EP1035517A3 - Method for the protection of a security module and arrangement for implementing said method - Google Patents

Method for the protection of a security module and arrangement for implementing said method Download PDF

Info

Publication number
EP1035517A3
EP1035517A3 EP00250064A EP00250064A EP1035517A3 EP 1035517 A3 EP1035517 A3 EP 1035517A3 EP 00250064 A EP00250064 A EP 00250064A EP 00250064 A EP00250064 A EP 00250064A EP 1035517 A3 EP1035517 A3 EP 1035517A3
Authority
EP
European Patent Office
Prior art keywords
security module
functional unit
arrangement
exchange
holding
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP00250064A
Other languages
German (de)
French (fr)
Other versions
EP1035517A2 (en
EP1035517B1 (en
Inventor
Peter Post
Dirk Rosenau
Torsten Schlaaff
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Francotyp Postalia GmbH
Original Assignee
Francotyp Postalia GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Francotyp Postalia GmbH filed Critical Francotyp Postalia GmbH
Publication of EP1035517A2 publication Critical patent/EP1035517A2/en
Publication of EP1035517A3 publication Critical patent/EP1035517A3/en
Application granted granted Critical
Publication of EP1035517B1 publication Critical patent/EP1035517B1/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00733—Cryptography or similar special procedures in a franking system
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G07B2017/00233—Housing, e.g. lock or hardened casing
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G07B2017/00266—Man-machine interface on the apparatus
    • G07B2017/00298—Visual, e.g. screens and their layouts
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00193—Constructional details of apparatus in a franking system
    • G07B2017/00266—Man-machine interface on the apparatus
    • G07B2017/00306—Acoustic, e.g. voice control or speech prompting
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00314—Communication within apparatus, personal computer [PC] system, or server, e.g. between printhead and central unit in a franking machine
    • G07B2017/00346—Power handling, e.g. power-down routine
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00185—Details internally of apparatus in a franking system, e.g. franking machine at customer or apparatus at post office
    • G07B17/00362—Calculation or computing within apparatus, e.g. calculation of postage value
    • G07B2017/00395—Memory organization
    • G07B2017/00403—Memory zones protected from unauthorized reading or writing
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
    • G07B17/00—Franking apparatus
    • G07B17/00733—Cryptography or similar special procedures in a franking system
    • G07B2017/00959—Cryptographic modules, e.g. a PC encryption board
    • G07B2017/00967—PSD [Postal Security Device] as defined by the USPS [US Postal Service]

Abstract

Die Erfindung betrifft ein Verfahren zum Schutz eines Sicherheitsmoduls mit Schriften zur Überwachung des sachgemäßen Einsatzes mittels einer ersten, zweiten und dritten Funktionseinheit, Löschen von sensitiven Daten aufgrund eines unsachgemäßen Gebrauchs oder Austausches mindestens mittels der zweiten Funktionseinheit, Sperren der Funktionalität mittels der dritten Funktionseinheit während eines Austausches des Sicherheitsmoduls, Reinitialisieren der zuvor gelöschten sensitiven Daten nach sachgemäßem Gebrauch oder Austausch des Sicherheitsmoduls und Wiederinbetriebnahme durch Freischalten der Funktionseinheiten des Sicherheitsmodules. Die Anordnung zur Durchführung des Verfahrens hat eine Ungestecktsein-Detektionseinheit (13), die Schaltungsmittel (1310, 1316, 1322, 1324) für eine rücksetzbare Selbsthaltung aufweist, wobei die Selbsthaltung ausgelöst wird, wenn der Spannungspegel auf einer Meßspannungsleitung (192) von einem vorbestimmten Potential abweicht. Eine Logik umfaßt einen mit den anderen Funktionseinheiten verbundenen Prozessor (120), welcher programmiert ist, den jeweiligen Zustand des Sicherheitsmoduls (100) festzustellen und zu verändern.

Figure 00000001
The invention relates to a method for protecting a security module with fonts for monitoring the correct use by means of a first, second and third functional unit, deleting sensitive data due to improper use or exchange at least by means of the second functional unit, blocking the functionality by means of the third functional unit during a Exchange of the security module, reinitialization of the previously deleted sensitive data after proper use or replacement of the security module and recommissioning by activating the functional units of the security module. The arrangement for carrying out the method has an unplugged detection unit (13) which has circuit means (1310, 1316, 1322, 1324) for resettable self-holding, the self-holding being triggered when the voltage level on a measuring voltage line (192) is of a predetermined value Potential deviates. A logic comprises a processor (120) connected to the other functional units, which is programmed to determine and change the respective state of the security module (100).
Figure 00000001
EP00250064A 1999-03-12 2000-02-25 Method for the protection of a security module and arrangement for implementing said method Expired - Lifetime EP1035517B1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE19912781 1999-03-12
DE19912781A DE19912781A1 (en) 1999-03-12 1999-03-12 Method for protecting a security module and arrangement for carrying out the method

Publications (3)

Publication Number Publication Date
EP1035517A2 EP1035517A2 (en) 2000-09-13
EP1035517A3 true EP1035517A3 (en) 2000-12-20
EP1035517B1 EP1035517B1 (en) 2008-08-20

Family

ID=7901896

Family Applications (1)

Application Number Title Priority Date Filing Date
EP00250064A Expired - Lifetime EP1035517B1 (en) 1999-03-12 2000-02-25 Method for the protection of a security module and arrangement for implementing said method

Country Status (5)

Country Link
US (1) US6952777B1 (en)
EP (1) EP1035517B1 (en)
CN (1) CN1156801C (en)
AU (1) AU2081100A (en)
DE (2) DE19912781A1 (en)

Families Citing this family (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE19928057B4 (en) 1999-06-15 2005-11-10 Francotyp-Postalia Ag & Co. Kg Security module and method for securing the postal registers from manipulation
DE19928061C2 (en) 1999-06-15 2003-08-28 Francotyp Postalia Ag Security module to monitor system security and procedures
DE19928058B4 (en) 1999-06-15 2005-10-20 Francotyp Postalia Ag Arrangement and method for generating a security impression
DE10061665A1 (en) 2000-12-11 2002-06-20 Francotyp Postalia Gmbh Method for determining a need to replace a component and arrangement for carrying out the method
DE10116703A1 (en) * 2001-03-29 2002-10-10 Francotyp Postalia Ag Method for recording a consumption value and consumption counter with a sensor
DE10136608B4 (en) 2001-07-16 2005-12-08 Francotyp-Postalia Ag & Co. Kg Method and system for real-time recording with security module
DE10312654B4 (en) * 2003-03-21 2005-06-09 Thales E-Transactions Gmbh Electronic protection device for parts of assemblies
DE10337567B3 (en) * 2003-08-14 2005-01-13 Thales E-Transactions Gmbh Protective structure for securing hardware against break-in, has contact between elastomer and circuit board interrupted when attempt is made to remove circuit board
DE102004028338A1 (en) * 2004-06-11 2006-01-12 Siemens Ag tachograph
FR2872947B1 (en) * 2004-07-08 2007-04-20 Neopost Ind Sa BUFFER WITH ELECTRONIC AFFRANCHIR
DE102007011309B4 (en) 2007-03-06 2008-11-20 Francotyp-Postalia Gmbh Method for authenticated transmission of a personalized data record or program to a hardware security module, in particular a franking machine
US9355277B2 (en) * 2012-08-31 2016-05-31 Ncr Corporation Installable secret functions for a peripheral
US10008104B2 (en) * 2014-04-25 2018-06-26 Tyco Safety Products Canada Ltd. Security system output interface with overload detection and protection
RU2628142C1 (en) * 2016-06-16 2017-08-15 Валерий Аркадьевич Конявский Method for protecting computer
DE102016114805A1 (en) * 2016-08-10 2018-02-15 Kriwan Industrie-Elektronik Gmbh Method and embedded system for monitoring, controlling or regulating a machine
RU2630890C1 (en) * 2016-12-29 2017-09-13 Владимир Дмитриевич Новиков Method of providing protected work of computing means and device for its implementation
RU175189U1 (en) * 2017-04-07 2017-11-27 Валерий Аркадьевич Конявский COMPUTER FOR WORK IN THE TRUSTED COMPUTER ENVIRONMENT
RU182701U1 (en) * 2017-12-18 2018-08-28 Валерий Аркадьевич Конявский TRUSTED COMPUTER

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4575621A (en) * 1984-03-07 1986-03-11 Corpra Research, Inc. Portable electronic transaction device and system therefor
US5097253A (en) * 1989-01-06 1992-03-17 Battelle Memorial Institute Electronic security device
US5353350A (en) * 1989-10-03 1994-10-04 University Of Technology Electro-active cradle circuits for the detection of access or penetration
US5515540A (en) * 1990-08-27 1996-05-07 Dallas Semiconducter Corp. Microprocessor with single pin for memory wipe
GB2303173A (en) * 1995-07-11 1997-02-12 Clive Robert Homewood Computer Security Module
WO1998020461A2 (en) * 1996-11-07 1998-05-14 Ascom Hasler Mailing Systems, Inc. System for protecting cryptographic processing and memory resources for postal franking machines

Family Cites Families (23)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPS5880755A (en) * 1981-11-09 1983-05-14 Sharp Corp Electronic computer
GB2144081B (en) 1983-07-23 1987-10-28 Pa Consulting Services Postal franking machines
JPS6227843A (en) * 1985-07-29 1987-02-05 Sharp Corp Electronic equipment
US4804957A (en) * 1985-11-27 1989-02-14 Triad Communications, Inc. Utility meter and submetering system
GB2183852A (en) * 1985-11-27 1987-06-10 Triad Communications Inc Utility meter
US4903232A (en) * 1987-06-26 1990-02-20 Connell James A O Electronic programmable stamping marking device
US5185717A (en) * 1988-08-05 1993-02-09 Ryoichi Mori Tamper resistant module having logical elements arranged in multiple layers on the outer surface of a substrate to protect stored information
FR2640798B1 (en) * 1988-12-20 1993-01-08 Bull Cp8 DATA PROCESSING DEVICE COMPRISING AN ELECTRICALLY ERASABLE AND REPROGRAMMABLE NON-VOLATILE MEMORY
US5027397A (en) * 1989-09-12 1991-06-25 International Business Machines Corporation Data protection by detection of intrusion into electronic assemblies
JPH0685320B2 (en) * 1989-10-31 1994-10-26 シャープ株式会社 Battery storage mechanism for electronic devices
DE4213278C2 (en) 1992-04-16 1998-02-19 Francotyp Postalia Gmbh Arrangement for franking mail
US5490077A (en) 1993-01-20 1996-02-06 Francotyp-Postalia Gmbh Method for data input into a postage meter machine, arrangement for franking postal matter and for producing an advert mark respectively allocated to a cost allocation account
DE4333156C2 (en) * 1993-09-29 1995-08-31 Siemens Ag Circuit arrangement for connecting an electronic assembly to an operating voltage
DE4344471A1 (en) 1993-12-21 1995-08-17 Francotyp Postalia Gmbh Method and device for generating and checking a security impression
DE4344476A1 (en) 1993-12-21 1995-06-22 Francotyp Postalia Gmbh Process for improving the security of franking machines
DE59710554D1 (en) 1996-01-31 2003-09-18 Francotyp Postalia Ag franking machine
DE19605015C1 (en) 1996-01-31 1997-03-06 Francotyp Postalia Gmbh Device for printing on print carrier standing on edge e.g. letter in franking or addressing machine
DE19610070A1 (en) * 1996-03-14 1997-09-18 Siemens Ag Smart card
US6292898B1 (en) * 1998-02-04 2001-09-18 Spyrus, Inc. Active erasure of electronically stored data upon tamper detection
US6105136A (en) * 1998-02-13 2000-08-15 International Business Machines Corporation Computer system which is disabled when it is disconnected from a network
US5969504A (en) * 1998-03-06 1999-10-19 The Johns Hopkins University Automatic battery power switch
US6185645B1 (en) * 1998-06-08 2001-02-06 Micron Electronics, Inc. Method for removing power and signals from an inadvertently swapped bus card
US6088762A (en) * 1998-06-19 2000-07-11 Intel Corporation Power failure mode for a memory controller

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4575621A (en) * 1984-03-07 1986-03-11 Corpra Research, Inc. Portable electronic transaction device and system therefor
US5097253A (en) * 1989-01-06 1992-03-17 Battelle Memorial Institute Electronic security device
US5353350A (en) * 1989-10-03 1994-10-04 University Of Technology Electro-active cradle circuits for the detection of access or penetration
US5515540A (en) * 1990-08-27 1996-05-07 Dallas Semiconducter Corp. Microprocessor with single pin for memory wipe
GB2303173A (en) * 1995-07-11 1997-02-12 Clive Robert Homewood Computer Security Module
WO1998020461A2 (en) * 1996-11-07 1998-05-14 Ascom Hasler Mailing Systems, Inc. System for protecting cryptographic processing and memory resources for postal franking machines

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
USPS, UNITED STATES POSTAL SERVICE, INFORMATION BASED INDICIA PROGRAM, POSTAL SECURITY DEVICE SPECIFICATION, 13 June 1996 (1996-06-13), XP002137734 *

Also Published As

Publication number Publication date
CN1276579A (en) 2000-12-13
US6952777B1 (en) 2005-10-04
CN1156801C (en) 2004-07-07
DE50015314D1 (en) 2008-10-02
AU2081100A (en) 2000-09-14
EP1035517A2 (en) 2000-09-13
DE19912781A1 (en) 2000-11-23
EP1035517B1 (en) 2008-08-20

Similar Documents

Publication Publication Date Title
EP1035517A3 (en) Method for the protection of a security module and arrangement for implementing said method
EP0584566B1 (en) Method for fault detection in the analysis of output signals of an r.p.m. sensor
DE3639055C2 (en) Process for monitoring and correcting errors in computers of a multi-computer system and multi-computer system
DE3144659A1 (en) DEVICE FOR EVALUATING ECG SIGNALS
DE10157798B4 (en) Method for carrying out a filtration process of fluids
EP0969421A3 (en) Method for improving the security of franking machines
DE2816333A1 (en) PROCEDURE AND ARRANGEMENT FOR READING A BAR CODE
DE102017208553A1 (en) Method for protecting a network from cyber attack
DE3823478C2 (en)
DE19944991A1 (en) Procedure for securing a program run
DE102013200941A1 (en) Method and apparatus for determining a trigger condition for a rare signal event
EP1035518A3 (en) Method for the protection of a security module and arrangement for implementing said method
DE69731048T2 (en) Method and system for detecting error conditions in multiplex networks
DE3036926C2 (en) Method and arrangement for controlling the workflow in data processing systems with microprogram control
DE102019132679A1 (en) MONITORING METHOD FOR CPU AMOUNT IN THE OPERATION OF VEHICLE ECU AND MONITORING UNIT
DE1965314C3 (en) Method for operating a data processing arrangement with two data processing systems
DE102006059107A1 (en) Method for software update of an electronic device, in particular the trigger of low-voltage circuit breakers
DE112019001332T5 (en) Detection device, multi-optical axis photoelectric sensor, method of controlling a detection device, information processing program and recording medium
EP3566398A1 (en) Method and semiconductor circuit for protecting an operating system of a security system of a vehicle
DE102007015369A1 (en) Critical functions logical program flow monitoring method for use in measuring device of automation and processing control technique, involves storing actually lying identification symbols as predecessor signature for monitoring cycle
DE4117488A1 (en) MACHINE CONTROL DEVICE
DE10038094B4 (en) Apparatus and method for generating and expanding the knowledge base of an expert system
DE102018214935A1 (en) Method, device, computer program and computer program product for determining the attention of a driver of a vehicle
DE1958747C3 (en) Device for microprogram-controlled error checking
DE102004005693A1 (en) Electronic control unit

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): CH DE FR GB IT LI

AX Request for extension of the european patent

Free format text: AL;LT;LV;MK;RO;SI

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE

AX Request for extension of the european patent

Free format text: AL;LT;LV;MK;RO;SI

RIC1 Information provided on ipc code assigned before grant

Free format text: 7G 07B 17/00 A, 7G 07B 17/04 B

17P Request for examination filed

Effective date: 20010417

AKX Designation fees paid

Free format text: CH DE FR GB IT LI

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: FRANCOTYP-POSTALIA AG & CO. KG

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: FRANCOTYP-POSTALIA GMBH

17Q First examination report despatched

Effective date: 20060926

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): CH DE FR GB IT LI

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REF Corresponds to:

Ref document number: 50015314

Country of ref document: DE

Date of ref document: 20081002

Kind code of ref document: P

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20090525

REG Reference to a national code

Ref country code: DE

Ref legal event code: R081

Ref document number: 50015314

Country of ref document: DE

Owner name: FRANCOTYP-POSTALIA GMBH, DE

Free format text: FORMER OWNER: FRANCOTYP-POSTALIA GMBH, 16547 BIRKENWERDER, DE

Effective date: 20150330

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 17

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 18

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 19

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20190110

Year of fee payment: 20

Ref country code: IT

Payment date: 20190225

Year of fee payment: 20

Ref country code: GB

Payment date: 20190218

Year of fee payment: 20

Ref country code: CH

Payment date: 20190218

Year of fee payment: 20

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20190219

Year of fee payment: 20

REG Reference to a national code

Ref country code: DE

Ref legal event code: R071

Ref document number: 50015314

Country of ref document: DE

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

REG Reference to a national code

Ref country code: GB

Ref legal event code: PE20

Expiry date: 20200224

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF EXPIRATION OF PROTECTION

Effective date: 20200224