EP2192556A1 - Universally usable electronic hand stamp device - Google Patents

Abstract

The device (1) has a printing head (32) movable back and forth in a print window that is arranged in a base plate, where the base plate is turned towards a print medium during printing. A control unit (18) is connected with a user interface. A security processor (11) of the control unit has a transaction module that is in connection with the printing of an individually secured imprint for execution of cryptographic protection and certification tasks. The control unit controls the printing, and a base station (40) maintains and reloads data in the stamping device.

Description

The invention relates to a universally applicable electronic hand stamping device according to the preamble of claim 1. Under a universally applicable electronic hand stamping device are portable user terminals to understand which not only print monetary data, but also account for and store and which other security-related data generate and store or Can print certificates. In particular, at least one further application can be developed for a digital manual printer, as a small mobile manual franking machine with a digital printer. The invention is suitable for generating Inbox stamp, sequence number and fee stamp and franking imprints with security features or certificates.

An electronic handfranker is from the European patents EP 755028 B1 . EP 750277 B1 known, which can be moved by hand unlimited over a print medium. With the solutions mentioned above, however, no unique impressions or certificates can be generated.
A method for a franking and addressing machine according to the European patent EP 944 028 B1 uses a processing of signals of the relative movement between the printhead and letter as well as a control of the information processes for generating a security imprint parallel to certain printhead motion sequences. The letter is fed in the direction of transport standing on the edge and not moved during printing. The printhead can be moved in an x / y direction during printing.
From the European patent EP 1 244 063 B1 shows a method and apparatus for generating a print image in several steps, in which between the printing of two partial images, a transverse offset between the print head and the print medium is generated, wherein the print medium remains stationary.
In contrast, in the case of printers and electronic typewriters usually operated on the PC, at least one print head in one line and the print medium are moved orthogonally thereto.
In conventional franking machines, such as the Ultimail, only the print medium is moved ( EP 1 170 141 B1 ).
In the case of PC franking solutions, such as, for example, stampit from DPAG and franking machines (Mymail, Ultimail) by the applicant Francotyp Postalia GmbH, portable stationary devices are operated. By contrast, Handfrankierer are due to their low weight better suited for mobile use, as stationary devices that have a higher weight and thus are relatively difficult to carry.
From the European patent EP 816 106 B1 For example, a label printer with control, input and display means is known which allows selection of different labels and image features prior to printing. Here, however, a stationary thermal print head and a label passed to this label is provided.

Although label printers are already known which are capable of printing two-dimensional barcodes. However, the print quality of the known digital hand printers is not sufficient for such an application to print a franking imprint with a two-dimensional barcode.

From the European patent EP 1 000 758 B1 For example, a printing mechanism for a portable printer is known to move an inkjet print head over a print medium within a frame during printing. On the one hand eliminates a transport device for the printing medium (for example, paper) for such a printer capable of direct printing, which is previously placed manually on the print medium. On the other hand, a tilt sensor is required so that the print is not started while a nozzle face with the nozzles of the inkjet print head of the portable printer is still at an angle to the print surface of the print medium to be printed. The printer can be mounted on a base station and electrically connected to a computer via a USB cable of the base station to load an image pattern to be printed from the computer into the printer.

An alternative embodiment of a portable printer is already in the European patent EP 564 297 B1 known. Here, the portable printer is connected directly to a computer via a USB cable.

There are a variety of printing tasks for applications such as inboxes, ticket printers, label and label printers, among others, where a very small number of prints per day are required. Here, the economic and commercial market factors are to be considered, ie such a printer should be sold at low prices in large quantities. Such a printer should be as simple as possible and universally applicable. A transport device for the pressure medium can advantageously be dispensed with.
Reiner has announced an inbox stamp with a JetStamp 790 digital print ( DE 20 2004 011 038 U1 ). One such Stempler can be connected to a PC to download any data in the Stempler, which, inter alia, from the German utility model DE 20 209 997 U1 is known. The stamping machine of the type "jet stamp 790" from Ernst Reiner GmbH, however, provides a printed image with comparatively low quality, which is not yet sufficient for a machine-readable two-dimensional barcode, as required for a franking imprint. The stamping device "jet stamp 790" also has no physical security area and the controller can not process cryptographic data to create unique stamp imprints.

The invention has for its object to develop a simply constructed and universally applicable electronic hand stamping device, which can be used on a mobile basis. The handstamping device should have security features and be designed to carry out application-specific security-critical transactions and to generate individually secured stamp imprints which can be checked for their authenticity by suitable readers.

The object is achieved by a universal electronic hand stamping device with the features of claim 1.

A universal applicability should be understood as a deployment that is not always tied to one location and an autonomous or offline deployment. During the creation of an individually secured stamp imprint, there is no need for a data connection with a personal computer (PC) or server.

A transaction is to be understood as a fixed sequence of operations, which is regarded as a logical unit. For franking, for example, a security-critical transaction consists of the following operations: billing, generating a security code and creating a security impression.

• Steuerung,
• Durchführung sicherheitskritischer Aufgaben,
• Datenaufbereitung für den Druck,
• Ansteuerung und Abfrage Userinterface,
• Kommunikation über externe Schnittstelle(n),
• Kommunikation über interne Schnittstelle(n),
• Steuerung des Tintenstrahldruckkopfes,
• Steuerung des Antriebs,
• Abfrage der Druckauslösemittel (Schalter, Starttaste).

A security processor has at least one transaction module which allows for individual security. The latter takes place in a manner known per se by means of a cryptographic checksum over selected or all user data. The checksum is printed in the form of a security code or security feature (for example 2-D barcode) together with clear data as a security impression on the surface of the print medium. The transaction module is realized by means of hardware and / or software. Further transaction modules are implemented differently for the execution of the respective application programs.
The invention is based on the idea that a housing of the hand stamping device is made in several parts and a security area to protect access to the electronics and a non-security area for storing and contacting the power source (batteries or accumulators), the drive device for moving the print head and the print carriage of the ink jet print head. A protection of the drive lines of the inkjet printhead from tampering with manipulation is unnecessary. Because the inkjet printhead creates and prints out a security imprint, such as a certificate or a franking imprint with an individualized security feature, its authenticity and uniqueness is verifiable by means of a reader.
The universally applicable electronic hand stamping device has a ½ inch print width ink jet print head that can be moved back and forth in a print window. The print window has an area in which the print head is moved across the print medium. The print window is bounded by a frame. The printhead is electronically controlled by a controller on the one hand to move it and on the other hand to discharge drops of ink defined during the movement. A specific print pattern can thus be produced in high print quality. The print window is disposed in a base plate which faces a print medium during printing. On the base plate spacers between the printing medium and the base plate are fixed, which prevent slippage of the print window on the surface to be printed on the print medium. A controller is with a user interface, with an external interface and with an internal interface Interface and is provided for performing cryptographic security and certification tasks in connection with the printing of a custom-secured stamp. The controller is operatively connected via the internal interface to the inkjet printhead and to a drive for moving the inkjet printhead. An internal power source is located within the physical non-safety area within the housing and is used to power the controller, the inkjet printhead and its drive, as well as the power supply interfaces. The control is located within the enclosure in the physical security area and enables security-critical transactions. It may advantageously comprise a single security processor implemented as a security semiconductor device in order to carry out the following tasks:

• Control,
• Carrying out safety-critical tasks,
• Data preparation for printing,
• Control and query user interface,
• Communication via external interface (s),
• Communication via internal interface (s),
• Control of the inkjet printhead,
• Control of the drive,
• Polling the pressure release means (switch, start button).

• Anwendung als Posteingangsstempler,
• Anwendung als Sequenznummerndrucker,
• Anwendung als Sequenzdatendrucker oder
• Anwendung als Gebührenstempler.

Thus, the controller consists of a safety processor which is electrically connected to input and output means, a non-volatile memory, a row of individual display elements, a driver for the drives and a print head drive electronics as well as switching means and at least one interface. The universally applicable electronic hand stamping device is placed after printing for energy charging and maintenance of ink printing technology on a trained accordingly separate maintenance station and can be connected to a personal computer betriebsmäig to reload or exchange data.
With the aim of universal usability of the electronic hand stamping device, the following selectable modes can be named:

• Application as inbox stamp,
• Application as sequence number printer,
• Application as sequence data printer or
• Application as a fee stamp.

• Anwendung als Zertifikat-Drucker oder
• Anwendung als Hand-Frankierer.

With the aim of a non-mobile and autonomous execution of safety-critical transactions, including the generation of individually secured stamp imprints, the following can also be selected as required:

• Application as a certificate printer or
• Application as a hand meter.

• der Ortsungebundenheit bei der Ausführung von sicherheitskritischen Transaktionen einschließlich der Generierung individuell abgesicherter Stempelaufdrucke,
• der autarken 'offline' Arbeitsweise bei der Ausführung von sicherheitskritischen Transaktionen einschließlich der Generierung individuell abgesicherter Stempelaufdrucke, also ohne die Notwendigkeit einer drahtlosen oder drahtgebundenen Datenverbindung zu einem PC oder Server während des Stempelns,
• dem Schutz der zur Durchführung der sicherheitskritischen Transaktion einschließlich der Generierung individuell abgesicherter Stempelaufdrucke notwendigen vertraulichen Daten und Schlüssel,
• dem geschützten Ausführen der applikationsspezifischen sicherheitskritischen Funktionen.

The additional benefit of the universally applicable electronic hand stamping device with its safety processor lies in:

• the location independence in the execution of safety-critical transactions including the generation of individually secured stamp imprints,
• self-sufficient 'off-line' operation in the execution of security-critical transactions, including the generation of individually secured stamp imprints, ie without the need for a wireless or wired data connection to a PC or server during stamping,
• the protection of confidential data and keys necessary to carry out the security-critical transaction, including the generation of individually secured stamp imprints,
• the protected execution of the application-specific safety-critical functions.

Figur 1,

Blockschaltbild der Steuerung eines universell einsetzbaren elektronischen Handstempelgeräts,

Figur 2a,

Frontansicht des universell einsetzbaren elektronischen Handstempelgeräts,

Figur 2b,

Seitenansicht des universell einsetzbaren elektronischen Handstempelgeräts von rechts,

Figur 3,

perspektivische Ansicht eines PC's und Ansicht des universell einsetzbaren elektronischen Handstempelgeräts von vorn in einer Wartungsposition auf einer Basisstation stehend,

Figur 4,

Ablaufdiagramm im Modus Frankieren.

Advantageous developments of the invention are characterized in the dependent claims or will be described in more detail below together with the description of the preferred embodiment of the invention with reference to FIGS. Show it:

FIG. 1,

Block diagram of the control of a universal electronic hand stamping device,

FIG. 2a,

Front view of the universal electronic hand stamping device,

FIG. 2b,

Side view of the universal electronic hand stamping device from the right,

FIG. 3,

perspective view of a PC and view of the universal electronic hand stamping device from the front standing in a maintenance position on a base station,

FIG. 4,

Flowchart in franking mode.

In the FIG. 1 is a block diagram of the control of a universal electronic hand stamping device with modules 4, 7, 8, 9 12, 13, 14 and 15 of the control unit 18 and with external assemblies 5, 6, 24, 32, 33, 34, 35, 36 and 37 to 49, which are operatively connected to the control unit 18.
The control unit 18 comprises an LED display line 4, input means 7, display means 8, acoustic signaling means 9, a nonvolatile memory 12, printhead drive electronics 13, drivers 14 for the drives 33, an internal interface 15 for at least one sensor, the driver and the Printhead drive and an external interface 16, which are connected to a security processor 11. The input means 7 has at least one actuating means and forms with the display means 8, the LED display line 4 and the acoustic signal means 9 (beeper) an operator interface (user interface), which (s) for status signaling, data input and selection of the operating mode. At least part of the electronics of the control unit 18 is realized in a single integrated circuit. The at least one transaction module is a component of the aforementioned integrated circuit.
The external assemblies include at least one power source (such as batteries or accumulators 5, 6), at least one inkjet printhead 32, at least one drive device 33 for moving a print carriage of the inkjet printhead, at least portions of a sensor 34 and 35, a switch 24, and one with the external interface related Pad or socket 36 and optionally a contact point or socket 39 for recharging the power source, if accumulators 5, 6 are used. The contact point or socket 39 for recharging the power source is omitted if batteries are used. The switch 24 is formed with a start button. The latter and the sensors 34, 35 are connected via the internal interface 15 to the security processor 11. The at least one print head 32 is connected via the internal interface 15 with the control electronics 13 and the drive device 33 is connected via the internal interface 15 to the driver 14 for drives. The switch 24 serves as a transaction trigger for initiating security-critical transactions including the generation of individually secured stamp imprints.
The dashed lines drawn external assemblies 37, 38, 41, 42, 43, 44, 45, 46, 47, 48, 49 and 49.1 comprise assemblies of a base station 40, in which the universal electronic hand punching device 1 is maintained. For maintenance, a cleaning and sealing station 49 (RDS) is installed in the base station, which is connected via a control line 37 to a first branch of a USB connector 47, to the second branch of a commercially available USB socket 48 is connected. The pad 46 is formed as a plug to make the connection to the socket 36. At the cleaning and sealing station 49, a switch 49.1 is connected, which is opened as long as the hand-stamping device is not brought into contact with the base station. To the socket 39 there is a plug 41 which is connected to a power supply and charging unit 43, which allows a recharging of the batteries 5, 6, as soon as the hand stamping device is brought into contact with the base station. The power supply and charging unit 43 is connected via network cable 44 with a power plug 45.
The dashed lines drawn external assemblies 37, 38, 41, 42, 43, 44 and 45 may be omitted if only batteries are used as an energy source.

The FIG. 2a shows a (simplified) front view of the universal electronic hand stamping device 1, which stands by means of four Fußstücken on the surface to be printed on a print medium 5. Two foot pieces 312 and 313 of the hand stamping device are near the front side, and two non-visible leg pieces (311 and 314) are arranged near the rear side under a base plate 31 as a spacer to the printing medium. The sockets 36 and 39 can be placed near the bottom pieces 312 and 313 or near the bottom back pieces on the base plate 31. The base plate 31 has a print window opening (not shown) for the ink jet print head 32.

On the base plate 31 there is arranged a housing with a handle 2 which has a start button 24 which is operated by the operator of the hand stamping device 1 to trigger a printing. The start button 24 is mounted centrally on the handle bottom in a center piece 21 of the handle 2.
The hand stamping device offers a possibility of correcting the position of the stamp image only immediately before placing the hand stamping device on a printing medium. The sensors 34, 35 are arranged in the housing interior of the hand stamping device and therefore shown in dashed lines, because they are not visible from the outside. The first sensor 34 is designed as a microswitch and signals the control unit 18 when the handstamping device is placed on a pressure medium. A tactile transfer piece 341 extends from the microswitch to the surface of the printing medium 5 and transmits a triggering force to the microswitch. The control unit 18 prevents inadvertent release by means of the start button 24 before positioning and placing the hand stamping device on a printing medium. The signal from the sensor 34 starts a time range for calculations by the control unit 18 before the triggering of the printing. An advantage of the sensor 34 is that in the event of accidental initiation of the start key 24 prior to printing, printing will become impossible. Thus, no ink is splashed in the room, as long as the hand-stamping device has not yet been placed on the print medium.
In contrast to the known stamping with a handstamping device, the franking stamp should not be printed somewhere when franking but in a position defined by the mail carrier on the surface of the print medium (mail piece). Such a manual positioning may not succeed on the first try and may need to be corrected at least once. The triggering of the start button 24 signals the end of the positioning and commands the beginning of the printing.
As also from the flow chart franking ( Fig. 4 ), a state signaling (acoustically via beeper 9 or optically via LED display line 4 or display means 8) should take place if the hand-stamping device has not yet been placed on the printing medium or on the base station, ie as long as the first sensor 34 is not actuated becomes.
The hand stamping device must therefore be aligned or positioned in its position above the printing medium before franking / printing. The inkjet print head is then sprayed with ink only when both the switch 24 and sensor 34 have been actuated. From the time of taking off until the time of triggering by means of the start key 24, a time interval passes which should be sufficient for the positioning and possibly for the impression calculation and production of a print image.
The data processing is started by the first sensor. The time required for necessary cryptographic calculations before the triggering of a franking may not be sufficient. Thus, a period of time after the triggering of both switches, the sensor 34 and the start button 24 may be provided for a delayed start of the print instruction execution. The latter period is reduced when several stamp impressions are executed in succession. The sensor will also be operated off the desk at the time the hand stamping machine is lifted or when it is lifted off the last printed media. Already before restarting the subsequent mail piece, a cryptographic prediction of a security code is started.
The sensors 34, 35 may be formed as a microswitch or light barrier and - in a manner not shown - are arranged on the base plate 31 of the hand stamping device or in the housing interior.
In an alternative use of a light barrier as optical sensor 34 'is an optical transfer piece 341', preferably an optical waveguide, used for light transmission.

In an alternative arrangement of the tactile sensor 34 * (micro button) in the base plate 31, a tactile transfer pin 341 can be omitted.
In an alternative arrangement of the optical sensor 34 "in the base plate 31, the optical transfer piece 341 'can be omitted.
An LED display line 4, input means 7, display means 8, acoustic signaling means 9 are on the front of the housing 25 between the handle 2 in the upper part of the housing and the foot area in the lower part of the housing and between the right side housing wall 26 and the left side wall 2 as a control - And signaling means arranged. The handle 2 consists of a central piece 21 and passes on both sides via optionally beveled top side pieces 211, 212 partially into the housing over. The side pieces 211, 212 are extended down to the base plate 31 and formed rung-shaped. Runge is understood to mean a lateral holding bar or a holding bar. The housing is formed between the rungsförmig formed parts of the side pieces 211, 212 and has a housing top side 22, a housing bottom side 23 and the housing side walls 26 and 27th
Between the housing bottom 23 and the base plate 31 of the hand stamping device 1 exists a distance which forms the height of a forwardly open printer room 30 whose width is defined by a lateral distance of the housing side walls 26 and 27 and its depth by a distance up to a rear wall , In the printer room 30 at least one ink jet print head 32 is arranged with at least one - not shown - drive device for moving a - not shown - print carriage of the ink jet print head on the print medium 5 at least in an x-direction or opposite thereto. The second sensor 35 may be constructed in the same way as the first sensor 34 and indicates a placement of the device on the base station.
The tactile transfer pin 341 of the first sensor 34, which indicates a placement of the device on the printing medium 5, is longer than a tactile transfer pin 351 of the second sensor 35 is formed.

In the FIG. 2b a side view of the universal electronic hand stamping device 1 is shown from the right. Some parts of the housing, the start button 24 in the handle 2, built in the printer room drive device 33 for at least one ink jet print head 32 and the electronic modules 4, 5, 6, 7, 8 and 9 are shown in dashed lines, because they are not visible from the outside.
The non-visible parts of the upper housing side 22 and housing bottom 23 and the interior of a non-limiting parts of the housing are shown in dashed lines. In this case, a security area 10 is distinguished from the non-security area 20. In the security area 10, a main circuit board 19 with the electronic modules 4, 7, 8 and 9 on the one front side and with - not shown - safety-critical electronic modules including transaction module on the rearward side of the main circuit board 19 is arranged, which controls of the universal electronic hand stamping device 1 and on demand in particular can make the calculation of a security code.
In the non-safety area 20, the batteries or accumulators 5, 6 are arranged interchangeably under a cover 281, which in the closed state covers a non-visible opening in the rear wall 28 of the housing.
The rungsförmig formed part of the side piece 211 is extended from the housing down to the base plate 31. It was cut near a rear wall 29 cut to the inner tactile sensor 34 and the position of the extended from the sensor 34 via the base plate 31 to the print medium 5 tactile Transferpins 35 to clarify. The rear wall 29 is disposed between the rungsförmig formed parts of the side pieces and goes up in a step in the rear wall 28 of the housing, in which the electronic and safety-critical electronic assemblies are arranged. The rear wall 29 goes down into the base plate 31 via or stands on this.
The base plate 31 is spaced from the print medium 5 by the feet 313 and 314 disposed on the right side. The bushing 39 is formed on the bottom side in the stubby part of the side piece 211 and protrudes through a (not visible) opening of the base plate 31, so that their contact points are directed in the direction of the print medium 5 or alternatively to the base station.
In the FIG. 2b In principle, the optional possibility is also shown that the at least one ink jet print head 32 can be moved with the same drive device 33 or by means of another drive device for moving a print carriage of the ink jet print head in a second y-direction or opposite, which transverse to the first x-direction or Opposite lies.

In the FIG. 3 2, perspective view of a PC 50 and view of the universal electronic hand stamping device 1 is shown standing in front of a maintenance position on a base station 40. A commercial personal computer 50 (PC) has a modem, a communication socket and a USB socket in a conventional manner. In the last one an associated connector 56 is inserted, which is arranged at the one end of the commercially available USB cable 57.
A connector 58 at the other end of the USB cable 57 is plugged into a commercially available USB socket of the base station 40, with which the hand stamping device 1 has been brought into mechanical and electrical contact. In the communication socket of the PC, a plug 55 of a communication cable 54 is plugged for connection to a remote data center 60 via telephone network (not shown) to reload monetary data via PC 50 and base station 40 in the hand stamping device 1. The monetary data are stored non-volatile in the security area of the hand stamping device 1 in a memory, for example as a credit.
Alternatively, a wireless communication device may be used to connect to the remote data center 60.
A cleaning and sealing station 49 (RDS) was installed in the base station to service the at least one ink jet printhead 32 as soon as the hand stamping device 1 is placed on the base station.

• Stromversorgung und ggf. Nachladung interne Energiequelle,
• Erweiterung des Userinterfaces,
• Datenübertragung vom Sicherheitsprozessor des Handstempelgeräts zur Basisstation zu deren Steuerung zwecks Wartung des Tintenstrahldruckkopfes,
• Nachladen von Daten und Anwendungsprogrammen vom PC in das Handstempelgerät,
• Datenübertragung zum Datenabgleich zwischen Handstempelgerät und PC,
• Nachladen von Daten von einem entfernten Datenzentrum via PC in das Handstempelgerät (wie beispielsweise im Modus Frankierer das Nachladen von monetären Daten, Nachladen von Postprodukten oder Posttariftabellendaten und das ge-sichertes Einladen von Vektoren/Schlüsseln für kryptographische Operationen, die im Sicherheitsprozessor des Handstempelgeräts ausgeführt werden).

An internal energy source, for example an accumulator, of the handstamping device 1 can be recharged if necessary, because the base station 40 has a power supply and charging unit 43, which can be connected to a power supply network via the mains cable 44 and plug 45.
The safety processor constantly monitors the sensor signals. When the sensor signal of the first sensor 34 changes from high to low, the hand stamping device 1 was placed on a printing medium. The device works offline during the execution of security-critical transactions, ie without establishing a data connection to a PC or a server.
If the hand stamping device 1 is placed on the base station, then the sensor signal of the first sensor 34 does not change because the tactile transfer pin 341 is positioned over a recess 401 of the base station 40 and thus is not moved.
The base station has a protrusion 402 which is positioned below the transfer pin 351 of the second sensor 35 and which moves the transfer pin 351 when the hand stamping device 1 is placed on the base station 40. When the sensor signal of the second sensor 35 changes from low to high, the hand stamping device 1 has been removed from the base station.
Alternatively, it is also possible to monitor a contact of the socket 36 connected to the external interface with the contact point 46. The latter is designed as a plug, wherein a contact pin is grounded or grounded. The second sensor 35 can then be omitted.
The external interface also has the following main functions to fulfill:

• Power supply and recharging if necessary internal energy source,
• Extension of the user interface,
• Transferring data from the security processor of the handstamping device to the base station for controlling it to maintain the inkjet printhead,
• Reloading of data and application programs from the PC into the handstamping device,
• Data transmission for data synchronization between handstamping device and PC,
• Reloading data from a remote data center via PC into the hand stamping device (such as in the meter mode, reloading monetary data, reloading postal products or post office table data, and securely inviting vectors / keys for cryptographic operations performed in the security processor of the hand stamping device ).

The universally applicable electronic hand stamping device can be operated locally and offline and operate in the one mode as a franking machine, whereby safety-critical transactions are carried out and as a result individually protected stamp imprints are generated. The relevant country-specific different security requirements of the postal organizations are taken into account.

• Anwendung als Posteingangsstempler,
• Anwendung als Sequenznummerndrucker,
• Anwendung als Gebührenstempler,
• Anwendung als Zertifikat-Drucker.

If required, the following modes can also be selected, for example:

• Application as inbox stamp,
• Application as sequence number printer,
• Application as a fee stamp,
• Application as certificate printer.

If necessary, reload the required application program and data from the PC into the handstamping device or, if necessary, supplement it in individual software modules before the handstamping device is disconnected from the base station.

1. I. Frankieren
2. II. Geld nachladen
3. III. Aktualisierung der Sicherheitsdaten
4. IV. Tariftabellendaten bzw. Postproduktdaten nachladen.

In Franking mode, at least the following operating modes can be distinguished:

1. I. Franking
2. II. Reload money
3. III. Updating the safety data
4. IV. Reload rate table data or postal product data.

For these operating modes II to IV, different special flow diagrams of the hand stamping device apply than those in the following FIG. 4 illustrated flowchart.

In the FIG. 4 a flowchart 100 of the hand stamping device 1 in the mode of franking is shown. Once the handstamping device 1 is taken down from the base station, a first step 101 is reached, and the flowchart 100 is started. First, a sub-program is started in the second step 102 in order to determine the selection of the post-product to be franked via a short-cut key of the input means 7. The subroutine includes at least a first and a second interrogation step (not shown). Subsequently, in a third interrogation step 103 it is checked whether possibly the remaining credit available in the hand-held dispenser is too low to use the service of the mail carrier. If the latter is not true, a branch is made to a fourth query step 104. If the latter is true, an error message appears in the thirteenth step 113 for the status signaling. The latter step 113 then branches back to the beginning of the second step 102.
In the fourth interrogation step 104, it is checked after interrogation of the sensor signal of the first sensor 34 whether the device is standing on the printing medium. If the latter is the case, then a fifth query step 105 is branched. Otherwise, an indication "device settle" is output for status signaling in the fourteenth step 114 and then branched to a sixth interrogation step 106. In the aforementioned sixth interrogation step 106, it is checked after interrogation of the sensor signal of the second sensor 35 whether the device is standing on the base station. If the latter is not the case, a branch is made to a seventh step 107 in order to carry out a cryptographic prediction for the security code of a subsequent stamp impression. The latter step 107 then branches back to the beginning of the second step 102.
In the fifth query step 105, it is checked whether the start key has been operated. If the latter has not yet occurred, the beginning of the fifth query step 105 branches back. Otherwise, the system branches to an eighth step 108 for booking the postage value with which the item of mail is to be franked. In the following ninth step 109, the calculation of the cryptographic security code is completed. The ninth step 109 refuses a tenth step 110, in which a print data processing with the DataMatrix 2-D code is performed. Subsequently, an eleventh step 111 is reached in which the stamp imprint is printed with the cryptographic security code inclusive. Then, the sixth interrogation step 106 is reached. When the device is on the base station, the sixth query step 106 branches to the end of the routine 100 in step 112.

1. a) Nutzdatenbereitstellung im Ergebnis des Unterprogramms 102 zur Anwahl des zu frankierenden Postproduktes über eine Kurzwahltaste.
2. b) Transaktionsstart im Ergebnis der Betätigung der Starttaste, welches im fünften Abfrage Schritt 105 ermittelt wird,
3. c) eine anwendungsspezifische Datenverarbeitung zur Buchung des Portowertes bzw. Frankierabrechnung im Schritt 108,
4. d) Nutzdatenabsicherung im Schritt 109, hier Erzeugung einer kryptographischen Checksumme oder eines Sicherheitscodes,
5. e) Druckdatenaufbereitung im Schritt 110,
6. f) Stempelaufdruck im Schritt 111.

In the following explanations, the execution of transactions in the operating mode 'franking' is explained in more detail. By the end of the transaction, the basic sequence is as follows:

1. a) payload data as a result of the subroutine 102 for selecting the mail product to be franked via a shortcut key.
2. b) start of the transaction as a result of the actuation of the start key, which is determined in the fifth query step 105,
3. c) an application-specific data processing for booking the postage value or franking statement in step 108,
4. d) user data security in step 109, here generating a cryptographic checksum or a security code,
5. e) print data processing in step 110,
6. f) stamp imprint in step 111.

In the following, the individual steps will be described in more detail on the basis of the exemplary embodiment in the I operating mode 'franking'.

a. Nutzdatenbereitstellung

• Direkteingabe der Nutzdaten über Tastatur oder
• Auswahl der Nutzdaten über Kurzwahltasten.
  Die Nutzdaten können hier der Portowert (zum Beispiel 0.55 €) für einen Standardbrief oder das auf eine Kurzwahltaste programmierte zu frankierende Produkt (z.B. Standardbrief Inland) sein. Im letzteren Fall werden die Nutzdaten über die Anwahl einer vorprogrammierten Kurzwahltaste des Eingabemittels bereitgestellt. Über die Kurzwahltasten wählt der Bediener das zu frankierende Produkt aus. Die Software des Sicherheitsprozessors, der mit dem Eingabemittel verbunden ist, erkennt eine Statusänderung der Kurzwahltasten und speichert die Auswahl für die Weiterverarbeitung.

In the case of the handstamping device, the following possible sources for the provision of useful data can basically be distinguished:

• Direct input of the user data via keyboard or
• Selection of user data via speed dial buttons.
  The user data can here be the postage value (for example 0.55 €) for a standard letter or the product to be franked programmed for a shortcut key (eg standard letter domestic). In the latter case, the user data is provided via the selection of a preprogrammed shortcut key of the input means. The operator selects the product to be franked using the shortcut keys. The software of the security processor connected to the input means recognizes a status change of the shortcut keys and stores the selection for further processing.

b. transaction start

• Sensor 34 und
• Schalter 24.

The handstamp device should query the sources for starting a transaction:

• Sensor 34 and
• Switch 24.

In the above embodiment, the transaction is started by the operator by pressing the start button (switch 24). For this, the hand stamping device must already be placed on the surface of the print medium (mail piece). This placement is interrogated, for example, by a tactile transfer pin 341 of the microswitch (sensor 34) projecting through a hole in the base plate. The transaction is automatically prepared by placing the hand stamping device on the print medium using microswitches.
The safety processor of the controller is operatively connected to the input means and the start button 24 and the microswitch 34. The software of the security processor checks the state of the microswitch 34 and detects the operation of the start button 24 by the user. If now the start button 24 is pressed, the software starts the transaction. Otherwise, a status message is output.

The safety processor of the controller is connected to the non-volatile memories. The security processor software performs the necessary operations of the transaction.

c. Application-specific data processing

In the I.Franking mode, the security processor of the handstamping device stores different data sets and performs the following operations for storing the number of pieces and the value in the postal registers: Application / mode Memory / register Name surgery Franking / franking descending register DR: = DR - value ascending register AR: = AR + value counter PC: = PC + 1

d. Nutzdatenabsicherung

• □ Asymmetrische Digitale Signaturen oder
• □ Symmetrische Message Authentication Codes (MAC /T-MAC).

The user data should be cryptographically secured. For this purpose, a checksum is to be formed via the user data. This should appear together with the user data in the stamp imprint possibly encrypted as a security code (cryptographic checksum). For this purpose, an individually secured stamp imprint is generated. The following principles can be used to generate the cryptographic checksum:

• □ Asymmetrical digital signatures or
• □ Symmetric Message Authentication Codes (MAC / T-MAC).

• Data Encryption Standard (DES),
• Advanced Encryption Standard (AES),
• Hash based Message Authentication Code (HMAC),
• Secure Hash Algorithm 256 (SHA256) eingesetzt werden.

To generate asymmetric digital signatures, among others, a Digital Signature Algorithm (DAS), an Elyptic Curve Digital Signature Algorithm (ECDSA), a named after the inventors Rivest, Shamir and Adleman RSA method or other methods can be used. The following methods can be used to generate symmetric message authentication codes:

• Data Encryption Standard (DES),
• Advanced Encryption Standard (AES),
• Hash Based Message Authentication Code (HMAC),
• Secure Hash Algorithm 256 (SHA256).

• Frankierwert (value)
• Lizenznummer (license-ID)
• Datum (date)
• Restguthaben (DR)
• Verbrauchtes Guthaben (AR)
• Stückzähler (PC) u.a.

Regardless of the method used, an individual cryptographic algorithm is used to calculate a cryptographic checksum Keys needed. This key must be stored securely in the hand stamping device. The storage may occur in a non-volatile memory area within the security processor or in encrypted form in a nonvolatile memory connected to the security processor. In the exemplary embodiment, a cryptographic checksum is formed via the following user data stored in the device:

• Franking value
• License number (license ID)
• Date)
• Remaining balance (DR)
• Used credit (AR)
• Piece counter (PC) and others

In the o.g. Embodiment 'Franking' a truncated message authentication code (T-MAC) is formed by means of the calculation rule AES. It uses the cryptographic key stored in the security processor of the device, which is called indicia key 'here.

e. Print data processing

• Klartext
• OCR lesbarer Text
• 1-D Barcode
• 2-D Barcode

The print data preparation converts the user data and the cryptographic checksum into a graphic presentation of the data to be printed, which can then be printed on the medium by means of an inkjet print head. For example, the following graphic presentations of the data to be printed are possible:

• plain text
• OCR readable text
• 1-D barcode
• 2-D barcode

Different types of fonts can be used to generate OCR readable text, such as OCR-A to ISO 1073-1 or OCR-B to ISO 1073-2.

For the generation of 1-D barcodes different barcode types like eg the code 128 according to ISO / IEC 15417 or the code 2/5 interleaved according to ISO / IEC 16390 can be used.
For the generation of 2-D barcodes, different variants such as the PDF 417 according to ISO / IEC 15438 or the DataMatrix according to ISO / IEC 16022 can be used.

The selection of the respective presentation depends on the application or country version and takes into account the amount of data to be displayed and the requirements for the readability of the individually protected stamp imprint.

In the o.g. Embodiment 'franking' the data should be displayed in a DataMatrix 2-D barcode. In addition, individual payload data, such as the franking value, date or license number printed in plain text.

f. stamp

In the embodiment, the data is printed with a height of 12.8 mm. Thus, no deflection of the ink jet print head in the Y direction is required.

• Sichere Speicherung des Frankierguthabens,
• sichere Kommunikation mit der Infrastruktur,
• sichere Speicherung des ,indicia' Schlüssels und
• sichere Berechnung des Frankierabdruckes.

The security processor executes the following safety-critical tasks in the mode "franking machine":

• Secure storage of the franking credit,
• secure communication with the infrastructure,
• secure storage of the 'indicia' key and
• secure calculation of the franking imprint.

During the mode of operation 'franking', the transaction module can carry out the secure storage of the franking credit and calculation of the franking imprint in order to generate franking imprints, for example according to the FrankIT standard of Deitschen Post AG (DPAG).

The franking solution with the universally applicable electronic hand stamping device has advantages in the lower market segment with a throughput of about 5 impressions per day due to their mobility, simplicity and good operability with high security against tampering or counterfeiting. To achieve low production costs it is assumed that a production in larger quantities at reasonably low prices is possible, because the field of application of the device is very large.

• Anwendung als- Posteingangsstempler,
• Anwendung als Sequenznummerndrucker,
• Anwendung als Sequenzdatendrucker oder
• Anwendung als Gebührenstempler bzw.
• Anwendung als Zertifikatdrucker.

In the following, the individual steps are described in general terms for further exemplary embodiments, wherein transactions are carried out by separate transaction modules for corresponding modes:

• Application as - Inbox stamp,
• Application as sequence number printer,
• Application as sequence data printer or
• Application as a fee stamp or
• Application as certificate printer.

aa. Nutzdatenbereitstellung

• Datum und Uhrzeit des Handstempelgeräts als Quelle für Nutzdaten,
• Betrieb als interner fortlaufender Zähler als Quelle für Nutzdaten,
• vorprogrammierter Betrieb mit Daten aus vorab in das Handstempelgerät geladener Sequenzdatei als Quelle für Nutzdaten und
• Betrieb mit Gebührendaten, die vorab in das Handstempelgerät geladen und über Kurzwahltasten aufgerufen werden.
• Betrieb mit in das Handstempelgerät eingegeben Daten (z.B. Name).

With the handstamping device, the following possible sources for the provision of user data in general applications can basically be distinguished:

• Date and time of the handstamp device as a source of user data,
• Operation as internal continuous counter as source for user data,
• preprogrammed operation with data from sequence file previously loaded in the handstamping device as a source of user data and
• Operation with charge data, which are preloaded into the hand stamping device and called via shortcut keys.
• Operation with data entered into the hand stamping device (eg name).

bb. transaction start

• Die Transaktion wird vom Bediener durch Druck des Starttasters eingeleitet (Posteingangsstempel) und/oder
• Die Transaktion wird automatisch durch Aufsetzen des Handstempelgeräts auf das Druckmedium mittels Mikroschalter eingeleitet.
  Ein solcher Auslösemechanismus beispielsweise beim Drucken von Sequenznummern sinnvoll, bei denen "hintereinander weg" gestempelt werden soll.

The following possible sources for starting a transaction can basically be differentiated with the handstamp device:

• The transaction is initiated by the operator by pressing the start button (Inbox stamp) and / or
• The transaction is initiated automatically by placing the hand stamping device on the print medium by means of microswitch.
  Such a triggering mechanism makes sense, for example, when printing sequence numbers where "one behind the other" is to be stamped.

cc. Application-specific data processing

In the following, application-specific data processing operations will be explained using examples from different application areas: Application / mode store name surgery incoming mail calendar module actual date Internal clock actual time Sequence counter SEQ: = SEQ +1 Sequence number printer Sequence counter SEQ: = SEQ +1 Fee stamp printer Piece counter PC: = PC +1 Fee register (fee register) GR: = GR - value certificate printer Name and averaging class (class of message) Surname
class calendar module actual date Piece counter PC: = PC +1

dd. Nutzdatenabsicherung

The user data when printing a certificate can be cryptographically secured. For this purpose, a checksum is to be formed via the user data. This should appear encrypted together with the user data in the certificate imprint as digital signature or security code (cryptographic checksum). For this purpose, an individually secured stamp imprint is generated again.

ee. Print data processing

The print data processing in the modes incoming mail stamp, sequence number printer and fee stamp printer transfers the payload into a graphic presentation (plain text, OCR-readable text, 1-D barcode or 2-D barcode) of the data to be printed, which are then printed on the print medium by means of an inkjet printhead.
In Certificate Printer mode it is possible to print a digital signature or an equivalent security feature.

f. stamp

The stamp imprints are to be generated by means of an inkjet printhead. The dimension of the stamp imprint determines the geometry of the printing unit. Common inkjet printheads, such as the HP TIJ 2.5 cartridges, have a print line with a ½-inch print height, or 12.8 mm.
The inkjet printhead is driven by the security processor and supplied with print data. It is suspended by a drive in the X-direction movable. The print line passes over the print medium.
If a higher printing height than, for example, 12.8 mm is required, then the print head is also required to deflect in the Y direction.

It is envisaged that a plurality of separate transaction modules for corresponding modes are part of the aforementioned integrated circuit.

The handstamp device works offline during the execution of the security-critical transactions, ie without establishing a data connection to a PC or a server. The invention enables the use of the hand stamping device in moving means of transport, such as in the inter-city express (ICE). In the meantime, the ink jet print head can be prevented from drying out by a cap (not shown) as long as no base station is available for its maintenance.

The control unit is programmed to control the printing and the base station on which the hand-stamping device is designed to be aufgesetzbar with its data for its maintenance and recharging.

The invention is not limited to the present embodiments, i. Modes limited. Rather, further embodiments within the scope of the claims are conceivable, which are used and which are covered by the same basic idea of the invention, starting from the appended claims.

Claims (5)

Universal electronic hand stamping device, with an ink jet printhead (32) which can be moved back and forth in a printing window, wherein the printing window is arranged in a base plate facing a printing medium during printing, with a control unit (18) having a user interface, with an external Interface (16) and to an internal interface (15), wherein the internal interface (15) of the inkjet printhead and a drive for moving the inkjet printhead is operatively connected to an internal power source (5, 6) for supplying the control unit ( 18), the ink jet print head (32) and its drive (33) and the interfaces (15, 16), wherein the control unit (18) includes a security processor (11) having at least one transaction module, which for performing cryptographic backup and Certification tasks associated with printing a and the control unit (18) is programmed to control the printing and a base station (40) on which the hand stamping device (1) is formed aufgesetzbar with its data for its maintenance and recharging. Universally usable electronic hand stamping device, according to claim 1, characterized in that at least a part of the electronics of the control unit (18) is realized in a single integrated circuit. Universally usable electronic hand stamping device, according to claims 1 to 2, characterized in that the at least one transaction module is a part of the aforementioned integrated circuit. Universal electronic hand stamping device, according to claims 1 to 2, characterized in that a plurality of separate transaction modules for corresponding modes are part of the aforementioned integrated circuit. Universally usable electronic hand stamping device, according to claims 3 or 4, characterized in that the integrated circuit is arranged in the security area of a housing of the hand stamping device.

Images