JPH087805B2 - Postage meter for remote variable recharge - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION (a) Field of Industrial Application The present invention relates to a postage meter, and more particularly to an improved remote variable recharging system suitable for use in a postage meter.

(B) Prior Art A postage meter is a device that gives an amount of money in the form of postage printed on a postal matter such as an envelope. The term "postage meter"
Also includes other similar tariffs such as parcel post meters. This form of tariff prints and accounts for postage stored within the tariff. Since the data indicating the amount of postage used for printing is stored inside the tariff, the postage meter must be equipped with a safety device against tampering.

Within the above requirements, the postage meter does not require physical delivery of the postage meter to the postal authority for recharge, and the postage meter recharges or resets the additional postage for printing by the rate meter. A system was developed that allows to be done. This eliminates the inconvenience to the user of the postage meter by eliminating the need to bring the postage meter to the post office for recharging. The remote recharge system meets the safety requirements for postage meters and has been developed for both fixed incremental recharge for mechanical rate meters and variable incremental recharge for electronic rate meters.

A remote toll meter recharge system is described in US Pat. No. 4,097,923.
Invention "Remote postage recharge system using advanced microcomputer computerized postage meter (REMOTE P
OSTAGE RECHARGING SYSTEM USING AN ADVANCED MICROCO
It is also included in the electronic postage meter described in "MPUTERIZED POSTAGE METER". The recharge system includes a data center with a voice response unit. The data center has telephone calls from postage meter users requesting the transmission of information specific to the particular tariff to be recharged. The user can enter the postage meter identification number,
The data center is provided with the last reading of the ascending and descending register of the postage meter and the desired postage amount entered into the postage meter. The amount of postage required to be recharged can be changed at the request of the user. The data center computer constructs a combination in numerical form that is a function of the identification information and the amount of postage required to be recharged.
This combination is sent back to the user. The user enters the amount and combination into the postage meter. The postage meter has a comparison circuit that compares the input combination to an internally generated combination based on the postage amount required to be recharged and the identification information. If the entered combination matches the internally generated combination, the control sum register of the rate meter is incremented by the new postage amount. The above data center term is used as a device that is centrally located for a plurality of remotely located postage meters and has the ability to send the combination required for recharge or reset to the postage meters. Has been done.

Robert B. Mc
Figgans) filed on Mar. 28, 1979, pending US patent application No. 024,813, "System for Secure Postage Printing Process (SYSTEM FOR SECURING POSTAGE PR
The system disclosed in "INTING TRANSACTIONS)" is an encryption device (encrypto) for a printing station and an accounting station that are connected to each other by a communication link that does not take safety measures against data corruption on the communication.
r) is used. Each time the toll meter printing operation is initiated, the number generator at the printing station is operated to generate a number signal that is encrypted to give unpredictable results. This number signal is also transmitted to the accounting station. At the accounting station, the postage to be printed is accounted for and the number signal is encrypted to give a response signal, where a comparator compares the response signal to the cryptographic result generated at the printing station. The match between the cipher result and the response signal indicates that the postage to be printed has been accounted for and the printer has been activated.

(C) Problems to be Solved by the Invention Although the system of the above-mentioned US patent application 024,813 operates sufficiently satisfactorily for its intended purpose,
There has been a constant hope to increase the security and provide improved performance of postage meter remote recharge systems. This is especially required for variable incremental recharging, which requires more secure and more complex conditions than fixed incremental recharging systems. The reason for this is that the amount used in the variable increase recharge can be substantially larger than the amount of fixed increase systems previously established.

Recharging a variable amount of money makes it difficult to recover the previous information stored in the required tariff. Depending on the fixed amount of recharge, the recharge amount is predetermined. Therefore, changes in the accounting register in the toll meter are made easier. This is not the case for variable recharge.

For example, if the control sum in the postage meter's register is used in a recharging system, the user communicates this information to the data center. The control sum is the data of the postage meter's descending register (which is a register that stores the amount of postage remaining to be printed) and the ascending register of the postage (this is the amount of postage printed by the tariff meter). Is a register that stores the total) and the sum of the data. This sum remains constant until the tariff is recharged. At that time, the control sum is increased by the recharge amount. However, the recharge amount is variable, and the effect of changing the control sum is not a fixed process for each recharge operation.

The problem is further complicated in systems where user identification is done using identification information such as control sums, ascending register amounts, descending register amounts, tariff serial numbers, accounting numbers and other similar types of information. . In such a system, a large number of recharge amounts are requested by the user, but they are not necessarily entered in the charge meter.

U.S. Pat. No. 4,097,923, which discloses the above-mentioned remote postage recharge system, discloses that the user first informs the data center of the desired charge amount and identification information via the telephone line when recharged, and the data center identifies the recharge amount. A combination of information and related information is generated and sent back to the user over the telephone line. The user has then entered this combination and the recharge amount into the postage meter.

However, the user forgets to actually enter the combination obtained by telephone and the desired recharge amount into the postage meter, and mistakenly or intentionally again supplies another recharge amount and the identification information to the data center. There was a problem of informing them and requesting a combination. The data center must first confirm whether or not the recharge amount allowed for the user has been entered in the postage meter, and if it judges that the recharge amount has not been entered, it informs the user of the previous recharge amount and the combination again. ing. This is a waste of the recharge amount procedure, so to prove that the user has entered the postage meter recharge amount to request the data center for the next recharge. Was requested. Also, as the identification information to be sent to the data center, the fare meter number that identifies the postage meter, the last reading of the descending order register and the ascending order register must be sent, and the procedure is complicated and there is a risk of sending incorrect information. It was

An object of the present invention is to ensure the safety of the information of the remote variable recharge by authenticating that the current recharge amount is actually input to the postage meter before the next recharge amount is obtained. Moreover, it is to provide a simplified postage meter.

(D) Means for Solving the Problems The postage meter according to the present invention includes a printing device for printing postage, data representing the total printable amount of postage used by the printing device, and the present date. A register device that stores the control sum data, which is the cumulative total of the amount charged to the postage, and the data indicating the recharge amount and the data indicating the recharge amount to the postage meter before the total printable amount and the control sum data are increased by the recharge amount. A data input device for inputting recharge data including data representing a combination of 1, and a device for generating an encrypted second combination related to the postcharge recharge amount, control sum data and seed number. A device for generating a second combination and a device connected to the data input device for comparing the first combination and the second combination, and a register of the register device in response to the result of the comparison. The data indicating the total printable amount and the control sum data are increased by the recharge amount, and the recharge confirmation data indicating that the recharge is performed and the updating means for updating the seed number and the updated total printable amount are displayed. It is configured with a device for generating an authentication code related to the data to be represented and the recharge confirmation data.

(E) Operation The postage meter of the present invention can input a desired recharge amount together with the first combination sent from the data center. And the first combination and the second generated inside the postage meter
The control sum data is increased by the recharge amount in response to the coincidence of comparison with the combination of. Then, an authentication code relating to the data representing the updated total printable amount and the recharge confirmation data is generated, and this authentication code is sent to the data center and sent back to the user at the data center.
Used to generate a combination of. This authorization code will change after each recharge.

(F) Examples The present invention will be described in detail below with reference to the drawings.

In FIG. 1, a postage meter 12 is a user data input device (illustrated as a data entry station, such as a keyboard, for entering the postage printed by the postage printing mechanism 16 as a printing device for printing postage. Includes 14). The postage meter 12 includes a register 18 which accounts for postage and other postage accounting information stored in the postage meter. Such information includes the total amount of postage printed by the tariff meter (ascending register), the total amount of postage remaining in the tariff for printing (descending register), and the sum of the ascending register and the descending register ( Control sum register). The amount in the control sum register remains constant for the postage meter until the descending register is charged for additional postage.

The register 18 is connected to an encoder, which is a reset counter 23 as a reset counting device, and a cyclic redundancy character (CRC) generator (cyclic redundancy check code generator) 20. The encoder and cyclic redundancy character generator operate on information from register 18 and a recharge counter (referred to as a reset counter in the figure) 23 to generate an authorization code. This authentication code is a cyclic redundancy character generator 20 and a reset counter 23.
Generated by. This authorization code can be displayed on the postage meter display 22. The authorization code is used in conjunction with the remote tariff 12 remote tariff reset in communication with the data center. Data centers are accessed by users of postage meters via insecure communication links such as telephone lines.

The authorization code provides a guarantee that the postage meter user calling the data center has physical access to the tariff meter being recharged and that information is transferred correctly between the tariff meter and the data center. Give a level. The encoder and cyclic redundancy character generator 20 are of the type that have input information that provides a detection scheme for errors that occur in the transfer information. The authentication code is processed in a data center described later and returned to the user as a combination (first combination) generated from the outside.

When the postage meter 12 is to be recharged for postage, the recharge amount or recharge amount is entered by the user of the postage meter at the data input device 14. The recharge amount is applied to the encryptor 24. Further, the information from the control sum register 19 as a register device for storing the data representing the maximum amount of postage that can be printed and the initialized seed number signal from the seed storage device 26 are given to the encryptor 24.
The seed number signal is stored in the tariff meter 12 in unencrypted form. The encryptor 24 uses the recharge amount entered by the user, the information from the control sum register 19, and the seed storage register 26.
Generating an encrypted signal, i.e. a unique combination (second combination), based on the seed number signal from
It functions as a device for generating the second combination, as shown by being surrounded by a broken line in the figure. The output signal of the encryptor 24 is applied to the comparator 28. Comparator 28 is an encryptor
The combination generated by 24 is compared to the signal input by the user, ie the externally input combination. The method of generating the combination is described in said US Pat. No. 4,097,923. The method of generating the combination itself is omitted here because it is not directly related to the present invention.

If the comparator 28 determines that the combination entered by the user matches the combination generated by the encryptor 24, the recharge amount signal is applied and the current descending register amount signal is transferred from the register 18 to the register device. Is sent to the adder 30 as a device for operating the recharge. The recharge amount is applied to increment the descending register and the control sum register.

In the embodiment of FIG. 2, the recharge amount and the control sum are first applied to the mixer 33 before being applied to the encryptor 24. The Mixer 33 adds additional security to the postage meter. The mixer provides the mixed input signal to the encryptor 24 so that the determination of the output signal from the encryptor 24 is more difficult to determine. Encryption device
24 and mixer 33 function as a device for generating the second combination, as shown by the dashed line in FIG.

In FIG. 1, successive comparisons of the combination entered by the user with the combination generated in the encryptor 24 are stored in the seed storage register 26 for the next recharge operation. Generate a new clear seed number signal for.

Further, the recharge counter 23 is incremented. The recharge counter 23 may be one of many types including a modulo 2 or modulo 16 counter. Counter 23
Provides an input signal to the encoder and periodic joke character generator 20 so that the authorization code signal contains information as to whether the postage meter 12 was subsequently reset. The recharge counter 23 is incremented by the output signal from the comparator 28 only when a subsequent comparison of the user input combination signal with the internally toll generated combination signal occurs. Therefore, the authentication code signal contains information on the number of times of the counter 23 when the comparison occurs.

The output signal from the comparator 28 is applied to the signal divider 32. The signal divider 32 extracts a new seed number signal from the generated ciphertext. The new seed number is stored in the seed register and the recharge amount is applied to the adder 30.

FIG. 3 is a block diagram of a remote data center that can operate with the remote rechargeable tariff meter 12 shown in FIG.
The user informs the data center of the identification number or transaction number for specifying the postage meter by telephone or the like, and the staff of the data center accesses the storage area in which the information about the postage meter is stored. The data center operation described below uses the accessed storage area of the data center associated with the postage meter. The data center 40 receives the authentication code generated by the postage meter 12 and transmitted by the user using a voice generator type telephone, and the recharge amount. This authentication code is applied to the decoder and calibrator 44 via the receiver 42.

The decoder and verifier 44 decodes the authentication code and generates a recharge count (shown as a reset count in the figure) and, for example, a descending register amount to the postage meter 12. The decoder further verifies the cyclic redundancy character to verify that the data was transmitted correctly and also to provide a level of proof that the user has physical access to the tariff meter being recharged. This is because the user who has determined the recharge count and the amount of the descending register for a particular tariff does not have enough information to access the data center and is still processed in the encoder and cyclic redundancy character generator. This is because it is necessary to determine which signal is present.

Additional security is provided by applying an authorization code to the encryptor 21 (FIG. 2) prior to display on the postage meter display 22 and therefore prior to transmission by the user of the postage meter. If this occurs, the encrypted authentication code is decrypted in the decryption circuit 45, as shown in FIG.

In FIG. 3, if the decoder and calibrator 44 proves the transmission is correct (the CRC is correct), a recharge count signal is generated and applied to the comparator 46. In the comparator 46, the decoded recharge count signal is compared with the recharge count signal stored in the data center. The decoded descending register amount signal is applied to adder 48 by the recharge amount signal from receiver 42. This recharge amount signal is prohibited if the sum of the descending register given to the data center by the user and the recharge amount exceeds the postage amount that can be stored in the postage meter, the recharge operation is prohibited. . This information is returned to the user via voice generator 51.

If the stored recharge count signal and the decoded recharge count signal are correctly compared, the comparator 46 is connected to the adder storage register 50.
49 is enabled to physically seal (seal) the current control sum stored in the postage meter 12 (which is currently the same as the current control sum stored in the control sum storage register 50). ), The recharge amount is added to the control sum storage register 50 to update the current control sum. The physically sealed device 52 is sealed so that data center personnel cannot access the circuit. The sealing unit (seal unit), which is described in more detail below, provides remote access to the data center personnel because it does not have access to the encryption circuitry and certain unencrypted data relating to the recharge of the tariff meter 12. Increase the security of the recharge system.

The signal of the control sum register 50 as well as the recharge amount signal input by the user from the receiver 42 is the sealing device 52.
To an encryption unit 54 (which functions as a first encryption unit surrounded by a broken line in FIG. 3). In addition, the unencrypted seed number signal is applied to the encryptor 54. The seed number signal is the only number that identifies the postage meter and is an element incorporated into the combination. The encryptor 54 is one of the many encryption devices that employ the data encryption criteria described above. However, the encryptor 54 has a total postage of 12
It is the same in operation as the encryption device 24 inside.

The seed number signal applied to the encryptor 54 is stored within the data center for access by data center personnel. However, this seed number signal is stored in the encrypted seed storage device 56 in an encrypted form. This is the only form of seed number accessible to data center personnel. The encrypted seed signal from the storage device 56 is applied to the decryption device 58. The decryption device 58 need not be similar or compatible with the encryption format provided by the encryptor 54 and the encryptor 24 of the postage meter 12. Decryptor 58 functions to decrypt the encrypted seed number signal and provide an unencrypted clear seed number signal. This clear seed number signal is the same as the seed number signal stored in the seed storage device 26 in the postage meter 12. The encryptor 54 produces an encrypted output signal applied to the signal division circuit 60. The dividing circuit 60 divides the encrypted output signal from the encryptor 54 into a first part. This first part is transmitted as a first combination via the voice generator 51 to the user of the postage meter. The voice transmitted combination is the combination input by the user and applied to the comparator 28 of FIG.

The divider circuit 60 further provides a portion of the encrypted output signal from the encryptor 54 to the second encryptor 62 to generate a new encrypted seed number signal. The encryptor 62 is the decryptor 58
Encrypt the seed number signal so that it is compatible with.
A new encrypted seed number signal for the postage meter 12 is sent from the encapsulation device 52 to an encrypted seed storage device 56 accessible to data center personnel.

FIG. 4 illustrates the use of the mixer 64 located within the sealing device 52. In this example, the mixer 64 has a postage total of 12
As with the mixer 33 provided inside, the safety is further increased. The encryptor 54 and the mixer 64 function as a first encryptor, as shown by being surrounded by a broken line in FIG. If the mixer 30 is provided in the postage meter 12, a similar mixer 64 must be provided in the data center.

(G) Effect The postage meter according to the present invention updates the control sum data with the desired recharge data input in response to the coincidence of the comparison results of the first combination and the second combination, and the seed. The number is updated, and an authentication code relating to the data representing the updated total printable amount and the recharge confirmation data is generated. This authorization code can be processed at the data center and returned to the user as an externally generated first combination, with which the user directly enters the desired recharge data into the postage meter. There are advantages. Further, the postage meter of the present invention generates the authentication code regarding the number of times only when the previous recharge is surely input, and as a result, the user receives the newly updated first combination from the data center. So get
Ensure protection against inaccurate information accidentally or intentionally entered into the postage meter by the user. Furthermore, since it is sent to the data center in the form of an authentication code, it is simpler and safer than when a user directly sends various identification codes.

[Brief description of drawings]

FIG. 1 is a block diagram of the postage meter of the present invention, FIG. 2 is a block diagram of the postage meter of FIG. 1, which is provided with a second encryption device and a mixer for increasing security, and FIG. 1 is a block diagram of a data center suitable for use with the postage meter of FIG. 1, and FIG. 4 is a block diagram of a data center suitable for use with the postage meter of FIG. 12: Postage meter 14: User data input device 16: Postage printing mechanism 18: Descending register and ascending register 19: Control sum register 20: Cyclic redundancy character generator 22: Display 23: Reset counter 24: Encoder 26: Seed number memory 28: Comparator 30: Adder 33: Mixer

Front Page Continuation (72) Inventor Howell Avon Jeans-Junior-Connecticut, USA 06430 Huefield Anqua Road 245

Claims (9)

[Claims] 1. A postage meter for use with a data center which allows recharging to a remotely located postage meter, said data center comprising a selected one of a plurality of postage meters. A receiving device (42) for receiving data indicating the recharge amount and an authentication code, and a confirmation data storage device for storing the recharge confirmation data for confirming that recharge is performed in the postage meter, A control sum data storage device (50) for storing the control sum data increased by the recharge amount in the postage meter, and a data representing the printable amount by decoding the authentication code to obtain the printable amount. A means (44, 48) for adding the data and the data indicating the recharge amount, and prohibiting the recharge operation by the authentication code when the added amount is more than the allowable amount (44, 48) Comparing means (46) for comparing the recharging confirmation data stored in the confirmation data storage device with the recharging confirmation data stored in the confirmation data storage device, and the control stored in the control sum data storage means in response to coincidence of the comparison. A processing device that adds and represents data representing the recharge amount to the sum data and updates the recharge confirmation data stored in the confirmation data storage device and outputs control sum data before addition (46,
49), a seed number storage device (56) for storing an encrypted seed number representing the seed number, and a decryption device (58) connected to the seed number storage device for decrypting the encrypted seed number. ), And connected to the receiving device, the processing device, and the decryption device, and represents the data indicating the recharge amount, the control sum data before the addition, and the seed number decrypted by the decryption device. A first encryption device (54, or 54 and 64) for generating encrypted data relating to the data, and an encryption generated by the first encryption device when connected to the first encryption device An output device (60, 62) for outputting the first combination from the data and the updated encrypted seed number to be stored in the seed number storage device, wherein the postage meter prints a postage fee. Printing apparatus for (16)
And a register device (18, 19) for storing data representing the total printable amount of postage used for printing by the printing device and control sum data which is a cumulative total of the amounts charged to the postage up to now. A seed number storage device (26) for storing a seed number, and a postage meter data indicating the recharge amount and the first data before the total printable amount and the control sum data are increased by the recharge amount. A data input device (14) for inputting recharge data including data representing a combination, and a device for generating a second combination by inputting the recharge amount of the postage, control sum data and seed number. , Or 24 and 33) and a device (28) connected to the device for generating the second combination and the data input device for comparing the first and second combinations. Respond to match result Then, the data indicating the total printable amount of the register device and the control sum data are increased by the recharge amount and the recharge confirmation data indicating that recharge is performed and the updating means for updating the seed number (2
8, 30, 32) and a device (20, 23) for generating the authentication code related to the updated data indicating the total printable amount and the recharge confirmation data. 2. The postage meter according to claim 1, wherein the device for generating the authentication code includes an encoder and a cyclic redundancy check code generator. 3. The device for generating the authentication code includes a reset counting device (23), and the reset counting device and the register device are connected to the encoder and the cyclic redundancy check code generator. The postage meter described in paragraph 2. 4. A postage meter according to claim 1, including a display (22) connected to said device for generating said authorization code and operable for displaying said authorization code. 5. A postage meter according to claim 1, including an encryption device (21) connected to the device for generating the authentication code and operating for encrypting the authentication code. 6. The updating means comprises a signal splitting device (32) having an input connected to the comparing device and an output connected to a seed number storage device, whereby the second device.
A postage meter according to claim 1, wherein a first portion of the combination is stored in the seed number storage device to store a new seed number for the next recharge operation. 7. The updating means includes an adder (30) having an input and an output connected to a signal divider, whereby a second of the second combination represents the additional amount of postage.
The postage meter according to claim 1, wherein said portion is added to the data representing the total printable amount by said adding device, and then the data representing the sum of said addition is stored in said register device. 8. The device for generating the second combination comprises a signal mixer device (33) and an encryption device (24), the signal mixer device being an input connected to the data input device and the register device. The postage meter according to claim 1, further comprising: an encryption device having an input connected to the seed number storage device and the signal mixer device and an output connected to the comparing device. 9. The signal mixer device mixes data representing the control sum with the data representing the recharge amount, and the encryption device with the data representing the stored seed number and the signal from the signal mixer device. 9. A postage meter according to claim 8, wherein the second combination is generated as a function of mixed data.