EP0866427A2 - Mail processing system with a machine base system controlled by a personal computer - Google Patents

Abstract

The mail processing system uses a personal computer (10) with a system bus (7) for interconnecting a number of components, coupled to a printing station for electronic printing of the handled mail. A security device (6) is coupled to the system bus via an input/output interface (64) and is provided with a hardware circuit specific to the user, with a read-only memory (68,69) and a security processor (77), performing at least one security programme.

Description

The invention relates to a mail processing system with a personal computer controlled printing machine base station, according to the in the preamble of claim 1 or claim 15 specified type. The system is suitable for the processing of filled letters of different formats for medium to large Shipping quantities. The basic structure of both components Personal computer and machine base station enables one cost-effective adaptation to different customer requirements. The system can be used as a franking system for a number of carriers Shipping system or operated as a postage cancellation system.

Letters are created in modern offices on the personal computer. The printed letters are enveloped by hand in the office or with a Envelope system inserts automatically. From a medium to higher The number of letters or other postal items to be sent are in Franking machines, used for franking the postal items. For example, US 4,746,234 relates to a thermal transfer franking machine, which is surrounded by a secured housing.

a) Die Benutzung eines gewöhnlichen Bürodruckers ermöglicht nur das Bedrucken von ungefüllten Briefumschlägen. Gefüllte Briefumschläge mit ihren wechselnden Briefdicken können von einem Bürodrucker nicht eingezogen werden. Dieser Nachteil begrenzt die Anwendung eines solchen Systems auf kleinste Briefmengen. In einem Postausgangsbüro, welches die zentral von den verschiedenen Abteilungen eines Unternehmens hereinkommende Post versandfertig zu machen hat, kann diese Lösung nicht eingesetzt werden.

b) Das Portoabrechnungsprogramm, welches vom Prozessor des Personalcomputers abgearbeitet wird, ist manipulierbar. Das Programm kann so verändert werden, daß es wie das Original arbeitet, bis auf die Reduzierung des Portobetrages, der im speziellen Portospeicherbaustein gespeichert ist. Damit entfiele für den Kunden die Notwendigkeit den Portospeicherbaustein gegen Bezahlung bei der Postbehörde wieder aufzuladen, während er unbegrenzt weiter seine Ausgangspost mit Frankierabdrucken versehen kann. Der Zugang zum Portoabrechnungsprogramm ist z.B. durch den Ausbau der Festplatte leicht möglich. Dies wäre noch nicht einmal nachweisbar, da sich das Programm, im Gegensatz zu einer herkömmlichen elektronischen Frankiermaschine, nicht in einem gesicherten Gehäuse befindet. Das manipulierte Programm kann zusätzlich zum Originalprogramm gespeichert werden. Im Falle einer Inspektion wird dann ausnahmsweise das Originalprogramm gestartet. Wird das manipulierte Programm noch durch ein Paßwort geschützt, ist die Manipulation praktisch kaum noch nachweisbar.

Solutions are already known which build a franking system from individual components. In US 5,510,992 (Post N Mail) a system is described that consists of two components, namely a personal computer and an office printer. The postage is stored in hardware modules which are connected to the personal computer PC via a standard interface. A special program, which is stored on the PC's own storage media (eg hard disk), carries out the postage calculation, reduces the saved postage amount and generates the data for the franking imprint, which are transmitted to the office printer. Except for the special postage memory modules, this PC system does not require any additional hardware components. However, there are two shortcomings:

a) The use of an ordinary office printer only allows printing on unfilled envelopes. Filled envelopes with their changing letter thicknesses cannot be fed in by an office printer. This disadvantage limits the use of such a system to the smallest quantities of letters. This solution cannot be used in an outgoing mail office that has to prepare the mail that comes in centrally from the various departments of a company.

b) The postage accounting program, which is processed by the processor of the personal computer, can be manipulated. The program can be changed so that it works like the original, except for the reduction of the postage amount that is stored in the special postage memory module. This eliminates the need for the customer to recharge the postage storage module against payment at the postal authority, while he can continue to frank his postage indefinitely. Access to the postage accounting program is easily possible, for example, by removing the hard drive. This would not even be verifiable because, unlike a conventional electronic franking machine, the program is not in a secure housing. The manipulated program can be saved in addition to the original program. In the case of an inspection, the original program is started as an exception. If the manipulated program is still protected by a password, the manipulation is practically undetectable.

Already in EP 459 159 B1 the applicant has a PC-based Franking device specified that better against tampering is protected. This solution is based on a special franking module, which can be inserted into a slot of a personal computer PC and with the personal computer's internal information and power supply network connected is. This franking module contains an independent one Processor system with postage memory and an integrated Printing device for franking envelopes. By means of the Integration of the printing device succeeds in the general lack of security of the PC franking system mentioned above. The Operator guidance advantageously uses the resources of the personal computer, especially monitor, keyboard and operating system. This solution allows the processing of filled to a limited extent Letters, but only from small letter formats. The slot of the Personal computers have a suitable size (5 1/4 "), to accommodate the franking module, which is due to the increasing Miniaturization in modern personal computers less and less often is guaranteed. The manual feed of the envelope or a franking strip is only for small-scale mail processing, i.e. for a low mail volume suitable. Automatic processing of Batch mail is already due to the lack of possible combinations an automatic mail collection machine excluded. This is also the case Solution only suitable for small volumes of letters.

According to DE 24 38 055 C2 (P.B.) is between computer and one secured printer a secured electronic postage meter (meter), the secured printer with the meter over secured lines and secured connecting parts is connected. The user may not use the Change postage meter, still open the secured line to the Expand system. Such a system is not service-friendly.

A similar solution is proposed in US 5,200,903 (Neopost). A Personal computers or a workstation are connected via a reusable cable a peripheral franking machine connected, which a billing and Control module (meter) and a printer for both printing the Franking stamp as well as for printing the recipient address contains. A MODEM is connected to the personal computer. The personal computer acts as a means of communication and does the calculation the respective postage fees for the individual packages Reason saved postage fee tables. The peripheral accounting module is of this computing and memory-intensive function relieved. No additional scales are required on the franking machine be connected if the letter weight due to the letter content can be calculated by the personal computer. The billing module the franking machine has a processor system with postage memories and does the billing. The directly connected control module controls the printing of address and franking stamp. Because of the secured housing can with this solution on secured cables and secured connecting parts between the accounting module and the printer to be dispensed with. Adequate access for the service too individual components are still not available.

The disadvantage of both of the above Solutions the slow working speed of the overall system. It is determined by the data transfer rate on the connection between the input / output port of the personal computer on the one hand and that of the billing module on the other. In the absence of a suitable base station for the transport of mail fast automatic processing with so-called mixed mail changing postage from letter to letter practically impossible.

From US 5,309,393, a post-loadable postage meter is known which is connected to a personal computer which contains a MODEM and establishes a communication link with a telephone network. A scale can also be connected to the franking machine or integrated into the franking machine housing. This is again a closed and therefore secure system, which however still has the disadvantages mentioned above.
Alternatively, an open system is proposed according to another variant of US 5,309,393. An interface board is inserted into a slot of the personal computer, each of which contains an interface to a load cell and a display unit, as well as an electronically erasable and programmable memory EEPROM for the ascending register, descending register. A standard printer is connected to the personal computer via a parallel I / O interface and carries out franking printing. A primary password stored in a non-volatile memory of the personal computer enables access to all franking operations. A secondary password for the user is stored in the non-volatile, electronically erasable and programmable memory EEPROM of the interface board. No information was given as to whether the security against tampering with the system was also guaranteed. Most public mail carriers still have security concerns about the approval of open systems. Such a printer also does not appear to be suitable for processing large and varied mail volumes.

In US 5,590,198 a removable meter insert is also in inserted a slot of a personal computer, the slot the standard of the Personal Computer Memory Card International Association (PCMCIA). He has other required modules for an open system to ensure the necessary security against manipulation guarantee. A user password is required to operate the franking system required. However, reinitialization is by means of one of of a data center generated super password, i.e. without that Need to send the meter module back to the manufacturer. Although on Personal computer unsecured connected to a common printer that carries out franking printing. However, using an additional printed digital signature of the printed postage value in the franking stamp image secured. The authorization is with the mail carrier checked using the digital signature on the mail. The introduction Such a system will only be available after the postal authorities have been equipped and private carriers with appropriate verification technology become possible. The commercially available printers are for Connection to a personal computer adapted and switchable to a to be able to print unfilled envelopes. But such printers are not for the treatment of medium to large mail volumes designed and can only print on empty envelopes.

None of the above Solutions allow the processing of filled envelopes of different thickness and different formats. The above Writings can not be extracted whether different Postal carriers can be selected by the postal carrier customer or how an assignment is made for this at settlement. It is not apparent how timely the data for a variety of carriers can be maintained.

The invention has for its object the disadvantages of the prior art Eliminate technology and create a mail processing system which consists of physically separate components, which is a enable maximum adaptation to the respective customer requirements, whereby the use of security enclosures is reduced and yet a Misuse for the purpose of falsifying individual data Components as well as the entire system is excluded.

In particular, a more flexible mailing system with one Mail processing machine to develop that use of Services of various private and public mail carriers enables. With a machine base station, the processing of filled mail pieces of different thickness and different Formats for medium to large shipping quantities.

The object is achieved with the features of claims 1 and 15.

A printhead for a purely electronic print is made by one Controlled printhead electronics and forms a with a transport unit Postpiece thickness-tolerant printing station. In addition to processing larger quantities of mixed mail on the basis of filled Envelopes now have PC-supported franking. The security before manipulation at the interface to the printing base is done by special measures in the personal computer and in the printing base and, if necessary, additionally with a security imprint the requirements imposed by the respective postal carrier guaranteed. The data for the security imprint include one Signature or marking, which is a verification of the printed Postage allows.

The invention assumes that a secured housing only for certain components of the system is required. The system points a safety device protected by a safety housing in the Personal computer on that with the system bus of the personal computer connected is. Billing and security functions are in the security means according to the invention united. The accounting function of the Security means is based on a fast and tamper-proof Hardware accounting unit and non-volatile memory components, which, when the machine is switched off, has no support voltage for data retention need. A special data transmission hardware and a special fast interface to the machine base station allows a special control of at least the machine base station the means of security, whereby on the above Way of using the Machine base station without a connected safety device is made impossible.

The system is based on a software-based security module Security means with a high level of security against manipulation fitted. A security processor, preferably an OTP (One Time Programmable) processor is arranged in the security means and contains all safety-relevant programs saved in a read-out safe manner. Of the Security processor is with at least one unreadable Program part programmed to include at least one of the variety Perform safety functions. It is provided that the Security processor via the parallel input / output interface of the Security means and the PC system bus connected to a modem or that the security processor has at least one serial Interface of the security means is connected to a modem. So is the security processor with a non-readable program part programmed, which a tamper-proof credit reload in the postal registers that are formed in the non-volatile memory chips are performing. Together with others in a program memory Programs EPROM of the security medium SM at least one security module is created which is authorized of the individual components checked and the data transfer monitored between personal computer and machine base station.

The personal computer with associated user programs and one affordable user interface with keyboard and display unit allowed perform more functions than this in a convenient way Meter of a franking machine could do. So can do more and also new mail carrier services for mail processing be requested. These user programs are advantageous used to run the system under WINDOWS for a carrier variety Operate franking system, shipping system or postage cancellation system. The program memory of the personal computer and / or the Security means preferably contains an associated user program with a postage calculation based on entered shipping data and a weight entered manually or by scales or based on data entered for indirect weight calculation. In a preferred embodiment, the postage calculation includes a Subroutine for determining the cheapest mail carrier for the appropriate shipping or transportation task. It was already proposed using a computerized mail processing system Franking machines and possibly together with other mail handling devices for processing a higher volume of mail to be used in a post office for franking mail (not previously published German patent applications 196 17 586.0, 196 17 473.2, 196 17 476.7, 196 17 557.7). The mail carriers are already in the office by the user through the user interface of the personal computer selected, but printed as a barcode on the letter. About one The barcode can be scanned in the remote post office. The software is used for billing in the franking machine on the also connected a modem to update the postage rates is. The tariffs are updated automatically in cooperation with a data center.

In contrast, the invention provides for a settlement in the Personal computer arranged at least one security means to carry out hardware and thereby for a large number of mail carriers assigned to the currently set mail carrier. For this purpose it is provided that service request means for mail processing for at least one mail carrier with the PC system bus are connected that at least one security means with equipped with at least one user-specific hardware circuit at least in the associated non-volatile memory chips carries out a settlement relating to a postal carrier.

Alternatively, a separate security means is available for each mail carrier Insertable into a slot of a personal computer, the Slot can be changed, or there will be groups Mail carriers are each assigned a specific security means.

The security means has at least one software-based security module in the safety processor or in the program memory and at least one fast interface. A software-based security module in the security processor is for example for generation of data for a security imprint or for the production of the Security provided during printing. Everyone who software-based security modules based on a non-readable Program part in the security processor. A variety of software-based Security modules is for different mail carriers and purposes also usable. A software-based security module in the security processor can also fully meet the needs and demands of one specific mail carrier. Among other things, intended, that the security processor of the security means with a modem in Communication connection is established as well as with an unreadable Program part is programmed, which is a tamper-proof Credit reloading into the postal register that is in the non-volatile Memory modules are formed, performed.

The security means is via a first data cable and a Processing circuit of the special interface unit and / or Print head electronics in the machine base station to control one postage thickness-tolerant printing station connected. The security tool preferably has a fast serial interface for connection to the printhead electronics in the machine base station.

You can now use the special machine base station medium to large shipping quantities are processed. The Machine base station contains and is a thickness-tolerant printing station via a special interface unit with the security means coupled. The security medium SM uses a special high speed serial channel connecting to the special Interface unit of the special machine base station manufactured.

Thanks to the special interface, the Machine base station with the intention of manipulation. Additional special measures ensure security against an unauthorized manipulation. In the user program of the personal computer are the approval numbers for the permitted safety equipment stored or listed, which security means accessed must be made to settle the bill for a selected mail carrier perform. In the user program of the personal computer and in a program module of the security means are the permitted or suitable printing devices according to the respective user program listed. In the user program of the personal computer and in routines are stored in a program module of the security means, to be able to check each other's authorization. It is from Personal computer checked whether this corresponds to the respective user program or security means assigned to the respective postal carrier is connected and whether the the respective user program assigned machine base station is connected. Otherwise the respective user program cannot do this if it is not authorized to be activated. It can also be checked in the machine base station also with regard to an authorization of the controlling person Security means. This is the only way to use the machine base station can be prevented with the intention of manipulation. With a other computer, i.e. without a connected authorized security device, it is not possible to use the special machine base station to operate, for example, in order to counterfeit unaccounted for Prepare franking imprints. The security of the invention Mail processing system is based on two measures, which for one the way the safety device works and the other the How the franking printer works: a) The security means protected against manipulation of the postage fee settlement and b) the franking imprint of the franking printer is used against counterfeiting secured. The security of the security means is based on the fact that it is in contrast to a pure PC solution with special hardware acts. This special hardware has an interface to the PC system bus. But beyond that there is no access to the postage accounting program or to another security-related program, possible for security-relevant data or postage storage To write data. This security-relevant data can only read out by the processor of the security means or - for example as part of a credit reload - be used or changed. In addition to the above approval number valid for selected mail carriers, through an unreadable customer or machine specific cryptographic key the identity of the security means given. The billing data can be processed by the processor of the Personal computers are only read out, for example for the purpose View this billing information. The security device itself can be physically secured by various measures. The easiest The form of security is to encapsulate and seal the security agent. An equivalent measure is the shedding of the safety-relevant Hardware components, such as the postage memory. A higher level of security against manipulation is provided by a special variant of the security means in the form of a user-specific Circuit (ASIC) reached. At least the Print data and associated control data from the security means to the Machine base station delivered. All lines are beneficial too summarized a first data cable, which if necessary with an adapter is equipped, and which with a plug / socket with the special interface unit of the machine base station connected is.

The machine base station forms together with others individually controllable stations a mail processing machine, the individually controllable stations each with a second data cable interface with each other.

It is envisaged that an individually controllable station of the Mail processing machine an automatic feed station for mail items and with the machine base station via the second data cable is interfaced. The one with the security device equipped personal computer controls next to the machine base station also the automatic feed station on which side of the incoming mail is connected and an envelope or other Post mail to the inbox of the machine base station.

It is further provided that an individually controllable station of the Mail processing machine is a dynamic scale and over second Interface data cable with the machine base station connected is.

It is also provided in another variant that the individually controllable station is a dynamic scale and over a second Data cable with the machine base station and via a separate one Data cable is interfaced with the security means.

It is provided in an alternative variant that the automatic Feeding station via a second data cable with the dynamic Scale and the dynamic scale via another second data cable is interfaced with the machine base station and that the machine base station and a first and separate Interface data cable with the security means in the personal computer connected is.

In the user-specific hardware circuit of the security device are in addition to the hardware accounting unit for executing an accounting function at least one serial interface with means for execution a security function included, the minimum a serial interface equipped with a monitoring circuit which is with the printhead electronics of the special interface unit or a processing circuit of the special interface unit interacts. The monitoring circuit can advantageously be connected operated with a software security module.

The user-specific hardware circuit is preferably the Security means also with a medium-fast second serial interface equipped with a sensor / actuator control with couplers galvanic isolation includes to the machine base station together with other individually controllable stations of the mail processing machine via the processing circuit of the special interface unit to control. Optocouplers are preferred as couplers for use.

Alternatively, it is provided that the user-specific hardware circuit of the security means with a medium-fast second serial interface and with a slow third serial Interface is equipped, the medium-fast second serial Interface includes a sensor / actuator control and optocoupler, around the machine base station via the processing circuitry of the to control special interface unit as well as being the slow third serial interface is a UART circuit and optocoupler includes the further individually controllable stations of the Mail processing machine via a transmission circuit of the to control special interface unit.

Figur 1,

Blockschaltbild für ein Postverarbeitungssystem mit einer automatischen Zuführstation, mit einer Maschinen-Basis-station und einem Personalcomputer mit Sicherheitsmittel,

Figur 2a,

Prinzipschaltbild für ein Postverarbeitungssystem in der Variante gemäß Figur 1,

Figur 2b,

Prinzipschaltbild für ein Postverarbeitungssystem in einer erweiterten Variante mit einer automatischen Zuführstation, mit einer dynamischen Waage, einer Maschinen-Basisstation und einem Personalcomputer,

Figur 2c,

Prinzipschaltbild für ein Postverarbeitungssystem in einer alternativen Variante mit einer automatischen Zuführstation, mit einer dynamischen Waage, einer Maschinen-Basisstation und einem Personalcomputer, wobei die dynamische Waage direkt mit dem Personalcomputer verbunden ist,

Figur 2d,

Prinzipschaltbild für ein Postverarbeitungssystem nach der bevorzugten Variante mit einer automatischen Zuführstation, mit einer dynamischen Waage, einer Maschinen-Basisstation und einem Personalcomputer, wobei die dynamische Waage über die Maschinen-Basisstation mit dem Personalcomputer verbunden ist,

Figur 3,

Blockschaltbild für eine erste Variante des Sicherheitsmittels,

Figur 4,

Blockschaltbild mit der speziellen Schnittstelleneinheit in der Maschinen-Basisstation für eine serielle Schnittstelle zum Anschluß an das Sicherheitsmittel (erste Variante nach Fig.3),

Figur 5,

Blockschaltbild für eine zweite Variante des Sicherheitsmittels,

Figur 6,

Blockschaltbild mit der speziellen Schnittstelleneinheit in der Maschinen-Basisstation für zwei serielle Schnittstellen zum Anschluß an das Sicherheitsmittel (2.Variante nach Fig.5),

Figur 7,

Blockschaltbild für eine dritte Variante des Sicherheitsmittels,

Figur 8,

Blockschaltbild mit der speziellen Schnittstelleneinheit in der Maschinen-Basisstation für drei serielle Schnittstellen zum Anschluß an das Sicherheitsmittel (3.Variante nach Fig.7),

Figur 9,

Schnelle spezielle Transporteinheit in der Maschinen-Basis-station,

Figur 10,

Ansicht eines Postverarbeitungssystems mit einem Meter,

Figur 11,

Flußdiagramm für den Betrieb des Postverarbeitungssystem als Frankiersystem.

The aforementioned first and separate data cables are preferably combined to form a common first data cable and connected to the special interface unit in the machine base station via a plug / socket. It is provided that the transmission circuit of the special interface unit includes an associated connector for the data connector of the first or common data cable and a level converter, which carries out a conversion of TTL signals for a V24 interface in the machine base station. The V24 interface is connected to a V24 socket. Advantageous developments of the invention are characterized in the subclaims or are shown in more detail below together with the description of the preferred embodiment of the invention with reference to the figures. Show it:

Figure 1,

Block diagram for a mail processing system with an automatic feed station, with a machine base station and a personal computer with security means,

Figure 2a,

Basic circuit diagram for a mail processing system in the variant according to FIG. 1,

Figure 2b,

Basic circuit diagram for a mail processing system in an extended variant with an automatic feed station, with a dynamic scale, a machine base station and a personal computer,

Figure 2c,

Basic circuit diagram for a mail processing system in an alternative variant with an automatic feed station, with a dynamic scale, a machine base station and a personal computer, the dynamic scale being connected directly to the personal computer,

Figure 2d,

Basic circuit diagram for a mail processing system according to the preferred variant with an automatic feed station, with a dynamic scale, a machine base station and a personal computer, the dynamic scale being connected to the personal computer via the machine base station,

Figure 3,

Block diagram for a first variant of the security means,

Figure 4,

Block diagram with the special interface unit in the machine base station for a serial interface for connection to the safety equipment (first variant according to Fig. 3),

Figure 5,

Block diagram for a second variant of the security means,

Figure 6,

Block diagram with the special interface unit in the machine base station for two serial interfaces for connection to the safety device (2nd variant according to Fig. 5),

Figure 7,

Block diagram for a third variant of the security means,

Figure 8,

Block diagram with the special interface unit in the machine base station for three serial interfaces for connection to the safety equipment (3rd variant according to Fig. 7),

Figure 9,

Fast special transport unit in the machine base station,

Figure 10,

View of a mail processing system with a meter,

Figure 11,

Flow chart for the operation of the mail processing system as a franking system.

The details of the arrangement are explained with reference to FIG. 1. Of the Personal computer 10 contains in addition to the invention Security means 6 at least the following components: Microprocessor 1, program memory 2, memory 3, input / output port 4, and disk storage 5. This structure is supplemented by a display 8 and keyboard 9. Since the rest of the PC structure no special features has and is generally known, can at this point on a detailed description can be omitted.

According to the invention it is provided that the security means 6 with the PC system bus 7 via a parallel input / output interface 64 and with the printing machine base station 24 via at least one serial interface 61, 62, 63 is connected, the at least one serial interface 62 as a special data transmission unit for Fast serial data transfer to the special interface unit 26 and the printhead electronics 81 in the machine base station 24 is trained.

The security means 6 according to the invention has mechanical and electrical required for the coupling on the PC system bus 7 System interface and is preferably in one of the free Slots of the personal computer 10 operated. The coupling on the system bus 7 of the personal computer 10 enabled by the parallel data transmission based on the clock rate of the Microprocessor 1 has a fast data throughput. The security tool also features a fast, tamper-proof special interface at least to output the print data to the print head 82 in the Machine base station 24. Likewise, a quick one Tamper-proof special interface 26 at least for reception and forwarding the print data to the franking printhead 82 in the base 24 provided. The two aforementioned interfaces are via one Data cable 15 connected.

The machine base station 24 forms together with others individually controllable stations 27, 28 a mail processing machine 20, wherein the individually controllable stations 27, 28 by means of data cables 25 interface with each other.

On the right in FIG. 1 is the mail processing machine 20 in which Top view shown. In FIG. 10, the mail processing machine 20 is in shown in perspective, but the machine base station 24 is included one meter 40 combined. Alternatively, the meter can be used as a laptop and the Machine base station 24 can be designed as a docking station which is the laptop equipped with at least one security device is stuck. The laptop preferably has full functionality a personal computer.

In Figure 1, the meter 40 is through the aforementioned with the security means 6 equipped personal computers have been replaced. On the incoming mail side an automatic feed station 28 is connected. The automatic feed station 28 is intended to automatically send an envelope to the Create the inbox of the machine base station 24. she closes possibly - the arrangement, not shown - of an automatic Letter humidifier and closer. The postage to be franked is placed vertically on a support surface. With a swivel Pressure arm 281 resiliently counteracts the stack of mail items to be franked pressed a contact surface from which is driven by a motor Stand out feed rollers 282. The feed roller 282 does one Separation of postal items and is in the unpublished German application DE 196 05 017.0 has been described in more detail.

The machine base station of the mail processing machine 20 becomes explained in more detail with reference to FIG. 9. The envelopes and similar mail pieces upright, slightly tilted backwards, with the help of a circulating conveyor belt equipped with pressure elements 243 242 transported to the franking printing station of the machine base station 24. The conveyor belt 242 with the pressure elements 243 is a Roller 244 driven and forms the transport unit of the machine base station 24. The transport base 242 to 244 of the machine base station 24 forms the together with the franking printhead 82 Franking station. The beginning of the envelope is immediately before the Franking printing station recognized by a sensor 247. Preferably an optical sensor 247 is arranged in a guide plate 240. By the transport unit 242 to 244 become the envelope 30 or Parcel or franking strips before, within and after the Franking printing station transported. The envelopes are on the Guide plate 240 in which at least one window 241 is provided and in the at least one ink printhead 82 for printing is installed. If the conveyor belt 242 with the pressure elements 243 moves, an on / off Deflection part 245 or 246 in extensions of the pressure elements 243 in order for the envelope 30 Form clamping or for supplied or to be discharged Open envelopes. In the unpublished German Applications DE 19 605 014 and DE 19 605 015 became such Machine base station proposed for a franking machine and described in more detail.

The envelope 30 is in the machine base station 24 on the above mentioned way transported by the conveyor belt 242 and by the Printed side facing away from viewer. Preferably the Mail processing machine 20 supplemented by a shelf 23. At Using a conventional tray, the envelopes would come with the printed side face down so that a running visual Control is not possible. In the unpublished German Application DE 197 05 089.1 is therefore an arrangement for filing proposed by record carriers with which a safe guidance also differently sized and thick envelopes and a turning of the Envelopes are reached, so that the franking imprint of the filed Envelope is clearly visible. The envelope passes behind the Printing station, a channel 22 and is deflected by a rocker 21 then fall into a box of tray 23. For franking the mail processing machine 20 additionally has thick mail items one - shown in FIG. 10 - strip dispenser 248 for self-adhesive Franking strips on. The stripe encoder 248 is in the unpublished German application DE described in more detail.

In Figure 2a is for the variant of the mail processing system Figure 1 has been shown a general block diagram. The mail processing machine 20 consists of the automatic feed station 28, the machine base station 24 and the tray 23. It is over a first data cable 15 connected to the security means 6, which as PC slot corresponding to the outside - not shown - Has connection contact means for data cables. The franking imprint station does not have a meter, but only a machine base station and Franking printer means 81, 82 and other means which are based on the Figure 4 will be explained below. The billing function of the without the invention, the meter is required by the security means 6 accepted.

It is envisaged that the individually controllable station 28 a is automatic feed station for mail and with data cable 25 with the machine base station 24 is interfaced.

The personal computer equipped with the security means 6 thus controls 10 the machine base station 24 and the automatic one Feeding station 28, which is connected on the incoming mail side and a Envelope automatically to the inbox of the machine base station 24 creates. The verification functions that otherwise perform one meter would have to be taken over by the security means 6 according to the invention, which is arranged in the personal computer. The security means 6 can be arranged in a variety in the personal computer. Without a security means 6 and only with a computer can the Stations 28 and 24 are not operated.

In addition, there is the entire functionality of a personal computer 10. This improves the system in terms of some properties, especially in terms of ease of use compared to one System. The system can now, for example also on a variety of other, especially private, mail carriers be applied. Freight or parcels can also be dispatched when a corresponding user program is called.

Alternatively, such a safety means 6 can also be in one meter Franking machine can be arranged, as already in the not Pre-published German application DE 196 03 467.1 has been. FIG. 10 is a view of a mail processing system shown with a meter instead of the personal computer. The use the services of other, in particular private, mail carriers are limited due to the lower storage and data processing capacity of a meter compared to the personal computer. Last but not least the limited display and input options can be an application the franking machine for private mail carriers only in very limited Frame. The system according to the invention, however, is on not limited anywhere. There is also the possibility of using a meter a comfortable display in the manner of a laptop and computer keyboard and with the functionality of the personal computer as well as with the To equip safety equipment. However, such a meter variant would be more expensive than a slot for a personal computer and would also a service technician to change the safety equipment for others require private mail carriers.

FIG. 2b shows an expanded variant of the mail processing system as a block diagram. The system includes an automatic feed station 28, supplemented with a dynamic scale 27, a machine base station 24 and a personal computer 10. The automatic Feed station 28 separates letter envelopes from a stack and feeds them the machine base station 24, i.e. serves as a letter feeder. Act it different stacking weights in the stack of envelopes each require different postage, namely the additional Use of a dynamic scale 27 makes sense to the respective To determine the letter weight. The dynamic scale 27 allows one higher throughput of different postal items (mixed mail) for one automatic mail processing.

According to the extended variant (Fig. 2b), the letter weight is indirectly from the scale 16 reported to the security module 6. The weight data are initially from the scale 16 via the second data cable 25.2 the machine base station 24 is sent and from this on the already existing line of the first data cable 15 to the security module 6 transferred. Here again it is advantageous that only a special one Connection from the security module 6 to the envelope processing unit 20 only their operation can be controlled and control in the Security module 6 is enabled on their proper operation.

FIG. 2c shows an alternative variant of the mail processing system as a block diagram. It is equipped with an automatic Feeding station, with a dynamic scale 27, a machine base station 24 and a personal computer 10, the dynamic Balance 27 directly to the. Using a separate first data cable 15.2 Personal computer is connected. , with the personal computer 10 again is equipped with the security means 6. It is envisaged that the dynamic scale is an individually controllable station 27 and therefore via a second data cable 25.2 to the machine base station 24 is interfaced. The machine base station 24 is over the first data cable 15.1 also interface with the Security means 6 connected so that all security means 6 Monitoring tasks can be performed.

The letter weight is directly after the alternative variant (Fig.2c) reported the security module 6, which for this with a - similar to the shown in Figure 7 - separate interface UART & OPTOKOPPLER is equipped. The correct postage is based on saved postage tables Franking value calculated, which the security module 6 bills. From Application program, the print data are generated and the Security module 6 is transmitted to the franking printhead 82, so that in the franking imprint station, for example, to the corresponding one The franking value calculated for this purpose is printed on the package. With this application the speed advantages come Franking device according to the invention fully to carry.

In an alternative embodiment, the postage is not determined from the personal computer but from the security processor of the Security module performed, its structure and clock rate one Enable calculation in the millisecond range.

The data transmission path from and to the printhead electronics 81 of the Franking printhead 82 is especially for the transmission of data formats designed. It is therefore at least two powers of ten faster than Data transfers via the second data cables 25.1 and 25.2 Standard interfaces, such as using a V24 interface. In order to can achieve maximum letter throughput even with changing letter weights be guaranteed. Both after the extended and after the alternative variant leads the personal computer 10 with inclusion of the security means 6 the postage calculation according to the desired Service of a selectable mail carrier according to valid tariffs.

FIG. 2d shows a basic circuit diagram for a mail processing system shown according to the preferred variant. It is automatic Feeding station, with a dynamic scale, a machine base station and equipped with a personal computer, the dynamic scale, however, via the machine base station with the Personal computer is connected. Although the data of the dynamic Scales run over a third serial interface of the security device, the postage is not calculated in the security means, but from User program in the personal computer. That in the program memory user program stored on the personal computer also controls the functions of the individually controllable stations 27, 28 of the envelope processing system 20, with all traffic over the Security means 6 is processed. The individually controllable stations 27, 28 are each by means of the second data cable 25.1, 25.2 interfaced with each other, preferably one V24 interface is used.

Thus, the automatic feed station 28 via data cable 25.1 with the dynamic scale 27 and the dynamic scale 27 over Data cable 25.2 interface with the machine base station 24 connected. The machine base station 24 is again separate first data cable 15.1 and 15.3 with the one with the security means 6 equipped personal computer 10 is interfaced. It is advantageous that the first or separate data cables 15.1 to 15.3 combined into a common first data cable 15 which is via a plug / socket with the special interface unit 26 is connected in the machine base station 24. All Data cables and interfaces are of course with appropriate Connection contact means equipped.

According to the invention, it is provided that the machine base station 24 a postal station thickness-tolerant printing station 82, 242 to 244 and one Has special interface unit 26, which of the Print head electronics 81 controlled print head 82 with a Transport unit 242 to 244 the postage thickness tolerant printing station forms. The service request means 1, 2, 9 are for the Mail processing for at least one mail carrier with the PC system bus 7 connected. At least one safety device 6 is provided Post carrier provided and the security means 6 has a user-specific hardware circuit 66 connected to the PC system bus 7 via a parallel input / output interface 64 and with the printing machine base station 24 via at least one Interface 61, 62, 63 and a first data cable 15 is connected, the at least one interface 61 in the user-specific Hardware circuit 66 as a special data transmission unit for fast data transmission between the security means 6 and one Processing circuit 268 of the special interface unit 26 and / or the printhead electronics 81 in the machine base station 24 is trained. The user-specific hardware circuit 66 contains Means 60, 61 for performing accounting and security functions for at least one selected mail carrier, the Hardware circuit 66 with non-volatile memory chips 68, 69 and is connected to a security processor 77 which has at least a non-readable program part is programmed to at least perform one of a variety of security functions.

Based on Figures 3 to 8, the invention for the following three Exemplary embodiments explained in more detail.

The safety means 6 shown in FIG. 3 has one Program memory EPROM 71, a (security) OTP processor 77, an input / output circuit 64 as a system interface to the PC system bus, a special data transmission and monitoring unit in the fast first serial interface 61, a hardware accounting unit 60 and non-volatile memory chips 68, 69. For safety the security means 6 has a manipulation user-specific hardware circuit 66 for executing a Billing and security function. Circuit arrangement 66 the means 60 to 64 is advantageous by means of a user-specific one Circuit (ASIC) and is therefore tamper-proof. The Hardware circuit 66 is connected to the non-volatile memory modules 68, 69 and connected to the security processor 77, which with a unreadable program is programmed to at least one out perform a variety of safety functions. For example provided in a sub-variant that the security processor 77 via the parallel input / output interface of the security means 6 and the PC system bus 7 is connected to a modem 11 and that Security processor 77 with a non-readable program part is programmed, which is a tamper-proof credit reload into the postal registers, which are in the non-volatile memory modules 68, 69 are formed. In another sub variant is provided that the security processor 77 via the at least one serial interface 61, 62 or 63 of the security means 6 with a Modem 11 is connected and that the security processor 77 with a Non-readable program part programmed for credit reloading is. The security processor 77 is preferably a microcontroller from Type DS83C520-CPU with a 16Kbyte internal program memory for a corresponding non-readable program part or other software-based security modules.

The non-volatile memory modules are preferably around FRAM's 68, 69, preferably of the type FM1208S from RAMTRON, which, when the machine is switched off, has no support voltage for Need data retention. Access to the non-volatile FRAM memory area is controlled by the hardware circuit 66 (ASIC). The microcontroller can write and read on the whole Access memory area of the FRAM's. A special cryptographic Key for Data Encryption Standard (DES) or similar encryption methods in the internal program memory of the microcontroller 77 is used to decode the program data, which during initialization via the hardware circuit 66 into the non-volatile FRAM memory 68, 67 of the security means 6 can be loaded. This Security-relevant program data are stored in the outside of the Security means 6 stored inaccessible memory areas. The plain text of the program is therefore only available in security means 6 Available. The remaining components of the system or the personal computer do not offer any possibility of interpreting the internal Program parts. The hardware circuit 66 (ASIC) ensures that from external only on the lower halves of the address space of the FRAM memories 68, 67 can be accessed. The upper halves of the address space of the FRAM memories 68, 67 remain inaccessible from the outside, so that there for example a DES key and the secret numbers for the Remote value specification for credit reloading as well as further instructions for further security measures in the form of program modules can be saved.

In addition, a RESET logic 78 is provided in the safety means 6, the voltage rise when the personal computer 10 is switched on to detect and around the security means 6 in a defined Switch start state. If the accounting unit 60 the accounting an enable signal F is sent to a control unit 610 in the special data transmission and monitoring unit of issued fast first serial interface 61. The control unit 610 controls a shift register in the first serial interface 61 effective, which with parallel data from the PC system bus via the An input / output unit 64 is applied to a parallel / series conversion perform so that the data is serial to electronics 26, 81 in the machine base station 24 are transmitted. A basic one A description of such a security means 6 is, for example unpublished German application DE 196 03 467.1 with the Title: Franking machine, removable.

Optionally, the security means 6 can also have a CLOCK / DATE module 70 be equipped to meet postal regulations, which prohibit backdating of mail. According to the Turning the system on advantageously has a date setting procedure are used, which is described in European publication EP 745 958 A2 has been described in detail.

According to the invention in the first serial interface 61 as Part of a special data transmission and monitoring unit a first safety circuit unit 611 and a second Safety circuit unit 612 provided. The first safety circuit unit 611 is provided in order to transmit the serial Add additional data and / or the aforementioned data to encrypt at least partially. The second safety circuit unit 612 is provided to transmit the serially received Evaluate data after its serial / parallel conversion, during or before they are connected to the PC system bus 64. The special one Data transmission and monitoring unit 61 thus forms one special serial interface that is fast and tamper-proof and pressure monitoring allowed. This special interface 61 has - not shown - output-side optocouplers for galvanic Disconnection and corresponding connection contact means.

Together with the hardware of the special data transmission and Monitoring unit in the first serial interface 61, the security-related programs stored in the OTP processor 77 are, and others in the program memory EPROM 71 of the security means 6 stored programs becomes a security module created which the data transfer between personal computer 10th and machine base station 24 according to various criteria supervised. Thus, manipulation of the print data becomes essential made difficult or practically impossible.

While the stations 27, 28 and 24 of the mail processing machine 20th via a serial V24 interface and data cable 25 or 25.1, 25.2 with each other at a data rate, for example of 9600 Bd communicate, is using data cable 15 or 15.1 and one Tamper-proof special TTL high-speed interface achieved a much higher data rate. This allows in addition to the transmission of print data also the transmission of further data for communication with the mail processing machine 20, in particular with the machine base station 24. For example, a data rate of approx. 1,000,000 Bd when transferring data between personal computers 10 and Machine base station 24 reached.

A fast special interface unit 26 is shown in FIG Machine base station 24 shown. It is envisaged that the special Interface unit 26 in the machine base station 24 one High speed channel and pressure pulse generating means 266 has the high speed channel with the printhead electronics 81 and the pressure pulse generating means 266 on the input side with an encoder 80 and on the output side with the printhead modules of the print head 82 are connected. Via the high-speed channel is at least one pressure signal on the pressure pulse generating means 266 applied when the sensor 247 a beginning of a Envelope or other piece of mail or franking tape start detected.

In the print head electronics 81 are also with the shift register SR shift registers connected to transmission circuit 260, which are coupled to the high speed serial channel to receive at least the print data of a print column and Send status reports.

The special interface unit 26 has a fast transmission unit 260 on, for serial / parallel conversion of transmitted data, which relate to the control system and sensor data to be transmitted and status data that are required for control. The fast transmission circuit 260 with shift register SR and Data buffer is part of a processing circuit 268 which 24 parallel sensor data for both the machine base station receives and sends parallel actuator data, as well as for transmission of data from and to other stations of the mail processing machine 20 is formed. Processing circuit 268 is for the latter purpose equipped with a V24 interface to which a socket 269 for Plug contacts is connected. A plug is inserted into the socket 269 inserted the second data cable 25, which to another station the mail processing machine 20 leads.

The printhead electronics 81 is connected to an encoder 80, which is a Emits a signal corresponding to the letter transport speed. Figure 9 shows a machine base station 24 with a device for upright letter transport 242 to 244, with means 801, 802 of the encoder 80 and with the franking printhead 82. With the drive roller 244 is one Incremental encoder disk 801 coupled, which with a photo cell 802 cooperates.

The encoder signal is in addition to the safety means 6 via the High speed channel transmitted. The security means 6 is about a clock signal CLOCK for the high speed channel High-speed channel shift register to the fast special interface unit 26 and the printhead electronics 81 in the Machine base station 24 transmitted. The shift register SR the fast transmission circuit 260 indicates data in parallel Processing means in processing circuit 268.

The transmission circuit 260 contains further registers (not shown) for data buffering and processing circuitry 268 possibly a state machine (state machine) and others Means for communication with the security means 6.

It is advantageously possible to have an intelligent processing circuit 268 to use, consisting of a RAM 261, a Program memory 262, a central processing unit CPU 263, a non-volatile memory NVRAM 264, for an intelligent Sensor / actuator control. The security means 6 itself must then no actuator / sensor control, just needs required instructions from the application program to the base 24 to transmit. The fast transmission circuit 260 contains for this at least one with the serial channel of printhead electronics 81 connected shift register SR for instructions and others for that Machine base station 24 or for the other stations of the Mail processing machine 20 to receive certain data or Data from these stations come to the security means 6 send.

The CPU 263 can, depending on the evaluation of the V24 interface and the sensor / actuator electronics 268 an interrupt signal generate and deliver to the security means 6. The one from the Stations of the mail processing machine 20 transmitted data subjected to preprocessing to only the most necessary data the security means 6 from the special interface unit 26 to transfer.

In the program memory ROM 262 is next to the associated program a basic identification number is stored. A non-volatile Memory of the printhead control electronics 81 contains the identification number from the printhead 82 and possibly other specific data for the Operation of print head 82. The sensors / actuator electronics in the processing circuit 268 is with the - not shown - non-volatile Print head control electronics 81 memory via data and control lines connected. The storage and processing means 261 to 263 are used to check the authorization of each other Security means 6 and special interface unit 26 and / or des Printhead 82 used, preferably a standard method is used.

The block diagram shown in FIG. 5 for a second variant of the Security means 6 differs from the first variant Provide a second interface 62, which means for the actuator / Sensor control and output-side optocouplers for galvanic Separation includes. The means for the actuator / sensor control are in Hardware, preferably as part of an ASIC, executed and in European patent application EP 716 398 A2 under the title: Postage meter internal interface circuit and method for Tamper-proof print data control has been shown in more detail. in the The difference to EP 716 398 A2 is the means of the actuator / sensor control not in the meter but now in the ASIC of the safety device 6 arranged.

6 shows a block diagram with the special Interface unit SE 26 in the machine base station for two serial Interfaces for connection to the security means 6 (according to the above explained 2nd variant shown in Fig. 5). The connection to the Security means 6 has already been described in principle above with reference to FIG. 2D explained. Another data cable 15.2 becomes the first data cable 15.1 added or all lines to a common data cable 15 summarized. The lines are each with a 50-pin Data connector connected to an associated socket Transmission circuit 267 of the machine base station 24 is inserted. The transmission circuit 267 has a separate channel Processing circuit 268, which consists essentially of a Series connection on shift registers SR 6, SR 7, SR 8, SR 9 and there are further shift registers, not shown, which are all in the SEROUT2 line for serial data transmission are looped in. The SEROUT2 line leads through a socket 269 to other - not shown - shift registers to the actuators and sensors further Stations 27, 28 of the mail processing machine 20 with data apply or query sensor data. An end plug 29 connects the serial data lines SEROUT2 and SERIN2, which thus form a closed loop. For serial data transmission medium-speed TTL circuits are used, which is why the processing circuit 268 can be implemented inexpensively. in the The difference is at least an order of magnitude Faster data transmission to the pressure control electronics 81 continues High speed TTL channel required.

FIG. 7 shows a block diagram for a third variant of the Security means 6 with three types of serial interfaces 61, 62 and 63. The serial interface 61 again leads directly via optocouplers and the TTL high-speed channel to the pressure control electronics 81. Die medium-fast serial interface 62 is with the sensor / actuator control and optocouplers equipped - as shown in Fig. 5 - and leads - as 6 - separate from processing circuit 268 of FIG special interface unit 26. An additional slow serial Interface 63 is with UART electronics, for example ST16C450 or another corresponding serial input / output circuit, RS 232 and others, and optocouplers and is used to control the Stations of the mail processing machine 20 to the left of the base 24. Die three serial interfaces 61, 62 and 63 are via the Input / output circuit 64 connected to the PC system bus 7 and are created in parallel with data from the respective user program Control and query of the mail processing machine 20 is applied.

A block diagram with the special interface unit SE 26 in the machine base station 24, the three serial interfaces 61, 62, 63 for connection to the safety means 6 (according to the third variant according to FIG. 7) is explained with reference to FIG. The arrangement of the switching means is as explained in FIG. 6, with the exception of the transmission circuit 267 on the PC-side socket of the special interface unit 26 and with the exception of the socket 269.
Transmission circuit 267 includes another slow channel with a level converter to convert the TTL level to a V24 level. The socket 269 is connected to this level converter and now advantageously carries the V24 level. Further stations 27, 28 can now be connected to socket 269, all of which are equipped with V24 interfaces as standard. The data line SEROUT2, which contains at least the series circuit of shift registers SR 6 to SR 9, is already connected to the serial data line SERIN2 by a connecting line in the processing circuit 268 in order to form a closed loop.

Shift registers are also arranged in the printhead electronics 81, which are coupled to the high speed serial channel to receive at least the print data of a print column and Send status reports.

The printhead electronics 81 contains a - not shown - associated electronics, which lock or unlock the printing process can. For example, similar to the method for Tamper-proof print data control (EP 716 398 A2) Authorization ascertained an activation and the length of the print record are monitored to prevent manipulation in To complicate intent to emboss.

In addition, according to the invention, authenticity is achieved in one variant at least some print data checked by printhead electronics 81. A software-based security module of the security means 6 is appropriately trained to deliver the required print data, which allow an aforementioned test. Another software module of the security means 6 is designed to the required print data for a security print with signature deliver which in the post office or at the selected one Post carrier is verifiable.

In another variant, RSA encryption is used. The Machine base station 24 is not necessarily in one secured housing, as is the case with conventional franking machines is common. Such a measure could not prevent that the line 15 instead of with the security module 6 with a prepared PC output is connected, via which then a sequence previously heard pressure signals are generated for which no billing more exists. One way of data transmission on line 15 to secure, is to encode the transmitted data. On the The safety module is located on the output side Encryption module and on the receiver side behind the interface of the Franking printer a corresponding decryption module. The Encryption can be carried out using the RSA procedure, which is considered secure respectively. The data line between the decoder module and the Register, which directly the individual printing elements of the Dot matrix printer controls must of course also be saved. The easiest way to do this is to put the two building blocks together be cast or their functions are integrated in an ASIC, the ASIC is physically connected to the printhead and only the print head 82 with the associated electronics 81 by a Security housing is secured.

An alternative way to secure line 15 is that cryptified additional to the conventional franking information Information printed on the envelope as a mark or signature will. This information is preferably considered machine-readable Barcode printed. These printed codes are from specially installed in the post branches or distribution systems Readers recorded and checked for authenticity. Even color copies of real franking imprints could be discovered and removed in this way be pulled out of traffic. The details of such a procedure are from the applicant in DE 43 44 471 for use in conventional franking machines have been described. In comparison with the above Solution of the coded transmission of all information about the Line 15, the variant described here has the advantage that no effort on the receiver side in the franking printer Decryption of information needs to be done because of that now additionally supplied encrypted information is also encrypted to be printed.

The division of processing functions according to the invention was in made in a way that allows it through few measures an unprecedented level of security against manipulation achieve, although a standard PC is used for the operator guidance becomes. Of course, the possible uses of the inventive principle not on the described variants limited. For example, it is also in the spirit of the invention of a personal computer to use a workstation or another intelligent device with a user interface. The application is also the invention is not limited to letter mail. Rather, from that Franking printer 82 can also be printed a label which is on a Package is glued. Such prepaid parcel settlement would have the same security features as letter processing.

The franking print head 82 is preferably a dot matrix printer executed to change information, e.g. different Customer logos to be able to print. A particularly suitable one The printing process is the piezo ink jet process. It allows due its high printing speed also the rational processing large amounts of letters. Such a printhead is from the applicant (FP) developed and described in detail in US 5,592,203. Around enable the printer to have different envelope thicknesses To be able to print with the same quality is one of the applicant Arrangement under the file number DE 196 05 014.6 (not previously published), which are the transport and Describes printer means for a variant of the machine base station.

The dialogue with the user on the one hand and the security modules on the other hand, a program module takes over that in the personal computer is saved and functional under the respective operating system is. These program modules (user programs) are advantageous used to run the system under the WINDOWS operating system Variety of carriers as franking system, shipping system or postage stamp validation system to operate.

FIG. 11 is a flow chart for the operation of the Postal processing system explained as a franking system. The user starts the personal computer and loads it with the associated one User program in step 100. The user finds the usual one User interface with PC keyboard and PC display unit, which already allowed by the hardware, in a comfortable way perform more functions than a meter for a franking machine could do. A menu navigation under the operating system WINDOWS allows you to select the one you want before loading User program. After loading the desired user program it is automatically checked in step 100 whether the security means is available that corresponds to the respective user program or assigned to the respective postal carrier. Here are the variants included, where several security modules are checked must be assigned to a specific mail carrier or where a variety of security modules to a variety Security funds is distributed. Another check is done automatically, to query the connection of the associated machine base station. The aforementioned tests include mutual verification the authorization of at least some of the components of the System. Is the presence corresponding to one of the queries 101 and 102 is not guaranteed, the user program is ended (Terminator). In addition to the query steps 101 and 102 shown can still further query steps - not shown in Fig. 11 be run through. Otherwise, after the aforementioned query branched to step 103 to activate the user program. A subsequent display and input routine in step 104 brings Non-volatile entries according to the last setting for display and enables menu-based further entries according to the desired service or shipping task.

The franking user program contains an associated step 105 for postage calculation based on entered shipping data and of a weight entered manually or by scales or contains Subroutine for indirect weight calculation based on entered data. The postage calculation includes a preferred one Embodiment a subroutine to determine the cheapest Post carrier for the corresponding shipping or transport task. Or before the postage calculation - not in one Step 105a shown - the actuality of the stored tariffs the mail carrier checked and, if necessary, restored. The Security means has an automatic check routine, whether the selected services are up to date and available, otherwise establish communication with a remote data center 12, with special request data sent by the modem 11 and the required data received from the data center 12 and the required data is loaded into the memory of the security means will. The modem 11 is either directly or indirectly with the Security means 6 connected to the transmission of the required data to carry out at the request of the security means 6. The last one Variant becomes a from the data center TDC to the personal computer 10 Correspondingly suitable communication connection via modem 12 switched.

• Initialisierung des Postverarbeitungssystems mit Vorauswahl einer Gruppe an Beförderern, aus welcher der gewünschte Beförderer anschließend selektiert werden kann, wobei während der Initialisierung eine automatische Routine im Personalcomputer abläuft, zur Herstellung einer Übereinstimmung mit aktuellen befördererbezogenen und mit sicherheitsrelevanten Daten, welche in dem mindestens einem Sicherheitsmittel 6 gespeichert sind,
• Verarbeiten von Eingaben betreff gestellter Dienstleistungsanforderungen an den Beförderer, wobei ein mittels des Prozessors 1 automatisch ausgewählter Postbeförderer oder ein mittels Tastatur 9 in Verbindung mit der Anzeigeeinheit 8 des Personalcomputers eingegebener Postbeförderer angezeigt wird und wobei weitere Versandinformationen, wie Versandart, und/oder die Kostenstelle am Personalcomputer mittels Tastatur manuell und/oder mittels Programm automatisch eingeben werden,
• automatische Auswahl derjenigen Beförderer aus vorgenannter Gruppe an Beförderern, welche die gestellten Dienstleistungsanforderungen erfüllen, während des Verarbeitens von Eingaben betreff gestellter Dienstleistungsanforderungen an den Beförderer und
• Errechnung der Portogebühr im Sicherheitsmittel 6 aufgrund des Gewichtes des Postgutes bzw. Briefes und aufgrund aktueller Tarife für selektierte Dienstleistungen, welche in dritten nichfflüchtigen Speicherbereichen der nichtflüchtigen Speicher 68, 69 des Sicherheitsmittels 6 gespeichert vorliegen, wobei zur Aktualisierung der Tarife auf diese dritten nichtflüchtigen Speicherbereiche schreibend und/oder lesend vom Sicherheitsprozessor 77 zugegriffen werden kann sowie
• Durchführung von Vergleichen der Portogebühr zur Kostenoptimierung bei der engeren automatische Auswahl des günstigsten Beförderers vom Personalcomputer .

The method for determining the cheapest carrier in the mail processing system according to the invention then comprises the following steps:

• Initialization of the mail processing system with preselection of a group of carriers from which the desired carrier can then be selected, an automatic routine running in the personal computer during the initialization, in order to establish a match with current carrier-related and with security-relevant data which are contained in the at least one security means 6 are saved,
• Processing inputs relating to service requests made to the carrier, wherein a mail carrier automatically selected by means of the processor 1 or a mail carrier entered by means of the keyboard 9 in connection with the display unit 8 of the personal computer is displayed, and further shipping information, such as shipping method, and / or the cost center on Enter personal computers manually using the keyboard and / or automatically using a program,
• automatic selection of those carriers from the aforementioned group of carriers who meet the service requirements made while processing inputs relating to the service requirements made to the carrier and
• Calculation of the postage fee in the security means 6 on the basis of the weight of the mail or letter and on the basis of current tariffs for selected services which are stored in third non-volatile memory areas of the non-volatile memories 68, 69 of the security means 6, writing to these third non-volatile memory areas to update the tariffs and / or can be read by the security processor 77 and
• Carrying out comparisons of the postage fee for cost optimization in the closer automatic selection of the cheapest carrier from the personal computer.

Details of the processes in the context of such subroutines are not in the Pre-published German patent applications 196 17 476.7 and 196 17 557.7 have been shown in more detail. This is also the topicality the stored tariffs of the postal carrier checked and if necessary restored without using a security means 6.

After step 105 for postage calculation, a query step 106 takes place to determine a reloading requirement for a fuel credit, if the residual value R1 is smaller than the calculated postage. At Such a reloading requirement exists on one step 107 for establishing communication via modem with a Data center, for example the teleporto data center from FP, for Reloading the postal register with a credit using a Remote value specification. The personal computer 10 - shown in FIG. 1 - contains one with the security agent 6 via the PC system bus connected modem 11, which the communication link to remote teleporto data center. Alternatively, however, it can Modem 11 - in a manner not shown - also via a serial Interface with the security means.

After going through step 107 to produce a Communication via modem and reloading is done on the display and The input routine branched back in step 104. Otherwise from step 106 to step 108 for billing in the security module, including output of the register values and the signature to the Program branches, which corresponds to that made in step 104 Settings using saved data Printing of the postal matter in step 109 causes. The fixed dates, in particular frame data of the stamp image corresponding to the chosen mail carrier, and the semi-permeable window data, in particular advertising slogan graphic data, as well as the variable window data regarding postage in the value stamp, date in the date stamp and the signature together form a security imprint. The signature is in the security means 6 at least part of a encrypted checksum and added to the stamp image. It is unique for each item of mail and thus allows verification the payment post, which was franked. Finally, the Query step 110 reached to finish mail processing determine (terminator) or otherwise for another Franking with changed settings on step 104 for display and branch back input. The printing of the mail in the Step 109 includes a number of subroutines, which run only in the safety means 6 and ensure that a Franking takes place with the billed postage value, or for Monitoring and control of the machine base station contribute.

An embodiment - shown in FIGS. 7 and 8 - is preferred of the security means SM 6 and the special interface unit 26 in the machine base station 24 is used. The transmission of print data to the machine base station 24 takes place via a first fast serial Interface in the security means 6 via data cable 15.1 and the The machine base station 24 is controlled via a second serial Interface in security device 6 via data cable 15.3. Preferably a third serial interface is also provided in the security means 6, for other peripheral devices such as automatic feed station 28 and dynamic scale 27 to the left of the machine base station 24 head for. There are also others for time-critical controls Data lines are provided separately from the serial interface lines. All lines are advantageously in the data cable 15 summarized. The lines are each with a 50-pin Data connector connected to an associated socket Transmission circuit 267 of the machine base station 24 is inserted.

The generation of further variants is analogous to that in FIG. 2b shown second variant for a mail processing system possible, by between the automatic feed station 28 and the machine base station 24 other components in front of or behind the dynamic Scale DW 27 can be arranged. The data is transmitted via data cables 25 (for example 25.1 to 25.3) of the machine base station 24 from fed to the individual components before data between the special fast interface unit 26 via the high-speed channel and transmitted to the personal computer 10.

Likewise, analogously to the third variant shown in FIG. 2c, both the automatic feeding station, the dynamic scale DW 27 and the Machine base station as well as the additional component a separate fast interface to the personal computer 10 be equipped. The at least one fast serial interface 61, which a data transmission and monitoring unit DÜ includes a corresponding number of connections for the High speed channels of the security agent SM 6 equipped.

By using a variety of security means 6 and one corresponding number of program data changes which are made via the Disk storage 5 or externally, for example from a CD disk drive be brought into the system via the In / Out port 4, the system is advantageous to those from post carrier to post carrier adaptable to different postal conditions.

For example, if a new one is on the mail carrier market in Appearance of further private mail carriers appearing in the system can be added and taken into account in the settlement, a Security means 6 are added or exchanged. The Postage is calculated for a specific mail carrier in the Security means 6 from the security processor 77 according to a program be performed that EPROM 71 stored in the program memory and is specially tailored to the mail carrier. the billing takes place again in terms of hardware by means of accounting means 66 and the FRAM memories 68, 69.

In another variant, EPROM 71 contains one in the program memory Many such postage calculation programs are saved. The Postage calculation is made for a specific one from the variety Post carriers in security means 6 from security processor 77 after a corresponding program to be carried out that in Program memory EPROM 71 is stored and specifically on the selected mail carrier is tailored. It is also a variety on hardware processing units 60 and on FRAM memories 68, 69 intended. For the hardware-based billing is from the multitude Hardware accounting units 60 and associated FRAM memories 68, 69 there is a certain hardware accounting circuit, which by the Choice of mail carrier is selected. It is envisaged that in Security means 6 a number of hardware accounting units 60 associated non-volatile memory chips 68, 69 corresponding to the Number of mail carriers are provided to settle a bill Postage. In the borderline case it contains at least one Security means 6 a settlement relating to a mail carrier, so that for a number of different mail carriers in the Personal computer an equal number of security means (6) is inserted. These security means 6 are on the output side an adapter connected to the first data cable 15, the Adapter the print data of the respective billing security means 6 in grinds in the high-speed channel. in the personal computer 10 set user program ensures that only one of the Security means 6 can transmit print data serially.

The invention is not limited to the present embodiment, since obviously other arrangements or designs of the Invention can be developed or used by the same Basic ideas of the invention, starting from the attached Claims are included.

Claims (17)

Mail processing system with a computer-controlled printing machine base station, the personal computer being equipped with PC components connected via a PC system bus and with a security means for carrying out a billing function, that the machine base station is a printing station for a purely electronic Includes pressure in which a printhead is connected to printhead electronics,
characterized by that the machine base station (24) has a postal station thickness-tolerant printing station (82, 242-244) and a special interface unit (26), the print head electronics (81) controlled print head (82) with a transport unit (242 to 244) the postal station thickness tolerant Printing station forms, that service request means (1, 2, 9) for mail processing for at least one mail carrier are connected to the PC system bus (7), that at least one security means (6) is provided for each mail carrier and the security means (6) has a user-specific hardware circuit (66) with the PC system bus (7) via a parallel input / output interface (64) and with printing machine base station (24) via at least one interface (61, 62, 63) and a first data cable (15), the at least one interface (61) in the user-specific hardware circuit (66) as a special data transmission unit for fast data transmission between the security means (6) and a processing circuit (268) of the special interface unit (26) and / or the print head electronics (81) in the machine base station (24), and that the user-specific hardware circuit (66) contains means (60, 61) for performing accounting and security functions for at least one selected mail carrier, the hardware circuit (66) being connected to non-volatile memory modules (68, 69) and to a security processor (77) which is programmed with at least one non-readable program part in order to carry out at least one of a large number of safety functions. Mail processing system according to Claim 1, characterized in that the special interface unit (26) in the machine base station (24) has a high-speed channel and print pulse generating means (266), in that the high-speed channel with the printhead electronics (81) and the print pulse generating means (266) on the input side an encoder means (80) and are connected on the output side to the printhead modules of the printhead (82). Mail processing system according to claims 1 to 2, characterized in that the machine base station (24) forms, together with further individually controllable stations (27, 28), a mail processing machine (20), the individually controllable stations (27, 28) using data cables (25, 25.1, 25.2) are connected to one another in terms of interfaces. Mail processing system according to claims 1 to 3, characterized in that the individually controllable station (28) is an automatic feed station for mail items and is connected via interfaces (25) to the machine base station (24), the station with the security means ( 6) equipped personal computer (10) controls the machine base station (24) and the automatic feed station (28), which is connected on the mail item input side and automatically creates a letter envelope at the inbox of the machine base station (24). Mail processing system according to claims 1 to 3, characterized in that the individually controllable station (27) is a dynamic scale and is connected via interfaces (25.2) to the machine base station (24). Mail processing system according to claims 1 to 3, characterized in that the individually controllable station (27) is a dynamic scale and via a data cable (25.2) to the machine base station (24) and via a separate data cable (15.2) to the the personal computer (10) equipped with the security means (6) is connected in terms of interface. Mail processing system according to claims 1 to 3, characterized in that the automatic feed station (28) via data cable (25.1) with the dynamic scale (27) and the dynamic scale (27) via data cable (25.2) with the machine base station (24 ) is connected in terms of interface and that the machine base station (24) and via a separate data cable (15.1 and 15.3) is connected in terms of interface to the personal computer (10) equipped with the security means (6). Mail processing system according to one of the preceding claims 1 to 7, characterized in that the separate data cables 15.1 to 15.3 are combined to form a cable 15 which is connected to the special interface unit 26 in the machine base station 24 via a plug / socket. Mail processing system according to one of the preceding claims 1 to 8, characterized in that the means (60, 61) of the user-specific hardware circuit (66) have a hardware accounting unit (60) for performing an accounting function and the at least one fast interface (61) for execution include a safety function in the safety means (6) in connection with a program module of the safety processor (77), the at least one fast interface (61) being designed as a serial interface, equipped with a monitoring circuit and with couplers for electrical isolation, the monitoring circuit with the print head electronics (81) of the special interface unit (26) or a processing circuit (268) of the special interface unit (26) interacts. Mail processing system according to one of the preceding claims 1 to 9, characterized in that the user-specific hardware circuit (66) of the security means (6) is equipped with a medium-speed serial interface (62), which includes a sensor / actuator control with optocouplers in order to control the To control the machine base station (24) together with further individually controllable stations (27, 28) of the mail processing machine (20) via the processing unit (268) of the special interface unit (26). Mail processing system according to one of the preceding claims 1 to 9, characterized in that the user-specific hardware circuit (66) of the security means (6) is equipped with a medium-speed serial interface (62) and a slow-speed serial interface (63), the medium-speed serial interface (62) includes a sensor / actuator controller and optocouplers to control the machine base station (24) via the processing circuit (268) of the special interface unit (26), and the slow serial interface (63) includes a UART circuit and optocoupler includes in order to control the further individually controllable stations (27, 28) of the mail processing machine (20) via a transmission circuit (267) of the special interface unit (26). Mail processing system according to one of the preceding claims 1 to 11, characterized in that the transmission circuit (267) of the special interface unit (26) includes an associated plug socket for the data plug of the first data cable (15) and a level converter which is located in the machine base station ( 24) converts TTL signals for a V24 interface, which is connected to a V24 socket (265). Mail processing system according to claim 1, characterized in that the security processor (77) is connected to a modem (11) via the parallel input / output interface of the security means (6) and the PC system bus (7) and in that the security processor (77) is programmed with a non-readable program part which carries out a tamper-proof credit reloading into the post registers which are formed in the non-volatile memory modules (68, 69). Mail processing system according to Claim 1, characterized in that the security processor (77) is connected to a modem (11) via the at least one serial interface (61, 62 or 63) of the security means (6) and in that the security processor (77) is connected to a a non-readable program part is programmed which carries out a tamper-proof credit reloading into the postal registers which are formed in the non-volatile memory modules (68, 69). Mail processing system with a computer-controlled printing machine base station, the personal computer being equipped with PC components connected via a PC system bus and with a security means for carrying out a billing function, that the machine base station is a printing station for a purely electronic Includes pressure in which a printhead is connected to printhead electronics,
characterized by that service request means (1, 2, 9) for mail processing for at least one mail carrier are connected to the PC system bus (7), that at least one security device (6) with at least one user-specific hardware circuit (66) is provided, which carries out at least one settlement relating to a mail carrier in associated non-volatile memory modules (68, 69), that the security means (6) has at least one software-based security module in the security processor (77) or in the program memory (71) and at least one fast interface (61), that the security means (6) via a first data cable (15) and a processing circuit (268 ) the special interface unit (26) and / or the printhead electronics (81) in the machine base station (24) for controlling a mail item thickness-tolerant printing station (82, 242 - 244), and that the security processor (77) of the security means (6) is in communication connection with a modem (11) and is programmed with a non-readable program part which carries out a tamper-proof credit reloading into the post registers which are formed in the non-volatile memory modules (68, 69) . Mail processing system according to claim 15, characterized in that a number of hardware accounting units (60) with associated non-volatile memory modules (68, 69) corresponding to the number of mail carriers are provided in the security means (6) in order to account for postage values. Mail processing system according to one of the preceding claims 15 to 16, characterized in that for a number of different mail carriers an equal number of security means (6) are used in the personal computer, which are connected on the output side to the first data cable (15) via an adapter, wherein the adapter loops the print data of the security means (6) billing into the high-speed channel.

Images