EP2140429A1 - Method and devices for franking a postal shipment and storing the identifying information of the postal shipment in a positive list - Google Patents

Abstract

The invention relates to a method for franking a postal shipment. The method is characterized in that identifying information is applied to the postal shipment, that the identifying information is transmitted to a network node and stored there in a positive list, that the postal shipment provided with the identifying information is accepted, that the postal shipment is fed to a processing unit, and that the processing unit carries out a check of whether the identifying information provided on the postal shipment is stored in the positive list.

Description

METHOD AND DEVICES FOR FRANKING A POST-SUBMISSION WITH STORAGE OF THE INFORMATION OF THE POST-SUBMISSION IN A POSITIVE LIST

Description: The invention relates to a method for franking mailpieces, in particular letters, parcels and parcels, wherein an operating unit is operated separately from a franking unit.

The invention further relates to a device for franking mailpieces 5 with an operating unit and a franking unit.

The invention also relates to a network node, a logistics system and a processing unit. 0 A generic method and a generic device are known from German Patent DE 100 20 566 C2. In this known method, a cryptographic module integrated in a user system generates an encrypted random number and an identification number. A loading center decrypts the random number and the identification number. 5 This results in an identification of the user or the user system used by the user. Subsequently, the loading center encrypts the random number and a default identification number and transmits it to the user system. Subsequently, the user system generates indicia including the encrypted random number and the equally encrypted default identification number. An example of such a franking system is the STAMPIT system of Deutsche Post AG. STAMPIT consists of a software installed on the PC of each STAMPIT user named "STAMPIT-Client" and a central system called "STAMPIT-Server" operated in a data center of Deutsche Post. The STAMPIT client serves as the operating unit and the STAMPIT server as the franking unit. Both units are connected via the Internet. If a user wants to create a franking, a request will be sent via the network connection from the STAMPIT client to the STAMPIT server. The latter creates the postage indicium in a highly secure cryptographic module as an electronic byte sequence. After the retransmission of this byte sequence from the STAMPIT server to the STAMPIT client, the conversion of the cryptographically secured byte sequence into a machine-readable barcode takes place there as well as the printout of this bar code together with other information on a valid PC postage indicium.

This known method allows users of personal computers to load postage amounts via the Internet and to generate postage indicia using the loaded postage amounts.

The invention has for its object to provide a franking method that allows easy generation and billing.

A further object of the invention is to provide a system for franking mailpieces, which enables a flexible franking of any, possibly very large, number of mailpieces.

According to the invention, this object is achieved by That an identification information is applied to the mailpiece,

That the identification information is transmitted to a network node and stored there in a positive list, that the mailpiece provided with the identification information is delivered,

• that the mail item is fed to a processing unit and

• that the processing unit checks whether the identification information provided with the mail item is stored in the positive list.

Furthermore, this object is achieved by a network node according to claim 25, by a device for franking mailpieces according to claim 33, a processing unit according to claim 34 and by a logistics system according to claim 36.

The invention provides to apply identification information both to a mail item and to transmit it to a data processing unit.

The identification information is used as a means for billing and / or for processing the mailpiece.

It is particularly advantageous to allow a user of the logistics system a simple and uncomplicated generation of the identification information. In particular, it is possible to use identification information which consists at least partially of information that can be entered by a user and possibly optionally selected.

Further developments of the invention provide for carrying out subsequent processing steps taking account of the identification information. Processing of the identifier information in the area of a network node and / or in the area of the processing unit is particularly advantageous. The invention includes embodiments of the network node and / or the processing unit, which make it possible to combine secure payroll accounting and / or paychecking (remuneration assurance) with simple handling of the mailpieces by the user.

The network node can perform functions for user rights management, for managing fee amounts and / or for billing franking services and / or directly for shipping services.

Since the network node thus provides functions that are otherwise more complicated input by the respective user as the sender of the mailers, the network node is also referred to below as an order management unit (AM).

A further development of the method, the device and the system provides that the mail item is delivered to a logistics system and that at least one processing step that takes place in the logistics system takes place as a function of the identification information.

It is particularly advantageous that this processing step takes place in the processing unit.

The positive list contains a list of all mail items for which regular processing takes place within the logistics system, in particular a transport from a delivery point to a delivery location.

The invention includes a novel logistics system that automates and significantly simplifies the transport of mail to intended recipients. According to the invention, a logistics system is provided, which is characterized by a particularly high level of security and reliability, and which enables a particularly simple and secure billing of the mailpiece.

The term logistics system is to be understood in the context of the invention in its broadest meaning. In particular, it comprises systems which contain means and devices for carrying out the transport of mailpieces from delivery locations to delivery locations on a transport route, preferably within a postal distribution network.

A refinement of the method, of the device and of the logistics system is characterized in that the identification information is stored and / or transmitted by a data processing unit which is coupled to a means for providing the mailpiece with the identification information.

This occurs, for example, in that the data processing unit is connected to a printer which prints the mailpiece with the identification information. However, it is also possible to provide the printer with a writing unit for writing to an electronic data carrier such as a transponder. Such writing can be effected, for example, contactlessly by electromagnetic signals.

A development of the invention provides that the identification information is printed on the mailpiece.

A preferred embodiment of the invention is characterized in that the identification information is applied to an information carrier that can be connected to the mailpiece. The information carrier can be designed, for example, as a sticker. Furthermore, it is possible that it is a transmission component, for example by the identification information being printed on a letter introduced into the mailpiece.

A refinement of the invention is characterized in that the identification information is stored in a transponder connected or connectable to the mailpiece.

For an inventive use are many types of transponders. Particularly preferred are transponders that serve as transmitting and / or receiving devices. In particular, these are receivers that are suitable after receiving a foreign signal to emit its own signal.

The English term "transponder" is an abbreviation of transmitter (sender) and responder (signal responder).

Particularly preferred is an insert of transponders, which are provided with at least one identification. Such transponders are also referred to below as RFID tags.

It is expedient to replace or supplement a visually detectable marking of mailpieces by RFID technologies with electronically rewritable and readable transponders. Such systems have the advantage that in a transponder, a variety of information can be electronically loaded and unloaded, whereby automatic transport, sorting, tracking or distribution operations can be controlled without the visual display of information is required. A transponder with identification information (RFID tags) is preferably executed as an RFID tag. An RFID tag consists of a microchip and an antenna. On the chip, a code is stored that contains processing-relevant information. In particular, the information is identification (ID) information.

Transponders are equipped to send and / or receive signals to a triggering (radio) signal of a reader. Active transponders contain a power supply for their operation. Passive transponders, however, receive energy through the signals emitted by the reader.

By detecting the identification information applied to the mail item, it is possible to bill the item of mail.

In the event that detection of the identification information applied to the mail item or associated with the mail item takes place in the region of a processing unit, it is expedient to connect the identifier information to billing-relevant data.

Billing-relevant data are, in particular, information about a sender, a recipient, dimensions and weight of the mailpiece and services desired by the respective user, for example an express delivery.

A development of the invention provides to obtain this information based on the identification information.

A further development of the invention includes a determination of the shipment-relevant data by checking the mailpiece, for example by optical character recognition. Furthermore, it is expedient to take into account further data of the mailing, for example the mailing category, during the billing.

A development of the invention provides a settlement under

Considering determined values of the weight and / or the dimension of the mail item.

This determination can be made, for example, in the area of the processing station.

However, it is equally possible to carry out a billing based on the transmitted identification information.

When billing taking into account the transmitted identification information, it is possible, for example, by the respective user information entered on the shipment, in particular to their shipment category (product category), such as standard letter or package, weight, dimensions, additional services such as proof, express delivery, appointment delivery, insurance, COD or CO2-neutral transport or by entering the appropriate values for the shipment sizes and / or consignment weights to be considered.

When evaluating the electronically transmitted identifier information, there are various billing options.

The respective billing can be based on a contract between the logistics company and the user and / or on the basis of, for example, publicly disclosed terms of use of the logistics company also against unregistered users. Particularly with registered users, it is expedient that the registered users also transmit billing-relevant data, for example the item category or the respective mode of transport, with the respective identification information of a mailpiece.

A detection of the mailing category and / or the type of transport can, for example, take place in the area of a suitably converted franking machine, so that, for example, weight recording functions of the franking machine can be used.

Furthermore, an immediate association between the determined weight and the mail item is possible by connecting the process steps of determining the item data and applying the identifier information.

By combining the method steps of determining the shipment data and applying the identification information, it is particularly easy to collect these data together.

This facilitates a subsequent transmission of the identification information and possibly associated transmission data and / or accounting data to the network node.

The transmission can be effected, for example, directly by the franking machine and / or by a user computer. For example, this involves a transmission via a suitable data line, for example a telephone connection or an Internet-based connection.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that, in the event that the identification information is stored in the positive list, further processing of the mailpiece takes place. A further development of the method, the apparatus, the network node, the logistics system and the processing unit is characterized in that the further processing comprises a transport of the mail item to a designated receiving location.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the identification information contains information for identifying a user.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the user is registered in an authorization system.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the user after registration in the authorization system is granted an access authorization for the transmission of identification information to the data processing unit.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the identification information contains additional information in addition to the information for identifying the user.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that an input means is provided, which makes it possible that the further information is at least partially entered by the user. A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the further information includes a number. It can be a sequential number, which makes billing easier. A use of consecutive numbers is advantageous, but not necessary.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the identification information is deleted from the positive list during a processing operation of the mailpiece.

A further development of the method, of the device, of the network node, of the logistics system and of the processing unit is characterized in that the mail item is removed from a normal transport path of mailpieces if the identification information is not stored in the positive list.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the identification information transmitted to the network node is used to bill the item of mail.

A further development of the method, of the device, of the network node, of the logistics system and of the processing unit is characterized in that the identification information applied to the mailpiece is used for billing the mailpiece.

A further development of the method, of the device, of the network node, of the logistics system and of the processing unit is distinguished by the fact that a comparison of the transmitted identifier information and the identification information applied to the mailpiece takes place. A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that information is transmitted to the network node for billing the mailpiece.

A further development of the method, of the device, of the network node, of the logistics system and of the processing unit is characterized in that information for billing is determined taking into account information associated with the mailpiece.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that billing-relevant data is determined by checking physical properties of the item.

A refinement of the invention includes billing on the basis of the transmitted identification information and / or billing on the basis of the shipment data recorded together with the identification information.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the franking unit has means for generating identification information, that the device also contains a means for providing mailpieces with the identification information and that the device further includes means for transmitting the identifier information to a network node.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the processing unit includes means for detecting identification information associated with the mailpieces and that the processing station further comprises means for checking whether the identification information in a Positive list are included. A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that it is suitable for discharging a means for a discharge of mailpieces from a forwarding and / or processing operation of postal items.

A further development of the method, the device, the network node, the logistics system and the processing unit is characterized in that the logistics system is a means for receiving electronically transmitted

Identification information and for storing the identification information in a positive list includes that the logistics system further includes means for verifying identification information applied to mailpieces, and that the logistics system includes means for making a check as to whether the identification information applied to the postal items is stored in the positive list ,

The invention further includes a remuneration assurance system in which a comparison between transmitted identification information and identification information applied to postal items as well as a comparison of the transmitted item data with the recorded item data takes place.

The identification information and possibly the billing-relevant information can be applied to the mail item in various ways. In particular, it is possible to use conventional methods for printing mailpieces. The method is a method of printing using printing systems that apply a matrix code to shipments and keep the transaction data secure until transfer to the central system. A cargo in advance is not required. The billing is done daily in retrospect via an interface between the machine and order management. In this case, the information from the matrix code (user number, order number, consignment number) is transferred to the order management and used there for further checking and billing.

With the aid of the invention, a new type of franking is realized.

A particularly preferred embodiment of this type of franking is characterized in that billing data at a delivery or a

Subsequent subsequent processing of the mailing be calculated.

In several preferred embodiments of the invention, it is no longer necessary for postage values to be purchased prior to making a franking transaction.

In a preferred embodiment of the invention, postage is not purchased in advance, but charged after receipt.

Further advantages, features and expedient developments of the invention will become apparent from the dependent claims and the following description of the invention with reference to preferred embodiments. Brief description of the drawings:

From the drawings show:

Fig. 1 is a schematic representation of the invention and

Fig. 2 is a schematic diagram of an inventive authorization and / or authentication of a user of the logistics system.

Detailed description of the invention with reference to the drawings:

Fig. 1 shows a schematic diagram of a logistics system according to the invention. The logistics system allows a large number of users to provide shipments with identification information and to deliver these shipments for physical transport within the logistics system.

A particularly preferred embodiment of the invention includes a registration of the user.

The registration of the user takes place for example by an entry of identification information and possibly security features of the user in a database.

In one embodiment, the network node includes an authorization and authentication unit for checking the authorization of the user for accessing the franking service and comprises checking the authorization of the user for access to a franking service on the basis of a user authorization profile assigned to the user that the network node has an interface is connected to a franking service and transmits data to the franking service. Franking (postage indicia), which can serve as proof of the payment of the transport fee, can be generated by the postage service.

Different types of shipping can be considered here. Depending on requirements, the sender and recipient address can also be printed out.

The franking service preferably contains standard templates for labels, transport packaging and / or envelopes.

A particularly preferred embodiment of the network node is characterized in that it is connected to an interface for entering information relevant to shipment.

The shipment-relevant information is, for example, sender data and / or recipient data.

Furthermore, it is expedient that the network node is connected to an interface for the input of franking-relevant information.

Expediently, the franking-relevant information contains specifications of the object - hereinafter also referred to as the shipping product - and / or information as to whether the shipping product:

• still has to be paid

• or already paid It is convenient that the service request be configurable to be

• either only transfers data relevant to the shipment or • transfers franking-relevant data without payment information or

• transmits franking-relevant data with payment information.

• User stamps postal items (PS) on the basis of a unique identification information without postage value.

• Identification information is transmitted (via the Internet) to the AM system of DPAG (AM order management).

• Identification information is transmitted from the AM system and entered in the positive list.

• Mail is delivered by the user (mailbox, branch, BZ) or collected from the user.

Collecting containers are known for the collection of postal goods, which allow the deposit of mailings during the insertion of mail and also to prevent access to already inserted shipments. In mailboxes the insertion slot is usually designed so narrow that access to inserted letters is not possible.

Also in the collection of larger mail items such as parcels and parcels, it is known to use containers for the collection of these goods.

A delivery of larger shipment quantities is expediently carried out at other suitable delivery points, for example branches of the logistics system or directly in the area of processing units of the logistics system. The invention provides a method and a device for franking mailpieces, with which franking or other franking-relevant processes are carried out in such a way that a simple and reliable franking is made possible.

• An identification information of a mail item is read in and determined whether it is contained in the positive list.

If so:

Franking valid; ID information is deleted (or marked) from the positive list;

if no (or identification information marked): franking invalid.

The reading of the identification information takes place, for example, in a letter center. For reading the identification information, a processing unit is used. It is both possible to provide a separate processing unit for this purpose, for example by means of a device which is suitable for checking the surfaces of mailpieces and / or for reading information contained in transponders.

However, it is likewise possible for the identification information of the mail item to be read in in a processing unit provided for other processing operations of the mail item, for example in one

Aufstellmaschine or in a sorting machine. • Billing is done afterwards via AM-System (for example as follows:

The identification information is transmitted to the AM system after reading and can be billed).

Billing can be done

- via invoice,

- by billing the "current account" of the user.

The franking:

• the franking mark contains a new post-matrix code;

• The unique identifier information is contained in the post-matrix code;

• The unique identification information is composed of the user number, the order number assigned by the user and the serial number of the item of mail (within the order / batch).

franking machine:

The invention enables the user to carry out franking operations with all the advantages of a franking machine. In this case, it is possible both for the user to use a postage meter machine and for him to use other facilities which already exist with him, in particular a printer and a data processing unit, for which franking operations are used.

The invention makes it possible in a simple manner to realize the functions of the franking machine by means of technical devices, which are developed further by the invention into franking units. • Postage meter machine with Internet connection (possibly via PC), which creates post-matrix code;

• PC with software that creates post matrix code and standard PC printer;

• When the postage indicia are created, the franking machine may be offline; Online connection only required when submitting order data.

The invention includes various forms of evaluation and billing of the mailpiece.

It is thus possible, for example, for a user unit, in particular a user computer or a postage meter machine of the user, to transmit to the network node (AM system) product information and / or other mailing and / or billing-relevant data.

For example, in this embodiment, billing may occur as shown below:

- Order data sent from the AM system includes product information for the identification information;

- identification information and product information are entered in the positive list;

- In the case of a remuneration assurance check, an additional check is made to see whether the product information on a POSTSEND corresponds to the product details in the positive list. If so:

User has informed the AM system of the product correctly, franking valid. If not:

Franking invalid. Another preferred embodiment of billing / payment assurance is as follows:

- For the settlement of the postal consignment and / or for the remuneration of the

Mailing, a product category belonging to the mailing is determined by means of post-matrix code and transmitted together with identification information to the AM system;

- Based on the determined product specification billing is created.

The invention includes a variety of ways to perform billing of mail in a particularly simple and at the same time very reliable for a user of a logistics system. In particular, it is not necessary to buy postage indicia or to load amounts of value from a value transfer center before franking is carried out.

In embodiments of the invention, it is also possible to use another device instead of a franking machine, for example a printer, which is preferably connected to a user computer.

The invention achieves this in a particularly simple and advantageous manner, as described below:

The user brings the user number and current tracking number (and product) on the mail piece; this data is read in - for example, in a letter center (BZ) of the logistics system - and used for billing; For example, the user receives an invoice.

A further development of the invention provides that the user transmits the mail item to the network node (AM system) before the mail item is delivered, with the identification information being provided. A further development provides that the user number and possibly a current mailing number are entered in a positive list.

The announcement of the user can take place in various ways, for example by using a web page or by transmitting another digital message, eg. Example by an e-mail, an instant message or an automated telephone call, for example in the form of a Skype call.

Authentication of the message is advantageous, whereby it is both possible to identify the user by one of the authorization and / or authentication processes described above, as well as by providing the announcement with a corresponding authentication, for. B. in the form of a digital signature.

In one embodiment of the invention, a stack of postal items is processed and billed (registers) in the franking machine. For the stack, report with characteristics of the stack (number of mail, weight, weight distribution) is securely generated and sent to the mail. Swiss Post checks whether the characteristic of the stack matches the characteristic stated in the report in order to determine whether it has been correctly accounted for in the franking machine.

It's not just a question of whether the franking machine settles correctly, but also whether the customer has delivered the stack unchanged and not a few shipments have been added.

A particularly preferred embodiment of the invention is characterized by at least one inner connector connected to the transformation unit, which is used to transmit the service request to the provider server and to receive the processing result determined in the provider server from the provider server. Furthermore, it is advantageous that the service request contains information that is encrypted with a key uniquely assigned to the user and that can be decrypted in the authorization and authentication unit.

An expedient embodiment of the invention includes handing over the product specification to the postage service.

The term product specification includes one or more of the following information:

- Information about at least one property of the product, in particular about its dimensions and / or its weight

- Information identifying a product type or - Information identifying a single product, such as a serial number.

A particularly preferred embodiment of the invention is characterized in that prior to a sale of a z item information about the seller are specified.

Furthermore, it is advantageous that prior to the sale of the item, information about the item to be sold is specified.

A particularly preferred embodiment of the invention is characterized in that after the sale of the object to be sold, the address data and / or the product specification are transferred to the franking service.

A particularly preferred form of the network node is characterized in that it contains: at least one outer connector for receiving a service request whose generation is initiatable in a user computer of a user, and for transmitting a determined processing result to the user

User computer,

Internal connectors that are separate from the network node. In particular, adaptations of internal connectors during ongoing operation of the network node are thus also possible by separating the external connector to be adapted from the network node, adapting it and reconnecting it to the network node.

In an advantageous embodiment of the invention, the network node comprises an authorization and authentication unit for checking the authorization of the user for accessing the franking service.

By means of the authorization and authentication unit, the authorization of the user can already be checked in the network node. Furthermore, a check of the access authorization for several franking services of the

Service provider, so that a so-called single sign-on, i. a central authorization for multiple services is possible.

The invention includes a logistics system for transporting a mail item in a transport path within a postal distribution network, wherein the transport path contains a plurality of nodes of the postal distribution network, in particular a node corresponding to a delivery point and at least one node corresponding to a sorting point.

In particular, the term logistics system includes systems that include the necessary means and facilities to perform the transport of mail from a point of departure to a delivery point on a transport path within a postal distribution network. The point of departure is, for example, a storage location or point of delivery of the mail item to be transported.

The delivery point is preferably selected by the user.

The term "user" is to be understood in its broadest sense and, in particular, includes all entities which can agree on the sending of mailings, for example, software agents, but the involvement of natural or legal persons is also possible.

In a preferred embodiment of the invention, it is provided that the verification of the authorization of the user is carried out on the basis of an authorization profile.

Based on the authorization profiles, in particular on the basis of the user authorization profiles, the extent to which a user of the logistics system can make use of franking services of the service provider can advantageously be checked or ascertained. In this case, the authorization profile can be specified user-specific, so that different authorizations for the use of a franking service can be provided for different users.

Preferably, the service request contains information that is encrypted with a key uniquely assigned to the Internet marketplace and that can be decrypted in the authorization and authentication unit.

The authenticity of the service request can thus be determined on the basis of the encrypted information with a key uniquely assigned to the user. In a further preferred embodiment of the invention, it is provided that the user authorization profile is included in the service request.

By introducing the user authorization profile into the service request, the scope in which the user can use the service provider's franking services can thus be specified in the service request.

Preferably, it is provided that the user authorization profile is encrypted with a key uniquely assigned to the user or is provided with a digital signature of the user.

In this way, the authenticity of the user authorization profile in the network node can be checked.

In a further advantageous embodiment of the invention, it is provided that the authorization and authentication unit can change the user authorization profile as a function of the processing result determined in the provider server.

As a result, the authorization profile of a user can be changed as a function of the utilization of a specific franking service of the service provider.

Preferably, it is provided that the authorizing and

Authentification unit can change the user authorization profile depending on a number of calculated for a user editing results.

A variety of embodiments allow verification of the user's entitlement to shipments for shipment with the logistics system. It is expedient to specify data for an authorization of the user, in particular to specify a number of shipments which the user may submit for transport to the logistics system.

It is also possible to set maximum amounts for the transport charges to be used.

Larger quantities of mail are delivered via large collection points at the letter centers or delivery bases. Smaller amounts of

Shipments are delivered to stores. Small quantities and individual shipments are delivered via mailboxes.

Posting the mail as a batch allows us to announce and schedule larger shipments (larger shipments).

The AM system makes it easier to announce and schedule larger shipments.

In a further advantageous embodiment of the invention comprises the

Network node, a test unit for checking the calculated in the provider server processing result.

Preferably, the test unit is able to check for completeness of the processing result.

By means of the test unit thus the correctness and completeness of the processing result can be determined. For example, in the event of an error in the processing result, this can be used to generate notifications of the presence of a fault within the network node and to transmit them to the user's user computer. In a further advantageous embodiment of the invention, it is provided that the network node has a reporting unit for detecting and evaluating the service requests and the processing results.

Advantageous developments of the invention with regard to the method correspond to the embodiments of the invention described in connection with the network node.

It is expedient that the data is automatically transferred by the user to the franking service.

In a preferred embodiment of the invention, the forwarding to a for processing service requests equipped data processing unit, in particular a computer, take place.

Further input options are e.g. written recording and later digitization, for example by a service unit.

It is advantageous that users can already set the shipping product and the associated shipping costs.

This is especially true in the context of this specification process.

For this purpose, a choice for the shipping services is offered. This selection field is optimally connected dynamically and via an interface to the product price system of the logistics system, so that the correct price and product portfolio is always displayed. The selection of a shipping service by the user also requires that the following conditions be established in the input systems: When an item is sold, the following are automatically transferred: Sender data,

Receiver data as well

Information about specifying the selected shipping product.

Preferably, the data transfer takes place via an interface in the form of a specified parameter set or according to a specific convention set record to the franking service.

Preferably, the shipping and / or franking relevant data is automated by the user - i. without further intervention by the user - handed over to the postage service via an interface.

It is useful for the data to be provided by the marketplace and / or the listing tool via the provider server.

It is advantageous for the data to be transferred from the marketplace and / or the listing tool to the franking service through an automated service request.

Furthermore, it is expedient that the service request is transferred in the form of a parameter set and / or a specific data syntax.

It is advantageous that the service request is transformed in one area of the provider server of the logistics system.

Furthermore, it is expedient that address data are transmitted to the franking service. It is advantageous that a product specification is transmitted to the franking service.

The billing of the shipping service can be done in different ways:

The service is billed to the seller by the logistics system (prerequisite: bank data is stored in the logistics system - for example, user is a contract user - and the user is authenticated by an identifying tag in the displayed parameter set).

The shipping service is billed to the user.

It is advantageous that when the mail item is delivered and / or when sending shipping data to the franking service, the postage value is automatically debited from an account of the seller.

Optionally, the user may already have made a prepayment of the postage, or have given his consent that after the sale of the article and the delivery of the shipping data to the postage service, an automatic debiting of the postage value from an account of the user.

The invention is suitable for transporting the mailpieces over any desired distances, including the worldwide transport of the mailpieces.

A preferred embodiment of the invention is characterized in that the shipping fee is determined depending on the Einlieferungs- and / or sender address.

A particularly preferred implementation of the invention will be explained using the exemplary embodiment of a network node, which is referred to below as a network node. In one case, the network node is designed so that users can access by means of user computers.

A direct connection between the user computers and the network node is not required, but possible.

In the preferred case, the user computers are connected to the network node so that data can be exchanged directly between the computers and the network node.

The access to the network node takes place, for example, via the Internet, for example on a website of the user, which is provided by the network node and provided with a browser program which is executed in the user computers and displayed on a display means of the user computer.

In an advantageous embodiment of the invention, the network node contains external connectors which are connected to the user computers via a communication network, preferably the Internet. The outer connectors are inserted into connector slots of the network node.

Within the network node, there is a connection between the outer connectors and an authorization and authentication unit, which in turn communicates with a transformation unit. For direct data transmission between the outer connectors and the transformation unit, the authorization and authentication unit can be bridged. The transformation unit is connected to a test unit, which in turn communicates with internal connectors. Again, a direct connection between the transformation unit and the inner connectors can be created, in which the test unit is bridged. The inner connectors are also plugged into connector slots of the network node and connect the network node to servers running utility services for performing postage services.

Furthermore, the network node comprises a control and reporting unit for administering the network node and for logging.

The network node can be designed as hardware or as software. In an advantageous embodiment of the invention, it is realized in the form of a plurality of software modules that are executed in an Internet server.

The request for the franking services is initiated directly or indirectly on a web page, for example by the actuation of a button arranged on the web page. The invention makes it possible that a franking service can not be requested on a website of the service provider, but directly on the website of. In particular, web pages which may be displayed during the execution of the service as a processing result or partial processing result can also be adapted to the appearance of the web pages in a simple manner by the network node. With the call of the franking service on the website, the generation of a service request is connected, which contains particular information about the execution of the franking service. These are, for example, user data of the user which can be entered in a dialog box of the website or which are stored in a database of the marketplace operator. Furthermore, the service request contains identification data and comprises at least one instruction which enables the network node to identify the requested mail service. This statement can also be included implicitly in the service request. Thus, it can be provided, for example, that the requested franking service or the provider server provided for executing the franking service is identified in the network node on the basis of the type of information contained in the service request.

In the case of the area marketplace, the service request is by in a

Web page generated scripts and transmitted directly from the user computer via the Internet to the network node. In a transit marketplace, the service request may either be generated by scripts in the web page and transmitted from the user computer to the network node via the consolidator source, or it may be generated after the submission of a corresponding request from the user computer to the consolidator source within the consolidator source.

Likewise, at a transit marketplace, it is possible for the service request to be generated by a script with the browser program of the user computer, and by the consolidator source, for example, to provide identification information, or user data stored in a database of the consolidator source

Database of the consolidator source is added to the stored user authorization profiles.

Further, it is possible for a single service request to include a request for multiple postage services. To connect a large number of users, the network node has a plurality of connector slots for receiving external connectors. It is possible to insert external connectors during operation of the network node and remove, so that an uninterrupted operation of the network node is possible. If changes are made to an external connector, it can also be removed, adjusted and reconnected in the activated state of the network node, so that no interruption of the network node's operation is required here as well.

A service request is received by the network node at the outer connector associated with the corresponding user and, if necessary, a format change of the aforementioned type is made.

From an external connector, the service request is transferred within the network node to an authentication and authorization unit, which first checks in an authentication step whether franking services of the service provider may in principle be used. The authentication takes place on the basis of the identity of the user.

Authentication is based on authentication information contained in the service request and its authenticity is ensured through the use of cryptographic methods. Suitable cryptographic methods are for example digital signatures of the service request or a part thereof. It is also possible that contents of the service request with a key assigned to the Internet marketplace or the user (asymmetric encryption with certified keys) or with a previously exchanged between the network node and the Internet marketplace or the user symmetric key (symmetric encryption with "pre -shared key ") are encrypted. If a successful authentication is not possible, this means that it is not an authentic service request of the user of a registered Internet marketplace or that the user for other reasons is not entitled to the use of franking services of the service provider. In this case, the authorization and authentication unit generates an error message that is transmitted to the user computer via the outer connector. Furthermore, a logging of the service request can be provided by means of the later explained control and reporting unit.

After successful authentication, the authentication and authorization unit determines the authorization of the user for the use of franking services in an authorization step. It is checked which franking services may be used to what extent by the user. This is also done on the basis of the identity of the user.

The authorization of a user is based on a user authorization profile, which is preferably stored in the authentication and authorization unit. The user authorization profile contains information about to what extent franking services can be used by the user, i. which functions within the franking service can be executed by the user.

The authorization of a user is preferably based on a user authorization profile in the service request, which is also cryptographically secured. The user authorization profile is preferably introduced into the service request by a server or a script embedded in the website of the Internet marketplace, or it is stored in the network node in a database. The user authorization profile indicates the extent to which the user can make use of the service provider's franking services. In this way, the users of the Internet marketplace can be equipped with different access rights for the franking services of the service provider. Functions available within the franking service or the extent to which the franking service can be claimed relate, for example, to various payment options for the use of the franking service, the possibility of storing data on the provider server for reuse in the event of renewed access as well as the size of the available storage space and other additional services that are offered in the context of the franking service.

To carry out the authorization, the authorization and authentication unit checks on the basis of the user authorization profile whether and to what extent the user is entitled to claim the requested franking service or the requested franking services. If the examination reveals that the user has no authorization to use the requested franking service or the requested franking services, an error message is preferably generated and transmitted to the user's user computer via the outer connector.

If the requested franking services can only be identified in an evaluation of the service request in the transformation unit, the authorization and authentication unit transfers the marketplace authorization profile or the user authorization profile to the transformation unit. In this case too, however, it is possible to check within the authorization and authentication unit whether the user is at all entitled to use franking services of the service provider, whereby an error message is generated and transmitted to the user computer of the user, if this is not the case.

In the event that several franking services are requested with the service request, the authentication and authorization in the authentication and authorization unit corresponds to a single sign-on of the user for the various franking services. If necessary, the transformation unit receives the service request together with the determined authorization information from the authentication and authorization unit. Depending on the content of the service request and, if appropriate, on the basis of the authorization information determined in the authentication and authorization unit, the service request is converted by the transformation unit. Since the conversion, unlike the static format change made in the outer connectors, is performed depending on the content of the service request, it is referred to herein as intelligent conversion.

In the transformation unit, for the purpose of intelligent conversion, processes are carried out which make it possible to forward the service request to the relevant utility executed on one of the provider servers. In the event that several franking services are requested with one service request, for each of the services, the service request or the relevant part of the service request is forwarded to a provider server in the manner described below.

The transformation unit undertakes a so-called routing of the service request, that is, depending on its content, the provider server is determined on which the utility for executing the requested franking service is executed, and the service request is addressed to this provider server. Further, other intelligent conversions occur, such as changing and supplementing data contained in the service request. The intelligent conversions may, for example, also be corrections that result after plausibility checks or after the application of parsing rules, ie rules for interpreting the service request. If, for example, in a franking service for the creation of mailing labels, mailbox information is recognized in a data field which is provided for identifying the road, this can be corrected by the transformation unit.

Likewise, in the context of intelligent conversion, it is possible to modify service requests in such a way that instead of the requested franking service a more up-to-date, improved or cheaper service is executed (for example as part of a special action).

In a preferred embodiment of the invention, a so-called dynamic routing is furthermore provided, in which the availability of the provider servers is determined and the service request is addressed to a provider server for which the availability is ascertained. Furthermore, it can also be provided that a so-called load balancing is performed by means of the transformation unit, in which not only the availability but also the utilization of the server is determined and the service request is transmitted to the provider server with the lowest utilization.

After processing in the transformation unit, the service request is transmitted via a test unit or directly to the inner connector, which is connected to the determined provider server. In a preferred embodiment of the invention, it is additionally provided that an authentic additional information, for example an encrypted information, is transmitted from the transformation unit to the provider server together with the service request. The

Additional information is decrypted with one of the transformation unit or the network node uniquely assigned key in the provider server to check whether the service request comes from the network node. Additional authentication and / or authorization of the marketplace user in the provider server can thus be dispensed with in this embodiment of the invention.

The inner connectors are able to make static format changes to the utility call and are connected via connector slots to the network node, into which internal connectors are plugged during operation and from which internal connectors can be unplugged during operation.

Due to the functionality of the inner connectors, when adapting the utilities on the provider servers, only an adaptation of the connectors is necessary, but not an adaptation of the transformation unit. Further, such adjustments may be made while the network node is in operation by unplugging the affected internal connectors during the adaptation.

The service request is transmitted to the determined provider server via the inner connectors. This is preferably done over a network such as the Internet or - if the network node is operated by the service provider itself - over an internal data network of the service provider. After the service request has been processed in the service running on the provider server, ie after the service has been executed, the provider server sends the processing result, ie the data determined in the provider server during the execution of the franking service or service back to the network node, where in turn is received by the inner connector.

After receiving and after performing any format changes to be made within the inner connector, the processing result is transferred to the test unit, in which a formal check of the processing result is made. It is checked whether the processing result is complete and formally correct. In view of the completeness, a request by a user for a digital franking mark is used to check, for example, whether the processing result includes a print copy or a print preview of the postage indicium. The criteria for checking are stored for the processing results of the various provider servers in a database of the network node.

If completeness or correctness are not given, then instead of the processing result or in addition to the processing result, a notification is transmitted to the user's computer in which an error is pointed out.

The check unit is also able to check the availability of the provider servers and notify the result to the transformation unit so that it can make the described dynamic routing of service requests based on the check results. The checked processing result is passed within the network node either via the transformation unit or bypassing the transformation unit to the outer connector, which is connected to the Internet marketplace, from which the service request originated originally.

Further processing of the processing result in the network node is necessary if an intelligent processing of the processing result is to be carried out in addition to a forwarding of the processing result to the user's computer or to the consolidator source.

In this case, it can be provided, for example, that in the case of an area marketplace, in addition to the transmission of the processing result to the user computer or instead of the transmission of the processing result to the user computer, a notification of the processing result or the use of the service is sent to the source of scattering. The generation of this notification is made in the transformation unit. The object of the notification can be, for example, an indication that a specific user has used a specific franking service. In this way, the result of the service can also be transmitted from the scatter source to the user computer.

After the optional processing of the processing result by the transformation unit, this is passed either via the authenticating and authorizing unit or bypassing this unit to the outer connector connected to the corresponding Internet marketplace. In an advantageous embodiment of the invention, it is provided that the user authorization profile in the authorization and authentication unit can be changed as a function of the processing result.

Thus, it is possible, for example, to assign users who frequently use a particular franking service, within the framework of a "frequent user program", extended authorizations, the authorization and authentication unit determining therefor the number of processing results transmitted to a specific user.

The outer connector makes the required format changes that correspond to or are independent of the format change when processing the service request in the outer connector. Further, various format changes can be made for the processing result and for the notification from the processing result to the scatter source.

It is also possible, as part of a conversion of the processing result in the transformation unit or in the context of the format change in the outer connector make graphical adjustments of the processing result, so that it can be adapted to the appearance of the marketplace. This can be done in particular if the processing result is a web page with specific information.

Finally, the outer connector transmits the processing result to the computer of the user from which the service request originated. To administer and monitor the network node, a control and reporting unit is provided, which is operated by an administrator. One or more external data processing devices for evaluating usage data of the network node can be connected to the control and reporting unit.

By means of the control and reporting unit, on the one hand, the rules for format change in the outer connectors and in the inner connectors, the rules for the authentication and authorization unit, the rules for the intelligent conversion in the transformation unit, and the criteria for checking the processing results be determined in the test unit. On the other hand, the control and reporting unit are able to determine the use of the network node and the connected provider servers by the users of the Internet marketplaces and to provide them in the form of access tables and statistics for evaluation and billing. All administration and evaluation activities can also be carried out via the connected data processing devices.

Furthermore, comparisons between the time in which a

Service request is received in the network node and the time at which the processing result is sent by the network node, performed in order to determine a processing time and to check the compliance of availability commitments on an individual case and statistically. For this the necessary information for the evaluation of the

Transfer transformation unit to the control and reporting unit and evaluated there or in the data processing equipment. One possible application scenario of the invention relates to the provision of franking and logistics services provided by a logistics company to users of an auction portal in which goods are auctioned by a seller to a buyer during auctions. In general, the auctioned goods are sent as a mail item from the seller to the buyer.

For franking the identification information can be used.

This may be omitted, for example, the need for the use of franking service that information such as sender and recipient address, desired product and printing medium for the creation of the franking mark must be specified, for example.

Preferably, this information is determined in the processing unit.

As a result, the franking process is simplified and accelerated.

Furthermore, a notification about the execution of the franking service is generated and transmitted to the user.

Furthermore, it is possible to create access lists and statistics on the use of the franking and logistics services by the user.

Finally, the network node is used to check the conditions agreed with the user for the provision of services ("Service Level Agreement", abbreviated to "SLA") and to notify and document deviations. Important in this context are, among other things, the availability of the provider servers (ie requirements can be processed) and the processing time (ie processing results must be available within a certain time). The network node is characterized in that it

Contains means for checking the authorization of the user, comprises means for receiving identification information of the user, and

- Contains a memory for storing the identifier information in a positive list.

A development of the network node provides that it is connected to an interface for entering information relevant to shipment.

A development of the invention provides that the network node is connected to an interface for the input of franking-relevant information.

A development of the invention provides that a service request is configurable so that it

• either only transmits data relevant for shipment or

• Transfers franking-relevant data without payment information or • Transfers franking-relevant data with payment information.

A development of the invention provides that the service request contains information which is encrypted with a key uniquely assigned to the user and can be decrypted in the authorization and authentication unit.

A development of the invention provides that the user authorization profile is included in the service request.

A development of the invention provides that the user authorization profile is encrypted with a key uniquely assigned to the user or provided with a digital signature of the user. A development of the invention provides that the data transmitted to the franking service contain information from the user authorization profile.

A development of the invention provides that the service request is transferred in the form of a parameter set and / or a specific data syntax.

A further development of the invention provides that upon transmission of the identification information shipping data to the franking service, an automatic debiting of the postage value from an account of the purchaser takes place.

A development of the invention provides that the shipping charge is determined automatically.

A development of the invention provides that the shipping fee in

Depending on the delivery and / or sender address is determined.

A development of the invention provides that an authorization of the user to access the franking service is checked.

A development of the invention provides that the authorization of the user to access a franking service is made on the basis of a user-assigned marketplace authorization profile and / or on the basis of a user authorization profile assigned to the user.

43. A development of the invention provides that in the service request an encrypted information is contained, which is decrypted with a key uniquely assigned to the user. 44th

The invention can be used with any transaction requests. The term "transaction request" is to be understood in its broadest meaning. In particular, the transaction request may be a request to load a fee amount, a request to generate one or more postage indicia, or a request for other postally relevant information, for example a request for addresses from an address database.

The invention provides in particular that a franking or a franking-relevant transaction is requested via an operating unit, this franking or transaction request is authenticated in a separate authorization unit, the actual franking or franking-relevant transaction is controlled by the authorization unit, and the result of the franking or the Transaction is transmitted back.

The invention has the further advantage that, in the case of frankings and other franking-relevant processes, further authentication methods which include, for example, biometric methods can be used.

Furthermore, it is advantageous that the result of the transaction order is transmitted to the authorization unit and that the authorization unit transmits a message containing the result of the execution of the transaction order to the operating unit and / or a printing unit.

The operating unit and the printing unit may be either separate devices or a common unit.

An example of separate devices is a personal computer and a printer connected to the personal computer, for example, directly or via a computer network. An implementation of the operating unit and the printing unit as a common unit can be done for example by a inventively designed postage meter.

Another equally advantageous embodiment of the invention is characterized in that the franking unit sends the result of the execution of the transaction order to the authorization unit and that the authorization unit transmits a message containing the result of the execution of the transaction order to the operating unit and / or the printing unit.

The invention provides a particularly advantageous embodiment of a modularity of a franking system. In addition to the merit of the identification information of the system and components to be able to develop and deploy them independently of one another, the particular advantage of particular flexibility for the use of the franking system by a large number of users occurs.

A particularly preferred embodiment of the invention is characterized in that the transaction request from the operating unit to the

Authorization unit is transmitted that the transaction request is authenticated in the authorization unit and that the authorization unit then transmits an authenticated transaction order to the franking unit.

A special advantage of the separation of the components according to the invention in franking systems is that a so-called cryptographic module can be used in which processes are carried out which increase the forgery-proofing of the franking marks produced. This cryptographic module preferably consists of separate hardware and software. The purpose of this hardware and software is to store secret or other important data access and manipulation-proof and perform cryptographic operations such as encryption or signatures in a secure environment. Cryptographic modules, such as e.g. in the public standard FIPS 140-2 of the US standardization authority NIST (see www.nist.gov) are characterized by the fact that every manipulation at the module is recognized, which results in interruption of the operations and the deletion of the contents and possibly also causes the destruction of the module. Only because it is not possible for a malicious user of a modern franking system to influence or imitate the franking processes taking place in the cryptographic module, can counterfeit-proof postage indicia be created with electronic franking systems.

In order to be able to use the functions of the cryptographic module particularly effectively, it is expedient to accommodate the interfaces for user interaction required for operating the franking system in a separate unit. As a result, in modern franking systems with which tamper-proof postage indicia can be generated, the operating unit and the franking unit consisting of the cryptographic module are separated from one another.

Another advantage of the separation of operating and franking unit is that they can be spatially separated, wherein the connection between the operating unit (user PC) and the franking unit (including cryptographic module) is made via a data network. The practical advantage of this spatial separation of operating and franking unit is that it is possible to create counterfeit-proof postage indicia on the PC without the use of a cryptographic module operated locally on the PC. Instead, the module is centrally operated inexpensively and used by all franking users when needed.

Another advantage of the invention is that it allows use of various user authentication methods. In order to ensure that the creation of the monetary frankings is carried out only by authorized users, franking systems i.d.R. equipped with an access guard. In the simplest case, such a backup consists of a secret code, which must be entered when activating the system. The procedure of the secret code is explained i.a. used to secure electronic franking machines.

It is also appropriate to use a pairing between user identification and user authentication. This is done, for example, by entering a username (this is for identification) and a password (this is for authentication). The backup is based on the fact that only the authorized user has the knowledge about the password.

In addition to knowledge-based backup, other authentication methods are also suitable, which either require the additional possession of a thing or aim at biometric features of the user.

Authentication by ownership of a thing is used, for example, in backup systems based on microprocessor smart cards, so-called smart cards. In the sense of a cryptographic module, data is stored or operations performed on a chip card which are not readable or manipulatable. Because such cards are not counterfeitable or imitable, they can be used in particular for secure identification. In addition to such identification of the smart card, passwords or PINs (Personal Identification Numbers) are used regularly to authenticate the legitimate owner. Further advantageous methods of authentication are based on the read-out of biometric features of the legitimate user. The goal is to identify if the user is a legitimate user by scanning invariable and unique biometric features such as the fingerprint or the iris pattern. Because the components of knowledge and possession can be dispensed with, biometric methods are regarded as particularly simple, secure and thus promising authentication methods.

According to the invention, further details for identification and authentication can also be used.

For example, it is expedient to use an account number of a postage account, from which postage values can be loaded, as an identification feature.

For example, authentication of access to the postage account is done by entering a password.

The identification and authentication information is used in the entitlement unit to select the appropriate postage account in the secure cryptographic module based on the account number and to enable it with the password. While the account number must be visible as an identifying feature "outside" on the cryptographic module, the password is checked within the cryptographic module. The check is done inside the module because the entered password (or an image of the password) is compared to a stored password (or its corresponding image). In order to prevent third parties from reading out the deposited password (or its image), the storage takes place within the cryptographic module of the franking unit. The authentication of the authorization unit and / or the user expediently takes place in the cryptographic module of the franking unit.

Further advantages, features and expedient developments of the invention will become apparent from the dependent claims and the following description of preferred embodiments with reference to the drawings.

A particularly preferred embodiment for authentication and / or identification of the user is shown below with reference to FIG. 2.

The franking system according to the invention shown in FIG. 2 makes it possible for franking and franking-relevant processes to be carried out in such a way that the administration of numerous users with different rights and the use of newer authentication methods, which include biometric methods, are possible.

This is expediently carried out in the case of the franking system according to the invention in that a franking or another franking-relevant transaction is requested via an operating unit (BE), this franking or franking system

Transaction request is authenticated in a separate authorization unit (BR), the actual franking or franking relevant transaction is controlled by the authorization unit (BR), and the result of the franking or the transaction is transmitted back.

The method is expediently carried out such that the operating unit (BE) is connected to the authorization unit (BR) via a network or a data connection.

It is advantageous that the authorization unit (BR) is designed such that in it the permissions of one or more users to one or more control units (BE) are stored. It is furthermore advantageous that the authorization unit (BR) is designed in such a way that the authentication of users to operating units (BE) can take place via one or more different authentication methods.

It is expedient that the authentication methods used in the operating unit (BE) include the authentication by username and password.

Furthermore, it is expedient that the authentication methods used in the operating unit (BE) include the authentication by means of such methods which require the possession of identification means.

In addition, it is expedient that the authentication methods used in the operating unit (BE) comprise biometric methods.

The method is expediently carried out in such a way that, after authentication has been carried out, the operating unit (BE) checks the franking request originating from the user or the request for the franking-relevant transaction in accordance with the stored authorization rules.

Furthermore, it is expedient that the franking request originating from the user or the request of the franking-relevant transaction be converted in such a way that the franking system is activated.

In this case, it is advantageous that the authorization unit (BR) is connected to the franking system via a network or a data connection.

It is expedient that the franking system performs an authentication of the authorization unit (BR). Furthermore, it is expedient that the franking system generates the franking or passes through the franking-relevant process and transmits the result directly or indirectly such that a printout of the franking mark or a return transmission of the transaction information can take place.

Moreover, it is advantageous for the authentication rules to be established on the authorization unit (BR) by special administration users.

The invention includes a digital franking system, which is characterized in that frankings, postage and other franking-relevant transactions can be done by different authorized users.

In particular, the invention enables a comprehensive user management, in which different authorizations can be assigned to users. In particular, access to postage accounts can be independent of each other for different users. The user administration expediently takes place in the authorization unit (BR).

For this purpose, it is particularly advantageous that for each authorized operator of the operating unit (BE) in the authorization unit (BR) an authorization profile is stored.

User rights primarily refer to the fact that defined users receive the right to perform their own franking expediently. The right to create frankings is based on certain postage accounts and limited in amount to a maximum amount. The limitation of the maximum franking amount is additionally available for specific periods. This means, in particular, that different amounts of the franking volume permitted in a period can be set individually for different users. As a result, by introducing a user management according to the invention, it is possible to designate in larger companies persons who can carry out franking and portage charges to a certain extent. As a result, for example, temporary interns working in the company may be provided with different franking authorizations than the authorized representative of the company and its secretariat. Similarly, the right to purchase new postage that can be used for franking can be limited to a few people. Restrictions are also possible with regard to loading volumes and periods.

The definition of persons and their authorizations is determined by one or more administrators in the user administration or authorization unit.

With the aid of the system shown above and reproduced in a schematic diagram in FIG. 2, franking processes can take place in different ways.

The process steps shown below are particularly useful for a particularly advantageous design of the franking system.

From an operating unit (BE), which in the example shown is connected to a printing unit (DE), a transaction request, in particular a franking request, is sent to the authorization unit (BR) in step B1. In the

Transaction request, or the franking request is in a particularly preferred embodiment of the invention to an order to perform one or more frankings. However, it is also appropriate that the transaction request B1 serve to load postage amounts from a value transfer center.

In step B2, an authentication of the user takes place according to one or more of the illustrated authentication methods. According to the authorizations (BR) of this user stored in the authorization unit (BR) or an associated storage unit, in step B3 a franking request, if its conformity with the authorization profile of the user has previously been established in the authorization unit (BR), is sent to the franking unit (FE ) Posted.

In the franking unit (FE) it is checked whether the authorization unit (BR) is authorized to authorize users and / or transaction requests transmitted by the users.

In a particularly preferred embodiment of the invention, not only the authorization of the user is checked in the authorization unit (BR), but also his authorization to join via a postage account assigned to him.

After identification of the postage account of the user, the authentication of the authorization unit (BR) takes place within the cryptographic module in step B4.

After authentication of the authorization unit (BR), processing of the transaction order preferably likewise takes place in the franking unit (FE).

The result of the execution of the transaction order is preferably transmitted as a cryptographically secured byte sequence in steps B5 and B6 indirectly (via the authorization unit (BR)) or directly back to the operating and printing unit (BE / DE), in order there Form of a machine-readable code to be printed as a postage indicium.

The invention thus provides a method for franking mailpieces and a franking system, with which transaction requests from different users can be handled flexibly and in which a high level of protection against abuse is additionally achieved. LIST OF REFERENCE NUMBERS

10 Mail item 20 Identification information 30 Data processing unit 40 Delivery point 50 Processing unit

A1 transmission of a franking request to the franking unit (FE) A2 authentication of the user A3 transmission of a cryptographically secured byte sequence to the

Operating and printing unit (BE / DE) B1 Transmission of a franking request from the operating unit (BE) to the

Authorization unit (BR) B2 Authentication of the user B3 Transmission of a franking request to the franking unit (FE) B4 Authentication of the authorization unit (BR) by the

Franking Unit (FE) B5 Submit the result of the implementation of a

Transaction request to the authorization unit (BR) B6 Submission of a message containing the result of the execution of the

Transaction order contains, to the control unit (BE) and / or the

Printing unit (DE) and / or further of the illustrated preferred

Authentication procedure BE Control unit BR Authorization unit DE Pressure unit FE Mailing unit

Claims

claims:

1. A method for franking a mailpiece, d a d e c e c e s i n e c e s • that identification information is applied to the mailpiece,

• that the identification information is transmitted to a network node and stored there in a positive list,

• that the mailpiece provided with the identification information is delivered, • that the mailpiece is fed to a processing unit, and

• that the processing unit checks whether the identification information provided with the mail item is stored in the positive list.

2. The method according to claim 1, characterized in that the identification information is printed on the mailpiece.

3. The method according to claim 1, characterized in that the identification information is applied to an information carrier which can be connected to the mailpiece.

4. Method according to one of the preceding claims, characterized in that the identification information is stored in a transponder connected or connectable to the mailpiece.

5. The method according to any one of the preceding claims, dadu rc hgekennzeichnet that the identification information is transmitted via a data line to the network node.

6. Method according to one of the preceding claims, characterized in that, in the event that the identification information is stored in the positive list, the mail item is further processed by the item of mail.

7. The method according to claim 6, characterized in that the further processing comprises a transport of the mail item to a designated receiving location.

8. Method according to one of the preceding claims, characterized in that the identification information contains information for identifying a user.

9. The method of claim 8, wherein a user is registered in an authorization system.

10. The method according to claim 9, wherein after the user has registered in the authorization system, the user is granted access authorization for the transmission of the identification information to the data processing unit.

11. The method according to any one of claims 8 to 10, dadu rc hgekennzeichnet that the identification information in addition to the information for identifying the user contains further information.

12. The method according to claim 11, characterized in that an input means is provided which makes it possible for the further information to be input at least partially by the user.

13. Method according to one or both of claims 11 or 12, wherein a further number includes a consecutive number.

14. Method according to one of the preceding claims, characterized in that the identification information is deleted from the positive list during a processing operation of the mailpiece.

15. Method according to one of the preceding claims, characterized in that the item of mail is removed from a normal transport of mailpieces if the identification information is not stored in the positive list.

16. Method according to one of the preceding claims, characterized in that the identification information transmitted to the network node is used to settle the mailpiece.

17. The method according to any one of the preceding claims, characterized in that the information applied to the mailing identification information for billing of the mailpiece is used.

18. The method according to claim 16, wherein a matching of the transmitted identifier information and the identification information applied to the mailpiece takes place.

19. Method according to one of the preceding claims, characterized in that information for billing the mail item is transmitted to the network node.

20. Method according to one of the preceding claims, characterized in that information for billing is determined taking into account information associated with the mail item.

21. Method according to one of the preceding claims, characterized in that billing-relevant data are determined by a review of physical properties of the consignment.

22. Method according to one of the preceding claims, characterized in that billing-relevant information is transmitted to the mail item at the network node.

23. The method according to claim 22, characterized in that the billing-relevant information is connected to the identification information.

24. The method as claimed in claim 21, wherein the billing-relevant data determined by checking the physical properties of the shipment is associated with billing-relevant data

Information about the mail item are compared and that the result of the comparison is stored and / or transmitted.

25. network nodes, d a u re c h e c e s e s,

That it contains means for checking a user's authorization,

That it has means for receiving identification information of the user and

• that it contains a memory for storing the identifier information in a positive list.

26. The network node as claimed in claim 25, wherein it contains a means for forwarding the identifier information to a processing unit.

27. A network node as claimed in claim 25 or 26, wherein it is connected to an interface for inputting information relevant to shipment.

28. Network node according to one of claims 25 to 27, characterized in that it is connected to an interface for the input of franking relevant information.

29. A network node according to one of the preceding claims, characterized in that a service request is configurable so that it either • transmits only data relevant to shipment or

• transmits franking-relevant data without payment information or

• transmits franking-relevant data with payment information.

The network node of claim 29, wherein the service request includes information encrypted with a key uniquely assigned to the user and decryptable in the authorization and authentication unit.

31. The network node according to claim 30, wherein a user authorization profile is included in the service request.

32. The network node according to claim 25, wherein the user authorization profile is encrypted with a key uniquely assigned to the user or provided with a digital signature of the user.

33. A device for postage stamping, characterized in that the franking unit has means for generating identification information, that the device further comprises means for providing mail pieces with the identification information, and that the device further comprises means for transmitting the identification information to one Contains network node.

34. Processing unit for processing mailpieces, in which the processing unit contains a means for detecting identification information associated with the mailpieces, and that the

Processing station further comprises a means for checking whether the identification information is stored in a positive list includes.

35. Processing unit according to claim 34, characterized in that it is suitable, contains a means for an ejection of mailpieces from a transport and / or processing operation of mailpieces.

36. A logistics system comprising means for carrying a mail item from a point of delivery to a delivery location, characterized in that the logistics system includes means for receiving electronically transmitted identification information and storing the identification information in a positive list, the logistics system further comprising means for verifying contains identification information applied to mailpieces and that the logistics system contains a means for carrying out a check as to whether the identification information applied to the mailpieces is stored in the positive list.