module 104 and the security module 105 are connected to one another.
  • This has the advantage that only the respective security modules 105 must be kept up-to-date, while the base module 104 can always be updated via this procedure from a correspondingly secure source, namely the security module 105.
  • the security module 105 is implemented in the present example as a simple smart card, which is additionally provided with a physical protection in the form of a potting compound, in which the components of the security module 105 are embedded. It is understood, however, that in other variants of the invention it can also be provided that only the corresponding safety-relevant parts of such a smartcard to be arranged in a secure environment are provided with a corresponding physical encapsulation, while other areas are more or less freely accessible. In this case, it is then only necessary to ensure that a corresponding logical safeguard is in effect for all possible accesses to the security-relevant components.
  • the security module 105 is its simple plug-in card plugged into the first interface 104.4.
  • the second interface 104.4 can be freely accessible, so that any desired security modules 105 can be plugged in without further ado.
  • the program memory 104.3 may even be completely absent.
  • the respective security module a single sequence program and thus z. B. is assigned to a single mail carrier.
  • a security module has stored several different sequence programs or assigned several sequence programs and the selection of the relevant sequence program in dependence on the control data in the control data memory 104.5. These may, as mentioned above, optionally be predetermined by the franking machine 101 and / or the user of the franking machine 101.
  • a separate area of the billing memory 105.4 is preferably allocated for each mail carrier. Additionally or alternatively, however, it may also be provided that the billing data in this case in a tamper-proof area to simplify the assignment to the respective mail carrier include a unique identification of the relevant mail carrier. In the case of a number of security mechanisms, this assignment is already possible anyway, since the secret data used for security purposes (eg signature key etc.) in the security module can in any case be unambiguously assigned to the postal carrier in question.
  • the secret data used for security purposes eg signature key etc.
  • the above-described memory of the security module 105 or of the base module 104 may be formed all or partly both as separate memory modules and only as individual memory areas of a single memory module.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Devices For Checking Fares Or Tickets At Control Points (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Claims (22)

  1. Dispositif de création d'une empreinte d'affranchissement, en particulier machine à affranchir, avec
    - un module de base (104) qui présente un dispositif d'impression (104.2) et une première unité de traitement (104.1) qui actionne le dispositif d'impression (104.2) pour la création de l'empreinte d'affranchissement, et
    - un module de commande (105) qui peut être connecté à la première unité de traitement (104.1),
    - le module de commande (105) étant conçu pour enregistrer et/ou générer au moins une information d'affranchissement, et
    - la première unité de traitement (104.1) étant conçue pour accéder, lors d'une demande d'empreinte d'affranchissement, au module de commande (105) afin de requérir l'information d'affranchissement et pour générer ladite empreinte en fonction de l'information d'affranchissement reçue du module de commande (105), et
    - le module de commande (105) pouvant être librement connecté par un utilisateur à la première unité de traitement (104.1),
    - le module de base (104) présentant une mémoire de programme du module de base (104.3) pour enregistrer au moins un programme séquentiel, auquel la première unité de traitement (104.1) accède lors de la production de l'empreinte d'affranchissement,
    caractérisé en ce que
    - l'information d'affranchissement est conçue de telle sorte qu'elle détermine au moins une partie du déroulement de la production de l'empreinte d'affranchissement,
    - la mémoire de programme du module de base (104.3) comprenant un premier programme séquentiel et un deuxième programme séquentiel, et la première unité de traitement (104.1) étant conçue pour accéder, en fonction de l'information d'affranchissement, au premier programme séquentiel ou au deuxième programme séquentiel de la mémoire de programme du module de base (104.3) lors de la création de l'empreinte d'affranchissement.
  2. Dispositif selon la revendication 1, caractérisé en ce que l'information d'affranchissement est conçue de telle sorte qu'elle autorise l'accès de la première unité de traitement (104.1) au programme séquentiel de la mémoire de programme du module de base (104.3).
  3. Dispositif selon la revendication 1 ou 2, caractérisé en ce que
    - le premier programme séquentiel de la mémoire de programme du module de base (104.3) est associé à la production d'une empreinte d'affranchissement d'un premier transporteur postal, et
    - le deuxième programme séquentiel de la mémoire de programme du module de base (104.3) est associé à la production d'une empreinte d'affranchissement d'un deuxième transporteur postal.
  4. Dispositif selon l'une des revendications 1 à 3, caractérisé ce que la première unité de traitement (104.1) est conçue pour recevoir du module de commande (105) au moins un programme séquentiel de la mémoire de programme du module de base (104.3), en particulier de manière automatique lors de ou après la connexion du module de commande (105) avec la première unité de traitement (104.1), et pour l'inscrire dans la mémoire de programme du module de base (104.3).
  5. Dispositif selon l'une des revendications précédentes, caractérisé en ce que le module de commande (105) contient d'autres informations d'affranchissement, les informations d'affranchissement comprenant
    - des informations sur le design de l'empreinte d'affranchissement
    et/ou
    - des informations sur le calcul du montant d'affranchissement de l'empreinte d'affranchissement, en particulier au moins un tableau des tarifs d'affranchissement,
    et/ou
    - des informations spécifiques à l'utilisateur
    et/ou
    - des informations spécifiques pour au moins un transporteur postal
    et/ou
    - des informations spécifiques pour au moins une prestation d'acheminement.
  6. Dispositif selon l'une des revendications précédentes, caractérisé en ce que le module de commande (105) présente au moins une mémoire de facturation (105.4) destinée à l'enregistrement des données de facturation pour une empreinte d'affranchissement produite.
  7. Dispositif selon l'une des revendications précédentes, caractérisé en ce que le module de commande (105) est destiné à être enfichable.
  8. Dispositif selon l'une des revendications précédentes, caractérisé en ce que le module de commande (105) est conçu à la manière d'un module de sécurité postal.
  9. Dispositif selon l'une des revendications précédentes, caractérisé en ce que le module de commande (105) est conçu pour l'exécution d'opérations cryptographiques, en particulier pour le cryptage et/ou la signature numérique des données.
  10. Dispositif selon la revendication 9, caractérisé en ce que le module de commande (105) est conçu pour l'exécution d'opérations cryptographiques sur des données de l'empreinte d'affranchissement.
  11. Dispositif selon l'une des revendications précédentes, caractérisé en ce que le module de commande (105) est une carte à puce.
  12. Procédé de création d'une empreinte d'affranchissement, lors duquel
    - une première unité de traitement (104.1) d'un module de base (104), qui présente un dispositif d'impression (104.2) actionné par la première unité de traitement (104.1) pour la création de l'empreinte d'affranchissement, est connectée à un module de commande (105),
    - le module de commande (105) enregistrant et/ou générant au moins une information d'affranchissement,
    - la première unité de traitement (104.1) recevant l'information d'affranchissement du module de commande (105),
    - la première unité de traitement (104.1), lors d'une demande d'empreinte d'affranchissement, accédant au module de commande (105) et générant ladite empreinte en fonction de l'information d'affranchissement reçue du module de commande (105), et
    - le module de commande (105) pouvant être librement connecté par un utilisateur au module de base (104),
    - la première unité de traitement (104.1), lors d'une demande d'empreinte d'affranchissement, en fonction de l'information d'affranchissement, accédant à au moins un programme séquentiel enregistré dans une mémoire de programme (104.3) du module de base (104),
    caractérisé en ce que
    - l'information d'affranchissement est conçue de telle sorte qu'elle définit au moins une partie du déroulement de la production d'une empreinte d'affranchissement,
    - la mémoire de programme du module de base (104.3) comprenant un premier programme séquentiel et un deuxième programme séquentiel, et la première unité de traitement (104.1), en fonction de l'information d'affranchissement, accédant au premier programme séquentiel ou au deuxième programme séquentiel de la mémoire de programme du module de base (104.3) lors de la création de l'empreinte d'affranchissement.
  13. Procédé selon la revendication 12, caractérisé en ce que l'information, d'affranchissement est conçue de telle sorte qu'elle autorise l'accès de la première unité de traitement (104.1) au programme séquentiel de la mémoire de programme du module de base (104.3).
  14. Procédé selon la revendication 12 ou 13, caractérisé en ce que
    - le premier programme séquentiel de la mémoire de programme du module de base (104.3) est associé à la production d'une empreinte d'affranchissement d'un premier transporteur postal, et
    - le deuxième programme séquentiel de la mémoire de programme du module de base (104.3) est associé à la production d'une empreinte d'affranchissement d'un deuxième transporteur postal.
  15. Procédé selon l'une des revendications 12 à 14, caractérisé en ce que la première unité de traitement (104.1) reçoit du module de commande (105) au moins un programme séquentiel de la mémoire de programme du module de base (104.3), en particulier de manière automatique lors de ou après la connexion du module de commande (105) avec la première unité de traitement (104.1), et l'inscrit dans la mémoire de programme du module de base (104.3).
  16. Procédé selon l'une des revendications 12 à 15, caractérisé en ce que le module de commande (105) contient d'autres informations d'affranchissement qui sont utilisées au moins en partie par le dispositif de commande (104.1) pour la production de l'empreinte d'affranchissement, les informations d'affranchissement comprenant
    - des informations sur le design de l'empreinte d'affranchissement
    et/ou
    - des informations sur le calcul du montant d'affranchissement de l'empreinte d'affranchissement, en particulier au moins un tableau des tarifs d'affranchissement,
    et/ou
    - des informations spécifiques à l'utilisateur
    et/ou
    - des informations spécifiques pour au moins un transporteur postal
    et/ou
    - des informations spécifiques pour au moins une prestation d'acheminement.
  17. Procédé selon l'une des revendications 12 à 16, caractérisé en ce que le module de commande (105) procède à la facturation d'une empreinte d'affranchissement produite.
  18. Procédé selon l'une des revendications 12 à 17, caractérisé en ce que le module de commande (105) est relié au premier dispositif de commande (104.1) via un connecteur.
  19. Procédé selon l'une des revendications 12 à 18, caractérisé en ce que le module de commande utilisé (105) est de type module de sécurité postal.
  20. Procédé selon l'une des revendications 12 à 19, caractérisé en ce que le module de commande (105) effectue des opérations cryptographiques, en particulier de cryptage et/ou de signature numérique des données, lors de la création de l'empreinte d'affranchissement et/ou lors de la facturation de l'empreinte d'affranchissement.
  21. Procédé selon la revendication 20, caractérisé en ce que le module de commande (105) effectue des opérations cryptographiques sur les données de l'empreinte d'affranchissement.
  22. Procédé selon l'une des revendications 12 à 21, caractérisé en ce que le module de commande utilisé (105) est une carte à puce.
EP07107954.5A 2006-05-11 2007-05-10 Agencement et procédé destinés à la fabrication d'un affranchissement Not-in-force EP1855252B1 (fr)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
DE102006022210A DE102006022210A1 (de) 2006-05-11 2006-05-11 Anordnung und Verfahren zum Erstellen eines Frankierabdrucks

Publications (3)

Publication Number Publication Date
EP1855252A2 EP1855252A2 (fr) 2007-11-14
EP1855252A3 EP1855252A3 (fr) 2008-02-13
EP1855252B1 true EP1855252B1 (fr) 2014-02-12

Family

ID=38330121

Family Applications (1)

Application Number Title Priority Date Filing Date
EP07107954.5A Not-in-force EP1855252B1 (fr) 2006-05-11 2007-05-10 Agencement et procédé destinés à la fabrication d'un affranchissement

Country Status (3)

Country Link
US (1) US20070265988A1 (fr)
EP (1) EP1855252B1 (fr)
DE (1) DE102006022210A1 (fr)

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4649491A (en) * 1984-12-20 1987-03-10 Pitney Bowes Inc. Modular battery powered business systems
FR2649230B1 (fr) * 1989-06-30 1993-11-26 Alcatel Satmam Machine a affranchir miniature
US5699258A (en) * 1992-04-16 1997-12-16 Francotyp-Postalia Ag & Co Assembly for franking postal matter, and multi-carrier shipping system
US5905232A (en) * 1993-10-14 1999-05-18 Ascom Hasler Mailing Systems, Inc. Electronic postage scale system and method
US6233568B1 (en) * 1994-01-03 2001-05-15 E-Stamp Corporation System and method for automatically providing shipping/transportation fees
US6907399B1 (en) * 1995-08-21 2005-06-14 Pitney Bowes Inc. Secure user certification for electronic commerce employing value metering system
US5796841A (en) * 1995-08-21 1998-08-18 Pitney Bowes Inc. Secure user certification for electronic commerce employing value metering system
DE19622304A1 (de) * 1996-05-21 1997-11-27 Francotyp Postalia Gmbh Auswechselbares Portorechnermodul und Verfahren zur Datenübertragung
US6050486A (en) * 1996-08-23 2000-04-18 Pitney Bowes Inc. Electronic postage meter system separable printer and accounting arrangement incorporating partition of indicia and accounting information
DE19757653C2 (de) * 1997-12-15 2003-07-17 Francotyp Postalia Ag Verfahren und postalisches Gerät mit einer Chipkarten-Schreib/Leseeinheit zum Nachladen von Änderungsdaten per Chipkarte
DE19843252A1 (de) * 1998-09-11 2000-03-16 Francotyp Postalia Gmbh Verfahren zur Dateneingabe in einen Portorechner und Anordnung zur Durchführung des Verfahrens
AU2002254087A1 (en) * 2001-02-23 2002-09-12 Ascom Hasler Mailing Systems, Inc. Removable data carrier
GB0302277D0 (en) * 2003-01-31 2003-03-05 Neopost Ltd Franking apparatus

Also Published As

Publication number Publication date
US20070265988A1 (en) 2007-11-15
EP1855252A2 (fr) 2007-11-14
DE102006022210A1 (de) 2007-11-15
EP1855252A3 (fr) 2008-02-13

Similar Documents

Publication Publication Date Title
DE69932396T2 (de) Verfahren und Vorrichtung zur sicheren Schlüsselübertragung zwischen einer Frankiermaschine und einer entfernten Datenzentrale
DE19757652B4 (de) Frankiermaschine mit einer Chipkarten-Schreib-/Leseeinheit
EP1278164B1 (fr) Système et méthode pour changer la fonctionnalité d'un module de sécurité
EP2122588B1 (fr) Carte à puce ayant une fonction de premier utilisateur, procédé de sélection d'une identification et système informatique
DE69729915T2 (de) Verfahren und Vorrichtung zur ferngesteuerten Änderung von Sicherheitsmerkmalen einer Frankiermaschine
DE19534528A1 (de) Verfahren zur Veränderung der in Speicherzellen geladenen Daten einer elektronischen Frankiermaschine
EP2126858B1 (fr) Carte à puce et procédé de libération d'une fonction de carte à puce
DE19757649A1 (de) Anordnung und Verfahren zum Datenaustausch zwischen einer Frankiermaschine und Chipkarten
EP0927970B1 (fr) Machine à affranchir avec dispositif de lecture/écriture de cartes à puce
EP0927971B1 (fr) Procédé et dispositif postal avec une unité de lecture/écriture de cartes à puce pour le rechargement de données de changement dans une carte à puce
DE10305730B4 (de) Verfahren zum Überprüfen der Gültigkeit von digitalen Freimachungsvermerken
DE102007041370B4 (de) Chipkarte, elektronisches Gerät, Verfahren zur Herstellung einer Chipkarte und Verfahren zur Inbenutzungnahme einer Chipkarte
EP0969420B1 (fr) Procédé pour sécuriser la transmission de données de service à un terminal et dispositif pour la mise en oeuvre de ce procédé
EP1619630A2 (fr) Procédé et dispositif pour rembourser des frais d'affranchissement
EP1638246B1 (fr) Méthode d'échange des données cryptographiques
WO1999012088A1 (fr) Procede de commande de distribution et d'utilisation de produits logiciels dans le cas d'ordinateurs relies au reseau
DE60015907T2 (de) Verfahren und Vorrichtung zur Erzeugung von Nachrichten welche eine prüfbare Behauptung enthalten dass eine Veränderliche sich innerhalb bestimmter Grenzwerte befindet
DE69930202T2 (de) Verfahren zur Begrenzung der Schlüsselbenutzung in einem Frankiersystem welches kryptographisch gesicherte Briefmarken produziert
EP1855252B1 (fr) Agencement et procédé destinés à la fabrication d'un affranchissement
EP1222563A2 (fr) Systeme pour effectuer une transaction
EP1807808B1 (fr) Procede et dispositif d'affranchissement d'envois postaux
EP3254432A1 (fr) Procédé de gestion d'autorisation dans un ensemble comportant plusieurs systèmes informatiques
EP1202223B1 (fr) Machine postale et procédé pour l'initialisation
EP2003619A2 (fr) Procédé et agencement de sécurisation de données pouvant être définies par l'utilisateur d'une affranchisseuse
DE69738532T2 (de) Verfahren und Vorrichtung zum automatischen Ausserbetriebsetzen eines entfernbaren, tragbaren Tresors eines Frankiersystems

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC MT NL PL PT RO SE SI SK TR

AX Request for extension of the european patent

Extension state: AL BA HR MK YU

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC MT NL PL PT RO SE SI SK TR

AX Request for extension of the european patent

Extension state: AL BA HR MK YU

17P Request for examination filed

Effective date: 20080402

17Q First examination report despatched

Effective date: 20080609

AKX Designation fees paid

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC MT NL PL PT RO SE SI SK TR

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

INTG Intention to grant announced

Effective date: 20130809

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC MT NL PL PT RO SE SI SK TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 652430

Country of ref document: AT

Kind code of ref document: T

Effective date: 20140215

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: ROTTMANN, ZIMMERMANN + PARTNER AG, CH

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502007012753

Country of ref document: DE

Effective date: 20140320

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: NL

Ref legal event code: T3

REG Reference to a national code

Ref country code: SE

Ref legal event code: TRGR

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140612

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140612

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502007012753

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140510

26N No opposition filed

Effective date: 20141113

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

REG Reference to a national code

Ref country code: IE

Ref legal event code: MM4A

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502007012753

Country of ref document: DE

Effective date: 20141113

REG Reference to a national code

Ref country code: DE

Ref legal event code: R082

Ref document number: 502007012753

Country of ref document: DE

Representative=s name: COHAUSZ & FLORACK PATENT- UND RECHTSANWAELTE P, DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140510

REG Reference to a national code

Ref country code: DE

Ref legal event code: R081

Ref document number: 502007012753

Country of ref document: DE

Owner name: FRANCOTYP-POSTALIA GMBH, DE

Free format text: FORMER OWNER: FRANCOTYP-POSTALIA GMBH, 16547 BIRKENWERDER, DE

Effective date: 20150330

Ref country code: DE

Ref legal event code: R081

Ref document number: 502007012753

Country of ref document: DE

Owner name: FRANCOTYP-POSTALIA GMBH, DE

Free format text: FORMER OWNER: FRANCOTYP-POSTALIA GMBH, 16547 BIRKENWERDER, DE

Effective date: 20140212

Ref country code: DE

Ref legal event code: R082

Ref document number: 502007012753

Country of ref document: DE

Representative=s name: COHAUSZ & FLORACK PATENT- UND RECHTSANWAELTE P, DE

Effective date: 20150330

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 10

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140513

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140212

Ref country code: BE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20140531

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO

Effective date: 20070510

REG Reference to a national code

Ref country code: CH

Ref legal event code: PCAR

Free format text: NEW ADDRESS: GARTENSTRASSE 28 A, 5400 BADEN (CH)

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 11

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: NL

Payment date: 20170519

Year of fee payment: 11

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20170519

Year of fee payment: 11

Ref country code: DE

Payment date: 20170405

Year of fee payment: 11

Ref country code: CH

Payment date: 20170519

Year of fee payment: 11

Ref country code: FR

Payment date: 20170523

Year of fee payment: 11

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: AT

Payment date: 20170522

Year of fee payment: 11

Ref country code: IT

Payment date: 20170526

Year of fee payment: 11

Ref country code: SE

Payment date: 20170519

Year of fee payment: 11

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 502007012753

Country of ref document: DE

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

REG Reference to a national code

Ref country code: SE

Ref legal event code: EUG

Ref country code: NL

Ref legal event code: MM

Effective date: 20180601

REG Reference to a national code

Ref country code: AT

Ref legal event code: MM01

Ref document number: 652430

Country of ref document: AT

Kind code of ref document: T

Effective date: 20180510

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20180510

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180511

Ref country code: AT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180510

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180531

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180531

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180510

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20181201

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180531

Ref country code: NL

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180601

Ref country code: IT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20180510