# Patent

## Title
Postage metering system

## Abstract

A postage metering system for applying indicia including postage value on mail items, the system including: a keyboard for inputting information; a printer for printing indicia; an accounting module for accounting for postage value applied to mail items; and a security module for requiring a user to input an operating code prior to further operation of the system, the security module being configured to compare the input operating code with at least one stored valid operating code and cause the printer in a printing operation to print an indicium having a zero postage value where the input operating code and any stored operating code do not match and printing of an indicium is requested.

## Background
This application is a national phase of International Application No. PCT/GB03/00389 filed Jan. 31, 2003 and published in the English language.
FIELD OF THE INVENTION 
The present invention relates to the security of a postage metering system, and in particular a postage metering system which requires the input of an operating code prior to printing indicia, and more particularly the input of a valid operating code prior to printing indicia having other than a zero value.
SUMMARY OF THE INVENTION 
It is an aim of the present invention to provide a postage metering system which provides for improved or at least alternative security.
Accordingly, the present invention provides a postage metering system for applying indicia including postage value on mail items, the system including: a keyboard for inputting information; a printer for printing indicia; an accounting module for accounting for postage value applied to mail items; and a security module for requiring a user to input an operating code prior to further operation of the system, the security module being configured to compare the input operating code with at least one stored valid operating code and cause the printer in a printing operation to print an indicium having a zero postage value where the input operating code and any stored operating code do not match and printing of an indicium is requested.
Preferably, the security module includes a memory for storing the at least one valid operating code.
Preferably, the at least one valid operating code comprises a personal identification number.
Preferably, the accounting module is operative to account for postage value even when an invalid operating code has been input and the postage value applied to a mail item is at zero value.
Preferably, where the input operating code and any stored operating code do not match, the system is configured to log data relating to zero-value printing operations.
More preferably, the security module includes a memory for storing a record of the zero-value printing operations.
Preferably, where the input operating code and any stored operating code do not match, the security module is configured to communicate with a security center to indicate improper operation of the system.
In one embodiment the communication occurs automatically in response to any improper operation.
In another embodiment the communication occurs at intervals.
Preferably, the accounting module includes a zero-value count register for providing a count of the number of zero-value printing operations.



BRIEF DESCRIPTION OF THE DRAWING 
A preferred embodiment of the present invention will now be described hereinbelow by way of example only with reference to the accompanying drawing, in which:
FIG. 1 diagrammatically illustrates a postage metering system in accordance with a preferred embodiment of the present invention.



DETAILED DESCRIPTION
The postage metering system comprises a microprocessor 3, a read-only memory (ROM) 5 storing program routines for operation of the microprocessor 3, and a random-access memory (RAM) 7 for use as a working store for the temporary storage of data during operation of the system.
The system further comprises an accounting module 9 for accounting for postage value applied to mail items. The accounting module 9 comprises duplicated non-volatile memories (NVMs) 11, 13 for storing accounting data relating to the dispensing of postage value, as applied to mail items, which is required to be retained even when the system is not powered. In this embodiment the NVMs 11, 13 each include inter alia an ascending tote register which represents the accumulated total of the postage value applied by the system in its lifetime, an item count register which represents the total number of mail items to which postage value has been applied by the system in its lifetime, a large items register which represents the total number of mail items to which a postage value in excess of a predetermined value has been applied by the system in its lifetime, a zero-value items register which represents the total number of mail items to which a zero-value postage value has been applied by the system in its lifetime, and a descending credit register which represents the value of credit which is available by the system. In an alternative embodiment the NVMs 11, 13 could include an ascending credit register instead of a descending credit register. By including a zero-value register which registers the number of zero-value imprints, the system can be interrogated to determine the frequency of attempted fraud.
The system further comprises a security module 15 for requiring the input of an operating code, in this embodiment a security code, prior to the printing of indicia.
In this embodiment the system is configured such that, where a valid operating code is entered by a user, that is, where the input operating code matches a stored operating code, the system operates normally and indicia of any postage value can be applied to mail items, and, where an invalid operating code is input by a user, that is, where the input operating code does not match a stored operating code, the system operates normally in the sense that indicia can be printed and the accounting module 9 performs the usual accounting functions, but the postage value applied to mail items is at zero value. In this way, where an invalid operating code is input by a user, the postage indicia obtainable from the system are ineffective as the postage value is a zero postage value, and there is no loss of credit as the postage value is a zero value.
The security module 15 comprises a non-volatile memory (NVM) 17 for storing valid operating codes against which operating codes input by users are to be compared. In this embodiment the system is configured such that valid operating codes can be programmed in the NVM 17 when operated in a supervisor mode. In an alternative embodiment the valid operating codes in the NVM 17 can be factory set.
The security module 15 further comprises a first random-access memory (RAM) 19 for storing the operating code which is input by a user and is subsequently compared to the valid operating codes stored in the NVM 17.
The security module 15 further comprises a second random-access memory (RAM) 20 for storing data relating to any printing operations performed when an invalid operating code has been entered by a user. In this way, a zero postage value record is available of all printing operations having a zero postage value, which record could be used to identify fraudulent use of the system.
In this embodiment the security module 15 is connected, here by a communications link, to a remote security center 21, such as to allow for downloading of the zero postage value record for analysis, and in addition, or alternatively, provide a warning of such fraudulent use to the security center 21. In one embodiment a warning can be communicated at each instance of fraudulent use. In another embodiment any fraudulent use can be communicated at intervals, for example, hourly or daily.
In this embodiment the operating codes are machine-related codes. In an alternative embodiment the operating codes could comprise personal identification numbers (PINs), such that each user has a unique operating code.
In this embodiment the microprocessor 3, the ROM 5, the RAM 7, the accounting module 9 and the security module 15 are all housed in a secure housing 22.
The system further comprises a display 23 for displaying information, a keyboard 24 for inputting information, and a printer 25 for printing indicia on mail items.
In operation, a user is first required to enter an operating code via the keyboard 24. Following entry of an operating code, the system is ready for further operation. Where a valid operating code is entered by a user, the system operates normally and indicia of any postage value can be applied to mail items. However, where an invalid operating code is input by a user, the system operates normally in the sense that the printer 25 can print indicia and the accounting module 9 performs the usual accounting functions, but the postage value applied to mail items is always at zero value. As such, the resulting zero-value postage indicia are ineffective as postage indicia, and, moreover, do not lead to any loss of credit as the value is a zero value.
Finally, it will be understood that the present invention has been described in its preferred embodiment and can be modified in many different ways without departing from the scope of the invention as defined by the appended claims.

## Claims

1. A postage metering system for applying indicia including postage value on mail items, the system including:
a keyboard for inputting information;
a printer for printing indicia;
an accounting module for accounting for postage value applied to mail items; and
a security module for requiring a user to input an operating code prior to further operation of the system, the security module being configured to compare the input operating code with at least one stored valid operating code and cause the printer in a printing operation to print an indicium having a zero postage value where the input operating code and any stored operating code do not match and printing of an indicium is requested.

2. The system of claim 1, wherein the security module includes a memory for storing the at least one valid operating code.

3. The system of claim 1, wherein the at least one valid operating code comprises a personal identification number.

4. The system of claim 1, wherein the accounting module is operative to account for postage value even when an invalid operating code has been input and the postage value applied to a mail item is at zero value.

5. The system of claim 1, wherein, where the input operating code and any stored operating code do not match, the system is configured to log data relating to zero-value printing operations.

6. The system of claim 5, wherein the security module includes a memory for storing a record of the zero-value printing operations.

7. The system of claim 1, wherein, where the input operating code and any stored operating code do not match, the security module is configured to communicate with a security center to indicate improper operation of the system.

8. The system of claim 7, wherein the communication occurs automatically in response to any improper operation.

9. The system of claim 7, wherein the communication occurs at intervals.

10. The system of claim 1, wherein the accounting module includes a zero-value count register for providing a count of the number of zero-value printing operations.