Method for improving the security of postage meter machines in the transfer of credit

A method for improving the security against manipulation of a postage meter machine in credit transfers, said postage meter machine comprising a microprocessor which interfaces with an input unit of the postage meter machine for implementing, upon an input being entered via said input unit, a start and initialization routine in said microprocessor followed by a system routine with entry, if necessary into a communication mode with a remote data center for loading a credit value or for returning funds in a refund to the data center, and said microprocessor subsequently entering into a franking mode from which a branch is made back into the system routine after conducting an accounting and printing routine, said method comprising the steps of:

• setting up a first communication connection between an authorized user and the data center independently of said postage meter machine and storing a code for a predetermined credit value for use in a log-on of an authorized action at the postage meter machine by a credit request to be subsequently communicated to the data center;
• activating the postage meter machine by an authorized, predetermined operating sequence via said input unit for causing said microprocessor to enter into a special mode for negative remote crediting;
• setting up a second communication connection between the postage meter machine and the data center and entering a data request via said input unit, implementing a first transaction after entry of the postage meter machine into the communication mode and after setting up said connection to the data center;
• setting a credit request at said postage meter machine corresponding to a remaining, refunded credit value in said postage meter machine only if said operating sequence entered via said input unit corresponds to an allowed, predetermined operating sequence and only if the credit value communicated to the data center corresponds with the code stored therein for the predetermined credit value;
• and
• conducting a further transaction for automatically transmitting security-associated data to the postage meter machine and for completing the storage of said security-associated data in said postage meter machine.

A method for improving the security against manipulation of a postage meter machine in credit transfers, said postage meter machine comprising a microprocessor which interfaces with an input unit of the postage meter machine for implementing, upon an input being entered via said input unit, a start and initialization routine in said microprocessor followed by a system routine with entry, if necessary into a communication mode with a remote data center for loading a credit value or for returning funds in a refund to the data center, and said microprocessor subsequently entering into a franking mode from which a branch is made back into the system routine after conducting an accounting and printing routine, said method comprising the steps of:

• establishing a first communication connection between said postage meter machine and the data center and storing a code for a predetermined credit value for use in a log-on of an authorized action at the postage meter machine by a credit request to be subsequently communicated to the data center;
• activating the postage meter machine by an authorized, predetermined operating sequence via said input unit for entering into a special mode for negative remote crediting;
• establishing a second communication connection between the postage meter machine and the data center and entering a data request via said input unit, implementing a first transaction after entry of the postage meter machine into the communication mode and after setting up said connection to the data center, setting a credit request at said postage meter machine corresponding to a remaining, refunded credit value in said postage meter machine only if said operating sequence entered via said input unit corresponds to an allowed, predetermined operating sequence and only if the credit value communicated to the data center corresponds with the code stored therein for the predetermined credit value;
• storing a security flag in said postage meter machine which must be present in said postage meter machine in order to permit franking by said postage meter machine;
• said microprocessor automatically erasing said security flag upon an occurrence at least one event selected from the group of events consisting of an unallowed departure from said predetermined operating sequence and an intervention into the postage meter machine;
• and
• said microprocessor switching the postage meter machine into a first mode in which postage meter machine is prevented from franking.

A method for improving the security against manipulation of a postage meter machine in credit transfers, said postage meter machine comprising a microprocessor which interfaces with an input unit of the postage meter machine for implementing, upon an input being entered via said input unit, a start and initialization routine in said microprocessor followed by a system routine with entry, if necessary into a communication mode with a remote data center for loading a credit value or for returning funds in a refund to the data center, and said microprocessor subsequently entering into a franking mode from which a branch is made back into the system routine after conducting an accounting and printing routine, said method comprising the steps of:

• conducting a communication between said postage meter machine and said data center including transmission of encrypted messages between said postage meter machine and said data center;
• distinguishing between authorized action and unauthorized action at said postage meter machine with said microprocessor of said postage meter machine in combination with implementing a remote crediting for transmitting a credit value to said data center by communicating a credit request from the postage meter machine to the data center during a first transaction, and conducting a responsive, second transaction from the data center to the postage meter machine, and after completing said second transaction, adding a credit value corresponding to said credit request to a value of a descending register in the postage meter machine and storing said credit value;
• upon deactivation and subsequent reactivation of said postage meter machine, said microprocessor requiring a defined execution of said input unit with a predetermined actuation sequence in order to permit further first and second transactions;
• before implementing said further first and second transactions, conducting a check with said microprocessor to determine whether a positive credit request or a negative credit request corresponding to an amount of remaining credit stored in said descending register has been requested and checking in said microprocessor whether a predetermined time limit was exceeded;
• during said further second transaction, checking whether a predetermined time limit is exceeded during execution of said further second transaction;
• and
• if necessary, automatically continuing the communication to complete a transaction either of interruption of a negative remote crediting or communication of faulty encrypted data to the postage meter machine occurs.

A method for improving the security against manipulation of a postage meter machine in credit transfers, said postage meter machine comprising a microprocessor which interfaces with an input unit of the postage meter machine for implementing, upon an input being entered via said input unit, a start and initialization routine in said microprocessor followed by a system routine with entry, if necessary into a communication mode with a remote data center for loading a credit value or for returning funds in a refund to the data center, and said microprocessor subsequently entering into a franking mode from which a branch is made back into the system routine after conducting an accounting and printing routine, said method comprising the steps of:

• setting up a communication connection between an authorized person and said data center independently of said postage meter machine for obtaining a credit value and subsequently storing said credit value in said postage meter machine;
• entering a credit request into said postage meter machine via said input unit and logging-on said credit request as an authorized action if said credit request corresponds to said credit value obtained from the data center;
• conducting a first transaction between the postage meter machine and said data center including storing a predetermined key combination in said postage meter machine;
• logging-on said credit request at said data center if said credit value corresponds to the credit value obtained from the data center;
• requiring the presence of a security flag in said postage meter machine in order to conduct franking;
• said microprocessor automatically storing a new security flag in said postage meter machine during said first transaction;
• and
• conducting a second transaction for modifying a remaining credit of said postage meter machine.

A method for improving the security against manipulation of a postage meter machine in credit transfers, said postage meter machine comprising a microprocessor which interfaces with an input unit of the postage meter machine for implementing, upon an input being entered via said input unit, a start and initialization routine in said microprocessor followed by a system routine with entry, if necessary into a communication mode with a remote data center for loading a credit value or for returning funds in a refund to the data center, and said microprocessor subsequently entering into a franking mode from which a branch is made back into the system routine after conducting an accounting and printing routine, said method comprising the steps of:

• undertaking an authorized manual action in conjunction with an entry in said input unit;
• said microprocessor retrieving currently valid data identifying said authorized action;
• monitoring said postage meter machine with the microprocessor, using said currently valid data, for distinguishing between authorized and unauthorized action;
• said microprocessor switching the postage meter machine into a special mode for negative remote crediting with a step, interpreted in an interrogation step of the communication mode as a transaction request for a first transaction, if a plurality of predetermined criteria have been satisfied;
• said microprocessor switching into a first mode in which said postage meter machine is prevented from franking if said manual action made in conjunction with an entry in said postage meter machine is unauthorized;
• said microprocessor producing a communication connection and conducting an encrypted communication between said postage meter machine and said data center in said special mode;
• and
• monitoring with said microprocessor for completed implementation of said special mode.