EP2003619A2 - Method and device for securing user-defined information of a franking machine - Google Patents

Abstract

The method involves connecting the stamping machine (102,103,104) and a remote data center (106) over a communication network (105) in a connecting step. The data stored in the stamping machine as security data is transmitted to the data center in a transmission step. The security data is stored in the data center in a storage step. The security data comprises of user-defined configuration data of the stamping machine, which are defined by the user of the stamping machine for configuration of the stamping machine. Independent claims are also included for the following: (1) an arrangement for data processing (2) a method for the configuration of a stamping machine (3) a stamping machine for the arrangement.

Description

The present invention relates to a method for data backup of a franking machine, in which a connection is established via a communication network in a data link step between the franking machine and a remote data center, data stored in a transfer step in the postage meter are transmitted as backup data to the data center and in a storage step the backup data is stored in the data center. The invention further relates to a method for configuring a franking machine, in which a method according to the invention for data backup is used. Finally, the invention relates to a corresponding arrangement for data processing, a corresponding franking machine and a corresponding data center.

In today's franking machines, the security data and usage data of the franking machine stored in a security module of the postage meter machine or elsewhere are transmitted to the data center at predeterminable times (for example at regular time intervals or during each communication of the postage meter machine with a remote data center) and stored there for data backup. For the purposes of the present invention, the term security data is understood to mean those data which are used in connection with the execution of security-relevant functions of the franking machine (for example cryptographic keys, digital signatures, cryptographic certificates, etc.), while the term usage data refers to those data Data are to be understood, which are representative of the actual use of the franking machine (for example, the contents of the postal registers or data, which show the usage broken down by different postal products).

The usage data are then statistically evaluated in the data center, for example, in order to be able to influence the use of the franking machine, as can be seen for example from US Pat EP 0 375 330 A2 is known.

In data protection, one usually limits oneself to the most necessary data, which are usually the security data and usage data described above, because of the comparatively low data transmission capacities of today's franking machines, ie, those data which are directly related to the documentation of the integrity and use of the franking machine and on which the user has at best indirect influence (via the use of the franking machine).

While the security data and usage data described above are protected against data loss via this known security device, there is the problem with the known franking machines that, for example, a destruction of components of the postage meter machine, in particular of the corresponding memory components of the postage meter machine, may result in loss of data data covered by the backup. As a rule, user-definable configurations of the franking machine, for example the establishment of cost centers, stored and freely selectable or user-definable cliché data for the franking imprints (eg advertising clichés for different occasions, etc.), are lost. As a rule, these have to be manually re-entered into the franking machine by hand.

A further problem of the currently known franking machines is that new or newly initialized franking machines, insofar as functions and settings of the postage meter machine that can be defined by the user, have to be configured comparatively complicated by hand by the user in order to set them to the desired one Stand up.

The present invention is therefore based on the object to provide a method for data backup, a method for configuring a postage meter, an arrangement for data processing, a postage meter or a data center of the type mentioned above, which or the above-mentioned disadvantages not or at least to a lesser extent and in particular allows a simple configuration or reconfiguration of the franking machine.

The present invention solves this problem with a method according to claim 1. It further solves this problem with an arrangement according to claim 15. It further solves this problem with a postage meter according to claim 31 and a data center according to claim 32.

The present invention is based on the technical teaching that a simple configuration or reconfiguration of a franking machine is made possible if backup data for the relevant franking machine itself or a master franking machine are stored in a data center, comprising user-definable configuration data of the franking machine, ie therefore data include, which are definable by the user of the postage meter for the configuration of the franking machine.

This makes it possible, on the one hand, to carry out a reconfiguration in the event of data loss in the postage meter machine itself, ie. H. restore their most recent user-definable configuration. On the other hand, with such a data backup, it is possible to transfer both user-definable configuration of a damaged franking machine to an exchange franking machine and also to transfer the user-definable configuration of a master franking machine to one or more other franking machines.

In particular, this makes it possible in a simple manner to enable the user of a new franking machine to configure his own franking machine quickly and easily by first selecting from a pool of master franking machines the one whose user-definable configuration comes closest to his ideas. Subsequently, the user can simply load the corresponding parts of the backup data of the selected master postage meter machine into his postage meter machine and thus achieve a quick configuration of his new postage meter machine.

However, such a master franking machine can also be another franking machine likewise operated by the users of the new franking machine. With the present invention, the user of both franking machines (for example a company with several branches in which one of the franking machines is operated in each case) can then easily ensure that both franking machines have the same user-definable configuration.

According to one aspect, the present invention therefore relates to a method for data backup of a franking machine, in which a connection is established via a communication network in a data link step between the franking machine and a remote data center, data stored in a transfer step in the postage meter as backup data the data center are transmitted and finally in a storage step the Backup data stored in the data center. In this case, the backup data comprise user-definable configuration data of the franking machine which can be defined by the user of the franking machine for configuration of the franking machine.

The user-definable configuration data may in principle comprise any data that can be directly and freely defined by the user. The configuration data preferably include, among other things, data for configuring functions of the franking machine. These include, among other things, user-definable configuration data that defines how certain data acquired or accumulated during the operation of the postage meter machine is stored for simplification of later evaluations. Consequently, this may therefore be data for the organization of the storage of usage data of the franking machine.

Additionally or alternatively, the configuration data may also include user-definable data for configuring a franking imprint that can be generated by the franking machine. This may include, for example, data on clichés that can be selected by the user for a franking imprint that can be generated by the franking machine. This data may have been generated by the user himself on the franking machine. It is also possible to include cliched data loaded from the outside into the franking machine.

The configuration data preferably comprise, for example, user-definable data for determining menu sequences and / or menu contents of the franking machine. Additionally or alternatively, the configuration data may comprise user-definable data for associating functions of the postage meter machine with operations of input devices of the postage meter machine. This may be, for example, the functional assignment of certain keys or key combinations of the franking machine.

The data backup step can take place at arbitrary times or when any predefinable temporal or non-temporal events occur. For example, it may be provided that the data backup step takes place at every nth communication (n = 1) of the franking machine with the data center. In preferred variants of the method according to the invention, it is provided that the data backup step takes place at predefinable times in order to ensure regular data backup. Additionally or alternatively, the data backup step can be triggered by an input (For example, a user or service technician) in the franking machine, so as not to be bound to a predetermined timing.

The data backup step can continue to be performed each time the relevant given time or non-time event occurs. However, in order to achieve the most economical operation, it is preferably provided that the data backup step is performed only if the data backup step is to be carried out for the first time after an initialization of the postage meter or if a change of the user-definable configuration data has taken place since the last execution of the data backup step. Thus, the data backup step is actually only performed when it is necessary to bring the data in the data center to a current state. As a result, unnecessary data transfers can be avoided.

Incidentally, it goes without saying that the data transmitted and stored in the context of the data backup step can be limited to those data for which there is an updating requirement in the data center in order to reduce the amount of data to be transmitted. For example, only those user-definable configuration data can be transmitted as backup data in which a relevant change has occurred since the last data backup step.

The data backup step can be carried out as part of the processing of a separate, separate service protocol in which the data backup step is carried out as the only service between the postage meter machine and the data center. In other variants of the invention, the data backup step is embedded in a service protocol, during the processing of which one or more further services are performed between the postage meter machine and the data center. In other words, it can be provided that the data backup step is carried out as part of a service performed between the postage meter machine and the data center, wherein the data backup step can be a sub-service of a service comprising at least one further service performed between the postage meter machine and the data center. As a result of this embedding of the data backup step in a sequence with other services (preferably arbitrarily changeable), it is possible in a simple manner to carry out the data backup step if a communication between the postage meter machine and the data center already exists.

The backup data can in principle be stored in any suitable manner in the data center. For example, they can simply be stored in a special memory of the data center assigned to the franking machine. Preferably, however, it is provided that the configuration data are stored in the storage step in the data center linked with additional information, which allows a more variable handling of the backup data.

The additional information can basically have any suitable and desired information content. The additional information preferably comprises an identification (preferably freely definable by the user) of the data backup step. Additionally or alternatively, the additional information may comprise a time information representative of the time of execution of the data backup step. In both cases, it is possible with a parallel storage of the backup data of multiple backup steps to identify and select a particular backup step at a later date based on its identification or its time.

Additionally or alternatively, the additional information may also include an identification of the franking machine (eg serial number) and / or of the user (eg customer number) of the postage meter machine in order to allow a correspondingly simple assignment of the security data to the franking machine or the user , Furthermore, the additional information may comprise a configuration information representative of the configuration of the franking machine that can not be defined by the user. These are, for example, the type, the software version, etc. of the franking machine.

Finally, the additional information may include authorization information required to authorize access to the backup data. This makes it possible in a simple manner to anchor the regulation of access to the backup data directly in the backup data. In the simplest case, the authorization information is a password. However, any other, in particular arbitrarily complex, authorization mechanisms can also be implemented.

It can be provided that only the current backup data is stored in the data center, ie when performing the backup step, old backup data is destroyed, for example, overwritten. Preferably, however, it is provided that in the data center, the backup data is stored from a plurality of data backup steps, so as to easy way to create the ability to optionally reconstruct an earlier configuration state, which has already followed several changes and in particular several backup steps. Thus, it is easily possible, for example, to correct unrecognized misadjustments over a longer period of time.

The transmission of the backup data and their storage can be done in any suitable manner. In particular, this can be dispensed with a special backup of the data. However, it is preferably provided that the transmission of the security data in the transmission step and / or the storage of the security data in the storage step takes place using cryptographic means. In this case, the security can be designed such that the security data is protected against unauthorized access (read and / or write access) and / or unrecognized manipulation.

The backup data may only be stored for the purpose of configuring or reconfiguring postage meters. However, it is preferably provided that the backup data in the data center and / or in a further data processing device that can be connected to the data center be further processed, in particular evaluated. In this case, it is possible, in particular, for the further data processing device to execute a management program assigned to the user of the postage meter machine which processes the backup data further. For example, cost center data from user-definable cost centers for statistical purposes can be evaluated and further processed. In particular, it is possible to incorporate such data directly into a merchandise management system of the user, so that a complex, usually manual transmission of such data is no longer required.

The present invention further relates to a method for configuring a franking machine, in which in a data protection step with a method according to the invention user-definable configuration data of a postage meter comprehensive backup data are stored in a remote data center and in a configuration step, at least a portion of the backup data from the data center in a postage meter loaded and used to configure the postage meter.

As already mentioned, it can be provided that the backup data is loaded again into the same franking machine. In advantageous variants of the invention however, it is provided that the backup data originate from a first franking machine and are used in the configuration step to configure at least one second franking machine. With this it is, as already explained above, possible in a simple manner to configure an exchange franking machine or to configure one or more further franking machines corresponding to the first franking machine.

The configuration step can, in turn, be carried out when any predefinable temporal or non-temporal events occur. In order to achieve a timely configuration of the second franking machine, provision can be made for the configuration step to take place at the next production of a connection of the second franking machine to the data center following the data backup step. In other words, the configuration of the second franking machine can be immediately enforced as soon as it establishes a connection with the data center.

The configuration of the franking machine in the configuration step can be done exclusively with the save data stored in the last data backup step. In preferred variants of the invention, however, it is possible to carry out a modification of the backup data in order to achieve a desired adaptation of the user-definable configuration data and thus the configuration of the postage meter machine in the configuration step.

It is therefore preferably provided that in a modification step which follows the data backup step and precedes the configuration step, the user-definable configuration data stored in the data center are modified and in the configuration step at least the user-definable configuration data modified in the modification step is loaded into the franking machine and used to configure the franking machine become.

The modification can be carried out by any authorized side. In particular, it may be provided what the user of the postage meter machine himself makes a corresponding modification. For this purpose, provision may be made, for example, for the data center to allow the user access to the stored configuration data via an optionally correspondingly secure access (for example a web portal or the like). In this way, the user can, for example, via the modification of the configuration data of a master franking machine in one step the Configure multiple postage meters configured using the master postage meter configuration data.

The modification may relate to any user-definable configuration data. The modification can be used particularly advantageously in connection with the selection and / or adaptation of plate data for the franking impression produced by the respective franking machine. For example, it may be provided that the data center allows the user access to a catalog of the cliché data available to him via a corresponding access (eg a web portal or the like). The user can then select the desired cliché, whose data are then incorporated in the modification step in the stored backup data.

In preferred variants of the method according to the invention, it is therefore provided that the user-definable configuration data comprise cliché data for a franking imprint that can be generated by the postage meter and in the modification step the cliché data are modified, the modification of the cliché data being performed by replacing the previous cliché data with new cliché data. The new cliché data can be selected from a plurality of available different cliché data depending on a specification of the user of the franking machine.

The present invention further relates to a data processing arrangement with a postage meter having a first memory and a remote data center having a second memory. The franking machine and the data center are designed to establish a connection with each other in a data protection step via a communications network, to transmit data stored in the first memory as backup data to the data center and to store it in the second memory. According to the invention, the security data comprise user-definable configuration data of the franking machine that can be defined by the user of the franking machine for configuration of the franking machine.

With this arrangement, the above-described variants and advantages of the method according to the invention can be realized to the same extent, so that reference is made here only to the above statements.

The present invention further relates to a franking machine which has the features described above and to a data processing device which comprises has features described above. This makes it possible to realize the above-described variants and advantages of the method according to the invention to the same extent, so that reference is also made here only to the above statements.

Figur 1

eine schematische Darstellung einer bevorzugten Ausführungsform der erfindungsgemäßen Anordnung zur Datenverarbeitung, mit welcher eine bevorzugte Variante des erfindungsgemäßen Verfahrens zur Konfiguration einer Frankiermaschine unter Verwendung einer bevorzugten Variante des erfindungsgemäßen Verfahrens zur Datensicherung durchgeführt werden kann;

Figur 2

ein Ablaufdiagramm einer bevorzugten Variante des erfindungsgemäßen Verfahrens zur Konfiguration einer Frankiermaschine, welches mit der Anordnung aus Figur 1 durchgeführt werden kann.

Further preferred embodiments of the invention will become apparent from the dependent claims and the following description of preferred embodiments, which refers to the accompanying drawings. Show it

FIG. 1

a schematic representation of a preferred embodiment of the inventive arrangement for data processing, with which a preferred variant of the method according to the invention for the configuration of a postage meter machine using a preferred variant of the method according to the invention for data backup can be performed;

FIG. 2

a flowchart of a preferred variant of the method according to the invention for the configuration of a franking machine, which with the arrangement of FIG. 1 can be carried out.

The following is with reference to the FIGS. 1 and 2 a preferred embodiment of the arrangement 101 for data processing according to the invention is described, with which a preferred variant of the method according to the invention for the configuration of a postage meter machine using a preferred variant of the method according to the invention for data backup is performed.

As FIG. 1 As can be seen, the assembly 101 comprises a number of x franking machines (FM), which include, among others, a first franking machine 102, a second franking machine 103 and a third franking machine 104. The franking machines 102 to 104 can each be connected via a communication link, for example a data network 105, to a remote data center 106.

The franking machine 102 comprises, in addition to the usual, required for franking mail pieces FIG. 1 Components not shown include a first processing unit in the form of a first processor 102.1, a first security module 102.2, a first memory 102.3, an input / output unit 102.4 and a communication module 102.5, which are each connected to the first processor 102.1.

The first security module 102.2 is used in a customary manner to provide the security-relevant postal services required for the franking, such as, for example, the secure accounting of the franking values, but also the cryptographic security of certain postal data. Furthermore, the first security module 102.2 makes it possible to carry out cryptographic operations for the purpose of securing further data and for communication via the data network 105.

For the secure settlement of the franking values, the first security module 102.2 comprises in a well-known manner a processor, a cryptography module for performing cryptographic operations (using cryptographic algorithms and parameters) and corresponding - possibly redundant - registers for storing the billing data stored in a physical and logically secured from unauthorized access area are arranged.

The data center 106 comprises a second processing unit 106.1, a second security module 106.2, a second memory 106.3 and a communication module 106.4, which are each connected to the second processing unit 106.1. The second security module 106.2 provides security-relevant services, for example the cryptographic protection of certain postal or non-postal data or the communication via the data network, in a well-known manner.

As will be explained below with reference to the first franking machine 102 (representative of all other franking machines), the arrangement 101 for the first franking machine 102 can be used to make a backup in which certain data of the franking machine 102 are stored in the data center 106. Furthermore, the arrangement 101 can be used to configure the first franking machine 102 or one or more other franking machines 103, 104 using the data saved in the context of this data backup.

First, in a step 107.1, the method sequence of the method according to the invention for the configuration of a franking machine is started. In a step 107.2 it is then checked whether the inventive method for data backup should be performed. This check can take place both in the franking machine 102 and in the data center 106.

As part of the data backup, any data of the franking machine 102 can be defined as backup data and saved in the data center 106. Dier Backup data can include, among other things, postal data (for example the status of the security module 102.2, cryptographic certificates, etc.) or configuration data of the franking machine 102 that is not freely definable by the user of the franking machine 102 (for example information about the type, the software version, etc.).

In any case, the security data according to the present invention comprise user-definable configuration data of the franking machine 102. In principle, these can be any data that can be directly and freely defined by the user. Among other things, the configuration data comprise data for configuring functions of the franking machine 102. These include, among other things, configuration data that can be defined by the user and define how certain data acquired or accumulated during operation of the franking machine 102 are stored (for example, to simplify later evaluations). Consequently, this may therefore be data for the organization of the storage of usage data of the franking machine.

An example of such organizational data is data relating to user-established cost centers to which the use of the franking machine 102 and thus the consumption of postage is assigned. In addition to purely organizational data (eg number, designation, consumption limits, etc. of the cost centers), the backup data preferably also includes the data associated with the cost centers in operation (eg consumption data, etc.) in order to also protect them against data loss ,

Additionally or alternatively, the configuration data may also include data definable by the user of the franking machine 102 for the configuration of a franking imprint that can be generated by the franking machine 102. This may, for example, be data on user-selectable clichés for the franking imprint. This data may have been generated by the user himself at the franking machine 102 (for example, by entering a text via the input / output unit 102.4). It is also possible to include user-selectable cliched data (loaded, for example, via a memory card inserted into the postage meter 102 or from the data center into the postage meter 102) loaded into the postage meter 102 from outside.

Likewise, the user-definable configuration data may, for example, data definable by the user of the franking machine 102 for determining menu sequences and / or menu contents of the franking machine. Additionally or alternatively, the Configuration data from the user definable data for the assignment of functions of the postage meter machine to operations of the input / output unit 102.4 include. This may be, for example, the functional assignment of certain keys or key combinations of the input / output unit 102.4.

Any suitable criteria can be defined for the fulfillment of which the data backup should be performed. The data backup can take place at arbitrary times or at the entry of any predeterminable temporal or non-temporal events. For example, it may be provided that the data backup step takes place at every nth communication (n = 1) of the franking machine 102 with the data center 106. Additionally or alternatively, the data backup can take place at predeterminable times in order to ensure regular data backup. Finally, the data backup can additionally or alternatively triggered by a corresponding input (for example, a user or service technician) via the input / output unit 102.4 done in the franking machine 102.

In order to achieve the most economical operation, it is provided that the data backup is carried out only if it is to be carried out for the first time after an initialization of the franking machine 102 or since the last execution of the data backup a change of the data to be backed up has taken place. The data backup is therefore actually only carried out when it is necessary to bring the data in the data center 106 to a current state. As a result, unnecessary data transfers can be avoided.

Incidentally, it goes without saying that the data transmitted and stored in the context of the data backup for the purpose of reducing the amount of data to be transferred can be restricted to those data for which there is an updating requirement in the data center 106. For example, therefore, only those data can be transmitted as backup data in which a relevant change has occurred since the last data backup.

The data backup can be carried out as part of the processing of a separate, separate service protocol, in which the data backup is performed as the only service between the franking machine 102 and the data center 106. In other variants of the invention, however, provision may also be made for the data backup to be embedded in a service protocol, one or more further services being connected between the franking machine 102 and the data center 106 during its execution be performed. Thus, for example, it may be provided that the data backup takes place during the processing of a so-called remote value specification, in which new credit is loaded from the data center 106 into the franking machine 102.

If it is determined in step 107.2 that a data backup is to be carried out, in a data backup step 107.3 a connection is first established in a connection step between the franking machine 102 and the data center 106 via the communication network 105. The connection setup can originate both from the data center 106 and from the franking machine 102. In particular, the connection setup can be initiated immediately if it is detected that a data backup should be performed.

In a transmission step of the data backup step 107.3, the backup data stored, inter alia, in the first memory 102.3 of the postage meter machine are then transmitted to the data center 106. The backup data are preferably converted by the processor 102.1 into a semantic format (for example encoded as an XML data stream) and transmitted to the data center 106.

In the data center 106, the thus transmitted backup data are finally stored in a memory step in the second memory 106.3 in the data center 106. In this case, a sequential storage of the backup data, d. H. the backup data of the current backup step 107.3 are stored in addition to possibly existing other backup data of the postage meter 102 from previous backup steps. Consequently, there is a history of the backup data in the data center 106.

The backup data are stored in a memory area 106.5 of the second memory 106.3 assigned to the first franking machine 102, so that an assignment of the backup data to the first franking machine 102 is already ensured thereby.

In addition, the backup data of the first franking machine 102 are stored linked with additional information. In the present example, the additional information includes inter alia an identification of the data backup step that can be freely defined by the user of the franking machine 102. This may be, for example, a file name or the like that can be specified by the user of the franking machine 102. The user of the franking machine 102 can assign this file name, for example, via the input / output unit 102.4. Furthermore, the additional information includes a time information representative of the time of execution of the backup step 107.3.

This makes it possible to identify and select a specific data backup step and the backup data saved thereby also at a later time on the basis of the identification or the time. This makes it possible, if necessary, to reconstruct an earlier configuration state of the franking machine 102, which has already been followed by several changes and, in particular, several data backup steps. Thus, for example, it is possible in a simple manner to correct unrecognized misadjustments over a longer period of time using the corresponding backup data (from an optionally far-off data backup step).

In addition, the additional information may also include an identification of the postage meter 102 (eg, a unique and unique serial number) and / or the user (eg, a unique and unique customer number) of the postage meter 102, so as to provide a correspondingly simple assignment of the security data to enable the franking machine 102 and the user of the franking machine 102. Furthermore, the additional information may include configuration information which is representative of the configuration of the franking machine 102 that can not be defined by the user, unless the backup data itself already includes such configuration information. These are, for example, the type, the software version etc. of the franking machine 102.

Finally, the additional information may include authorization information required to authorize access to the backup data. This makes it possible in a simple manner to anchor the regulation of access to the backup data directly in the backup data. In the simplest case, the authorization information is a password. However, any other, in particular arbitrarily complex, authorization mechanisms can also be implemented.

The transmission of the backup data from the franking machine 102 to the data center 106 and the storage of the backup data is done in the present example using a hedge by well-known cryptographic means which are provided via the first security module 102.2 and / or the second security module 106.2. In this case, the security can be designed in such a way that the security data is protected against unauthorized access (eg by regulating the read and / or write access or encryption of the data) and / or unrecognized Tampering (eg by so-called message authentication codes (MAC) or digital signatures, etc.).

The backup data can only be stored for the purpose of the configuration or reconfiguration of franking machines described in more detail below. In the present example, however, provision is made for the backup data to be further processed in a further data processing device 108 of the user of the franking machine 102 that can be connected to the data center 106 via the data network 105. For this purpose, the backup data are transmitted to the data processing device 108 after they have been stored in a step 107.4.

The data processing device 108 executes a management program assigned to the user of the franking machine 102 (for example, a merchandise management program), which processes the transmitted backup data further. For example, cost center data from user-definable cost centers for statistical purposes in the data processing device 108 can be evaluated and further processed. Thus, it is possible to incorporate such data directly into a merchandise management system of the user, so that a complex, usually manual transmission of such data is no longer required.

In the course of this evaluation, it is possible inter alia to optimize the consumption costs of the user of the franking machine 102 by determining, for example, the most favorable postal carrier for the respectively determined usage profile, in total, or for individual cost centers, based on a usage profile created from the security data. It is understood that this evaluation or optimization can also take place in the data center 106 and can then be made available to the user of the franking machine 102.

In the present example, it is still possible to influence a part of the backup data stored in the second memory 106.2 by means of a corresponding modification. The modification can be carried out by any authorized side. For example, the user of the franking machine 102 or another correspondingly authorized person or device can make such a modification.

In order to carry out the modification, it is provided that the data center 106 of the corresponding authorized person or device via an optionally according to secure access (for example, a web portal or the like) allows access to the stored in the second memory 106.3 backup data. In this way, the person entitled to modify the configuration of the franking machine 102 and / or other franking machines 103, 104, for example by modifying corresponding configuration data of the franking machine 102 contained in the security data, as will be explained in more detail below.

The modification may relate to any user-definable configuration data contained in the backup data. The modification can be used particularly advantageously in connection with the selection and / or adaptation of cliché data for the franking imprint produced by the respective franking machine 102 to 104. Thus, for example, it may be provided that the data center 106 of a correspondingly authorized person or device, starting from the data processing device 108 via a corresponding access (eg, a web portal or the like), accesses a catalog of the franking machine 102 to 104 or their Allows users to access cliched data. About this accessibility then the desired cliché can be selected by generating a corresponding default information. According to the default information, the data of this cliché are then inserted into the stored backup data in the modification step.

The available cliché data can be stored, for example, in the memory area 106.5, 106.6 of the second memory 106.3 assigned to the respective franking machine 102 to 104. However, it can also be provided that the catalog comprises further cliché data which is stored in a third memory 106.7 of the data center 106 and which is selected in the context of the access for appropriate remuneration, d. H. can be purchased.

In a step 107.5 is therefore checked whether a modification of the backup data should be made. If this is the case, the backup data stored in the data center are modified in a modification step 107.6 as described above. In the present example, the user of the franking machine 102, for example, selects a new advertising cliche which is to appear in his franking imprints.

As part of the modification, the cliched data previously contained in the backup data of the last data backup step 107.3 will then be replaced by the new cliché data replaced. It goes without saying that these changes to the backup data of the last data backup step can be documented accordingly in order to be able to understand them at a later time. Likewise, it can be provided that with the modification the backup data record of the last data backup step 107.3 can remain and from this only a new backup data record (with the corresponding additional information described above, in particular a separate identification and its own time information) is generated. This has the advantage that you get a complete history of the backup data.

As noted above, the data center 106 backup data may be used to modify the configuration of the postage meter 102 or other postage meters 103, 104. For this purpose, it is checked in a step 107.7, to be performed on such a configuration. This check can be carried out both in the relevant postage meter 102 to 104 or in the data center 106.

Like the data backup, the configuration can also be performed on the occurrence of any predefinable temporal or non-temporal events. In order to achieve a timely configuration of a franking machine 102 to 104, it may be provided that the configuration takes place immediately at the next data backup step 107.3 subsequent to the production of a connection of the relevant franking machine 102 to 104 with the data center 106. In other words, the configuration of the relevant franking machine 102 to 104 can be immediately enforced as soon as it establishes a connection with the data center 106.

If it is determined in step 107.7 that a configuration of one of the franking machines 102 to 104 is to be carried out, the configuration of the respective franking machine 102 to 104 takes place in a configuration step 107.8. For this purpose, a connection is first established between the respective franking machine 102 to 104 and the data center , Like the data backup, the configuration can also be carried out as part of a separate service protocol. Likewise, however, it is again possible for the configuration to be embedded in a service protocol, during the processing of which additional services (for example, a remote value specification) between the relevant franking machine 102 to 104 and the data center 106 are performed.

If the connection between the relevant franking machine 102 to 104 and the data center 106 is established, the corresponding (possibly in the Modification step 107.6 modified) backup data from the data center 106 loaded in the relevant postage meter 102 to 104 and used there to configure the postage meter.

It goes without saying that, as in the case of the data backup, only that part of the backup data can be loaded into the franking machine 102 to 104 in question, for which a configuration is required in the relevant franking machine 102 to 104. Consequently, it can therefore be provided that only that part of the backup data is loaded for which there is a deviation between the backup data and the current configuration data of the relevant postage meter 102 to 104. It is understood that the user of the relevant franking machine 102 to 104 may optionally be given the opportunity to block the configuration in whole or in part, if it is undesirable in his view.

In the present example, the security data used to configure the relevant postage meter 102 to 104 in the configuration step 107.8 may be selected by the user of the relevant postage meter 102 to 104 or another authorized person or device. For example, it may be provided that such a selection has been made by a preceding modification in the modification step 107.6 and the correspondingly modified backup data record is automatically used for the configuration.

Likewise, however, it can also be provided that after the establishment of the communication between the respective franking machine 102 to 104 and the data center 106 with the user of the relevant franking machine 102 to 104 via the input / output unit of the respective franking machine 102 to 104 a corresponding selection dialog is guided, where the user selects the backup data set to use. This can be the case in particular if the user himself initiates the configuration.

As already mentioned, it can be provided that the selected backup data are again loaded into the same franking machine, for example the (possibly previously modified) backup data of the first franking machine 102 are reloaded into the first franking machine 102 for reconfiguration.

This may be useful and necessary if the franking machine 102 is to be reconfigured after a repair or the like. Furthermore, the configuration can but also simply be provided to load into the postage meter 102 new cliché data or other configuration data previously selected in the modification step. As mentioned above, if necessary, only the cliché data can also be loaded into the configuration step 107.8 in the franking machine in question.

However, it is also possible, for example, to use the (possibly previously modified) backup data of the first franking machine 102 in the configuration step for configuring the second franking machine 103 and / or the third franking machine 104. As already stated above, this makes it possible in a simple manner to configure an exchange franking machine or to configure one or more further franking machines 103, 104 corresponding to the first franking machine 102.

In other words, the first franking machine 102 can then be used as a master franking machine, the configuration of which is transferred to the other franking machines 103, 104 during the configuration step.

However, such master franking machines also make it possible in a simple manner to enable the user of a new franking machine to configure his own franking machine quickly and easily by first accessing the data center 106 (via a web portal or the like) and from a pool of Master franking machines selects the one (for example, the first franking machine 102) whose user-definable configuration comes closest to his ideas. Subsequently, the user can simply load the corresponding parts of the backup data of the selected master postage meter machine into his postage meter machine and thus achieve a quick configuration of his new postage meter machine.

However, such a master franking machine can also be another franking machine likewise operated by the user of the new franking machine. With the present invention, the user of both franking machines (for example a company with several branches in which one of the franking machines is operated in each case) can then easily ensure that both franking machines have the same user-definable configuration.

In a step 107.9 is then checked whether the procedure should be terminated. If this is not the case, jump back to step 107.2. Otherwise, the process flow is terminated in a step 107.10.

It should be noted at this point that the above-described memories of the franking machine 102 and of the data center 106 may be formed, in whole or in part, both as separate memory modules and only as individual memory areas of a single memory module.

The present invention has been described above by means of examples with franking machines. It is understood, however, that it may also be used in conjunction with any other data processing equipment.

Claims (32)

Method for data backup of a postage meter machine, in which in a data backup step (107.3) in a connection step between the franking machine (102, 103, 104) and a remote data center (106), a connection is set up via a communication network (105), - Data stored in a transmission step in the franking machine (102, 103, 104) is transmitted as backup data to the data center (106) and in a storage step the backup data is stored in the data center (106), characterized in that - The backup data user-definable configuration data of the franking machine (102, 103, 104), which can be defined by the user of the franking machine (102, 103, 104) for configuring the postage meter (102, 103, 104). A method according to claim 1, characterized in that the configuration data - Data for configuration of functions of the postage meter (102, 103, 104) include and or - Data for configuring a franking impression that can be generated by the postage meter machine (102, 103, 104). Method according to claim 1 or 2, characterized in that the configuration data - Data for determining menu sequences and / or menu contents of the postage meter (102, 103, 104) include and or - Data for assigning functions of the franking machine (102, 103, 104) to operations of input devices (102.4) of the franking machine (102, 103, 104) include and or - Data for organizing the storage of usage data of the postage meter (102, 103, 104) include. and or - comprise data on selectable clichés for a franking imprint that can be generated by the franking machine (102, 103, 104). Method according to one of the preceding claims, characterized in that - The data backup step (107.3) at predetermined times and / or triggered by an input of the user in the postage meter (102, 103, 104) takes place and or - The data backup step (107.3) is only performed when the data backup step (107.3) after initialization of the postage meter (102, 103, 104) is performed for the first time or since the last execution of the data backup step (107.3), a change of the user-definable configuration data is done. Method according to one of the preceding claims, characterized in that - the data backup step (107.3) is performed as part of a service performed between the postage meter (102, 103, 104) and the data center (106), wherein - The data backup step (107.3) is in particular a facility of a between the postage meter (102, 103, 104) and the data center (106) executed, at least one further part comprehensive service. Method according to one of the preceding claims, characterized in that the configuration data in the storage step in the data center (106) be stored linked with additional information, with the additional information - An identification of the data backup step (107.3) includes, and / or comprising a time information representative of the time of execution of the data backup step (107.3), and or an identification of the franking machine (102, 103, 104) and / or of the user of the franking machine (102, 103, 104), and or - A configuration for the not definable by the user configuration of the postage meter (102, 103, 104) representative configuration information. and or - include authorization information required to authorize access to the backup data Method according to one of the preceding claims, characterized in that in the data center (106) the backup data from a plurality of data backup steps (107.3) are stored. Method according to one of the preceding claims, characterized in that the transmission of the security data in the transmission step and / or the storage of the security data in the storage step is carried out using cryptographic means, wherein - The protection is designed in particular such that the backup data is protected against unauthorized access and / or unrecognized manipulation. Method according to one of the preceding claims, characterized in that - The backup data in the data center (106) and / or in one with the data center (106) connectable data processing device (108) are further processed, in particular evaluated, wherein - The data processing device (108) in particular a the user of the franking machine (102, 103, 104) associated management program executes, which further processes the backup data. Method for configuring a franking machine, in which stored in a data backup step (107.3) with a method according to one of the preceding claims user-definable configuration data of a franking machine (102, 103, 104) comprehensive backup data in a remote data center (106) and - In a configuration step (107.8) at least a portion of the backup data from the data center (106) in a postage meter (102, 103, 104) loaded and used to configure the postage meter (102, 103, 104). A method according to claim 10, characterized in that the backup data originate from a first postage meter (102) and are used in the configuration step to configure at least one second postage meter (103, 104). A method according to claim 11, characterized in that the configuration step at the next the data backup step (107.3) subsequent production of a connection of the second franking machine (103, 104) takes place with the data center (106). Method according to one of claims 10 to 12, characterized in that in a modification step (107.6) which follows the data backup step (107.3) and precedes the configuration step (107.8), modifies the user-definable configuration data stored in the data center (106), and in the configuration step (107.8), at least the user-definable configuration data modified in the modification step (107.6) Postage meter (102, 103, 104) loaded and used to configure the postage meter (102, 103, 104). A method according to claim 13, characterized in that the user-definable configuration data comprise cliche data for a franking imprint that can be generated by the franking machine (102, 103, 104) and in the modification step (107.6), the cliché data is modified, wherein the modification of the cliché data is carried out by replacing the previous cliche data with new cliché data which, in particular depending on a specification of the user of the postage meter machine (102, 103, 104), is selected from a plurality of available different cliché data. Arrangement for data processing with - a franking machine (102, 103, 104) having a first memory (102.3), and - A remote data center (106) having a second memory (106.3), wherein - The postage meter (102, 103, 104) and the data center (106) are adapted to establish in a data backup step (107.3) via a communication network (105) with each other, in the first memory (102.3) stored data as backup data to the Data Center (106) to transmit and store in the second memory (106.3), characterized in that - The backup data user-definable configuration data of the franking machine (102, 103, 104), which can be defined by the user of the franking machine (102, 103, 104) for configuring the postage meter (102, 103, 104). Arrangement according to claim 15, characterized in that the configuration data - Data for configuration of functions of the postage meter (102, 103, 104) include and or - Data for configuring a franking impression that can be generated by the postage meter machine (102, 103, 104). Arrangement according to claim 15 or 16, characterized in that the configuration data - Data for determining menu sequences and / or menu contents of the postage meter (102, 103, 104) include and or - Data for assigning functions of the franking machine (102, 103, 104) to operations of input devices (102.4) of the franking machine (102, 103, 104) include and or - Data for organizing the storage of usage data of the postage meter (102, 103, 104) include. and or - comprise data on selectable clichés for a franking imprint that can be generated by the franking machine (102, 103, 104). Arrangement according to one of claims 15 to 17, characterized in that the franking machine (102, 103, 104) and / or the data center (106) is designed to - Initiate the data backup step (107.3) at predeterminable times and / or triggered by an input of the user in the franking machine (102, 103, 104) and or - Initiate the data backup step (107.3) only if the data backup step (107.3) is to be performed for the first time after initialization of the franking machine (102, 103, 104) or if the user-definable configuration data has changed since the last execution of the data backup step (107.3). Arrangement according to one of claims 15 to 18, characterized in that - the franking machine (102, 103, 104) and the data center (106) are adapted to carry out the data backup step (107.3) as part of a service performed between the franking machine (102, 103, 104) and the data center (106), wherein - The data backup step (107.3) is in particular a facility of a between the postage meter (102, 103, 104) and the data center (106) executed, at least one further part comprehensive service. Arrangement according to one of Claims 15 to 19, characterized in that the data center (106) is designed to store the configuration data in the second memory (106.3) linked to additional information, the additional information - An identification of the data backup step (107.3) includes, and / or comprising a time information representative of the time of execution of the data backup step (107.3), and or an identification of the franking machine (102, 103, 104) and / or of the user of the franking machine (102, 103, 104), and or - A configuration for the not definable by the user configuration of the postage meter (102, 103, 104) representative configuration information. and or - include authorization information required to authorize access to the backup data Arrangement according to one of Claims 15 to 20, characterized in that the data center (106) is designed to store the backup data from a plurality of data backup steps (107.3) in the second memory (106.3). Arrangement according to one of claims 15 to 21, characterized in that - The postage meter (102, 103, 104) and / or the data center (106) is adapted to carry out the transmission of the backup data and / or storage of the backup data in the second memory (106.3) using a cryptographic means, wherein - The protection is designed in particular such that the backup data are protected against unauthorized access and / or unrecognized manipulation. Arrangement according to one of claims 15 to 22, characterized in that - Provided with the data center (106) connectable data processing device (108) is provided, which is designed for further processing, in particular for the evaluation of the backup data, wherein - The further data processing device (108) is in particular designed to execute a the user of the franking machine (102, 103, 104) associated management program, which further processes the backup data. Arrangement according to one of claims 15 to 23, characterized in that the data center (106) is adapted, in a configuration step (107.8) at least a part of the backup data from the second memory (106.3) in one with the data center (106) connectable franking machine (102, 103, 104) which is adapted to use the part of the backup data loaded from the second memory (106.3) in the configuration step (107.8) for its configuration. Arrangement according to claim 24, characterized in that the backup data originate from a first postage meter machine (102) and - The data center (106) is adapted to load in the configuration step (108) at least a portion of the backup data from the second memory (106.3) in a connectable to the data center (106) second franking machine (103, 104), which is formed is to use the part of the backup data loaded from the second memory (106.3) in the configuration step (107.8) for its configuration. Arrangement according to claim 25, characterized in that the data center (106) and the second franking machine (103, 104) are adapted to the configuration step (107.8) at the next subsequent to the data backup step (107.3) establishing a connection of the second franking machine (103, 104) with the data center (106). Arrangement according to one of claims 24 to 26, characterized in that - the data center (106) is adapted, in a modification step (107.6) following the data backup step (107.3) and preceding the configuration step (107.8), to modify the user-definable configuration data stored in the data center (106), and - The data center (106) and the postage meter (102, 103, 104) are adapted to load in the configuration step (107.8) at least the modified in the modification step (107.6) user-definable configuration data in the postage meter (102, 103, 104) and to configure the postage meter (102, 103, 104). Arrangement according to claim 27, characterized in that the user-definable configuration data comprise cliche data for a franking imprint that can be generated by the franking machine (102, 103, 104) and - The data center (106) is adapted to modify the cliché data in the modification step (107.6), wherein - The data center (106) is adapted to make the modification of the cliched data by replacing the previous cliched data in the second memory (106.3) by new cliched data, - The data center (106) is adapted to the new cliched data, in particular in dependence on a default information of the user of the postage meter (102, 103, 104), a plurality of stored in a third memory (106.7) of the data center (106) different Select cliche data. Arrangement according to Claim 28, characterized in that a data processing device (108) which can be connected to the data center (106) is provided is, which is adapted to the transmission of the default information to the data center (106). Arrangement according to Claim 28 or 29, characterized in that the data center (106) is designed to provide overview information about the different cliched data stored in the third memory (106.7) in order to determine the default information. Postage meter machine of the arrangement (101) according to one of claims 15 to 30. Data center of the arrangement (101) according to one of claims 15 to 30.

Images