CA1214557A - Accessible housing for electronic system - Google Patents
Accessible housing for electronic systemInfo
- Publication number
- CA1214557A CA1214557A CA000432629A CA432629A CA1214557A CA 1214557 A CA1214557 A CA 1214557A CA 000432629 A CA000432629 A CA 000432629A CA 432629 A CA432629 A CA 432629A CA 1214557 A CA1214557 A CA 1214557A
- Authority
- CA
- Canada
- Prior art keywords
- switch
- door
- access
- memory
- housing
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
- G07B17/00193—Constructional details of apparatus in a franking system
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B17/00—Franking apparatus
- G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
- G07B17/00193—Constructional details of apparatus in a franking system
- G07B2017/00233—Housing, e.g. lock or hardened casing
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Devices For Checking Fares Or Tickets At Control Points (AREA)
Abstract
ACCESSIBLE HOUSING FOR ELECTRONIC SYSTEM
Abstract of the Disclosure A secured housing for an electronic device having an electronic memory mounted therewithin is provided which has an access aperture which provides tamper proof security and electro-magnetic interference protection while per-mitting access to the memory for reading the information maintained in the memory. Opening of the access aperture disables the electronic device from further operation by unlatching a switch which disconnects the electronic device from its power supply while preventing relatching of the switch to reactivate the electronic device. Use of the access aperture provides a visible indication of access to the interior of the housing. In one embodiment of the invention, the electronic device is an electronic postage meter and the electronic memory is a nonvolatile memory containing postage accounting information.
Abstract of the Disclosure A secured housing for an electronic device having an electronic memory mounted therewithin is provided which has an access aperture which provides tamper proof security and electro-magnetic interference protection while per-mitting access to the memory for reading the information maintained in the memory. Opening of the access aperture disables the electronic device from further operation by unlatching a switch which disconnects the electronic device from its power supply while preventing relatching of the switch to reactivate the electronic device. Use of the access aperture provides a visible indication of access to the interior of the housing. In one embodiment of the invention, the electronic device is an electronic postage meter and the electronic memory is a nonvolatile memory containing postage accounting information.
Description
sluice ACCESSIBLE HOUSING FOR ELECTRONIC SYSTEM
Background of the Invention This application relates generally to an accessible secured housing for an electronic system and more specific gaily to an accessible secured housing or an electronic metering device such as an electronic postage meter.
El ectronic postage meters are well known devices for imprinting postage impressions of desired value directly on an article to be mailed or on an adherent tape to be affixed to the article. Such meters commonly include a keyboard for the entry of postage information to be printed, a display for displaying postage information to be printed, one or more microprocessors and peripheral circuits for controlling various meter functions and operations including the entry of data to the registers and activation of a printing mechanism, an electronic accounting device including internal memory registers for maintaining accounting information and a printing mechanism for imprinting the postage information. The accounting information maintained in the memory registers may include a control total representing the total amount of postage paid for, an ascending balance representing the total amount of postage printed and expended and a descending balance representing the total balance of postage remaining.
Prior to using a meter, a user must purchase an amount of postage from the postal service. The term I
"postal swerves as used herein means either a governmental postal service or an authorized private carrier. In one typical system, a postal service agent or employee alters the contents of the internal memory register to reflect the amount of postage paid or and sets or increases the control total and descending balance so as to reflect the amount of postage purchased. In order to use the meter, the user selects a postage value to be imprinted and activates the postage printing mechanism. Tune postage meter may be used continuously until the descending balance reaches a predetermined minimum (i.e. until the postage paid for has been exhausted or has reached a predetermined minimum threshold value required for operation).
Since the accounting information represents the equivalent of money, it is apparent that stringent security safeguards are necessary to protect this information. In particular, the security safeguards must insure that all postage printed must be paid for. For this reason the printing actuating mechanism and the accounting registers are located within a secured housing and access thereto is restricted, in general, to postal service employees or to employees at the manufacturer's special meter repair facility. Additional security in electronic postage meters is provided by programmed safeguards employed in the operation of the system. Such safeguards are shown and described in US. Patent No. 3,938,095 issued February I
1976 and US. Patent No 3,97~,457 issued August 31, 1976, both of which patents are assigned to the assignee of the present invention. European patent publication No.
0019515 published November 26, 1g80 also describes such safeguards. Such programmed safeguards do not form part of this invention and are not further described.
electronic postage meters inherently rely for their operation on continuous electric vower, and interruption in such power including either a loss of electric power, a decrease in the electric power below a required minimum line voltage or a fluctuation in the power can threaten the security of electronic postage meters in at least two ways. First, the electronic memory registers which retain the accounting information usually require continuous power for their operation and thus a power interruption can result in a loss of accounting information. Second, a power interruption can affect the operation of the logic and control circuit elements within the meter such that their operation is erratic thus resulting in entry of erroneous data to the memory registers. Accordingly, as a further security safeguard, a separate and redundant set of memory registers in the form of a nonvolatile memory is provided, which nonvolatile memory does not rely on continuous external power and thus retains the accounting information even though a power interruption occurs. Such nonvolatile memories may be inherently nonvolatile such as a semiconductor bubble memory or may rely on an auxiliary power source such as a battery. In this manner accounting Sue' data is maintained even in the event of a power interruption.
As noted, the accounting information has a value similar to that of money and thus the accounting data maintained in the nonvolatile memory is maintained in a secured housing and may be accessed only by postal employees or employees of the manufacturer's meter repair facility during normal operation.
When the descending balance reaches a predetermined minimum, the postage meter must be recharged, that is control data and descending register data must be reset to reflect an increase in the amount of postage paid for.
This is done at the postal service facility by postal service agents or employees or by a remote resetting mechanism such as that shown and described in US. Patent No. 4,097,923 issued June 27, 197~ and assigned to the assignee of the present invention.
The postal service requires access to the registers in the memory for resetting or for periodic inspection of the meter. In particular, when a meter is taken out of service, it is necessary to read the registers to determine the balance available and to properly refund or credit the remaining balance of funds to the customer. In addition, it is desired to clear the descending register to zero under these circumstances. As a result, a problem occurs where a malfunction in a meter occurs in circuits peripheral to the nonvolatile memory such as the microprocessor control circuits, power supply or isolation circuits. In such a case, immediate access is the memory registers is ~2~4~-5'7 not possible at the postal service location and the meter must be returned to a repair facility for read out of the postage funds balance from the register. As a result a substantial period of time elapses during which the customer does not have access to the postage funds he has paid for and which remain on his control total an descending balance in the registers contained in his inoperative meter. It would be desirable to access the accounting information in the event of such a malfunction and transfer it immediately into a replacement meter thus providing the customer with substantially immediate access to his postage funds balance and to thereafter render the meter inoperative.
Accordingly, an auxiliary communication channel is provided containing read access lines to the nonvolatile memory. Access to this communication channel is provided through a sealed access aperture or door, which provides tampering and electromagnetic interference protection, but is designed for operation on a single occasion only.
Access through the door precludes further normal meter operation by deactivating the meter in such a manner that reactivation is not possible without destruction of the meter housing. Thus, the customer has immediate access to his postage funds while protection of the data and pro-mention of unauthorized alteration of the postage funds balance as well as unauthorized use of the meter and in particular its printing mechanism is achieved :
it It will be understood that, although the present invention is described in connection with a preferred electronic postage meter embodiment, the invention is applicable to other electronic calculating devices employ-in a secured housing enclosing and preventing access to an electronic control circuit and nonvolatile memory containing accounting data such as voting machines, parimutuel machines, and electronic franking machines.
Summary of the Invention Briefly stated, and in accordance with one embody-mint of the present invention, there is provided an electronic postage meter having a secured housing which encloses a nonvolatile memory containing accounting information and an access aperture designed for use on a single occasion. The aperture is an integral part of the secured housing and provides both tamper proof security and electromagnetic interference protection as does the secured housing itself. Use of the one time access aperture which may ye in the form of a break-away door permits electronic probing of the nonvolatile memory for reading out the accounting information contained therein but precludes providing means for writing additional or changed information into the nonvolatile memory and provides a visible indication that the aperture has been accessed. Further, the opening of the access aperture disables the meter from further normal operation.
, pa ~4S57 Various aspects of the invention are as follows:
An electronic calculating device comprising a memory means having accounting information registered thereon, a control means for calculating the accounting S information and entering the information into the memory means, a power supply providing power to the control means, a switch means having a first position in which an electrical connection is provided between the power supply and the control means and a second position in which the power supply is disconnected from the control means, the switch means being in the first position during normal operation of the calculating device, a secured housing enclosing the memory means, the control means, and the switch means and preventing access thereto during normal operation of the calculating device, an aperture in the housing permitting access to the memory means to read out accounting information registered thereon, a removable door covering the aperture, means for moving the switch to a second .~20 position when the door is removed, the switch being prevented from movement back to the first position when the door is removed unless authorized personnel are given access thereto and means for reading the accounting information out of the memory means through the aperture in the housing.
An electronic calculating device comprising a non-volatile memory having accounting information registered thereon, a control circuit for calculating the accounting information and entering the information into the nonvolatile memory, a power supply providing power to the control circuit, a two position electrical switch having a first switch position which provides a completed circuit from the power supply to the control circuit and a second switch position in which the I; 35 circuit from the power supply to the control circuit is disconnected, the switch being in the first position during normal operation of the calculating device, a I` secure housing enclosing the nonvolatile memory, the ;. control circuit and the switch and preventing access I, , , ~Z~5~
thereto during normal operation of the calculating device, an access aperture in the housing permitting access to the nonvolatile memory to read out accounting information registered thereon, a removable door covering the aperture, means for moving the switch to a second position when the door is removed, the switch being prevented from movement back to the first position when the door is removed unless authorized personnel are given access thereto and means for reading the accounting information out of the memory through the aperture in the housing.
An electronic postage meter comprising a nonvola-tile memory having postage funds accounting information registered thereon, a control circuit for calculating the accounting information and entering the information into the nonvolatile memory, a power supply providing power to the control circuit, a two position electrical switch having a first switch position which provides a completed circuit from the power supply to the control circuit and a second switch position in which the circuit from the power supply to the control circuit is disconnected, the switch being in the first position during normal operation of the postage meter, a secured housing enclosing the nonvolatile memory, the control circuit, and the switch and preventing access thereto during normal operation of the postage meter, a breakaway door formed in the housing and interconnected with the switch, an access aperture formed when the break-away door is removed permitting access to the 30 nonvolatile memory to read out postage funds accounting information registered thereon, means for moving the switch to a second position when the door is removed, the switch being prevented from movement back to the first position when the door is removed unless 35 authorized personnel are given access thereto and means for reading the accounting information out of the memory through the aperture in the housing.
In a postage meter having a secure housing which provides protection from tampering and electromagnetic _ .
6c 5~t7 interference for the contents of the housing, and a nonvolatile memory containing accounting information located within the housing; the postage meter further comprising: -a control circuit for calculating the information and entering the information into the memory, an access door in the housing providing access to the nonvolatile memory, the access door being constructed such that opening the door one time prunes lo its use as a door again, means operatively associated with the door for disabling the control circuit of the meter from further operation upon opening of the door unless authorized personnel are given access thereto, and means for reading the accounting information out of the memory when the access door is opened.
So Brief description of the Drawings Other objects an advantages of the present invent lion will become apparent upon a reading of toe following detailed description and upon reference to the drawings wherein:
FIG. 1 is a perspective partially broken, view of one embodiment of the present invention;
FIG. 2 is a section of FIG. 1 taken on line 2-2;
FIG. 3 is a perspective, partially broken view of an alternate embodiment of the present invention;
and FIG. 4 is a schematic showing of the circuit employed in a postage meter embodiment of this invention.
While the present invention will be described in connection with a preferred embodiment thereof, it will be understood that it is not intended to limit the invention to that embodiment only. On the contrary, it is intended to cover all alternatives, modifications and equivalents as may be reasonably included within the spirit and scope of the invention as defined by the appended claims Detailed Description of the Invention Referring now to the drawings, particularly FIGS. 1 and I there is shown, in one embodiment of this invention a portion of an electronic postage meter 11 having a secured exterior housing 10. The housing 10 is designed to provide security from tampering including unauthorized ~14~57 access to the interior of the housing where accounting information is retained in a nonvolatile memory 24 and where microprocessor control circuits 30 may be actuated as will be explained in further detail later FIG. I
Further, the housing provides protection from electron magnetic interference for the electronic components contained within housing 10.
Mounted within housing I is a printed circuit board I having a nonvolatile memory 24 mounted thereon.
An electrical communication channel 25 from nonvolatile memory I is provided on printed circuit board 22 and is shown in the form of lead lines directed toward aperture 20. Aperture 20 provides access to communication channel 26 for an electronic probe connector 2B which electrically engages communication channel 26 in a male-female connection to provide electrical access to the register of nonvolatile memory 24.
Referring to FIG. 4, an electronic postage meter 11 is shown schematically including secured housing 10 within which is enclosed a microprocessor control circuit 30, nonvolatile memory 24 and power supply 40. External to the housing I and in electrical communication therewith through circuit connections 32, 34 and 35, which may include optical isolation circuits, not shown, are keyboard 36, display 38 and postage printer 39, respectively.
Although the printer 39 is shown schematically exterior to housing 10, it is to be understood that the control I, I
g mechanism 66 therefore is located within secure housing 10 to provide tamper-proof security protection therefore AS shown in FIG. 4, the power supply 40 supplies various voltage levels to elements of the microprocessor control circuit 30, the nonvolatile memory 24, and through 5 volt outlet 52, to other peripheral circuits, not shown, through connections 44, 46, 48, and 50 respectively.
Electrical connection of power supply 40 to the electronic elements of postage meter 11 is made through switch 56 which connects 58 and 60 in the position shown in FIG. 4.
Power supply 40 may also be connected Jo an external power supply 54 through isolation circuit So.
Access to nonvolatile memory 24 may be achieved through an auxiliary multiple output communication channel 26 which is accessed through the exterior ox housing 10 by electrical probe connector 28. In a preferred embodiment, probe 28 accesses the read lines only of nonvolatile memory 24 and thus communication channel 26 includes the read lines only for memory 24. Thus accessing of commune-cation channel 26 by probe 28 permits readout of the contents of the registers of nonvolatile memory 24 only, while the capability of writing in or changing the inform motion contained in nonvolatile memories 24 is precluded when accessing memory 24 through probe I Under certain circumstances where other security measures permit, an alternate embodiment may be desirable in which commune-cation channel 26 includes both the read and the write Lo lines to non-volatile memory 24. This construction permits reading the balance in the registers and thereafter resetting the meter registers to zero.
Referring to FIGS. 1 and 2, aperture 20 in housing 10 is provide by means of a reduced thickness portion 13 of the housing 10. The reduced thickness portion permits breaking away portion 13 to form a break-away door and permit access to communication channel 26 located within housing 10. Mounted on or formed integrally with break-away door 13 is a mounting member 15 having a lever arm 16 with a V-shaped or hooked portion 17 mounted thereon. An actuating member winch may be in the form of a wire or flexible rod 19 is mounted securely at one end on circuit board 25 and at the other end on switch 56. Intermediate its ends, the wire 19 is threaded through slot 18 in board 25 and securely around hook portion 17. Opening break-away door 13 draws hook portion 17 downward from the position shown in FIG. 1, thereby moving switch 56 to an open circuit position thereby disengaging memory 24 from power supply 40. If additional security is desired, opening of door 13 can be made to move switch 56 to a grounded position (as shown in FIG. 4), thereby disengaging power supply 40 from the electronic components of the meter 11 thereby disabling the meter. In addition, breaking away door 13 provides a visual indication that the meter has been accessed. Switch 56 may be in the form of an electron mechanical or electrical switch which can only be returned , :
~Z~45~
to the closed circuit position shown in FIG. 1 by completely disassembling the meter Alternatively, switch 56 may simply be a break-away portion of the output line 58 from power supply 40.
Referring to FIG. 3 a second embodiment of the invention is illustrated. Meter 11 includes housing 10 and mounted there within is an inner housing 29 which surrounds aperture 20 and provides tamper-proof protection as well as electromagnetic interference protection for the interior of housing 10. Reduced thickness portion 13 of housing 10 forms a break-away door and mounted securely on or formed integrally with door 13 is a lever member I
having an extended portion 27 which projects through opening 23 in inner housing 29. The inner end 27 of member 21 has a hook member formed thereon which engages switch 56. Opening break-away door 13 draws hook member 27 away from switch So such that hook end 27 opens switch 56. In this manner the power supply 40 is disengaged prom the electronic components of the meter 11.
In both the FIG. 1 and FIG. 3 embodiments opening of door 13 provides access to communication channel 26 (not shown in FIG. I so that an externally applied Roy 28 can engage communication channel 26 to read out the non-volatile memory 24. As shown, communication channel US does not provide access to the nonvolatile memory 24 which would permit unauthorized writing in of new or changed information to the accounting registers.
~23L4~S7 When a malfunction of the postage meter 11 is encountered the contents of memory register I can De read by accessing door 13 in order to transfer the postal balance in the inoperative meter to a replacement meter, thereby avoiding a lengthy delay during repair or the malfunctioning meter.
In recapitulation, it will be seen that an electronic postage meter has been provided with a security system such that transfer of the accounting information contained in the nonvolatile memory can be made at the postal service location without the lengthy delay usually required while the meter is returned to a repair location and then taken to the postal service for recharging and resetting.
It will be seen that this access is permitted in a secure fashion which disables the meter for further use thereby preventing unauthorized changing of the contents of the nonvolatile memory or operation of the meter and postage printer.
; It is therefore evident that there has been provided in accordance with the present invention a security system for an electronic device that fully satisfies the objects, aims and advantages set forth above. While this invention has been described in conjunction with specific embodiments thereof, it is evident that many alternatives, modifications and variations will be apparent to those skilled in the art. Accordingly, it is intended to embrace all such alternatives, modifications and variations that follow within the spirit and scope of the appended claims.
Background of the Invention This application relates generally to an accessible secured housing for an electronic system and more specific gaily to an accessible secured housing or an electronic metering device such as an electronic postage meter.
El ectronic postage meters are well known devices for imprinting postage impressions of desired value directly on an article to be mailed or on an adherent tape to be affixed to the article. Such meters commonly include a keyboard for the entry of postage information to be printed, a display for displaying postage information to be printed, one or more microprocessors and peripheral circuits for controlling various meter functions and operations including the entry of data to the registers and activation of a printing mechanism, an electronic accounting device including internal memory registers for maintaining accounting information and a printing mechanism for imprinting the postage information. The accounting information maintained in the memory registers may include a control total representing the total amount of postage paid for, an ascending balance representing the total amount of postage printed and expended and a descending balance representing the total balance of postage remaining.
Prior to using a meter, a user must purchase an amount of postage from the postal service. The term I
"postal swerves as used herein means either a governmental postal service or an authorized private carrier. In one typical system, a postal service agent or employee alters the contents of the internal memory register to reflect the amount of postage paid or and sets or increases the control total and descending balance so as to reflect the amount of postage purchased. In order to use the meter, the user selects a postage value to be imprinted and activates the postage printing mechanism. Tune postage meter may be used continuously until the descending balance reaches a predetermined minimum (i.e. until the postage paid for has been exhausted or has reached a predetermined minimum threshold value required for operation).
Since the accounting information represents the equivalent of money, it is apparent that stringent security safeguards are necessary to protect this information. In particular, the security safeguards must insure that all postage printed must be paid for. For this reason the printing actuating mechanism and the accounting registers are located within a secured housing and access thereto is restricted, in general, to postal service employees or to employees at the manufacturer's special meter repair facility. Additional security in electronic postage meters is provided by programmed safeguards employed in the operation of the system. Such safeguards are shown and described in US. Patent No. 3,938,095 issued February I
1976 and US. Patent No 3,97~,457 issued August 31, 1976, both of which patents are assigned to the assignee of the present invention. European patent publication No.
0019515 published November 26, 1g80 also describes such safeguards. Such programmed safeguards do not form part of this invention and are not further described.
electronic postage meters inherently rely for their operation on continuous electric vower, and interruption in such power including either a loss of electric power, a decrease in the electric power below a required minimum line voltage or a fluctuation in the power can threaten the security of electronic postage meters in at least two ways. First, the electronic memory registers which retain the accounting information usually require continuous power for their operation and thus a power interruption can result in a loss of accounting information. Second, a power interruption can affect the operation of the logic and control circuit elements within the meter such that their operation is erratic thus resulting in entry of erroneous data to the memory registers. Accordingly, as a further security safeguard, a separate and redundant set of memory registers in the form of a nonvolatile memory is provided, which nonvolatile memory does not rely on continuous external power and thus retains the accounting information even though a power interruption occurs. Such nonvolatile memories may be inherently nonvolatile such as a semiconductor bubble memory or may rely on an auxiliary power source such as a battery. In this manner accounting Sue' data is maintained even in the event of a power interruption.
As noted, the accounting information has a value similar to that of money and thus the accounting data maintained in the nonvolatile memory is maintained in a secured housing and may be accessed only by postal employees or employees of the manufacturer's meter repair facility during normal operation.
When the descending balance reaches a predetermined minimum, the postage meter must be recharged, that is control data and descending register data must be reset to reflect an increase in the amount of postage paid for.
This is done at the postal service facility by postal service agents or employees or by a remote resetting mechanism such as that shown and described in US. Patent No. 4,097,923 issued June 27, 197~ and assigned to the assignee of the present invention.
The postal service requires access to the registers in the memory for resetting or for periodic inspection of the meter. In particular, when a meter is taken out of service, it is necessary to read the registers to determine the balance available and to properly refund or credit the remaining balance of funds to the customer. In addition, it is desired to clear the descending register to zero under these circumstances. As a result, a problem occurs where a malfunction in a meter occurs in circuits peripheral to the nonvolatile memory such as the microprocessor control circuits, power supply or isolation circuits. In such a case, immediate access is the memory registers is ~2~4~-5'7 not possible at the postal service location and the meter must be returned to a repair facility for read out of the postage funds balance from the register. As a result a substantial period of time elapses during which the customer does not have access to the postage funds he has paid for and which remain on his control total an descending balance in the registers contained in his inoperative meter. It would be desirable to access the accounting information in the event of such a malfunction and transfer it immediately into a replacement meter thus providing the customer with substantially immediate access to his postage funds balance and to thereafter render the meter inoperative.
Accordingly, an auxiliary communication channel is provided containing read access lines to the nonvolatile memory. Access to this communication channel is provided through a sealed access aperture or door, which provides tampering and electromagnetic interference protection, but is designed for operation on a single occasion only.
Access through the door precludes further normal meter operation by deactivating the meter in such a manner that reactivation is not possible without destruction of the meter housing. Thus, the customer has immediate access to his postage funds while protection of the data and pro-mention of unauthorized alteration of the postage funds balance as well as unauthorized use of the meter and in particular its printing mechanism is achieved :
it It will be understood that, although the present invention is described in connection with a preferred electronic postage meter embodiment, the invention is applicable to other electronic calculating devices employ-in a secured housing enclosing and preventing access to an electronic control circuit and nonvolatile memory containing accounting data such as voting machines, parimutuel machines, and electronic franking machines.
Summary of the Invention Briefly stated, and in accordance with one embody-mint of the present invention, there is provided an electronic postage meter having a secured housing which encloses a nonvolatile memory containing accounting information and an access aperture designed for use on a single occasion. The aperture is an integral part of the secured housing and provides both tamper proof security and electromagnetic interference protection as does the secured housing itself. Use of the one time access aperture which may ye in the form of a break-away door permits electronic probing of the nonvolatile memory for reading out the accounting information contained therein but precludes providing means for writing additional or changed information into the nonvolatile memory and provides a visible indication that the aperture has been accessed. Further, the opening of the access aperture disables the meter from further normal operation.
, pa ~4S57 Various aspects of the invention are as follows:
An electronic calculating device comprising a memory means having accounting information registered thereon, a control means for calculating the accounting S information and entering the information into the memory means, a power supply providing power to the control means, a switch means having a first position in which an electrical connection is provided between the power supply and the control means and a second position in which the power supply is disconnected from the control means, the switch means being in the first position during normal operation of the calculating device, a secured housing enclosing the memory means, the control means, and the switch means and preventing access thereto during normal operation of the calculating device, an aperture in the housing permitting access to the memory means to read out accounting information registered thereon, a removable door covering the aperture, means for moving the switch to a second .~20 position when the door is removed, the switch being prevented from movement back to the first position when the door is removed unless authorized personnel are given access thereto and means for reading the accounting information out of the memory means through the aperture in the housing.
An electronic calculating device comprising a non-volatile memory having accounting information registered thereon, a control circuit for calculating the accounting information and entering the information into the nonvolatile memory, a power supply providing power to the control circuit, a two position electrical switch having a first switch position which provides a completed circuit from the power supply to the control circuit and a second switch position in which the I; 35 circuit from the power supply to the control circuit is disconnected, the switch being in the first position during normal operation of the calculating device, a I` secure housing enclosing the nonvolatile memory, the ;. control circuit and the switch and preventing access I, , , ~Z~5~
thereto during normal operation of the calculating device, an access aperture in the housing permitting access to the nonvolatile memory to read out accounting information registered thereon, a removable door covering the aperture, means for moving the switch to a second position when the door is removed, the switch being prevented from movement back to the first position when the door is removed unless authorized personnel are given access thereto and means for reading the accounting information out of the memory through the aperture in the housing.
An electronic postage meter comprising a nonvola-tile memory having postage funds accounting information registered thereon, a control circuit for calculating the accounting information and entering the information into the nonvolatile memory, a power supply providing power to the control circuit, a two position electrical switch having a first switch position which provides a completed circuit from the power supply to the control circuit and a second switch position in which the circuit from the power supply to the control circuit is disconnected, the switch being in the first position during normal operation of the postage meter, a secured housing enclosing the nonvolatile memory, the control circuit, and the switch and preventing access thereto during normal operation of the postage meter, a breakaway door formed in the housing and interconnected with the switch, an access aperture formed when the break-away door is removed permitting access to the 30 nonvolatile memory to read out postage funds accounting information registered thereon, means for moving the switch to a second position when the door is removed, the switch being prevented from movement back to the first position when the door is removed unless 35 authorized personnel are given access thereto and means for reading the accounting information out of the memory through the aperture in the housing.
In a postage meter having a secure housing which provides protection from tampering and electromagnetic _ .
6c 5~t7 interference for the contents of the housing, and a nonvolatile memory containing accounting information located within the housing; the postage meter further comprising: -a control circuit for calculating the information and entering the information into the memory, an access door in the housing providing access to the nonvolatile memory, the access door being constructed such that opening the door one time prunes lo its use as a door again, means operatively associated with the door for disabling the control circuit of the meter from further operation upon opening of the door unless authorized personnel are given access thereto, and means for reading the accounting information out of the memory when the access door is opened.
So Brief description of the Drawings Other objects an advantages of the present invent lion will become apparent upon a reading of toe following detailed description and upon reference to the drawings wherein:
FIG. 1 is a perspective partially broken, view of one embodiment of the present invention;
FIG. 2 is a section of FIG. 1 taken on line 2-2;
FIG. 3 is a perspective, partially broken view of an alternate embodiment of the present invention;
and FIG. 4 is a schematic showing of the circuit employed in a postage meter embodiment of this invention.
While the present invention will be described in connection with a preferred embodiment thereof, it will be understood that it is not intended to limit the invention to that embodiment only. On the contrary, it is intended to cover all alternatives, modifications and equivalents as may be reasonably included within the spirit and scope of the invention as defined by the appended claims Detailed Description of the Invention Referring now to the drawings, particularly FIGS. 1 and I there is shown, in one embodiment of this invention a portion of an electronic postage meter 11 having a secured exterior housing 10. The housing 10 is designed to provide security from tampering including unauthorized ~14~57 access to the interior of the housing where accounting information is retained in a nonvolatile memory 24 and where microprocessor control circuits 30 may be actuated as will be explained in further detail later FIG. I
Further, the housing provides protection from electron magnetic interference for the electronic components contained within housing 10.
Mounted within housing I is a printed circuit board I having a nonvolatile memory 24 mounted thereon.
An electrical communication channel 25 from nonvolatile memory I is provided on printed circuit board 22 and is shown in the form of lead lines directed toward aperture 20. Aperture 20 provides access to communication channel 26 for an electronic probe connector 2B which electrically engages communication channel 26 in a male-female connection to provide electrical access to the register of nonvolatile memory 24.
Referring to FIG. 4, an electronic postage meter 11 is shown schematically including secured housing 10 within which is enclosed a microprocessor control circuit 30, nonvolatile memory 24 and power supply 40. External to the housing I and in electrical communication therewith through circuit connections 32, 34 and 35, which may include optical isolation circuits, not shown, are keyboard 36, display 38 and postage printer 39, respectively.
Although the printer 39 is shown schematically exterior to housing 10, it is to be understood that the control I, I
g mechanism 66 therefore is located within secure housing 10 to provide tamper-proof security protection therefore AS shown in FIG. 4, the power supply 40 supplies various voltage levels to elements of the microprocessor control circuit 30, the nonvolatile memory 24, and through 5 volt outlet 52, to other peripheral circuits, not shown, through connections 44, 46, 48, and 50 respectively.
Electrical connection of power supply 40 to the electronic elements of postage meter 11 is made through switch 56 which connects 58 and 60 in the position shown in FIG. 4.
Power supply 40 may also be connected Jo an external power supply 54 through isolation circuit So.
Access to nonvolatile memory 24 may be achieved through an auxiliary multiple output communication channel 26 which is accessed through the exterior ox housing 10 by electrical probe connector 28. In a preferred embodiment, probe 28 accesses the read lines only of nonvolatile memory 24 and thus communication channel 26 includes the read lines only for memory 24. Thus accessing of commune-cation channel 26 by probe 28 permits readout of the contents of the registers of nonvolatile memory 24 only, while the capability of writing in or changing the inform motion contained in nonvolatile memories 24 is precluded when accessing memory 24 through probe I Under certain circumstances where other security measures permit, an alternate embodiment may be desirable in which commune-cation channel 26 includes both the read and the write Lo lines to non-volatile memory 24. This construction permits reading the balance in the registers and thereafter resetting the meter registers to zero.
Referring to FIGS. 1 and 2, aperture 20 in housing 10 is provide by means of a reduced thickness portion 13 of the housing 10. The reduced thickness portion permits breaking away portion 13 to form a break-away door and permit access to communication channel 26 located within housing 10. Mounted on or formed integrally with break-away door 13 is a mounting member 15 having a lever arm 16 with a V-shaped or hooked portion 17 mounted thereon. An actuating member winch may be in the form of a wire or flexible rod 19 is mounted securely at one end on circuit board 25 and at the other end on switch 56. Intermediate its ends, the wire 19 is threaded through slot 18 in board 25 and securely around hook portion 17. Opening break-away door 13 draws hook portion 17 downward from the position shown in FIG. 1, thereby moving switch 56 to an open circuit position thereby disengaging memory 24 from power supply 40. If additional security is desired, opening of door 13 can be made to move switch 56 to a grounded position (as shown in FIG. 4), thereby disengaging power supply 40 from the electronic components of the meter 11 thereby disabling the meter. In addition, breaking away door 13 provides a visual indication that the meter has been accessed. Switch 56 may be in the form of an electron mechanical or electrical switch which can only be returned , :
~Z~45~
to the closed circuit position shown in FIG. 1 by completely disassembling the meter Alternatively, switch 56 may simply be a break-away portion of the output line 58 from power supply 40.
Referring to FIG. 3 a second embodiment of the invention is illustrated. Meter 11 includes housing 10 and mounted there within is an inner housing 29 which surrounds aperture 20 and provides tamper-proof protection as well as electromagnetic interference protection for the interior of housing 10. Reduced thickness portion 13 of housing 10 forms a break-away door and mounted securely on or formed integrally with door 13 is a lever member I
having an extended portion 27 which projects through opening 23 in inner housing 29. The inner end 27 of member 21 has a hook member formed thereon which engages switch 56. Opening break-away door 13 draws hook member 27 away from switch So such that hook end 27 opens switch 56. In this manner the power supply 40 is disengaged prom the electronic components of the meter 11.
In both the FIG. 1 and FIG. 3 embodiments opening of door 13 provides access to communication channel 26 (not shown in FIG. I so that an externally applied Roy 28 can engage communication channel 26 to read out the non-volatile memory 24. As shown, communication channel US does not provide access to the nonvolatile memory 24 which would permit unauthorized writing in of new or changed information to the accounting registers.
~23L4~S7 When a malfunction of the postage meter 11 is encountered the contents of memory register I can De read by accessing door 13 in order to transfer the postal balance in the inoperative meter to a replacement meter, thereby avoiding a lengthy delay during repair or the malfunctioning meter.
In recapitulation, it will be seen that an electronic postage meter has been provided with a security system such that transfer of the accounting information contained in the nonvolatile memory can be made at the postal service location without the lengthy delay usually required while the meter is returned to a repair location and then taken to the postal service for recharging and resetting.
It will be seen that this access is permitted in a secure fashion which disables the meter for further use thereby preventing unauthorized changing of the contents of the nonvolatile memory or operation of the meter and postage printer.
; It is therefore evident that there has been provided in accordance with the present invention a security system for an electronic device that fully satisfies the objects, aims and advantages set forth above. While this invention has been described in conjunction with specific embodiments thereof, it is evident that many alternatives, modifications and variations will be apparent to those skilled in the art. Accordingly, it is intended to embrace all such alternatives, modifications and variations that follow within the spirit and scope of the appended claims.
Claims (11)
PROPERTY OR PRIVILEGE IS CLAIMED ARE DEFINED AS FOLLOWS:
1. An electronic calculating device comprising a memory means having accounting information registered thereon, a control means for calculating the accounting information and entering the information into the memory means, a power supply providing power to the control means, a switch means having a first position in which an electrical connection is provided between the power supply and the control means and a second position in which the power supply is disconnected from the control means, the switch means being in the first position during normal operation of the calculating device, a secured housing enclosing the memory means, the control means, and the switch means and preventing access thereto during normal operation of the calculating device, an aperture in the housing permitting access to the memory means to read out accounting information registered thereon, a removable door covering the aperture, means for moving the switch to a second position when the door is removed, the switch being prevented from movement back to the first position when the door is removed unless authorized personnel are given access thereto and means for reading the accounting information out of the memory means through the aperture in the housing.
2. An electronic calculating device comprising a non-volatile memory having accounting information registered thereon, a control circuit for calculating the accounting information and entering the information into the nonvolatile memory, a power supply providing power to the control circuit, a two position electrical switch having a first switch position which provides a completed circuit from the power supply to the control circuit and a second switch position in which the circuit from the power supply to the control circuit is disconnected, the switch being in the first position during normal operation of the calculating device, a secure housing enclosing the nonvolatile memory, the control circuit and the switch and preventing access thereto during normal operation of the calculating device, an access aperture in the housing permitting access to the nonvolatile memory to read out accounting information registered thereon, a removable door covering the aperture, means for moving the switch to a second position when the door is removed, the switch being prevented from movement back to the first position when the door is removed unless authorized personnel are given access thereto and means for reading the accounting information out of the memory through the aperture in the housing.
3. An electronic calculating device as set forth in claims 1 or 2 wherein the removable door is a reduced thickness portion of the housing forming the access aperture when the door is removed.
4. An electronic calculating device as set forth in claims 1 or 2 wherein removal of the door provides a visual indication that access to the device has been provided.
5. An electronic calculating device as set forth in claim 2 wherein the nonvolatile memory includes a communication channel which permits readout of data contained in the memory, but prohibits writing of data into the memory and wherein the access aperture permits insertion of an electronic probe for electrical connection to the communication channel of the nonvolatile memory.
6. An electronic postage meter comprising a nonvola-tile memory having postage funds accounting information registered thereon, a control circuit for calculating the accounting information and entering the information into the nonvolatile memory, a power supply providing power to the control circuit, a two position electrical switch having a first switch position which provides a completed circuit from the power supply to the control circuit and a second switch position in which the circuit from the power supply to the control circuit is disconnected, the switch being in the first position during normal operation of the postage meter, a secured housing enclosing the nonvolatile memory, the control circuit, and the switch and preventing access thereto during normal operation of the postage meter, a breakaway door formed in the housing and interconnected with the switch, an access aperture formed when the break-away door is removed permitting access to the nonvolatile memory to read out postage funds accounting information registered thereon, means for moving the switch to a second position when the door is removed, the switch being prevented from movement back to the first position when the door is removed unless authorized personnel are given access thereto and means for reading the accounting information out of the memory through the aperture in the housing.
7. An electronic postage meter as set forth in claim 6 wherein the moving means is a lever arm mounted on and in operative engagement with the switch for moving the switch to the second position.
8. In a postage meter having a secure housing which provides protection from tampering and electromagnetic interference for the contents of the housing, and a nonvolatile memory containing accounting information located within the housing; the postage meter further comprising:
a control circuit for calculating the information and entering the information into the memory, an access door in the housing providing access to the nonvolatile memory, the access door being constructed such that opening the door one time prevents its use as a door again, means operatively associated with the door for disabling the control circuit of the meter from further operation upon opening of the door unless authorized personnel are given access thereto, and means for reading the accounting information out of the memory when the access door is opened.
a control circuit for calculating the information and entering the information into the memory, an access door in the housing providing access to the nonvolatile memory, the access door being constructed such that opening the door one time prevents its use as a door again, means operatively associated with the door for disabling the control circuit of the meter from further operation upon opening of the door unless authorized personnel are given access thereto, and means for reading the accounting information out of the memory when the access door is opened.
9. A postage meter as set forth in claim 8 wherein the access door is in the form of a reduced thickness portion of the housing to form a break-away member.
10. A postage meter as set forth in claim 8 wherein the disabling means is a switch which is operated by the opening of the door.
11. A postage meter as set forth in claim 8 wherein the accounting information reading out means is an electronic probe adaptable for reading the accounting information out of the device.
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US06/399,594 US4507744A (en) | 1982-07-19 | 1982-07-19 | Accessible housing for electronic system |
| US399,594 | 1982-07-19 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CA1214557A true CA1214557A (en) | 1986-11-25 |
Family
ID=23580146
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CA000432629A Expired CA1214557A (en) | 1982-07-19 | 1983-07-18 | Accessible housing for electronic system |
Country Status (5)
| Country | Link |
|---|---|
| US (1) | US4507744A (en) |
| EP (1) | EP0099571B1 (en) |
| JP (1) | JPS5936885A (en) |
| CA (1) | CA1214557A (en) |
| DE (1) | DE3378600D1 (en) |
Families Citing this family (20)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO1986002194A1 (en) * | 1984-10-04 | 1986-04-10 | Alcolator Limited | Apparatus for estimating body alcohol concentration |
| US4713756A (en) * | 1985-02-28 | 1987-12-15 | Westinghouse Electric Corp. | Non-volatile memory device for a programmable controller |
| GB2173738B (en) * | 1985-04-19 | 1989-07-12 | Roneo Alcatel Ltd | Secure transport of information between electronic stations |
| US4855920A (en) * | 1985-12-26 | 1989-08-08 | Pitney Bowes, Inc. | Postage accounting device |
| US4760532A (en) * | 1985-12-26 | 1988-07-26 | Pitney Bowes Inc. | Mailing system with postage value transfer and accounting capability |
| US5389738A (en) * | 1992-05-04 | 1995-02-14 | Motorola, Inc. | Tamperproof arrangement for an integrated circuit device |
| US6049813A (en) * | 1993-02-26 | 2000-04-11 | Intermec Ip Corp. | Portable work station-type data collection system |
| FR2710435B1 (en) * | 1993-09-24 | 1995-12-22 | Neopost Ind | Franking machine with a security locking circuit. |
| US5496990A (en) * | 1993-12-01 | 1996-03-05 | Gillieron; Christian | Versatile locking mechanism for postage meters |
| US6161758A (en) * | 1995-02-23 | 2000-12-19 | Ncr Corporation | Modular bar code scanner and scale assembly |
| US5689098A (en) * | 1995-05-26 | 1997-11-18 | Ascom Hasler Mailing Systems Ag | Postage meter with improved postal lock |
| US5932119A (en) * | 1996-01-05 | 1999-08-03 | Lazare Kaplan International, Inc. | Laser marking system |
| GB9802125D0 (en) * | 1998-01-30 | 1998-04-01 | Neopost Ltd | Tamper detection |
| US7162035B1 (en) | 2000-05-24 | 2007-01-09 | Tracer Detection Technology Corp. | Authentication method and system |
| US7089420B1 (en) | 2000-05-24 | 2006-08-08 | Tracer Detection Technology Corp. | Authentication method and system |
| US7152047B1 (en) | 2000-05-24 | 2006-12-19 | Esecure.Biz, Inc. | System and method for production and authentication of original documents |
| DE10114528A1 (en) * | 2001-03-21 | 2002-10-10 | Francotyp Postalia Ag | Secure housing for an electronic device |
| US8171567B1 (en) | 2002-09-04 | 2012-05-01 | Tracer Detection Technology Corp. | Authentication method and system |
| US7995196B1 (en) | 2008-04-23 | 2011-08-09 | Tracer Detection Technology Corp. | Authentication method and system |
| KR20210122663A (en) * | 2019-02-28 | 2021-10-12 | 엘지전자 주식회사 | Digital device and its control method |
Family Cites Families (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US3938095A (en) * | 1971-11-04 | 1976-02-10 | Pitney-Bowes, Inc. | Computer responsive postage meter |
| US3882291A (en) * | 1974-02-14 | 1975-05-06 | Park Ohio Industries Inc | Mechanical interlock mechanism for an electrical cabinet |
| US3978457A (en) * | 1974-12-23 | 1976-08-31 | Pitney-Bowes, Inc. | Microcomputerized electronic postage meter system |
| US4310754A (en) * | 1976-07-14 | 1982-01-12 | Pitney Bowes Inc. | Communication means with transducer physically spaced from interior wall of secure housing |
| US4180856A (en) * | 1977-07-29 | 1979-12-25 | Pitney Bowes Inc. | Electronic postage metering system |
| CH640971A5 (en) * | 1979-06-28 | 1984-01-31 | Kurt Ehrat | Mobile data container secured against unauthorised access |
| US4280180A (en) * | 1979-10-30 | 1981-07-21 | Pitney Bowes Inc. | Electronic postage meter having field resettable control values |
| US4424573A (en) * | 1981-02-26 | 1984-01-03 | Pitney Bowes Inc. | System for entering a postage meter serial number into a nonvolatile memory from an external channel after assembly of the meter |
-
1982
- 1982-07-19 US US06/399,594 patent/US4507744A/en not_active Expired - Lifetime
-
1983
- 1983-07-18 CA CA000432629A patent/CA1214557A/en not_active Expired
- 1983-07-19 JP JP58131774A patent/JPS5936885A/en active Pending
- 1983-07-19 DE DE8383107065T patent/DE3378600D1/en not_active Expired
- 1983-07-19 EP EP83107065A patent/EP0099571B1/en not_active Expired
Also Published As
| Publication number | Publication date |
|---|---|
| EP0099571A3 (en) | 1986-05-14 |
| DE3378600D1 (en) | 1989-01-05 |
| US4507744A (en) | 1985-03-26 |
| EP0099571A2 (en) | 1984-02-01 |
| EP0099571B1 (en) | 1988-11-30 |
| JPS5936885A (en) | 1984-02-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CA1214557A (en) | Accessible housing for electronic system | |
| US4421977A (en) | Security system for electronic device | |
| US5771348A (en) | Method and arrangement for enhancing the security of critical data against manipulation | |
| CA2161990C (en) | Metering system with automatic resettable time lockout | |
| US4302821A (en) | Interposer control for electronic postage meter | |
| US5805711A (en) | Method of improving the security of postage meter machines | |
| US4442501A (en) | Electronic postage meter with weak memory indication | |
| US5526271A (en) | Franking machine | |
| EP0516403B1 (en) | Method of remote diagnostics for franking machines | |
| US4283721A (en) | Electronic postage meter having check date warning | |
| US4549281A (en) | Electronic postage meter having keyboard entered combination for recharging | |
| US6098032A (en) | System for providing early warning preemptive postal equipment replacement | |
| CA1150840A (en) | Postage meter having interactive arithmetic operation capability | |
| EP0086396B2 (en) | Postage meter system | |
| US4525786A (en) | Electronic postage meter having a one time actuable operating program to enable setting of critical accounting registers to predetermined values | |
| US6847952B2 (en) | Postage metering system having multiple postage meter configuration capability | |
| USRE31875E (en) | Computer responsive postage meter | |
| US20020002544A1 (en) | Method and apparatus for user-sealing of secured postage printing equipment | |
| CA1147468A (en) | Electronic postage meter having keyboard entered combination for recharging | |
| EP0285390B1 (en) | Franking machine | |
| US4266222A (en) | Electronic postage meter having reset base warning | |
| CA1061466A (en) | Computer responsive postage meter | |
| GB2270500A (en) | Shielded franking machine |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| MKEX | Expiry |