EP2619734A2 - Capteur pour le contrôle de documents de valeur - Google Patents

Capteur pour le contrôle de documents de valeur

Info

Publication number
EP2619734A2
EP2619734A2 EP11758132.2A EP11758132A EP2619734A2 EP 2619734 A2 EP2619734 A2 EP 2619734A2 EP 11758132 A EP11758132 A EP 11758132A EP 2619734 A2 EP2619734 A2 EP 2619734A2
Authority
EP
European Patent Office
Prior art keywords
sensor
data
software
license
adaptation
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP11758132.2A
Other languages
German (de)
English (en)
Inventor
Wolfgang RÖHRL
Franz Müller
Helmut Steidl
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Giesecke and Devrient GmbH
Original Assignee
Giesecke and Devrient GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Giesecke and Devrient GmbH filed Critical Giesecke and Devrient GmbH
Publication of EP2619734A2 publication Critical patent/EP2619734A2/fr
Withdrawn legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07D—HANDLING OF COINS OR VALUABLE PAPERS, e.g. TESTING, SORTING BY DENOMINATIONS, COUNTING, DISPENSING, CHANGING OR DEPOSITING
    • G07D11/00—Devices accepting coins; Devices accepting, dispensing, sorting or counting valuable papers
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/4401—Bootstrapping
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07D—HANDLING OF COINS OR VALUABLE PAPERS, e.g. TESTING, SORTING BY DENOMINATIONS, COUNTING, DISPENSING, CHANGING OR DEPOSITING
    • G07D7/00—Testing specially adapted to determine the identity or genuineness of valuable papers or for segregating those which are unacceptable, e.g. banknotes that are alien to a currency
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07D—HANDLING OF COINS OR VALUABLE PAPERS, e.g. TESTING, SORTING BY DENOMINATIONS, COUNTING, DISPENSING, CHANGING OR DEPOSITING
    • G07D11/00—Devices accepting coins; Devices accepting, dispensing, sorting or counting valuable papers
    • G07D11/20—Controlling or monitoring the operation of devices; Data handling
    • G07D11/28—Setting of parameters; Software updates

Definitions

  • the invention relates to a sensor for checking documents of value, a device for checking documents of value, which has the sensor, and a method for operating the sensor.
  • sensors are usually used with which the type of value documents is determined and / or with which the value documents are checked for authenticity and / or their condition.
  • sensors are e.g. used for checking banknotes, checks, ID cards, credit cards, check cards, tickets, vouchers and the like.
  • the value documents are checked in a value document processing device in which, depending on the value-document properties to be checked, one or more different sensors are included.
  • Such sensors usually require adaptation data, i. Data on the value documents to be checked, which the sensor uses to check the value documents. This can e.g. Comparative data with which the measurement data of the value documents are compared or criteria by which the genuineness, the type or the condition of the value documents is assessed.
  • the sensors Even after their commissioning, such sensors are kept up to date, in particular with regard to the software for operating the sensors and with regard to the adaptation data required for testing new value documents. Therefore, from time to time, the sensors usually receive updates regarding their software or updates concerning the adaptation data required for checking the value documents or also updates regarding data of newly disclosed counterfeit value documents. So far, for such updates a service on site of the sensor required to make the update available with the new software or new data for the sensor. For this purpose, for example, the updates are transmitted by a person commissioned by the sensor manufacturer from a portable computer to the sensor and permanently stored in a non-volatile memory of the sensor. However, such service calls can be associated with a longer wait time for the sensor operator and high costs.
  • An object of the present invention is to provide a sensor for checking documents of value, which can be replaced with little effort by a new sensor.
  • the trained for checking the value documents sensor has a non-volatile memory which is permanently installed in the sensor, a measuring device for detecting measurement data of the value documents to be tested, a processor for controlling the sensor and the evaluation of the measured data, a data carrier recording , via which a data medium can be physically and electronically connected to the sensor, and a volatile memory in which software and adaptation data are used to test the value document. can be stored temporarily.
  • the volatile memory may be part of the processor of the sensor or connected via a data bus to the processor of the sensor.
  • the sensor is configured to execute the software temporarily stored in the volatile memory in order to acquire measurement data of the value documents by the measuring device and to check the value documents on the basis of the acquired measurement data and with the aid of the adaptation data temporarily stored in the volatile memory.
  • adaptation data for checking the value documents those data are designated which the sensor requires for checking the value documents in order to be able to assess the authenticity, the type or the state of the value documents.
  • the measured data acquired by the sensor are evaluated with the aid of the adaptation data.
  • Adaptation data usually contains individual criteria for checking the value documents, which are different for the different types of value documents. For example, in the case of newly issued banknotes, it is necessary to provide the sensor with the criteria for determining the type and assessing the authenticity of these new banknotes.
  • Software for checking the value documents designates one or more programs that the sensor carries out in order to carry out the steps necessary for checking the value documents, for example in order to acquire measurement data, to process and evaluate it.
  • the sensor is characterized by the fact that neither the software that the sensor carries out for checking the value documents nor the adaptation data that the sensor uses to check the value documents are permanently stored in the sensor and that these are also used to operate the sensor Sensors, not permanently stored in the sensor.
  • a permanent storage is at least understood over a period as he for carrying out the examination of value documents is required, for example, a single value document or a stack of value documents inserted in a device for value document processing.
  • the sensor is set up so that both the software and the adaptation data are loaded from outside the sensor into the sensor and temporarily stored in a volatile memory of the sensor.
  • the senor has a non-volatile memory in which a firmware of the sensor is included, in this non-volatile memory but no software and no adaptation data are stored.
  • the adaptation data loaded into the sensor and the software loaded into the sensor are neither stored in this nonvolatile memory of the sensor nor in another nonvolatile memory of the sensor.
  • the software and the adaptation data are made available to the sensor in the first exemplary embodiment by a data carrier which is connected to the sensor via the data carrier receptacle, and in the second exemplary embodiment by a memory area of a computer with which the sensor can exchange data.
  • the firmware of the sensor in particular by a base operating system of the sensor included in the firmware, it is stipulated that both the software and the adaptation data are loaded from outside the sensor into the sensor and thereby stored in a volatile memory of the sensor , It is provided that the software and the adaptation data are only loaded into the sensor when the sensor is to be operated for checking the value documents.
  • the sensor is designed to subsequently execute the software stored in the volatile memory and to check the authenticity and / or the type and / or the state of the value documents on the basis of the adaptation data stored in the volatile memory. It can be provided that the sensor can only be used for checking value documents if a data carrier is connected to the sensor via the data carrier receptacle.
  • the data carrier can be electronically connected to the sensor such that data can be exchanged between the data carrier and the sensor.
  • the disk is designed as a flash card, for example as an SD card or MMC card, and equipped with a PC-compatible file system.
  • a designed as a flash card data carrier has the advantage that it is portable and inexpensive and can be connected via a standard slot with the sensor without the sensor must be opened.
  • license data is stored on the data carrier, by means of which a license for the use of the software and / or the adaptation data, or for the use of components thereof, is made available.
  • This license enables the use of the software and / or adaptation data or components thereof for the sensor.
  • the sensor is set up to check before loading the software and / or the adaptation data in the volatile memory, for which software and / or for which adaptation data a data carrier connected to the data carrier recording provides a valid license.
  • a device for accepting and / or outputting value documents in which the sensor is installed or installed is, is and will not store information about which software and / or adaptation data has a valid license.
  • the storage of the software and adaptation data and possibly the license data, outside the sensor, instead of storage in the sensor itself, is e.g. then advantageous if an operating sensor, e.g. due to a technical defect, should be replaced by a new sensor. Because in this case, the entire set of software and adaptation data to be used for the respective sensor and possibly license data of the sensor can be very easily transferred to the new sensor. For the sensor manufacturer, there is also the advantage that the sensors themselves do not have to be individually equipped with software and adaptation data. Since a non-volatile memory for the permanent storage of software and adaptation data is dispensed with in the sensor, the sensor can be produced at lower cost and run in a space-saving manner.
  • the storage of the software and adaptation data outside the sensor, instead of storage in the sensor itself, also increases the flexibility of the storage volume and therefore enables the sensor to be operated with very extensive software and memory-intensive adaptation data if required.
  • the non-volatile memory is a permanent part of the sensor, which contains a firmware of the sensor. This includes, for example, a fixed basic operating system of the sensor, which is needed to run the software.
  • a firmware of the sensor This includes, for example, a fixed basic operating system of the sensor, which is needed to run the software.
  • the nonvolatile memory of the sensor for example, essentially the basic operating system of the sensor is stored.
  • the basic operating system may also be stored on the data carrier to be connected to the sensor, which in this case is designed as a bootable data carrier, eg as a bootable flash card.
  • the non- Volatile memory in addition to the basic operating system of the sensor, and calibration data of the sensor can be stored. The calibration data are usually individually tailored to the sensor and are calculated with the acquired measurement data of the sensor in order to match the measurement data of different sensors.
  • the non-volatile memory can be designed as eg as flash memory or as ROM, EPROM or
  • EEPROM Since the storage capacity of the nonvolatile memory need not be designed to store software and adaptation data, an inexpensive nonvolatile memory with a relatively low storage capacity can be advantageously used for the sensor.
  • the senor is equipped with a communication interface, via which data can be loaded into the sensor.
  • the sensor may e.g. Receive data and / or control commands from or send to a device for accepting and / or issuing value documents.
  • the adaptation data and / or the software are made available to the sensor by a data carrier connected to the data carrier recording.
  • the sensor in particular the firmware of the sensor contained in the non-volatile memory, is set up to load the adaptation data and / or the software from the data carrier connected to the data carrier receptacle into the sensor and into the volatile memory of the sensor feed.
  • the senor in particular the firmware of the sensor contained in the non-volatile memory, is set up to transmit the adaptation data and / or the software via the communication system.
  • sensor interface directly into the sensor to load and store in the volatile memory of the sensor.
  • the adaptation data and / or the software are provided, for example, by a computer outside the sensor and are loaded from there via the communication interface into the volatile memory of the sensor.
  • the invention also relates to a device for checking value documents which has the above-described sensor and a data carrier which can be connected or connected to the sensor via the data carrier receptacle.
  • the data medium stores license data which determine for which software and / or for which adaptation data the data medium provides a license.
  • adaptation data and / or software for checking the value documents can also be stored on the data carrier.
  • the device may be a device for processing value documents, which is designed for the acceptance and / or output of value documents.
  • the device may also be a set of the sensor and the data carrier, e.g. a set to be installed in a device for value document processing.
  • the invention further relates to a method for operating the above-described, for the examination of value documents formed sensor. To operate the sensor, the following steps are performed:
  • a data carrier is connected via the data carrier recording with the sensor.
  • adaptation data for checking the value documents and software for checking the value documents from outside the sensor are loaded into the sensor and temporarily stored in the volatile memory of the sensor.
  • adaptation data loaded into the sensor nor the software loaded into the sensor are permanently stored in the sensor. stores, ie they are stored neither in the nonvolatile memory of the sensor nor in another nonvolatile memory of the sensor.
  • the software stored in the volatile memory is executed.
  • measurement data of the value documents are detected by the measuring device and the value documents are checked on the basis of the acquired measurement data and with the aid of the adaptation data loaded in the volatile memory, in particular on their authenticity and / or their type and / or their condition.
  • license data are stored, by which it is determined for which software and / or adaptation data the respective data carrier provides a license.
  • the information for which software and / or adaptation data the respective data carrier provides a license is determined exclusively by the license data stored on the data carrier.
  • the license data contain information about which components of the software and / or adaptation data the respective data carrier provides a license and thus which components of the software and / or adaptation data may be used in connection with this data carrier.
  • the license data may contain information about the period in which the respective data carrier provides a valid license for the software and / or the adaptation data and / or components thereof.
  • the license data provides a valid license only in conjunction with one or more particular media.
  • a data carrier which has a worldwide individual identifier which is stored on the data carrier in an unchangeable manner.
  • the license provided by the data carrier is thus to the individual identifier that the licenses contained in the license data are valid only in connection with that one or more particular volumes.
  • the respective adaptation data and / or software can therefore only be used if the sensor is connected to a specific data carrier on which license data corresponding to the individual identifier of the data carrier are stored.
  • This license information does not provide a valid license in connection with any media that has a different individual identifier that does not correspond to the license data.
  • step b Before loading the software and adaptation data into the volatile memory according to step b), it is checked on the basis of the license data stored on the data carrier for which software and adaptation data the data carrier provides a valid license. Only the software and adaptation data for which the data carrier provides a valid license according to the license data are loaded into the sensor from outside the sensor and stored in the nonvolatile memory of the sensor. In order to determine for which software and adaptation data the data carrier provides a valid license, it is checked whether the unalterably stored on the data carrier, individual identifier corresponds to the license data. In particular, it can be checked whether the individual identifier of the data carrier corresponds to an identifier contained in the license data, for example, whether these match or whether they provide a specific result linked to each other.
  • the individual identifier of the data carrier matches an identifier to which the license data refer.
  • a reference can be realized, for example, by storing group information on the data carrier which contains an association of the respective data carrier with a group of data carriers, in conjunction with License data that is valid for a group of media, that is, that qualifies as a group license.
  • the described method steps can be defined in the basic operating system of the sensor. If the license data also contain time-limited licenses, it is checked, for example, whether the current time falls within the validity period of the temporary license. To check the validity of a temporary license, the sensor can be equipped with a real-time clock. Alternatively, the sensor may check the validity of the temporary license without information about the actual time.
  • the sensor checks to see if the date of the software and / or the adaptation data falls within the validity period defined by the license data.
  • the license data is protected against falsification by a digital signature.
  • a public key stored in the nonvolatile memory of the sensor may be used.
  • the sensor checks the digital signature of the license data to ensure the source of the license data from the sensor manufacturer.
  • the software and / or adaptation data may also be provided by a digital signature
  • the sensor preferably checks the authenticity and integrity of the software to be loaded and adaptation data before it uses the software and adaptation data to check the value documents.
  • the license to use the software and / or adaptation data was coupled to the serial number of the sensor and therefore always a service use necessary to the licenses of the defective to the new sensor to transfer.
  • the outsourcing of the license data to the data carrier and the coupling of the license to the individual identifier of the data carrier considerably simplify the handling of the licenses. Because even if a sensor is defective, the sensor operator remains in possession of his licenses once purchased. He can transfer the licenses to a new sensor simply by removing the data medium with the license data stored on it from the defective sensor and connecting it to the new sensor.
  • the licensing process also provides the following benefits:
  • the license data can therefore also be easily sent via the Internet, e.g. by email.
  • the software and / or adaptation data are the same for all sensors, regardless of the licenses purchased by the respective sensor operator. This reduces the expense for the sensor manufacturer regarding the creation and documentation of the various compilations of software and adaptation data which would be required for the respective sensors of the various sensor operators.
  • the sensors can be easily kept up to date and their functions can be extended later if necessary.
  • the adaptation data and / or the software are provided by the data carrier attached to the data carrier receptacle.
  • the adaptation data and / or the software is loaded from the data carrier into the sensor and stored in the volatile memory of the sensor.
  • the adaptation data carrier provides a valid license
  • both the adaptation data and the software are loaded from the data carrier into the sensor.
  • only one of the two components, adaptation data and software can be loaded from the data carrier into the sensor.
  • the respective other component can, for example, be loaded into the sensor via the communication interface of the sensor.
  • the adaptation data from the data carrier and the software can be loaded into the sensor via the communication interface.
  • the adaptation data and the software are provided by a computer which can communicate with the sensor via the communication interface of the sensor.
  • both the adaptation data and the software are loaded into the sensor via the communication interface of the sensor and stored directly in the volatile memory of the sensor.
  • the adaptation data and / or software are preferably provided by the computer of a device in which the sensor is installed, in particular by a device for accepting and / or outputting value documents.
  • the data carrier provides a valid license
  • only the software and / or adaptation data for which the data carrier is a valid one will become valid License from the memory area of the computer, which is connected to the sensor via the communication interface, loaded into the sensor.
  • FIG. 1 a Schematic representation of a sensor with internal functional units of the sensor and its interfaces to the outside according to a first exemplary embodiment
  • FIG. 1b shows a schematic representation of a sensor with internal functional units of the sensor and its interfaces to the outside according to a second exemplary embodiment
  • FIG. 2 a shows an exemplary composition of the software of the sensor used for checking documents of value
  • FIG. 2b shows an exemplary composition of the adaptation data of the sensor used for checking the value documents
  • FIG. 2 c an exemplary composition of license data for the use of the software and the adaptation data by the sensor
  • FIG. 1 a shows a sensor 1 for checking value documents in accordance with a first exemplary embodiment.
  • the sensor 1 is provided for incorporation into a device 13 for accepting and / or outputting value documents.
  • the other components of the device 13, such as the transport system and input and output compartments for documents of value, value Document storage and input and output interfaces for the operator of the device 13, are not shown in Figure la (as in Figure lb) for ease of illustration.
  • the sensor 1 has a measuring device 3, by means of which the sensor can acquire measurement data of a value document W to be tested.
  • the value document W is transported past the sensor 1 along a transport direction T, so that the measuring device 3 can sequentially acquire measurement data of a plurality of measuring points of the value document W.
  • the measuring device 3 can acquire measurement data on optical and / or magnetic and / or electrical and / or other properties of the value document.
  • the acquired measurement data are transmitted to a processor 4, through which the measurement data are processed and evaluated.
  • the processor 4 is equipped with a volatile memory 9 in which software SW and adaptation data A are temporarily stored for checking the value documents.
  • the volatile memory 9 may also be arranged outside the processor 4.
  • the sensor 1 further includes a nonvolatile memory 2 which only needs to have a relatively small memory capacity. This is only used to permanently provide a firmware FW of the sensor in the sensor, eg a basic operating system of the sensor, which is necessary for booting the sensor, or calibration data, which are used for a comparison of the acquired measurement data and individually for the measuring device 3 of the sensor were determined.
  • no software SW and no adaptation data A are stored for checking the value documents W.
  • the sensor 1 also contains no further non-volatile memory in which the software of the sensor and adaptation data for checking the value documents are permanently stored or are.
  • the software SW and adaptation data A required for checking the value documents are made available to the sensor from outside the sensor posed.
  • the software SW and the adaptation data A are stored on a portable data carrier, for example on a flash card 10.
  • this flash card 10 must be connected to the sensor 1 via a data carrier receptacle 6.
  • the data carrier receptacle 6 may be formed, for example, as a flash card slot, which is integrated in the housing of the sensor 1.
  • the software SW and adaptation data A located on the flash card are loaded into the sensor 1 and stored there in the volatile memory 9. Once the software SW and adaptation data A have been loaded from the flash card 10 into the volatile memory 9, the processor 4 can execute the software and perform the verification of the value documents.
  • the license for using the software SW stored on the flash card 10 and the adaptation data A is determined by license data L, which are likewise stored on the flash card 10. Of the software SW and adaptation data A stored on the flash card 10, only those can be loaded into the sensor 1 for which a valid license exists in accordance with the license data L. Details for checking the license data L follow in the description of FIGS. 2c and 2d.
  • the sensor 1 also has a communication interface 5, via which data from outside the sensor 1 can be loaded into the sensor 1.
  • the communication interface 5 may be, for example, a USB or Ethernet interface.
  • the sensor is connected to a computer 11, for example to the computer of a device 13 for accepting and / or outputting value documents in which the sensor 1 is installed.
  • the computer 11 may in particular be the computer of an ATM 13, which, like the sensor 1, is accommodated in the housing of the ATM 13.
  • the computer 11 can also be a Central computer, which is in connection with several ATMs.
  • a bidirectional real-time connection 7 via which, for example, control commands or measurement results of the sensor 1, which relate, for example, to the authenticity, type or state of the value documents, are transmitted from or to the computer 11 become.
  • the sensor 1 is connected to the computer 11 via a data line 8, via which software updates SW and / or adaptation data updates A 'and / or license data updates L' are transmitted to the sensor 1.
  • These updates SW, A ', L' can be transmitted via the Internet 14 to the computer 11 and from there via the data line 8 to the sensor 1.
  • the updates are not stored in the sensor 1, but only on the flash card 10 connected to the sensor 1, where they replace or supplement the (previous) software and / or adaptation data and / or license data L.
  • the processor 4 of the sensor 1 provides for the transmission of the update software SW and / or update adaptation data A 'and / or update license data L' directly from the communication interface 5, through the sensor 1 to the one connected to the sensor 1 Flash card 10.
  • Loading the update software SW and / or the update adaptation data A 'via the communication interface 5 of the sensor, passing through the sensor, onto the data carrier can be carried out in dependence on a check as to whether the data carrier 10 for the Updates provides a valid license.
  • Software SW and / or adaptation data A for checking the value documents can already be stored on the flash card 10 before the flash card 10 is connected to the sensor 1.
  • the flash card 10 may have received the software SW and / or the adaptation data A, for example, prior to their delivery by the sensor manufacturer.
  • the flash card 10 may also have been transferred from a defective sensor 1 'to the sensor 1 and Therefore, the software SW and / or adaptation data A already included. But it is also possible that, when connecting the flash card 10 to the sensor 1, on the flash card 10 still no software SW and / or no adaptation data A are stored. In this case, the software SW and / or adaptation data A are stored via the communication interface 5 of the sensor 1 directly into the inserted flash card 10, without being stored elsewhere in the sensor 1.
  • Figure lb shows a second embodiment in which only license data L are stored on the flash card 10, but no software SW and no adaptation data A for checking the value documents W.
  • the software SW and adaptation data A in this example are permanently in a memory area 12 of the computer 11 of the device 13 is stored.
  • the sensor 1 is connected to the computer 11 via the real-time connection 7 and via the data line 8. Only to check the value documents, the processor 4 of the sensor 1 ensures that the software SW and adaptation data A are transferred from the memory area 12 via the data line 8 to the sensor 1 and stored in the volatile memory 9 of the sensor 1. As soon as the software SW and adaptation data A have been stored from the memory area 12 into the volatile memory 9 of the sensor 1, the processor 4 can execute the software SW and carry out the checking of the value documents.
  • the software SW and / or adaptation data A stored in the memory area 12 of the computer 11 can also be replaced by an update software SW 'and / or update adaptation data A', which are transmitted from the Internet 14 to the computer 11 of the device 13 , Any update license data L ', as in the first embodiment via the communication interface 5 through the sensor 1 to the with the Sensor 1 connected flash card 10 where they replace the (previous) license data L or supplement.
  • FIG. 2 a shows, by way of example, the components of a software SW which the sensor 1 can use to check the value documents W.
  • This example is version 1.7 of the software that can be used for sensor 1, which is valid from 1.6.2010 and replaces the previously valid version.
  • the software contains three software options 20 with the designation "XY” "FT” and "QR", which the sensor operator for the sensor 1 can optionally purchase and - with the help of an appropriate license - can unlock for its sensor 1.
  • the sensor 1 can receive extended functions, eg for checking the status of the value documents on the basis of the acquired measurement data, for reading the serial number of the value documents, for checking the check or for tracing forged value documents.
  • FIG. 2b shows an exemplary composition of the adaptation data A for checking the value documents W, which are used by the processor 4 of the sensor 1 during the execution of the software SW.
  • the adaptation data A contains five different data sets 30 labeled "EUR”, “USD”, “CAD”, “JPY” and “CNY” for the currencies euro, US dollar, Canadian dollar, Japanese yen and Chinese yuan
  • Each of the data records 30 contains, for example, comparison data for each denomination of the respective currency, with which the acquired measurement data of the value documents W are adapted.
  • These adaptation data A of version 2.12 are also valid from 1.6.2010 and replace the previously valid adaptation data.
  • Both the software SW and the adaptation data A are protected against adulteration by a cryptological check sum PSW or PA.
  • the software SW contains a cryptographic check sum PSW for this purpose, which is calculated from the basic software and the software options 20.
  • the cryptological checksum PA contained in the adaptation data A is calculated from the data sets 30 of the adaptation data A.
  • the sensor 1 checks whether the basic software and the software options 20 result in the checksum PSW and whether the data records 30 of the adaptation data A result in the checksum PA. Only if they match is the basic software and the software options 20 or the data sets 30 of the adaptation data A loaded into the sensor 1.
  • Both the checksums PSW and PA and the version designation and the date of the software or of the adaptation data are stored in encrypted form in the software SW or in the adaptation data A and are decrypted by the sensor 1 before checking the respective checksum PSW or PA, which has corresponding keys.
  • FIG. 2 c shows an example of the composition of license data L.
  • This license data L it is determined for which components of the software SW and for which components of the adaptation data A a license exists.
  • the license data L contain several individual licenses and are individually compiled for the respective sensor 1, depending on which components of the software SW and the adaptation data A the sensor operator wishes to use.
  • the sensor operator receives the flash card 10 with the desired selection of individual licenses.
  • 2 c comprises a license for the basic software of the sensor 1 and three option licenses: the option licenses 1 and 2 for the data records EUR and USD of the adaptation data A and the option license 3 for the software option "XY" of the software SW, see Figures 2a, 2b
  • the license for the basic software and the option licenses are valid for an unlimited time and the license data L can also be encrypted
  • the license data L shown in Figure 2c individually assembled for a particular flashcard 10 and only provide a valid license if stored on this flashcard 10 having the "correct" identifier K. This can be ensured, for example, by using a flash card 10 which carries an individual identifier K, which is unique worldwide and which is immutable stored on the flash card 10, cf.
  • Figures la, lb
  • this individual identifier K is "# 123456789.”
  • the sensor 1 checks, for example, whether the individual identifier K of the flash card 10 corresponds to the identifier K for which the license data L is valid contained in the license data L (see Figure 2c, 2d) and it is checked whether the identifier K of the license data L with the identifier K of the flash card 0. In lieu of an agreement, it is also possible for the two to correspond in another way
  • Identifiers are checked, for example, whether the two identifiers, mathematically linked together, provide a specific result.
  • the license data L from FIG. 2 c can only be used in conjunction with the flash card 10 since this has the correct identifier K. If the license data L be copied to another flash card carrying a different identifier K ', so the verification of the license data L by the sensor 1 provides a negative result and the loading of the software and adaptation data in the sensor 1 is denied.
  • update license data L ' will be made available to him, cf. Figure 2d.
  • the update license data L ' are stored on the flash card 10 and replace or supplement there the (previous) license data L.
  • the license data L' can eg be sent electronically to the sensor operator, eg by e-mail, without it being downloaded be made available on the Internet.
  • the sensor operator receives update license data L 'which, in addition to the (previous) license data L, additionally comprises two time licenses which are only valid for a limited time: the time license 1 for the data record "CNY" of the adaptation data A and Time license 2 for the software option "FT".
  • the two time licenses 1 and 2 allow the loading of those data records "CNY” and the software option "FT", which are dated with a date from 1.1.2010 to 31.12.2010, cf. FIGS. 2a, 2b.
  • a data record "CNY” or software option “FT” dated after this time will no longer be released with these time licenses 1 and 2.
  • Figure 2e shows an alternative embodiment for the license data L, which are not individually assembled for a single flash card 10, but for a group Gl of flash cards. For example, the group Gl owns several flash cards of the same user.
  • the group license has the advantage that the license data L no longer has to be individually compiled and delivered differently for each flash card, whereas for individual license data, specific license data L must always be stored on each flash card Instead, each flash card of the group G1 receives the group license compiled for the group G.
  • the expense of file handling is considerably reduced License data L stored in Figure 2e
  • group information which is stored cryptologically secured against adulteration on the respective flash card, cf. FIG. 2f.
  • the group information contains an assignment of the flash card to one or more groups.
  • the group information consists of the information that the flash card with the identifier K belongs to the group G1.
  • the group information differs individually for each flash card, since it refers to the respective individual identification of the flash card.
  • the group information is already stored on the flash card 10 before the delivery of the flash card 10 to the user.
  • the sensor 1 checks whether the license data L of the flash card 10 connected to the sensor 1 is valid. If the sensor finds the license data L from FIG. 2e, it first determines that the license data L is a group license for the group G1. The sensor 1 then checks whether the flash card 10 connected to it also contains group information about the group G1 and whether the assignment of the flash card 10 with the identifier K to the group G1 mentioned in the license data results from this group information.
  • the group license can only be used for those flash cards that contain the appropriate group information for the respective identifier of the respective flash card.
  • the license data L which contain a group license, can therefore be sent to the users simply over the Internet.

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Storage Device Security (AREA)
  • Testing Or Calibration Of Command Recording Devices (AREA)
  • Stored Programmes (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

L'invention concerne un capteur pour le contrôle de documents de valeur ainsi qu'un dispositif équipé du capteur et un procédé de fonctionnement du capteur. Le capteur se caractérise en ce que ni le logiciel qui est exécuté par le capteur pour le contrôle des documents de valeur ni les données d'adaptation que le capteur utilise pour le contrôle des documents de valeur ne sont stockés en permanence dans le capteur lui-même. Le capteur est conçu pour que le logiciel, de même que les données d'adaptation, soient chargés dans le capteur à partir de l'extérieur du capteur. Il est possible prévoir que le capteur ne puisse être utilisé pour le contrôle de documents de valeur que lorsqu'un support de données est relié au capteur et que des données de licence sont stockées sur le support de données, si bien qu'une licence est accordée au capteur pour l'utilisation du logiciel et/ou des données d'adaptation.
EP11758132.2A 2010-09-20 2011-09-19 Capteur pour le contrôle de documents de valeur Withdrawn EP2619734A2 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102010046024A DE102010046024A1 (de) 2010-09-20 2010-09-20 Sensor zur Prüfung von Wertdokumenten
PCT/EP2011/004671 WO2012038052A2 (fr) 2010-09-20 2011-09-19 Capteur pour le contrôle de documents de valeur

Publications (1)

Publication Number Publication Date
EP2619734A2 true EP2619734A2 (fr) 2013-07-31

Family

ID=44654069

Family Applications (1)

Application Number Title Priority Date Filing Date
EP11758132.2A Withdrawn EP2619734A2 (fr) 2010-09-20 2011-09-19 Capteur pour le contrôle de documents de valeur

Country Status (7)

Country Link
US (1) US10043334B2 (fr)
EP (1) EP2619734A2 (fr)
KR (1) KR101906615B1 (fr)
CN (1) CN103229218A (fr)
DE (1) DE102010046024A1 (fr)
RU (1) RU2607780C2 (fr)
WO (1) WO2012038052A2 (fr)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102012024390A1 (de) * 2012-12-13 2014-06-18 Giesecke & Devrient Gmbh Verfahren zur Bereitstellung von Messdaten einer Vorrichtung zur Bearbeitung von Wertdokumenten und Wertdokumentbearbeitungsvorrichtung
CN106251474B (zh) * 2016-07-27 2019-08-27 深圳怡化电脑股份有限公司 金融自助设备的传感器异常容错方法及装置
CN110688162A (zh) * 2019-09-16 2020-01-14 广东小天才科技有限公司 一种基于高通平台支持多个同类型传感器的方法和装置

Family Cites Families (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5640463A (en) * 1994-10-04 1997-06-17 Cummins-Allison Corp. Method and apparatus for authenticating documents including currency
DE4028762C2 (de) * 1990-09-11 1996-04-18 Nsm Ag System zur Auswertung von Daten aus einem münzbetätigten Gerät
US5909502A (en) * 1996-09-17 1999-06-01 Cummins-Allison Corp. Software loading system for a currency scanner
US7513413B2 (en) * 1996-11-15 2009-04-07 Diebold, Incorporated Correlation of suspect currency note received by ATM to the note depositor
US6039645A (en) * 1997-06-24 2000-03-21 Cummins-Allison Corp. Software loading system for a coin sorter
CN1178179C (zh) * 1997-10-23 2004-12-01 凯实技术公司 多事务硬币机器
US6272245B1 (en) * 1998-01-23 2001-08-07 Seiko Epson Corporation Apparatus and method for pattern recognition
US6131718A (en) * 1998-09-30 2000-10-17 Lucent Technologies Inc. System and method for the detection of counterfeit currency
GB2348729A (en) 1999-04-07 2000-10-11 Mars Inc A money validator reprogrammable using externally recieved data
US7104383B1 (en) * 2000-02-14 2006-09-12 Leon Saltsov Validator with removable flash memory
US7494047B2 (en) * 2002-11-25 2009-02-24 Diebold Self-Service Systems Division Of Diebold, Incorporated Cash dispensing automated banking machine diagnostic system
DE10037177A1 (de) * 2000-07-31 2002-02-14 Giesecke & Devrient Gmbh Banknotenbearbeitungsmaschine und Verfahren zum Betreiben der Banknotenbearbeitungsmaschine
AR038760A1 (es) * 2000-09-29 2005-01-26 Diebold Inc Metodo para la acumulacion y presentacion de hojas en una maquina automatica de transacciones
DE20101025U1 (de) * 2001-01-16 2001-04-26 Nat Rejectors Gmbh System zur Programmierung von bereits in Automaten o.dgl. installierten elektronischen Münzprüfern
WO2003045519A1 (fr) 2001-11-26 2003-06-05 Igt Dispositif et procede de validation active d'interconnexion
DE10242572A1 (de) * 2002-09-13 2004-04-01 Giesecke & Devrient Gmbh Anordnung für die Gewinnung von Sensordaten von Banknotenbearbeitungsmaschinen
US6953150B2 (en) * 2002-11-25 2005-10-11 Diebold Self-Service Systems Division Of Diebold, Incorporated Cash dispensing automated banking machine diagnostic device
US7104441B2 (en) * 2002-11-25 2006-09-12 Diebold Self-Service Systems Division Of Diebold, Incorporated Cash dispensing automated banking machine diagnostic method
DE10360862A1 (de) * 2003-12-23 2005-07-21 Giesecke & Devrient Gmbh Verfahren für die Identifizierung von gefälschten Banknoten
DE102004033092A1 (de) * 2004-07-08 2006-01-26 Giesecke & Devrient Gmbh Verfahren für den Nachweis der Herkunft von Banknoten
RU2357291C2 (ru) * 2005-01-12 2009-05-27 Джэпэн Кэш Машин Ко., Лтд. Устройство для проверки подлинности ценных документов
DE102005016824A1 (de) * 2005-04-12 2006-10-19 Giesecke & Devrient Gmbh Vorrichtung und Verfahren zur Prüfung von Wertdokumenten
JP4804864B2 (ja) * 2005-10-07 2011-11-02 日立オムロンターミナルソリューションズ株式会社 紙幣取扱システム
US7946406B2 (en) * 2005-11-12 2011-05-24 Cummins-Allison Corp. Coin processing device having a moveable coin receptacle station
DE102005055682A1 (de) * 2005-11-22 2007-05-24 Giesecke & Devrient Gmbh Vorrichtung für die Überprüfung der Echtheit von Banknoten
US7929749B1 (en) * 2006-09-25 2011-04-19 Cummins-Allison Corp. System and method for saving statistical data of currency bills in a currency processing device
DE102007019107A1 (de) * 2007-04-23 2008-10-30 Giesecke & Devrient Gmbh Verfahren und Vorrichtung zur Prüfung von Wertdokumenten
US7774649B2 (en) * 2008-01-31 2010-08-10 Ncr Corporation Self-service terminal
DE102008051758A1 (de) * 2008-10-15 2010-04-22 Giesecke & Devrient Gmbh Verfahren und Vorrichtung zum Bearbeiten von Wertdokumenten
DE102008061982A1 (de) 2008-12-12 2010-06-24 International Currency Technologies Corporation Gelderkennungsapparat und Informationsaktualisierungsverfahren für denselben
DE102009043090A1 (de) * 2009-09-25 2011-03-31 Wincor Nixdorf International Gmbh Vorrichtung zur Handhabung von Wertscheinen
US20140107836A1 (en) * 2012-10-08 2014-04-17 Diebold Self Service Systems, Division Of Diebold, Incorporated Automated banking machine that can detect servicing actions

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO2012038052A2 *

Also Published As

Publication number Publication date
WO2012038052A2 (fr) 2012-03-29
US10043334B2 (en) 2018-08-07
WO2012038052A3 (fr) 2013-05-16
DE102010046024A1 (de) 2012-03-22
RU2013118098A (ru) 2014-10-27
RU2607780C2 (ru) 2017-01-10
KR101906615B1 (ko) 2018-12-07
CN103229218A (zh) 2013-07-31
US20140147030A1 (en) 2014-05-29
KR20140051811A (ko) 2014-05-02

Similar Documents

Publication Publication Date Title
EP2277149B1 (fr) Procédé pour stocker des informations concernant des billets et guichet automatique bancaire
EP1700277B1 (fr) Systeme compose de machines de traitement des billets de banque, machine de traitement des billets de banque et procede de fonctionnement associe
WO2012034703A1 (fr) Procédé pour le traitement de billets de banque
DE102009034065A1 (de) Verfahren für die Bearbeitung von Banknoten
DE4013585A1 (de) Verfahren zur ueberpruefung der ordnungsgemaessen bearbeitung von banknoten
WO2005064548A2 (fr) Procede permettant l'identification de billets de banque falsifies
DE60100508T2 (de) Prufer mit auswechselbarem flashspeicher
EP3053150B1 (fr) Procede et systeme de traitement de documents de valeur
WO2012038052A2 (fr) Capteur pour le contrôle de documents de valeur
WO2014095054A1 (fr) Procédé de traitement de documents de valeur et moyen d'exécution dudit procédé
EP2188763B1 (fr) Compteur d'utilisations pour carte à puce
DE10037177A1 (de) Banknotenbearbeitungsmaschine und Verfahren zum Betreiben der Banknotenbearbeitungsmaschine
EP1444661A2 (fr) Dispositif de traitement de documents de valeur, procede de controle de fonctionnement, reglage et/ou etalonnage du dispositif de traitement de documents de valeur et milieux de test permettant de mettre en oeuvre ledit procede
EP2745278B1 (fr) Capteur et procédé pour faire fonctionner ce capteur
EP3014589B1 (fr) Methode pour mettre a disposition des donnees de mesure d'un dispositif de traitement de documents de valeur et dispositif de traitement de documents de valeur
WO2012055539A1 (fr) Description d'un caractère distinctif pour une caractéristique d'authenticité
EP1310922B1 (fr) Conversion sécurisée de billets de banque ou de pièces de monnaie en unités de valeur électroniques à un guichet automatique de dépôt
EP1745443A2 (fr) Procede et dispositif pour identifier la personne deposant des billets de banque suspects dans une billetterie automatique
DE102007027935A1 (de) Tragbarer Datenträger und Verfahren zur Personalisierung eines tragbaren Datenträgers
DE102009042033A1 (de) Aufzugsprüfsystem und Aufzugsprüfsystem-Aktualisierungsverfahren für ein Aufzugsprüfsystem
EP1223563A2 (fr) Procédé et systeme de programmation de sélecteurs électroniques de pièces de monnaie
CH710090A1 (de) Identifizierungssystem, Verfahren und Benutzermedium.
EP3553726A1 (fr) Procédé de mémorisation à fiabilité de manipulation des données de transaction dans un système de caisses enregistreuses électroniques et système
DE10360860A1 (de) Banknotenbearbeitungsmaschine und Verfahren für ihren Betrieb
DE102016124615A1 (de) Verfahren zur Nutzungsfreigabe eines Automaten durch Zuführung eines Zahlungsmittels.

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

17P Request for examination filed

Effective date: 20131118

RBV Designated contracting states (corrected)

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

DAX Request for extension of the european patent (deleted)
17Q First examination report despatched

Effective date: 20141009

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

RIC1 Information provided on ipc code assigned before grant

Ipc: G07D 7/00 20060101ALI20150924BHEP

Ipc: G07D 11/00 20060101ALI20150924BHEP

Ipc: G06F 9/44 20060101ALI20150924BHEP

Ipc: G07D 7/20 20060101AFI20150924BHEP

INTG Intention to grant announced

Effective date: 20151013

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20160224