EP2481031B1 - Device for handling value notes - Google Patents

Description

The invention relates to a device for handling banknotes. The device comprises a maintenance data memory in which maintenance data are stored.

The device is in particular an ATM, an automatic POS system or an automatic cash deposit. ATMs, automated checkout systems and / or automatic cash deposits must be regularly maintained to minimize downtime and increase availability to an operator of the device. The maintenance is usually carried out by the operator of the automatic teller machine, the automatic cash register system or the automatic cash vault, in which a commissioned service employee reads the maintenance data from the maintenance data store on site and based on the information contained in the maintenance data, in particular messages about malfunctions, information from fault memories and / or or actual values of adjustable parameters, troubles occurred and / or prevented by the presetting of preset parameters disturbances. A disadvantage of the reading and maintenance of the device on site is that this is expensive and thus high costs for the operator of the ATM arise.

The ATMs, automatic cash safes and / or automatic checkout systems are usually integrated into a computer network of the operator, with which a variety of ATMs, automatic POS systems and / or automatic cash safes are connected and over which the operator can read the maintenance data. Although the operator no longer has to read out the maintenance data locally, the maintenance of the automatic teller machines, automatic cash safes and / or automatic teller systems represents an additional and not inconsiderable expense for the operator, so that many operators wish to have their ATMs serviced, outsource automatic POS systems and / or automatic cash deposit to a specialized service provider.

In order to ensure effective maintenance of ATMs, automatic cash deposits and / or automated checkout systems, the service provider must have access to the maintenance data. One possibility for this is to transmit the maintenance data to the service provider at regular intervals and / or when faults occur by e-mail, fax or telephone. The disadvantage of this is that on the one hand this represents an additional effort for the operator, on the other hand that the service provider receives the maintenance data only at the agreed times or if a fault has already occurred, so that timely intervention before a fault occurs can not be guaranteed ,

Another possibility is to allow the service provider access to the computer network of the operator, so that he has access to the maintenance data at any time and in the deviation of actual values of parameters can adjust these parameters in time, so that no Disorder occurs. The problem with this is that on the computer networks of the operator, especially in banks, access to many confidential data is possible to which the service provider may not have access. One way to prevent this is the use of sophisticated firewall systems, which ensures that the service provider only has access to the maintenance data. A disadvantage of the use of such firewall systems is that they are associated with high costs for the operator. As a rule, the service providers not only look after the ATMs, automatic checkout systems and / or automatic cash deposits of an operator, but also a large number of operators. The use of firewall systems therefore has the disadvantage for the service provider that he must adapt to a different network structure for each operator, which results in a high outlay and high costs for the service provider.

From the unpublished document DE 10 2008 019 228 a self-service device is known which comprises a control unit for processing operating data and a transmission unit for operating data transfer to a service unit. The self-service device is in particular an information, sales or ATM.

From the document EP 0 712 099 A1 is a system of an ATM and a service unit known, between which maintenance data is transmitted by radio.

The document DE 200 01 117 U1 describes an ATM that can be controlled by means of a wireless control unit.

From the document DE 10 2004 061 467 A1 An ATM is known that can handle a variety of denominations. By storing banknotes of at least two different denominations in a storage unit takes place a space-saving storage of banknotes.

The document US 2004/046015 A1 describes a document handling device that includes a memory for storing individually unlockable functions.

From the document DE 199 32 149 A1 For example, there is known a system for executing transactions comprising a plurality of terminals that are connected to a node computer and to one another via a network.

It is an object of the invention to provide a device for handling bank notes, which allows remote maintenance of the device, without the remote maintenance access to a computer network of the operator is required.

This object is achieved by a device having the features of patent claim 1. Advantageous developments of the invention are specified in the dependent claims.

By providing a radio unit for sending data from the device to a service unit of the service provider by means of mobile radio and by transmitting the maintenance data to the service unit by means of mobile, the maintenance data can be transmitted to the service unit at any time, without the service unit accessing the computer network of the Operator required. In this way, a remote maintenance of the device is realized in a simple manner and increases the security of the computer network of the operator. Since the maintenance data of the service unit can be transmitted at any time, the service unit can react promptly to occurring faults and / or prevent faults through a change of presettable parameters.

By providing an authentication data store in the device in which authentication data for the unique authentication of the device by the service unit are stored, it is ensured that the device can be uniquely identified and authenticated by the service unit. Furthermore, this increases the security of data transmission.

The device is identified by means of a device-specific number. The device is authenticated to the service unit by transmitting a PIN and / or a password, preferably a one-time password, in addition to the device-specific number.

The maintenance data include, in particular, information from device fault memories, log files, information about a fault, target values of presettable parameters, and / or current actual values of parameters. The maintenance data are determined in particular by means of at least one sensor for monitoring the device. By changing the set values of the presettable parameters, a fault that has occurred can be remedied or prevented if it is noticed in good time that the actual values deviate from the setpoint values and the corresponding setting values are again set in such a way that a fault is avoided.

The device comprises a subscriber identity module (SIM) with a memory area in which the maintenance data and the authentication data are stored. The SIM includes the authentication data store and the maintenance data store. The use of a SIM is advantageous because the SIM is needed anyway for establishing the radio connection between the radio unit of the device and the service unit. By storing the authentication data and The maintenance data in a memory area of the SIM saves additional memory elements.

By default, the SIM stores authentication information needed to authenticate the SIM card to the mobile operator in order to log into the mobile network. In a preferred embodiment of the invention, this authentication data are also used to authenticate the SIM, and thus the device, against the service entity. Thus, further authentication data is not required. Alternatively, further authentication data for authentication to the service unit may be stored in a memory area of the SIM, which differ from the authentication data stored for the authentication with respect to the mobile service provider.

The device is assigned a telephone number with the help of the SIM. This telephone number is used in particular for identifying the device by the service unit. The authentication data comprises the telephone number and a PIN and / or a password, by which the authentication of the device by the service unit takes place.

On the SIM application data for encryption and / or signing of data to be sent to the service unit and / or for decryption and / or verification of the signature of the service unit received data stored. By encrypting and / or signing the data, the transmission security is increased and the use of the transmitted data by unauthorized persons is prevented or at least made more difficult.

The device is preferably connected via a wired and / or wireless network connection to a computer network of the operator of the device through which the operator of the device can monitor the status of the device. The operator can read the maintenance data from the maintenance data storage via this computer network. The data transmission via the radio unit from the device to the service unit and / or from the service unit to the device takes place separately and independently of this network connection. Thus, a complete separation from the computer network of the operator is achieved, so that the service unit for remote maintenance of the device does not need to access the computer network of the operator and thus expensive data protection systems, such as firewall systems, are not needed. This saves effort and costs.

The radio unit transmits the authentication data and / or the maintenance data, in particular, to the service unit by means of mobile radio, after it has received query data from the service unit. This ensures that the service unit can query the maintenance data at any time and thus prevent disruptions in time.

In a preferred embodiment of the invention, the radio unit only sends data to the service unit if it has previously received authentication data for unambiguous authentication of the service unit from the service unit. In this way, it is ensured that the data are transmitted only to the authorized service unit and can not be queried by any mobile subscriber. In a particularly preferred embodiment of the invention, the authentication data via which the radio unit authenticates the service unit comprises a telephone number of the service unit. In addition to the telephone number, in particular a PIN and / or a password is transmitted, via which the authentication takes place. Additionally or alternatively, a list of telephone numbers of the service unit can be stored in the radio unit and the radio unit can only accept calls from these telephone numbers. Furthermore, the authentication data that is required by the service unit in order to log on to the mobile service provider and to authenticate can also be used for authentication of the service unit. For this purpose, the service unit preferably also includes a SIM.

The service unit preferably calls the phone number of the device for transferring the query data. The radio unit of the device transmits the maintenance data to the service unit after the service unit has been authenticated. In a preferred embodiment of the invention, the device interrupts the mobile connection established between it and the service unit after receiving the request data and calls the service unit for transmission the maintenance data back. This increases the security of the data transmission, since it is ensured that the device also transmits the data via the callback only to the service unit whose telephone number is stored, for example, in a memory area of the SIM of the device.

The radio unit comprises in particular a mobile telephone for sending and receiving the data. As a result, a simple and inexpensive construction of the radio unit is achieved.

In a preferred embodiment of the invention, the radio unit receives the authentication data of the service unit together with the request data of the service unit. Alternatively, the radio unit may also initially receive the authentication data of the service unit and only receive the polling data when the service unit has been authenticated by the device.

It is likewise advantageous if the radio unit transmits the authentication data for authenticating the device by the service unit before the maintenance data. Alternatively, the authentication data of the device and the maintenance data can also be transmitted together to the service unit.

The radio unit preferably transmits the authentication data and / or the maintenance data in a preset manner Time intervals to the service unit. This ensures that the maintenance data is regularly transmitted to the service unit, so that it can react to disruptions in good time or prevent disruptions in a timely manner. The time intervals and / or the degree of detail of the information covered by the maintenance data are preferably changeable and / or presettable. As a result, the time intervals and the degree of detail can be adapted to the individual requirements of the respective device. In particular, in devices in which a large number of banknotes are handled per unit time, shorter time intervals and / or a higher degree of detail can be preset than with devices of which only a few banknotes are handled in the same time unit. The setting of the time intervals and / or the level of detail takes place in particular as a function of an adjustable service level.

In addition or as an alternative to the transmission of the maintenance data at preset time intervals or at preset times, the radio unit can also send the authentication data and / or the maintenance data to the service unit if at least one of the information contained in the maintenance data has changed. The radio unit transmits the maintenance data to the service unit in particular if there is a malfunction of the device. In this way, it is achieved that the service unit is informed immediately after the occurrence of a fault about this and thus timely countermeasures can be taken to correct the disturbance. As a result, the downtime of the device can be reduced and increases the availability of the device for the operator or the customer.

Furthermore, the device may comprise a control unit which compares the actual values of the adjustable parameters contained in the maintenance data with limit values. The radio unit sends the maintenance data to the service unit if the comparison of the actual values with the limit values reveals that at least one of the actual values exceeds an upper limit value or falls below a lower limit value. This ensures that the service unit is informed before a malfunction of the device is present, so that the service unit can counteract the occurrence of this disorder in good time and downtime of the device can be avoided or minimized. The limit values are in particular preset in such a way that the service unit has sufficient time to react to the changed parameters and to counteract them in good time so that no disturbance occurs.

It is advantageous if the radio unit receives data transmitted by the service unit by means of mobile radio data having at least one presetting value to be preset and / or at least one instruction to be executed. By setting the transmitted preset value to be preset and / or executing the transmitted instruction to be executed, a fault that has occurred has been eliminated or the occurrence of interference is prevented. Thus, malfunctions can be remedied or a fault can be prevented without an employee of the maintenance service provider having to drive to the installation site of the device in order to change the setting values to be preselected or to enter the instructions directly into the device.

Alternatively, the remote maintenance can only be unidirectional, d. H. only the device transmits the maintenance data to the service unit, whereas the elimination of disturbances and / or the changing of setting values by a service employee takes place on site at the device. In this case, it is sufficient if the radio unit is designed such that it can send data to the service unit via mobile radio, but does not receive and / or further process data from the service unit.

The preset values to be preset transmitted by the service unit and / or the instructions to be transmitted by the service unit are executed by the device only if the service unit has previously transmitted authentication data for the unique authentication of the service unit to the device. In this way it is achieved that the setting values are only changed or the instructions are only executed if they have been sent by an authorized service unit. In this way, a misuse of remote maintenance via the mobile network is prevented.

The service unit is integrated, in particular, into a service center, remote from the device, of a service provider commissioned with the maintenance of the device. The service provider may in particular be the manufacturer of the device. The manufacturer can thus use the device offer with a so-called remote maintenance option, through which he can guarantee a higher availability of the device and reduced downtime of the device. As a result, the manufacturer reaches a closer relationship with the operator of the device and generated via the remote maintenance further revenue. Alternatively, the service provider may not be the manufacturer, but a service provider specialized in the maintenance of devices for handling notes of value.

In a preferred embodiment of the invention, the device comprises a safe for receiving cash cassettes in which at least one cashbox is received. The cashbox comprises an authentication data store in which authentication data for unique authentication of the cashbox is stored by a service unit. The radio unit transmits these authentication data and inventory data with information about the current stock of notes of value in the cashbox to a service unit by means of mobile radio. This ensures that the inventory data can be transmitted to a service unit without the service unit having access to the operator's computer network. By transmitting the stock of the cashbox to the service unit ensures that the service provider can empty or fill the cash box in good time before the cashbox is completely filled or completely emptied. In this way, an effective inventory management of the cash cassettes received in the device is achieved. In particular, this ensures that the service provider can query the current inventory of the cashbox at any time and thus the cashboxes in good time can empty and fill. Such an effective inventory management is used in particular for the realization of a closed cash cycle, a so-called second-order cash cycle management, in which money cassettes are exchanged directly between ATMs, automatic POS systems and / or automatic cash safes, without these having been previously cashed out. Center emptied and refilled. The cash boxes preferably each comprise a SIM, on which the authentication data are stored. Each cashbox is uniquely assigned a telephone number via the SIM, which can call the service unit to query the inventory data.

The service unit for maintenance of the device and the service unit for inventory management of the cash boxes may be identical. Alternatively, the service units may also be different service units.

In an alternative embodiment of the invention, the device comprises a safe for receiving cash cassettes, in which at least one cashbox is accommodated, a storage element and a radio unit for sending data from the cashbox to a service unit by means of mobile radio and / or for receiving data from the service unit comprises. In the storage element of the cashbox, authentication data are stored for unique authentication of the cashbox by the service unit. The radio unit transmits the data stored in the memory element of the cashbox Authentication data and inventory data with information about the current inventory of the cashbox of notes of value to the service unit by means of mobile radio. The additional provision of a mobile radio unit for each cashbox ensures that the cashboxes regardless of whether they are included in a device or not, can send the inventory data to the service unit.

Furthermore, it is advantageous if the device comprises a control unit for controlling the device, which processes program data of a computer program. The control unit reads out the authentication data of the device and generates a unique reference value. The radio unit transmits reference data for generating a device-specific license key to a license management unit, the reference data comprising the reference value. The radio unit receives data comprising the license key from the license management unit and releases at least one functional module of the computer program depending on the license key. In this way, a simple licensing procedure for the computer program to be processed by the control unit is achieved. Licensing and license management can be done over the cellular connection. The transmission of the reference data and the license key via the mobile connection does not require access to the computer network of the operator in which the device is integrated, so that no safeguards against access by the licensor to data for which he is not authorized are necessary , Furthermore, the licensor can update the computer program via the cellular connection between the license management unit and the radio unit be made available and, for example, installed and maintained by remote maintenance.

The transmission of the data between the device and the license management unit and / or the transmission of the data between the device and the service management unit can be done in the same way as previously for the transmission of the data between the device and the service unit for maintenance Device described. In particular, the data transmission between the device and the license management unit and / or the data transfer between the device or the cashbox and the service unit for inventory management can be developed in the same way as in the dependent patent claims for the data transfer between the device and the service unit for maintenance the device described.

Further features and advantages of the invention will become apparent from the following description, which explains the invention in conjunction with the accompanying figures with reference to embodiments.

Figur 1

eine schematische Darstellung einer Vorrichtung zur Handhabung von Wertscheinen gemäß einer ersten Ausführungsform der Erfindung; und

Figur 2

eine schematische Darstellung einer Vorrichtung zur Handhabung von Wertscheinen gemäß einer zweiten Ausführungsform der Erfindung.

Show it:

FIG. 1

a schematic representation of a device for handling notes of value according to a first embodiment of the invention; and

FIG. 2

a schematic representation of a device for handling notes of value according to a second embodiment of the invention.

In FIG. 1 is a schematic representation of a device 10 for handling bank notes according to a first embodiment of the invention shown. The device 10 is an ATM in this embodiment. Alternatively, the device 10 may also be an automatic cash register system or an automatic cash deposit.

The cash machine 10 comprises a safe 12, in which two money cassettes 14a, 14b are accommodated. The cash box 14a, 14b are protected by the vault 12 from unauthorized access. In an alternative embodiment, the ATM 10 may include only one cash box 14a, 14b or more than two cash boxes 14a, 14b. The cash boxes 14a, 14b are connected via a transport path, not shown, with a likewise not shown input and output module for the deposit and / or payment of notes of value.

The two cash boxes 14a, 14b each comprise an inventory data memory 16a, 16b and a Subscriber Identity Module (SIM) 18a, 18b. Inventory data with information about the current inventory of the respective cashbox 14a, 14b is stored in the inventory data store 16a, 16b. Preferably, in the stock data memory 16a, 16b, the serial number, the order, the Denomination or the currency of all recorded in the respective cash box 14a, 14b banknotes stored, whereby a closed cash cycle, a so-called second-order cash cycle management, enabled, as at any time the current inventory of cash boxes 14a, 14b is known. As a result, the cash boxes 14a, 14b can be exchanged between different ATMs 10 without having to carry out a revision beforehand.

Furthermore, the ATM 10 comprises a radio unit 20 for sending data to a stock service unit 22 and for receiving data from this stock service unit 22 by means of mobile radio. Receiving and sending data by means of mobile radio is indicated by the double arrow 24. The SIM 18a, 18b of the cash boxes 14a, 14b each include a storage area in which authentication data for uniquely authenticating the cash boxes 14a, 14b are stored by the inventory service unit 22. The individual cash boxes 14a, 14b can be uniquely identified and authenticated by the inventory service unit 22 via this authentication data. Both the SIMs 18a, 18b of the cash boxes 14a, 14b and the stock data stores 16a, 16b are connected to the radio unit 20. The SIMs 18a, 18b and the stock data stores 16a, 16b are preferably connected to the radio unit 20 via data cables for data transmission. One of these data cables is designated by the reference numeral 26 by way of example. Alternatively, the SIMs 18a, 18b and / or the inventory data stores 16a, 16b may also be connected to the radio unit 20 via a wireless data connection.

The radio unit 20 transmits inventory data with information about the current inventory of the money cassettes 14a, 14b to notes of value and the authentication data stored in the SIMs 18a, 18b by means of mobile radio 24 to the inventory service unit 22. In this way, the inventory service unit can at any time monitor the inventory of the cash boxes 14a, 14b on notes of value. If the stock of a cash box 14a, 14b exceeds an upper limit or if the stock of a cash box 14a, 14b exceeds a lower limit, the stock service unit 22 causes the corresponding cash box 14a, 14b to be filled with notes of value. In this way, it is ensured that the cash boxes 14a, 14b are emptied or filled in good time, so that there is no downtime of the ATM 10 and a client serving the ATM 10 receives a desired amount of money at any time and / or. can deposit a desired amount of money.

The inventory service unit 22 is integrated in particular in a service center, preferably a data processing system, of a service company commissioned with the inventory management of the ATM 10. The service company is in particular a value-transporting company, which looks after a large number of automatic teller machines 10, automatic cash-desk systems and / or automatic cash-on-hold systems and the notes of value paid out or in these paid-in banknotes, in particular in the form of a closed cash cycle, between the individual ATMs 10, automatic Cash systems and / or automatic cash deposits and a cash center distributed. The inventory service unit 22 is arranged in particular remote from the ATM 10.

The times at which the inventories of the cash boxes 14a, 14b are transmitted to the inventory service unit 22 by means of mobile radio 24 can be determined in various ways.

In a first embodiment, the inventory data of the individual cash cassettes 14a, 14b can be transmitted to the inventory service unit 22 at preset periodically recurring time intervals. In this case, the SIMs 18a, 18b of the cash boxes 14a, 14b are connected to the radio unit 20 in accordance with these time intervals, so that the stock data of the cashboxes 14a, 14b connected to the radio unit 20 can be transferred to the stock service unit 22 in this time interval.

In a second embodiment, the device 10 may include a control unit, not shown, which compares the current inventory of the cash boxes 14a, 14b to the upper and lower limit notes. If the current stock of a cash box 14a, 14b exceeds the upper limit or if the current stock of a cash box 14a, 14b exceeds the lower limit, the stock data is sent to the stock service unit 22 via the radio 20. Alternatively, you can also each cash box 14a, 14b comprise a control unit which compares the current inventory with the upper and the lower limit. The upper and lower limits may be preset differently for each cash box 14a, 14b.

In a further embodiment, the inventory data can then be transmitted to the inventory service unit 22 if the inventory service unit 22 has previously transmitted query data to the radio unit 20 of the ATM 10. For this purpose, the SIM 18a, 18b of the cash boxes 14a, 14b may be connected to the radio unit 20 alternately at periodically recurring time intervals. Only within the time interval in which the respective SIM 18a, 18b is connected to the radio unit 20, the inventory service unit 22 can query the inventory data of the corresponding cash box 14a, 14b.

To query the inventory data, the inventory service unit 22 can in particular call a telephone number uniquely assigned to the respective cashbox 14a, 14b via the respective SIM 18a, 18b. Alternatively, the ATM 10 may also include a SIM 28 via which the ATM 10 is uniquely associated with a telephone number. For each telephone number of the cash boxes 14a, 14b, call forwarding to the telephone number of the ATM 10 is set up, preferably automatically, so that the request data sent to a telephone number of one of the cash boxes 14a, 14b are forwarded to the telephone number of the cash machine 10 and can be received by him at any time. The radio unit 20 then transmits the Stock data of the corresponding cash box 14a, 14b to the stock service unit 22.

Alternatively, the embodiments described above for determining the times at which the inventory data are transmitted can also be combined with each other. In particular, the inventory data can be transmitted at fixed times and, in addition, interrogated by the inventory service unit 22 as needed between the times.

The radio unit 20 transmits data to the inventory service unit 22 only when it has previously received authentication data for unique authentication of the inventory service unit 22 from the inventory service unit 22. This ensures that the data is only transmitted to an authorized inventory service unit 22 and can not be queried by each mobile subscriber.

The data transmitted by the radio unit 20 to the inventory service unit 22 is encrypted prior to its transmission by means of application data for encrypting and / or signing data stored on the SIM 28 of the ATM 10 or the respective SIM 18a, 18b of the respective cashbox 14a, 14b, and / or signed. In this way, a secure transmission is achieved, so that the data can not be used and / or manipulated by unauthorized mobile radio subscribers.

By authenticating the cashbox 14a, 14b to the inventory service unit 22 and authenticating the inventory service unit 22 to the ATM 10, two-way authentication is achieved, ensuring that the data is only transferred between authorized entities.

The inventory data and the authentication data are transmitted one by one, transferring first the authentication data and then the inventory data. Alternatively, the authentication data and the inventory data may be transmitted together. As authentication data, in particular those authentication data can be used which are used on the SIM 18a, 18b, 28 for the authentication of the SIM 18a, 18b, 28 with respect to the mobile service provider. In this way, no further authentication data for the authentication of the cash boxes 14a, 14b or of the ATM 10 relative to the inventory service unit 22 must be stored on the SIM 18a, 18b, 28.

Furthermore, the ATM 10 includes a maintenance data memory 30, which is connected via a data cable 32 to the radio unit 20. In the maintenance data memory 30 maintenance data are stored. The maintenance data may in particular include information about failures of the ATM 10, data of error memories, log files, setpoints of parameters of the ATM 10 and / or actual values of parameters of the ATM 10.

The SIM 28 of the ATM 10 comprises a memory area in which authentication data for the unique authentication of the ATM 10 to a maintenance service unit 34 are stored. The radio unit 20 transmits the authentication data stored on the SIM 28 of the ATM 10 and the maintenance data to the maintenance service unit 34 by means of mobile radio 36. The authentication of the ATM 10 to the maintenance service unit 34 can be made in the same manner as previously for the authentication the cash boxes 14a, 14b compared to the inventory service unit 22 described. By transmitting the maintenance data by means of mobile telephony 36, a remote maintenance of the ATM 10 is made possible in a simple manner. The radio unit 20 transmits the maintenance data to the maintenance service unit 34 at preset intervals, for example, every day at midnight.

In an alternative embodiment, the maintenance data can also be transmitted to the maintenance service unit 34 if at least one of the information contained in the maintenance data has changed, in particular if there is a fault of the ATM 10. In this way, it is achieved that the maintenance service unit 34 is informed immediately after the occurrence of a fault about the existence of the fault, so that the fault can be remedied as soon as possible. The maintenance service unit 34 sends to eliminate the interference by means of mobile 36 data with at least one preset setting and / or at least one instruction to be executed on the present disorder to be corrected. Alternatively, the radio connection between the radio unit 20 and the maintenance service unit 34 may also be formed only unidirectionally, ie that the radio unit 20 may send data to the maintenance service unit 34 but can not receive data from the maintenance service unit 34. In this case, faults on site must be remedied by an employee of the maintenance service company. In particular, the maintenance service unit 34 is integrated into a data processing system of a maintenance service company. The maintenance service unit 34 and the inventory service unit 22 may be identical or separate units.

The data transmitted between the radio unit 20 and the maintenance unit 34 is encrypted and / or signed, as previously described for the data transmitted between the radio unit 20 and the inventory service unit 22. The radio unit 20 preferably only transmits data to the maintenance service unit 34 and / or sets the transmitted setting values or executes the received instructions only if it has previously received authentication data for a clear authentication of the maintenance service unit 34 from the maintenance service unit 34.

Furthermore, the ATM 10 comprises a control unit 38, which is connected via data cables 40, 42 to the radio unit 20 and the SIM 28 of the ATM 10. The control unit 38 operates to control the ATM 10 program data of a computer program. For licensing In this computer program or modules of the computer program, the control unit 38 reads out the authentication data stored in the SIM 28 and generates a reference value in dependence on this authentication data. The radio unit 20 then sends out by means of mobile radio 44 reference data, which comprise the reference value, to a license management unit 46. The license management unit 46 generates a license key as a function of the reference data and the functional modules booked by the licensee, in particular the operator of the ATM 10, and transmits data comprising the license key to the radio unit 20 via mobile radio 44. The control unit 38 then switches over to the license purchased by the licensee Function modules of the computer program depending on the license key free. The reference data include in particular the reference value, information about the licensee and / or order information.

The license management unit is integrated in particular in a data processing system of the licensor. The licensor is in particular the manufacturer of the computer program whose program data are processed by the control unit 38.

In this way, a simple licensing process for licensing the computer program is achieved. In particular, the licensing of the computer program can take place without data having to be manually loaded onto the ATM 10. The computer program is preinstalled in particular with all its functional modules at the factory on the ATM 10 or is completely at startup of the ATM 10 installed. The modules acquired by the licensee are then released through licensing. It can be preinstalled on each ATM 10 factory the same computer program or depending on which functional modules were purchased from the operator of the ATM 10, another computer program. This reduces the effort. The reference data are transmitted from the ATM 10 to the license management unit 46, in particular during the first startup of the ATM 10.

The data transmission between the ATM 10 and the license management unit 46 takes place only when the license management unit 46 has authenticated against the ATM 10 by sending authentication data and / or the ATM 10 by sending the stored on the SIM 28 authentication data to the license management unit 46th has authenticated. Likewise, as already described above, the data transmitted between the license management unit 46 and the ATM 10 is also encrypted and / or signed. For this purpose, application data stored in a memory area of the SIM 28 are likewise preferably used.

The ATM 10 is integrated in particular in a computer network of the operator, in which several ATMs, automatic POS systems and / or automatic cash deposits are integrated and retrieve the operator at any time current information of ATMs, automatic POS systems and / or automatic cash deposits and / or manage. By transmitting the inventory data, the maintenance data and the reference data by means of mobile radio 24, 36, 44 to the inventory service unit 22, maintenance service unit 34 and license management unit 46, it is achieved that the inventory service unit 22, the maintenance service unit 34 and the license management unit 46 do not need access to this computer network , This increases data security within the operator's computer network because there is no access from outside. In particular, this can be dispensed with expensive and complex firewalls. Conversely, the service units 22, 34 and the license management unit 46 need not be configured to different network structures at different ATM operators, automatic POS systems and / or automatic cash desk operations.

Further, alternatively, the inventory service unit 22 and the maintenance service unit 34 may be the same service unit, particularly if the service company tasked with the inventory management and the service company engaged in the maintenance are the same service company.

The maintenance of the ATM 10 is carried out in particular by the manufacturer of the ATM 10. The license management unit 46 is integrated in particular into a service center of the manufacturer of the computer program whose program data are processed by the control unit 38. In this case, updates of the computer program by means of mobile radio 44 can be transmitted to the radio unit 20 by the license management unit 46. This ensures that the updates do not have to be manually loaded on-site on the ATM 10, but cost-effective, fast and easy to transfer and install via mobile phone 44. The updates include in particular so-called hotfixes and / or security patches.

In an alternative embodiment of the invention, only the licensing and the maintenance of the ATM 10 can be done by means of mobile radio. Likewise, alternatively, only the inventory management and maintenance can be done via mobile.

In FIG. 2 1 is a schematic representation of a bill of exchange handling apparatus 50 according to a second embodiment of the invention. Elements with the same structure or the same function have the same reference numerals.

Unlike the in FIG. 1 shown ATM 10 is used in the device 50 after FIG. 2 the radio unit 20 exclusively for transmitting data between the device 50 and the maintenance service unit 34 by means of mobile radio 36. A licensing and / or license management by means of mobile radio takes place in this embodiment Not. Similarly, the money cassettes 52a, 52b received in the vault 12 do not have a SIM in this embodiment and are not connected to the radio unit 20. *** " The cash cassettes 52a, 52b each have an inventory data store 54a, 54b, in which at least the current inventory of the respective cashbox 52a, 52b is stored in banknotes. The filling and / or emptying of the money cassettes 52a, 52b takes place in particular at fixed times between the operator of the device 50 and a service provider and / or when the operator of the device 50 requests the service provider on the basis of the existing inventory data.

The maintenance service unit 34 is integrated in particular into a service center of the manufacturer of the device 10, 50. In this way, the manufacturer of the device 10, 50 can offer a so-called "remote maintenance option" and the operator of the device 10, 50 ensure a higher availability of the device 10, 50, provided that the operator completes this remote maintenance option. As a result, the manufacturer of the device 10, 50 bind the operator closer and generate additional revenue.

In contrast to the embodiments described above, in an alternative embodiment, the transmission of data by means of mobile radio 36 between the device 10, 50 and the maintenance service unit 34 can also be unidirectional, ie the device 10, 50 transmits data via the radio unit 20 by means of mobile radio 36 to the maintenance service unit 34, but receives no data from the maintenance service unit 34. In this case, faults in the location of the apparatus 10, 50 must be remedied by a service person of the maintenance service company. Likewise, changes must be made to setting values of the adjustable parameters on site. The frequency of the data transmission between the device 10, 50 and the maintenance service unit 34 and / or the level of detail of the information transmitted via the maintenance data can be determined, preferably as a function of a service level. In this way, the frequency and degree of detail of the data transmission can be adapted to the individual circumstances of the device 10, 50, in particular at the locations of the device 10, 50. In ATMs, automatic POS systems and / or automatic cash deposits 10, 50, in which a large number of banknotes are paid in and out, it makes sense to submit the maintenance data in shorter time intervals or with a higher level of detail than with devices 10, 50 where only a small number of value rails is handled.

LIST OF REFERENCE NUMBERS

10, 50

device

12

safe

14a, 14b, 52a, 52b

cashbox

16a, 16b, 54a, 54b

Inventory data storage

18a, 18b, 28

SIM

20

radio unit

22

Inventory Service Unit

24, 36, 44

mobile

26, 32, 40, 42

data cable

30

Maintenance Service Unit

38

control unit

46

License management unit

Claims (13)

1. Apparatus for handling security papers,
   having a radio unit (20) for sending data from the apparatus (10, 50) to a service unit (34) by means of mobile radio (36),
   an authentication data memory (28) storing authentication data for uniquely authenticating the apparatus (10, 50) by means of the service unit (34), and
   a maintenance data memory (30) storing maintenance data,
   characterized
   in that the radio unit (20) is designed to transmit the authentication data and the maintenance data to the service unit (34) by means of mobile radio (36), in that the apparatus (10, 50) comprises a subscriber identity module (SIM) (28) having a memory area storing maintenance data and authentication data, and
   in that the authentication data comprise a telephone number, uniquely associated with the apparatus (10, 50) by means of the subscriber identity module (28), for identifying the apparatus (10, 50) by means of the service unit (34) and a PIN and/or a password for authenticating the apparatus (10, 50) by means of the service unit (34).
2. Apparatus (10, 50) according to either of Claims 1 and 2, characterized in that the SIM (28) stores application data for encrypting and/or signing data to be sent to the service unit (34) and/or for decrypting and/or checking the signature of data received from the service unit (34).
3. Apparatus (10, 50) according to either of the preceding claims, characterized in that the apparatus (10, 50) is integrated in a computer network of an operator of the apparatus (10, 50) by means of a wired and/or wireless network connection, and in that the data transmission by means of the radio unit (20) is effected separately from and independently of the network connection.
4. Apparatus (10, 50) according to one of the preceding claims, characterized in that the radio unit (20) is designed to transmit the authentication data and the maintenance data to the service unit (34) by means of mobile radio (36) after the radio unit (20) has received query data from the service unit (34).
5. Apparatus (10, 50) according to one of the preceding claims, characterized in that the radio unit (20) is designed to send data to the service unit (34) only if it has received authentication data for uniquely authenticating the service unit (34) from the service unit (34).
6. Apparatus (10, 50) according to one of the preceding claims, characterized in that the radio unit (20) comprises a mobile phone for sending and receiving mobile radio (36).
7. Apparatus (10, 50) according to one of the preceding claims, characterized in that the radio unit (20) is designed to send the authentication data and/or the maintenance data to the service unit (34) at preset intervals of time.
8. Apparatus (10, 50) according to one of the preceding claims, characterized in that the radio unit (20) is designed to send the maintenance data to the service unit (34) if at least one piece of information that the maintenance data contain has changed.
9. Apparatus (10, 50) according to one of the preceding claims, characterized in that the radio unit (20) is designed to receive data, transmitted by the service unit (34) by means of mobile radio (36), having at least one setting value that is to be preset and/or at least one instruction that is to be carried out.
10. Apparatus (10, 50) according to one of the preceding claims, characterized in that the service unit (34) is integrated in a service centre, at a more remote location from the apparatus, of a service provider instructed to maintain the apparatus (10, 50).
11. Apparatus (10) according to one of the preceding claims, characterized in that the apparatus (10) comprises a safe (12) for holding cash boxes (14a, 14b), in that the safe (12) holds at least one cash box (14a, 14b) comprising an authentication data memory (18a, 18b) storing authentication data for uniquely authenticating the cash box (14a, 14b) by means of a service unit (22), in that inventory data with information about the current inventory of security papers in the cash box (14a, 14b) are ascertainable, and in that the radio unit (20) is designed to transmit the authentication data and the inventory data to the service unit (22) by means of mobile radio (24).
12. Apparatus (10, 50) according to one of Claims 1 to 12, characterized in that the apparatus (10, 50) comprises a safe (12) for holding cash boxes, in that the safe (12) holds at least one cash box (14a, 14b) that comprises a memory element (18a, 18b) and a radio unit for sending data from the cash box (14a, 14b) to a service unit (22) by means of mobile radio (24) and/or for receiving data transmitted by the service unit (22), in that the memory element (18a, 18b) of the cash box (14a, 14b) stores authentication data for uniquely authenticating the cash box (14a, 14b) by means of the service unit (22), and in that the radio unit of the cash box (14a, 14b) is designed to transmit the authentication data and inventory data, stored in the memory element (18a, 18b) of the cash box (14a, 14b), with information about the current inventory of security papers in the cash box (14a, 14b) to the service unit (22) by means of mobile radio (24).
13. Apparatus (10) according to one of the preceding claims, characterized in that the apparatus (10) comprises a control unit (38) for controlling the apparatus (10), in that the control unit (38) is designed to execute program data of a computer program, in that the control unit (38) of the apparatus (10) is designed to read the authentication data and to take these authentication data as a basis for generating a unique reference value, in that the radio unit (20) of the apparatus (10) is designed to transmit reference data for generating an apparatus-individual licence key to a licence management unit (46) by means of mobile radio (44), in that the reference data comprise the reference value, in that the radio unit (20) of the apparatus (10) is designed to receive data comprising the licence key from the licence management unit (46), and in that the control unit (38) is designed to take the licence key as a basis for unlocking at least one functional module of the computer program.

Images