EP0789333B1 - Franking machine - Google Patents

Description

The invention relates to a franking machine for franking from Postgut, with a printer for printing a postage stamp to the Postgut, a central control system for controlling the pressure and peripheral components of the franking machine, a billing unit for billing postal charges, and with at least one non-volatile memory for storage of postage data, with the accounting unit on the Accesses postage data according to a predetermined control program, and wherein the accounting unit as a digitally working electronic circuit arrangement is realized.

In known franking machines (see e.g. US 4,675,841; EP 0 665 518 A2), a central microprocessor controls the franking process in such a way that first a settlement in the Settlement unit takes place and then the postage stamp is printed on the mail. When billing, the Postage data changed. The postage data is mostly in a descending and an ascending register saved. The value of the descending register is indicated by the accounting unit for each franking process by the value of the Postage stamp to be printed based on a starting value reduced. The value of the ascending register is increased by the Value of the postmark to be printed increased. The accounting unit changes the postage data by processing a given one Control program, which as a command sequence centrally in stored in a program memory designed as a read-only memory is. The control program is then processed by a further microprocessor contained in the accounting unit.

If only the accounting unit accesses the postage data, there are known protective measures in the accounting unit and the storage for the postage fee data in one It is difficult to accommodate the security module from the outside is accessible. By potting the security module mechanical interventions in the accounting unit continue difficult. To the accounting unit before electronic intervention it was proposed to protect the optocoupler at the To use the interface of the security module (see e.g. US 4,301,507 or DE 30 40 559 C2). The known measures offer however, insufficient protection if the command sequence is changed in the program memory of the accounting unit, e.g. by manipulating the content of the program memory from the outside becomes.

Franking machines are also known, including one Printer monitoring for the optional transfer of print data to the printer depending on monitored sizes in the security module is included (e.g. EP 0 513 880 A2). Printer monitoring is powered by a third microprocessor, which is a printer control program processed, controlled. The printer control program is in turn central as a command sequence in a printer program memory stored. The known protective measures fail if the command sequence in the printer program memory is changed becomes.

Billing unit and printer monitoring are known Franking machines to a signal line Module bus connected. The signals via this module bus Accounting unit of the printer monitoring, among other things, a successful one Billing. Will the above measures bypassed, so lies the module bus and especially the one mentioned Signal line free and it can be in the signal flow from the outside be intervened.

A franking machine for franking is known from EP-A-0 657 817 A1 known from Postgut according to the preamble of claim 1. The franking machine contains a microprocessor, one ASIC module and a memory unit with several memories. A billing unit is software-technically by the Microprocessor realizes the postage data in the Storage unit managed. The ASIC module is programmable in such a way that with a single building block several different Types of franking machines can be controlled (cf. FIG. 1 and associated description; page 2, lines 35 to 40; Page 3, lines 21 to 30).

The object of the invention is a franking machine with increased Specify security, especially when printed Postage stamp corresponding to the postage Faces monetary value.

This task is for a franking machine of the type mentioned Art solved in that the control program of the accounting unit in the form of firmly linked electronic Gate is specified, and that a variety of gates on at least one user-specific component as integrated circuit is realized.

The invention is based on the knowledge that it is essential It is more complex to change a control program that is in the form firmly linked electronic gates (e.g. AND gates, OR gate, NOT gate) is specified and thus no command memory and command counter needed as one stored in a central command memory in the form of a ROM Command sequence. Such an instruction memory and also the necessary programming device is in fact easily available available so that at a central point of the accounting unit stored command sequence can be manipulated. A control program according to the invention, which is firmly in shape with each other linked electronic gate is specified, so that the control program in space and time in the gates distributed, however, can only be removed by removing Links, inserting links or gates change. Therefore, it is considerably more complex and practical almost impossible to change the tax program to achieve when a variety of gates on a custom Module implemented as an integrated circuit is. Reprogramming by changing the links is not possible because the block is due to the mechanical Intervention is destroyed. Since the block is user-specific it cannot be purchased commercially. Should the control program changed in the franking machine according to the invention must be a new integrated circuit getting produced. This includes the draft, the test and a complex manufacturing process. The manufacturing cost are all the more important since the cost ratio In the case of user-specific blocks, the reverse of the number of pieces is. Such user-specific modules are also under known as ASIC.

The control program of a franking machine according to the invention is realized exclusively by gate modules, without a central command memory at risk of manipulation use. There are also a command counter, an address bus, a Address control, etc., i.e. Modules for the operation of a Microprocessor system not required to run the control program to execute for billing.

The franking machine with the accounting unit according to the invention is therefore realized in such a way that each printed postage stamp there is a monetary value corresponding to the postage value, because the billing data is described in the above Before printing a postage stamp for the postage value be changed and only paid fees as postage data are saved.

In one embodiment of the invention, the Printer monitoring print data according to a printer control program, that also in the form of a fixed link electronic gate is specified and preferably with the accounting unit in a single integrated circuit is realized. This measure is based on the consideration that also the printer control program and the connections between Printer monitoring and accounting unit before external intervention must be protected. This also results in the printer monitoring the one designed according to the invention Effects called accounting unit.

By combining the accounting unit and the printer monitoring are in a single integrated circuit the embodiment according to the invention both units equally protected. Feeding signals into the Connection lines between accounting unit and printer monitoring for the purpose of unauthorized manipulation is excluded because these lines are part of the integrated Are circuit and thus only by destroying the circuit can be exposed. Protection is increased if the integrated circuit is housed in an encapsulated housing is. The encapsulation can e.g. through a locked Steel cassette can only be reached by post authorized persons have access.

If the housing and thus the user-specific component with a chemically resistant and mechanically difficult to remove Potting compound is shed, even after removal the housing has direct access to the accounting unit, the memory for postage data and printer monitoring prevented. Sensors are distributed in the sealing compound arranged, a removal of the potting compound can be recognized become. In particular, temperature sensors, humidity sensors and pressure sensors applied. Register one If these sensors remove the sealing compound, the Process control of the accounting unit and / or the printer monitoring blocked. The franking machine is operated only after releasing the blockages by one of the post authorized person or a service technician possible.

In a further exemplary embodiment, the printer monitoring switches a transmission unit takes effect when an enable signal, generated by the accounting unit, a carried out billing signals. Because the accounting unit in the invention no longer changed in their mode of operation an enable signal is only generated if the Billing was actually carried out. Because the release signal additionally on one that is not accessible from the outside Line runs in the integrated block, it is ensured that a corresponding monetary value after printing the postage stamp faces. Only when the release signal has been generated the transmission unit is activated so that at all printing can begin. Also becomes a clock generator for generating a print clock signal and a control unit only then to control the printer by the pressure monitoring activated when the release signal is present, so there is a triple protection that prevents that printing takes place without an enable signal.

Are the print data transferred to the printer counted during printing and with a predetermined number of transmitted Compared print data, a lock signal can be generated, the back calculation of postal charges by the accounting unit prevented. The number of print data transferred is determined so that the lock signal is generated as soon as first parts of the postage value were printed. In this case the mail is already considered franked. This measure gives on the one hand, the operator of the franking machine longer time to cancel a started print and on the other hand, prevents partial franking is carried out and the retroactive accounting is then carried out.

By generating a blocking signal after a predetermined one Number of print data transferred, can be prevented be that after a settlement carried out an inappropriate long printed image in the form of a chain of smaller fee images is printed continuously.

The object of the invention set further above will continue by a franking machine with the features of the claim 15 solved. The protective effect is with this franking machine increased because one on internal connecting lines integrated circuit from the outside without destroying the integrated Circuit cannot be accessed. The security this franking machine will be further improved if the internal bus system between the accounting unit and the Printer monitoring already through the use of the integrated Technology is protected. This type of connecting line brings greater protection to both a control program, which is processed by a microprocessor and in one Command memory is stored, as well as in a control program, that in the form of firmly linked electronic Gate is specified.

Figur 1

ein auf Postgut zu druckendes Druckbild,

Figur 2

ein Blockschaltbild mit wesentlichen elektrischen Funktionseinheiten einer Frankiermaschine,

Figur 3

ein Blockschaltbild eines Sicherheitsmoduls,

Figur 4

ein Blockschaltbild einer Abrecheneinheit,

Figur 5

eine Darstellung der Hierarchie von Ablaufsteuerungen für die Abrecheneinheit,

Figur 6

ein Blockschaltbild einer Druckerüberwachung,

Figur 7

ein Flußdiagramm der Arbeitsweise der Abrecheneinheit, und

Figur 8

ein Flußdiagramm der Arbeitsweise der Druckerüberwachung.

An exemplary embodiment of the invention is described below with reference to the drawings. Show:

Figure 1

a print image to be printed on mail,

Figure 2

2 shows a block diagram with essential electrical functional units of a franking machine,

Figure 3

a block diagram of a security module,

Figure 4

a block diagram of an accounting unit,

Figure 5

a representation of the hierarchy of sequence controls for the accounting unit,

Figure 6

a block diagram of a printer monitor,

Figure 7

a flowchart of the operation of the accounting unit, and

Figure 8

a flowchart of the operation of printer monitoring.

In Figure 1, a print image 10 is shown, which on Postage, e.g. on paper of an envelope, with a franking machine is printed according to the invention. The printed image 10 exists from a postage stamp image 12, a date stamp image 14 and an advertising image 16. The upper right corner of the Print image 10 can be used as the origin of an xy coordinate system can be selected, the one designated by x at the intersection horizontal x-axis and one labeled y vertical y-axis.

The postage stamp image 12 shows a postage value 18 from DM 1.00. The date stamp image 14 shows the current date which the printed image 10 is printed on the mail, and in Advertising image 16 is a text element "advertising" for advertising purposes displayed.

The printed image 10 is composed of pixels corresponding to the xy coordinate system composed. The pixels form in the y direction Columns with a length of 240 pixels. In the y direction pixels located one below the other are one byte summarized so that 30 bytes form a column. A Column A is defined by an x position, with increasing x-value for the first time pixels of the postage value 18 in occur in a column. Thus column A denotes a column-wise printing of the printed image 10 starting with the x-value zero the first column, the pixels of the postage value 18 contains.

A column B is at an x position, which is behind the highest x value of a column for the advertising image 16. Column B has an x value that is the maximum length in the x direction of the printed image 10.

Figure 2 shows a block diagram of the franking machine with essential electrical functional units. A central one Microprocessor 30 controls the printing of the printed image 10 is printed using a printer 32. The microprocessor 30 is via a control bus 34, the address, data and control lines contains, connected to a security module 36, which in turn is connected to printer 32. The microprocessor 30 is thus not directly connected to the printer 32, but only via the security module 36 Structure of the security module 36 is shown below with reference to FIG Figure 3 explains.

The microprocessor 30 is also connected via the control bus 34 a non-volatile memory 38 and a working memory 40 connected. A central control program is in the memory 38 filed as a command sequence for the central microprocessor 30. In the memory 38 are templates for compiling the Print image 10 saved. The microprocessor 30 loads the desired template in the working memory 40 and edited the template according to the input of an operator. After these entries, including the entry of the postage value 18 counts, the desired print image 10 is generated and stored in the working memory 40. The non-volatile memory 38 does not, however, contain any command sequences for accounting for Postal charges.

The keyboard 42 can be connected to the control bus 34 Operator operate the franking machine and e.g. the Specify print image 10. One controlled by the microprocessor 30 Display 44 informs the operator of the processes in the franking machine.

An input / output unit 46 connected to the control bus 34 is with not shown drive elements of the franking machine and connected to sensors that monitor the state of the postage meter monitor. Is on the input / output unit 46 also the transport system, not shown, for transporting connected to the postal service.

FIG. 3 shows a block diagram of the security module 36. The security module 36 is in a closed position Housing that is filled with a potting compound. Thereby are also accesses to one contained in the security module 36 Accounting unit 60 and a printer monitor 62 difficult. The security module 36 also contains one Interface 64 through which it is connected to the control bus 34 is. Printer monitor 62 transmits from the microprocessor 30 at the interface 64 provided print data for Printer 32.

The accounting unit 60, the printer monitor 62 and the Interface 64 are on a user-specific module 66 implemented as an integrated circuit. The accounting unit 60 bills postal charges before each franking process through, which correspond to the postage value 18. The postage data are in duplicate in two non-volatile memories 68 and 70 in registers REG 0 to REG 3 saved. The registers REG 0 to REG 3 each contain a descending and an ascending register.

During the franking process, 10 billed by microprocessor 30. The For this purpose, microprocessor 30 transmits the postage value 18 via the Control bus 34, the interface 64 and a module bus 72 for Accounting unit 60. The accounting unit 60, its mode of operation is explained further below with reference to FIGS. 4 and 5, stands with memories 68 and 70 via a memory bus 74 in connection. Depending on the postage value 18, the accounting unit checks whether billing is possible by postage value 18 with the current value of the descending register in the register REG 0 is compared. There is an arithmetic overrun of the permitted range of values, for example by that a positive remaining credit as the current value in descending Register for negative remaining credit reduced would, the security module 36 is blocked. Hence can only a postage value 18, the smaller or is equal to the remaining balance. In this case, the accounting unit leads the settlement by the postage value 18 in each of the registers REG 0 to REG 3 from the value of the descending Register deducted and the value of the ascending register is added.

After the settlement has been carried out, the settlement unit 60 an enable signal F, which via an internal bus 76 to Printer monitoring 62 is transmitted. The connecting lines of the bus 76 are only as internal connecting lines of the user-specific module 66 realized and are located inside the user-specific Module 66.

The printer monitor 62, the structure of which is shown below 6 is explained, printing is only possible if the enable signal F is present. Only in this case can they Pixels of the printed image 10 as print data in succession from Microprocessor 30 via interface 64 and printer monitoring 62 are transferred to printer 32.

By implementing the accounting unit 60 and the printer monitoring 62 in the user-specific module 66 unauthorized access to them is difficult. Since the bus too 76 between accounting unit 60 and printer monitor 62 in user-specific module 66 is implemented, this is not accessible from outside.

The security module 36 contains a microprocessor μP which a sequential control system AS10 and one in one Read-only memory 77 (ROM) program stored as a command sequence executing. The read-only memory 77 is internal ROM executed in the microprocessor µP. After the programming process a readout lock is set in the microprocessor µP, by blowing out a readout channel. Such microprocessors µP are also known as OTP processors (ONE TIME PROGRAMMABLE).

With the help of the sequence control AS10, it is possible to view the postage data authorized in registers REG 0 to REG 3 reload. Reloading is done by an authorized Operator first using the keyboard 42 a code key enters. Reloading can also be done via a remote data connection respectively. The sequence control AS10 is with the Module bus 72 connected and can therefore the accounting unit 60 Control so that it changes the registers REG 0 to REG 3. When reloading, the registers REG 0 to REG 3 3 a default amount for the current value of the descending register added. A total value stored in a sum register is also increased by the default value. The ascending register remains unchanged.

The microprocessor μP gives the accounting unit 60 via the Module bus 72 also specifies the number of bytes to reach column A and column B to printer 32 become. The microprocessor µP takes these values Commissioning of the franking machine from the read-only memory 77th

A reset unit 78 sets the module 66 and the sequence control AS10 after switching on the franking machine in a defined start state.

FIG. 4 shows a block diagram of the accounting unit 60 As mentioned, accounting unit 60 acts as an authorized unit via the memory bus 74 to the memories 68 and 70 in which the postage data in the registers REG 0 to REG 3 are stored. Accordingly, the accounting unit 60 and especially your control program will be particularly protected. The accounting unit 60 is controlled by a controller 90. The controller 90 contains the control program of the accounting unit 60 in the form of a variety of firmly linked electronic gate. Thus, the accounting unit 60 can Control program of the accounting unit without using a central one Process the command memory in the form of a ROM. As well are a command counter, an address bus, an address control etc., i.e. Modules for the operation of a microprocessor system not required to run the control program for to carry out the settlement. How the control works is explained further below with reference to FIG. 5.

The accounting unit 60 also contains an operational work 92, which contains an adder 94. The operations plant 92 will controlled by controller 90 and added or subtracted the postage value 22 contained in a postage register 96 into one from a register value taken from the memories 68 or 70. The respective state of the accounting unit 60 is shown in a status register 98 is stored. Via a multiplexer The control bus 34 optionally becomes 100 by the controller 90 or the module bus 92 is connected to the memory bus 74. about the control bus 34, however, the memories 68 and 70 can only be used for Service purposes can be read.

The controller 90 is connected to the internal bus 76, so that on the one hand when processing the tax program of Control 90 control signals to the printer monitor 62 the internal bus 76 are transmitted and on the other hand at Execution of the control program also takes signal states into account are generated by the printer monitor 62 become.

Figure 5 shows a representation of the hierarchy of sequential controls AS1 to AS8 of the controller 90, the arrows mean that the sequence control from which the arrow originates, the sequence control to which the arrow points is superior. The controller 90 contains the control program, which is fixed in form linked electronic gates is specified. To implement the control program in the form of gates proceeded as follows: Starting from a schedule of the Control program is the link in a circuit design the electronic gate is determined. The control program is divided into sections for which the design process was carried out individually. The result of the design process are several, in the present case eight circuit arrangements, one of the sequential controls AS1 up to AS8. The circuit arrangements of the sequential controls AS1 to AS8 are integrated on module 66 Technology realized so that subsequent changes the gate links and thus the control program are excluded, which affects the security of the franking machine increased against unauthorized manipulation. An essential one The technical feature is that the sequential controls AS1 to AS8 not on a central command memory, e.g. a ROM, access. Rather, they are necessary Commands that perform the control function on a A large number of gates that are permanently linked to one another. These gates are distributed over the integrated circuit, i.e. a change of commands requires an intervention in the areally distributed gates, which is practically impossible. Another characteristic of the sequential controls AS1 to AS8 is the lack of a central control unit for processing of orders.

The sequence controls AS1 to AS8 are sequential circuits, which depend on a clock signal their switching states change in the way given by their association.

The sequence controls AS1 to AS4 form the higher-level Control of the controller 90 and thus the accounting unit 60. The sequence controls AS5 to AS8 carry out the concrete calculation the data for the registers REG 0 to REG 3 as well as the control memory 68 and 70 through. Anytime only one of the sequential controls AS1 to AS8 is active. each Sequence control AS2 to AS8 is triggered by a special start signal from a higher-level process control, e.g. the AS1, started and reports the completion of its task by special end signal back. Is a sequence control AS2 up to AS8 active, the higher-level process control waits on this end signal.

The sequence control AS1 is a higher-level control for the sequence controls AS2 to AS8. Depending on the through the microprocessor 30 given accounting task "accounting" or The sequence controls AS2 to AS8 are "recalculated" in one sequence specified by the sequence control AS1 activated.

The sequence controller AS2 controls the update of the four Register REG 0 to REG 3. To do this, it activates depending on the accounting task either the sequential controls AS3 or AS4 four times in a row. The sequence control AS3 controls this Invoicing, where the postage data before printing be updated. The sequence control AS4 controls Back calculation, in which the printing process is interrupted prematurely and the registers REG 0 to REG 3 return to their value be reset before the last settlement.

The sequence control AS3 or AS4 activates when accounting or recalculate the sequence control AS5 to a single one to calculate the register REG 0 to REG 3. Because the register REG 0 to REG 3 each contain eight bytes, activates the Sequence control AS5 the sequence control AS6, which calculate a byte can, exactly eight times in a row, so that each byte is calculated. The sequence control AS6 in turn is activated to calculate a byte the sequential control system AS7, the one Reads bytes from memory 68 or 70. After calculation The sequence control AS8 activated and written by the AS6 sequencer in the memory 68 or 70.

FIG. 6 shows a block diagram of the printer monitor 62. The printer monitor 62 includes print release control 110, which is also in the form of firmly linked electronic Gate is specified, and a sequence control AS9 forms. The sequence control AS9 monitors the printing process, by allowing printing only when the accounting unit 60 did the billing and over the bus 76 the release signal F to the pressure release controller 110 sends. Only possible after the release signal F has been applied the print release controller 110 transfers print data from control bus 34 to printer 32, by activating one Transfer unit 112 that contains a shift register that transfers the print data serially to printer 32. The Print data are provided by the microprocessor 30 and transmitted to printer 32 via security module 36. During this transmission, the microprocessor µP intervenes Sequence control AS10 not controlling on.

The printer monitor 62 also contains a clock unit 114 for generating the print clock. The activation of the The printing cycle is again carried out by the pressure release control 110 by transmitting the print clock to printer 32. A Counter / comparator unit 116 counts the transmitted pixels of the printed image 10. Created when printing column A the counter / comparator unit 116 a blocking signal S, which over the bus 76 is transmitted to the accounting unit 60. The lock signal S prevents back calculation in the accounting unit 60. When column B is printed, the counter / comparator unit generates 116 a blocking signal that is for immediate Interrupting the printing process leads and the security module 36 so far that only one authorized Operator can remove the blockage.

Figure 7 shows a flow chart of the operation of the accounting unit 60. After switching on, the controller 90 is switched on the reset unit 78 is set to a defined start state. In a step 132, the controller 90 waits until through the microprocessor 30 of the postage value 22 into the postage register 96 is written (step 132). Is the postage value 18 in the postage register 96, then in a step 134 the billing, in particular also the process control AS3 is activated.

Billing cannot be done because of postage are already completely used up, this will be signals to the microprocessor 30 and the franking process started ended (step 138). Could the billing in Method step 134 are carried out in one Step 140 generates the enable signal F, which is transmitted via the bus 76 to the print release controller 110 of the printer monitor 62 is transmitted. Activation is carried out in a method step 142 the sequential control system AS4 enables back calculation postage data is possible.

As long as back calculation is possible (step 144), the accounting carried out at the request of the microprocessor 30 undone (step 146). There is one Request, the backward calculation takes place in a step 148, in which the sequence controller AS4 in particular is activated. The back calculation generates a back calculation signal R, via a line of bus 76 for printer monitoring 32 is transmitted, the printing of the printed image 10 when active Backward signal R immediately interrupts. The controller 90 the accounting unit 60 returns after generating the back calculation signal R back to its starting state (step 130).

If the printer monitor 62 uses a blocking signal S, this also via a line of the bus 76 to the accounting unit 60 is transmitted, signals that the pressure of the Column A has already been carried out, the sequence control is activated AS1 no longer the sequential control system AS4. So can the controller 90 of the accounting unit 60 no longer calculates back carry out. The controller 90 then returns to its Start state back (step 130).

Figure 8 shows a flow diagram of the printing process of the printer monitor 62. By switching on the franking machine becomes the print release controller 110 of the printer monitor 62 by the reset unit 78 in its starting state (Step 160). The print release controller 110 may Only carry out control operations when the release signal F was generated by the accounting unit 60 (step 162). As soon as the enable signal F by the accounting unit 60 performed billing is generated, the printer monitoring 62 Process print data (step 164). The print release control 110 is in a waiting state in which is waiting for print data which the microprocessor 30 transfers interface 64 transmits.

If print data is available, this is done in a step 166 transferred to the printer 42, which starts printing the printed image 10 begins. With every transferred byte a counter becomes Z increased. The counter / comparator unit 116 checks in a step 168 as to whether the counter Z has a value indicating that printing of column A has already started. is if this is the case, the back calculation is carried out in the accounting unit blocked by the printer monitor 62 the blocking signal S generated (step 170). The counter / comparison unit 116 checks also whether the value of the counter Z indicates whether already with the Column B printing has started (step 172). Is this the If so, the security module 36 in a step 174 blocked, the franking process being aborted.

If column B has not yet been printed, check the Printer monitoring 62 as to whether backward calculation has already taken place is by evaluating the backward calculation signal R (step 176). If the accounting carried out has been recalculated, which has generated the release signal F, the printing is ended and the printer monitor 62 returns to its start state (Step 160) back.

If there is no back calculation signal R, then in a Step 170 checks whether a print end signal has already been sent by the Microprocessor 30 was generated. If this is not the case, then the printer monitor 62 is placed in a state that corresponds to that of step 166. Was the print end signal generated, the printer monitor 62 is in its start state (Step 160).

In Figures 7 and 8 are steps in which the accounting unit 60 and the printer monitor 62 influence each other, framed twice. By coupling the two Units via the release signal F, the stop signal S and the backward calculation signal R is achieved that bypassing the Accounting unit or printer monitoring is difficult. Steps 130 shown in the two flowcharts to 178 are not realized by a microprocessor, who processes a command sequence stored in a memory, but by changing the state of an electronic circuit. To one or more of steps 130 through 178 to change or skip, a new circuit arrangement the accounting unit 60 and the printer monitor 62 can be realized. Since it is in the circuit arrangements integrated circuits, this is only possible with great effort.

The security of the security module 36 is also increased by that the release signal F, the lock signal S and that Backward signal R can be exchanged via the internal bus 76, that on the integrated module 66 also in integrated Technology is executed. External access is only possible if module 66 is destroyed.

LIST OF REFERENCE NUMBERS

10

print image

12

Postage stamp image

14

Daters image

16

advertisement image

18

postage value

30

microprocessor

32

printer

34

control bus

36

security module

38

non-volatile memory

40

random access memory

42

keyboard

44

display

46

Input / output unit

60

accounting unit

62

printer monitoring

64

interface

66

user-specific component

68, 70

non-volatile memory

72

module bus

74

memory

76

internal bus

77

Only memory

78

Reset unit

90

control

92

operation factory

94

adder

96

Porto register

98

status register

100

multiplexer

110

Pressure release control

112

transmission unit

114

clock unit

116

Counter / comparator unit

130

begin

132

Question whether value in the postal register

134

accounting

136

Question whether settlement was carried out

138

Stop

140

enable signal

142

Enable back calculation

144

Question whether back calculation is possible

146

Question whether back calculation is requested

148

reverse calculation

160

begin

162

Question whether the enable signal is active

164

Question whether print data is available

166

Increase print counter Z.

168

Question whether counter Z> column A

170

Block back calculation

172

Question whether counter Z> as column B

174

Stop

176

Question whether retroactive accounting is requested

178

Question whether print end is reached

F

enable signal

S

blocking signal

R

Back-calculation signal

REG 0 to REG 3

register

AS1 to AS10

flow control

Claims (22)

1. A postage meter machine for franking postal matter,
   comprising a printer for printing a postage stamp (10) onto the postal matter, a central controller (30) for controlling printing and peripheral components (42 to 46) of the postage meter machine,
   an accounting unit (60) for debiting postage fees, and comprising at least one non-volatile memory (68, 70) for storing postage fee data,
   the accounting unit (60) accessing the postage fee data according to a predetermined control program (AS1 to AS8), and
   the accounting unit (60) being implemented as a digitally operating electronic circuitry,
   characterized in that
   the control program (AS1 to AS8) of the accounting unit (60) is predetermined in the form of electronic gates permanently linked to one another,
   and in that a plurality of gates is implemented on at least one user-specific module (66) as integrated circuit.
2. The postage meter machine according to claim 1, characterized by a printer monitoring means (62) for enabling printing dependent on an enable signal (F), the enable signale (F) being generated by the accounting unit (60) after completion of the debiting.
3. The postage meter machine according to claim 2, characterized in that the printer monitoring means (62) transmits print data to the printer (32) according to a printer control program (AS9) which is likewise predetermined in the form of electronic gates permanently linked to one another.
4. The postage meter machine according to one of the preceding claims, characterized in that at least a part of the printer monitoring means (62) and of the accounting unit (60) is implemented in a single integrated circuit (66).
5. The postage meter machine according to one of the preceding claims, characterized in that the integrated circuit (66) is contained in an encapsulated housing, preferably a cast housing (36).
6. The postage meter machine according to one of the preceding claims, characterized in that measures are provided for preventing transmission of further print data to the printer (32) upon removal of the cast mass.
7. The postage meter machine according to one of the preceding claims, characterized in that the postage fee data are stored in an ascending and/or a descending register,
   the value of the descending register being reduced dependent on the value of each postage stamp to be printed by this value, and
   the value of the ascending register being increased by this value.
8. The postage meter machine according to one of the claims 2 to 7, characterized in that the printer monitoring means (62) enables a transmission unit (112) which transmits print data to be transmitted to the printer (32).
9. The postage meter machine according to one of the claims 2 to 8, characterized in that the printer monitoring means (62) enables a clock unit (114) for generating a print clock signal.
10. The postage meter machine according to one of the claims 2 to 9, characterized in that the printer monitoring means (62) enables a drive unit (112) driving the printer (32) dependent on the print data.
11. The postage meter machine according to one of the claims 2 to 10, characterized in that the printer monitoring means (62) counts the print data transmitted to the printer (32).
12. The postage meter machine according to claim 11, characterized in that the printer monitoring means (62) generates an inhibit signal (S) after a predetermined number of print data has been transmitted.
13. The postage meter machine according to claim 11 or 12, characterized in that the accounting unit (60) prevents a back-calculation of postage fees dependent on the inhibit signal (S).
14. The postage meter machine according to one of the claims 11 to 13, characterized in that the printer monitoring means (62) generates a blocking signal after a predetermined maximum amount of transmitted data, said blocking signal preferably preventing further transmissions of print data to the printer (32).
15. A postage meter machine for franking postal matter,
    comprising a printer (32) for printing a postage stamp (10) onto the postal matter,
    a central controller (30) for controlling printing and peripheral components (42 to 46) of the postage meter machine,
    an accounting unit (60) for debiting postage fees,
    at least one non-volatile memory (68, 70) for storing postage fee data,
    and comprising a printer monitoring means (62),
    the accounting unit (60) accessing the postage fee data according to a predetermined control program (AS1 to AS8) and signalling a completed debiting to the printer monitoring means (62) by means of an enable signal (F), which is transmitted via at least one line (76) producing an electrical connection between the accounting unit and the printer monitoring means,
    and the printer monitoring means (62) being controlled via a printer control program (AS9) which only enables printing after receiving the enable signal (F),
    characterized in that
    essential electronic circuit elements of the accounting unit (60) and essential electronic circuit elements of the printer monitoring means (62) are implemented on a single user-specific integrated circuit (66) and that the line (76) is formed on the integrated circuit (66) as interal connecting line.
16. The postage meter machine according to claim 4, characterized in that at least one of the control programs (AS1 to AS10) is predetermined in the form of electronic gates permanently linked to one another.
17. The postage meter machine according to claim 15 or 16, characterized in that the printer monitoring means (62) enables a transmission unit (112) which transmits print data to be transmitted to the printer (32).
18. The postage meter machine according to one of the claims 15 to 17, characterized in that the printer monitoring means (62) enables a clock unit (114) for generating a print clock signal.
19. The postage meter machine according to one of the claims 15 to 18, characterized in that the printer monitoring means (62) generates an inhibit signal (S) after a predetermined number of transmitted print data.
20. The postage meter machine according to claim 19, characterized in that the accounting unit (60) prevents a back-calculation of postage fees dependent on the inhibit signal (S).
21. The postage meter machine according to one of the claims 15 to 20, characterized in that the printer monitoring means (62) generates a blocking signal after a predetermined maximum number of transmitted data, said blocking signal preferably preventing further transmissions of print data to the printer (32).
22. The postage meter machine according to one of the preceding claims, characterized in that the postage meter machine contains a further microprocessor (µP) with an internal volative main memory and an internal read-only memory (ROM) preferably provided with a read locking.

Images