EP2037419A1 - Method and device for verifiable transport of an object - Google Patents

Abstract

The method involves measuring a physical parameter of an article e.g. book parcel, and producing an image of the article. The article is transported to a predetermined destination. A data record for transport of the article is produced and stored, where the data record has a measured parameter value and the image. The parameter value, the image and the allocation of the parameter value and the image to the data record are restricted against manipulation. The data record is provided with an electronic signature, where the electronic signature has a public key and a secret key. An independent claim is also included for a device for transporting an article.

Description

The invention relates to a method and a device for transporting an object to a predetermined destination, in particular a mail item to a printed destination.

During transport to the destination, a mailing in many countries usually goes through at least twice a sorting system. The first sorting system reads the information about the destination point with which the mail item is provided, and triggers a transport to that second sorting system which is responsible for the destination point. The determined information on the destination point is buffered, z. B. in the form of a bar pattern, which is printed on the mailpiece. The second sorting system determines the cached destination information and forwards the item of mail to the destination.

The transporter, z. B. a postal service provider, raises a transport fee for transport. This fare usually depends on at least one physical parameter of the item of mail or other item to be transported, in particular the weight and / or dimensions of the item.

• Der Kunde frankiert die Postsendung auf eine seit langem bekannte Weise mit einem vorab bezahlten Freimachungsvermerk (Briefmarke, Paketmarke o. ä.). Der Transporteur kontrolliert nach Aufgabe der Postsendung, ob die Postsendung ausreichend frankiert wurde ("revenue protection"), mahnt den Kunden im Falle einer nicht ausreichenden Frankierung und generiert eine Rechnung für den Kunden.
• Der Transporteur nimmt von Kunden Postsendungen entgegen, die nicht frankiert sind. Der Transporteur ermittelt selber das erforderliche Beförderungsentgelt und generiert eine Rechnung über dieses Beförderungsentgelt. Das Beförderungsentgelt beruht z. B. auf den Tarifen des Transporteurs oder einem Vertrag, den der Transporteur und der Kunde abgeschlossen haben.

In particular, the customer has the following options to pay the transportation fee for the transport:

• The customer franks the mailpiece in a manner known for a long time with a prepaid postage paid stamp (stamp, parcel stamp or the like). After the mail item has been dispatched, the carrier checks whether the item of mail has been sufficiently franked ("revenue protection"), warns the customer in the event of insufficient franking, and generates an invoice for the customer.
• The carrier receives from customers postal items that are not franked. The transporter himself determines the required transport fee and generates an invoice for this transport fee. The transport fee is based z. On the farmer's tariffs or a contract concluded by the transporter and the customer.

A customer of the transporter or a third party sometimes wants to check whether the transporter has requested the correct transport fee. In particular, for this purpose, it is desired and often required to certify those components of a sorting system for processing mailpieces or other objects to be transported, which are used for determining the transportation charge. These include, in particular, measuring instruments which measure the parameters whose values influence the transport charge.

In many cases, a certain type of proof is even required by law. Within the EU, this requires EU directives under Article 249 of the EU Treaty. Directive 2004/22 / EC of the European Parliament and of the European Council (Measuring Instruments Directive - MID 2004/22, dated 31 March 2004) specifies requirements for measuring instruments in order to be certified. These requirements were taken over in Germany into the calibration law, in which in §§ 1 and 2 Eichgesetz and the subordinate regulations the calibration obligation is specified. These requirements include the following:

According to Annex I, Par. 8 "Protection against adulteration" it is required that the metrological characteristics of one measuring instrument are not unduly influenced by the characteristics of another "instrument which is in communication with the measuring instrument" and that "software, which is decisive for metrological characteristics, is to be marked and secured accordingly. "

According to Annex I, par. 11, "Processing of data to complete the transaction", it is required that "permanent evidence of measurement results and the information necessary to identify a particular transaction be available."

The two above-mentioned methods of how a customer pays the transport fee both require that the transporter be able to prove the measurement of the fee-relevant parameters with hindsight.

A method having the features of the preamble of claim 1 and an apparatus having the features of the preamble of claim 16 are out EP 1450144 A2 known. A physical quantity of an item to be transported, e.g. B. its weight is measured. A data record is saved so that its authenticity can be checked later. For this purpose, the data record is provided with a digital signature. For encryption and decryption a public and a secret private key are used. The private key is locked against unauthorized read access.

In particular, travelers' mail and luggage are often unambiguous at the time they are measured. In particular, a mail item is often first weighed and - if at all - only then provided with a unique identifier. Therefore, unambiguous identification of the item to be transported in such cases can not be used to meet the abovementioned requirements of the Directive.

The invention has for its object to provide a method with the features of the preamble of claim 1 and an apparatus having the features of the preamble of claim 16, which allow a permanent detection of measurement results and the information required to determine a particular transport operation, without assuming that the object is provided with an identifier.

The object is achieved by a method having the features of claim 1 and an apparatus having the features of claim 16. Advantageous embodiments are specified in the subclaims.

According to the invention, a method and a device for transporting an object are provided. The item is transported to a predetermined destination.

During transport, at least one physical parameter of the object is measured. In addition, an image of the object is generated.

A data record for the transport of the object is generated and stored. This data set comprises the at least one measured parameter value and the image. The parameter value, the image and the assignment of the parameter value and the image to the data record are blocked against manipulation.

Instead of an identifier of the transport process or of the item, the image of the item is stored for evidence purposes. This image can be generated at any time during the transport process, even before the object has been provided with an identifier. Furthermore, at least one physical parameter of the object is stored.

• Der gemessene Parameterwert wird mit dem Abbild eines anderen Gegenstands verknüpft, d. h. dem Datensatz wird ein falsches Abbild zugeordnet.
• Das Abbild wird mit einem Wert verknüpft, der nicht mit demjenigen Wert übereinstimmt, den der Parameter gemäß der Messung für diesen Gegenstand annimmt. Dem Datensatz wird also ein falscher Parameterwert zugeordnet.
• Nachdem der Datensatz erzeugt und abgespeichert ist, werden das Abbild oder der Parameterwert im Datensatz verändert.

The blocking according to the invention against manipulation avoids in particular the following counterfeits:

• The measured parameter value is linked to the image of another object, ie the data record is assigned a wrong image.
• The image is associated with a value that does not match the value that the parameter assumes according to the measurement for that item. The record is therefore assigned an incorrect parameter value.
• After the data record has been created and saved, the image or parameter value in the data record is changed.

In some cases, the transport fee also depends on the destination. For example, the postage depends on the country in which the given destination address is located. Sometimes the transport fee also depends on specifications of the type of transport, eg. B. the requirement that the item is to be transported by air mail. All of this information can be reconstructed from the stored image.

Preferably, all parameters are measured whose values are included in the calculation of the fare. These are usually the weight of the object to be transported and its dimensions in different directions, eg. B. Length, height, thickness. The result of the measurements thus clearly determines the transport charge.

The measured parameter values and the image in the dataset act as the evidence criteria with which the carrier can prove to be forgery-proof and court-proof why he has levied a certain transport charge for a particular item.

Preferably, further information is stored which facilitates the retrieval of the data record. This search information does not need to be stored counterfeit-proof.

The invention can be used in particular for proving the transport fee for the transport of postal items or also of luggage items of travelers or freight consignments (eg containers or loose general cargo).

In the following the invention will be explained with reference to an embodiment.

In the exemplary embodiment, the object to be transported is a mail item, for. For example, a letter, a package or a book. The mailpiece is delivered to a post office or other collection point or thrown into a mailbox or inserted into a compartment of a parcel compartment system.

The mail item usually passes through a sorting system at least twice. The first sorting system generates at least one digital image of a surface of the mailpiece. This image contains an image with the details of the destination point with which the mailpiece is provided. This destination is preferably a delivery address or a mailbox. The first sorting system evaluates the image, thereby reads the destination point and triggers a transport to that second sorting system, which is responsible for the destination point. The determined information on the destination point is buffered, z. B. in the form of a bar pattern ("bar code"), which is printed on the mailpiece. In order to avoid the imprint of a bar pattern, a method called "fingerprinting" can be used in which a mailpiece is identified by means of a feature vector. Such methods are for. B. off DE 4000603 C2 and DE 19947259 C1 known.

The second sorting system determines the cached destination information and forwards the item of mail to the destination. The second sorting plant may be the same as the first sorting plant or another sorting plant.

The first sorting system preferably further determines information about the sender of the mailpiece in the image of the mailpiece.

• die eindeutige Kennung für die Postsendung,
• das mindestens eine Abbild der Postsendung sowie
• die gelesenen Angaben zum Zielpunkt, mit denen die Postsendung versehen ist und die die erste Sortieranlage gelesen hat, und
• die gelesenen Angaben zum Absender der Postsendung.

In the exemplary embodiment, a unique identifier is generated, which distinguishes the mail item from all other mailpieces that are transported by this carrier in a predetermined period of time. For the transport process, a data record is generated and stored in a central database. Each sorting system is connected to this central database. This record includes

• the unique identifier for the mailing,
• the at least one image of the mail piece as well
• the read information to the destination, with which the mail piece is provided and which has read the first sorting system, and
• the information read about the sender of the mailing.

• vom Gewicht der Postsendung,
• von der größten Ausdehnung der Postsendung und
• davon, in welches Land diese Postsendung zu transportieren ist.

The transporter charges a transport fee for the transport of the mail item. In the exemplary embodiment, this transportation fee depends on the following parameters:

• from the weight of the mailing,
• from the largest extent of mailing and
• of which country this piece of mail is to be transported.

The weight of the mail item is measured either at the time of delivery or by the first sorting system. The scale weighing the mail item is preferably calibrated. Also at the time of delivery or from the first sorting system, the largest extent of the mail item is additionally measured. The first sorting system determines the target point by evaluating the image. In this evaluation, it determines "anyway" the country in which the destination lies and in which the item of mail is to be transported. It is also possible that the country is already determined upon delivery of the mailing.

The transport charge is determined as a function of the parameter value (s). In the exemplary embodiment, these are three parameter values. The sender pays this transport fee, eg. B. in cash or by credit card at the time of delivery or after receipt of an invoice. It is also possible that the sender maintains a current account with the haulier and that the respective transport fee is charged at regular intervals.

In order to meet the above legal requirements, an invoice must be generated so that the invoice generation incorporates a calibrated system. It would be possible for a non-verifiable software program to generate the invoices. In that case, however, the invoice must contain the note "Invoice from freely programmable option, the calibrated measured values can be viewed". In order to meet the legal requirements and to avoid the note, signed files are preferably generated. The process of generating an invoice is included in the process of digital signing. Thus the calibration duty is fulfilled consistently.

• das mindestens eine Abbild der Postsendung sowie
• diejenigen gemessenen Parameterwerte, die zur Berechnung des Beförderungsentgelts verwendet werden, im Ausführungsbeispiel also Gewicht, größte Ausdehnung und Bestimmungsland der Postsendung.

Some data fields of the data record act as an evidence criterion in their combination. They are forgery-proof and safe against manipulation. These data fields are:

• the at least one image of the mail piece as well
• those measured parameter values which are used to calculate the transport charge, in the exemplary embodiment, therefore, weight, maximum extent and destination country of the mailpiece.

• Die durch Software realisierte Funktion, die das gescannte Abbild der Postsendung verarbeitet und auswertet, wird zertifiziert. Beispielsweise wird ein Software-Modul verwendet, das gemäß WELMEC 7.2 zertifiziert ist (vgl. http://www.welmec.org/, abgefragt am 10. 12. 2007).
• Oder die Parameter werden durch ein separates zertifiziertes Gerät gemessen, beispielsweise durch eine programmierbare Schaltung (CPLD oder FPGA) auf einem "framegrabber board". Typischerweise enthält ein "framegrabber board" eine solche programmierbare Schaltung.

The mailing parameters, the combination of which is used as the proof criterion, are preferably measured by one of the following two methods:

• The software-implemented function that processes and evaluates the scanned image of the mailpiece is certified. For example, a software module is used that is certified according to WELMEC 7.2 (see http://www.welmec.org/, queried on December 10, 2007).
• Or the parameters are measured by a separate certified device, such as a programmable circuit (CPLD or FPGA) on a "frame grabber board". Typically, a "frame grabber board" includes such a programmable circuit.

• Die gemessenen Parameterwerte werden mit dem Abbild einer anderen Postsendung verknüpft, d. h. dem Datensatz wird ein falsches Abbild zugeordnet.
• Das Abbild wird mit einem Parameterwert verknüpft, der nicht mit demjenigen Wert übereinstimmt, den der Parameter gemäß der Messung für diese Postsendung annimmt. Dem Datensatz wird also ein falscher Parameterwert zugeordnet.
• Nachdem der Datensatz erzeugt und abgespeichert ist, werden das Abbild oder ein Parameterwert im Datensatz nachträglich verändert.

The blocking against manipulation avoids in particular the following counterfeits:

• The measured parameter values are linked to the image of another mail item, ie the data record is assigned a wrong image.
• The image is associated with a parameter value that does not match the value that the parameter accepts according to the measurement for that mailpiece. The record is therefore assigned an incorrect parameter value.
• After the data record has been created and saved, the image or a parameter value in the data record is subsequently changed.

In one embodiment, the blocking against manipulation by encryption is accomplished. This embodiment does not require special hardware; rather, the record can be stored on ordinary hardware. The tamper-proof components of the data set are preferably encrypted by a digital signature. This digital signature is preferably based on a "public key infrastructure" with a secret signature key and a public verification key. The digital signature is preferably designed such that it functions as an "electronic signature" in accordance with Par. 2 of the German Signature Law, preferably as "advanced electronic signature" according to § 2, Abs. 2 or "qualified electronic signature" according to § 2, Abs .3 designed.

In one embodiment, the blocking against manipulation is effected in that the data record - or at least the data fields to be stored forgery-proof storage - are stored in a separate data memory which is calibrated and secured against counterfeiting.

• die Angaben zur Zieladresse, die die erste Sortieranlage gelesen hat,
• die Angaben zum Absender, die die erste Sortieranlage gelesen hat, und/oder
• die Kennung der Postsendung.
  Möglich ist, ein Datenfeld des Datensatzes sowohl als Beweiskriterium als auch als Suchkriterium zu verwenden.
  In einer Ausgestaltung wird das betreffende Objekt, also die Postsendung oder das Gepäckstück, dann noch einmal gescannt, wenn eine Reklamation wegen des Beförderungsentgelts eingeht. Auf das dergestalt gewonnene digitale Abbild wird ein Verfahren angewendet, um diejenigen Merkmale des Objekts zu ermitteln, die in den Datenfeldern als Suchkriterien verwendet werden. Beispielsweise wird ein Verfahren angewendet, das für das Fingerprint benutzt wird. Mit diesen Merkmalen wird der Datensatz wieder gefunden.
  In einer weiteren Ausgestaltung wird die Erfindung dazu angewendet, um einen Freimachungsvermerk auf einer Postsendung zu überprüfen. Insbesondere soll überprüft werden, ob die Briefmarken oder Freistempelaufdrucke auf der Postsendung das erforderliche Beförderungsentgelt abdecken oder ob die Postsendung unterfrankiert ist. Hierzu wird vorzugsweise eine Software verwendet, die eine Erkennung und Interpretation von farbigen Mustern durchführt und nicht notwendigerweise zertifiziert ist. Weil diese Erkennungs-Software komplex aufgebaut ist, wäre eine Zertifizierung sehr zeitaufwendig und teuer. Falls diese Software eine Unterfrankierung entdeckt, so wird die Erfindung verwendet, um eine Mahnung an den Kunden abzusichern.
  In einer Ausführungsform überprüft ein Mitarbeiter des Transporteurs zunächst manuell den Transportvorgang und verifiziert, ob tatsächlich eine Unterfrankierung vorliegt oder die Software eine falsche Erkennung vorgenommen hat. In einer anderen Ausführungsform wird ausschließlich automatisch geprüft, ob die Software eine Unterfrankierung entdeckt hat oder nicht.
  Eine Mahnung an den Kunden wird auf Basis des fälschungssicher abgespeicherten Datensatzes generiert. Das Generieren der Mahnung wird vorzugweise dadurch ausgelöst, dass eine Unterfrankierung entdeckt wurde. Diese Mahnung umfasst
• Angaben zu dem Transportvorgang, z. B. Datum und Angaben zum Kunden,
• die gemessenen Parameterwerte, die das Beförderungsentgelt festlegen, und
• das Abbild der Postsendung.

Other data fields of this data record function exclusively as search criteria in order to be able to retrieve the data record in the central database at a later time. z. For example, to check whether the transporter has levied a correct transport charge. For example, the following data fields act as search criteria:

• the details of the destination address that the first sorting system has read,
• the details of the sender who has read the first sorting system, and / or
• the identifier of the mailing.
  It is possible to use a data field of the data set both as an evidence criterion and as a search criterion.
  In one embodiment, the object in question, ie the mail piece or the piece of luggage, is then scanned again if a complaint is received because of the transport fee. A method is used on the digital image thus obtained to determine those features of the object that are used in the data fields as search criteria. For example, a method used for the fingerprint is used. With these characteristics, the data record is found again.
  In a further embodiment, the invention is used to check a franking mark on a mailpiece. In particular, it should be checked whether the stamps or franking imprints on the mailing cover the required transport fee or whether the mailpiece is underpaid. For this purpose, it is preferable to use software which performs recognition and interpretation of colored patterns and is not necessarily certified. Because this recognition software is complex, certification would be time consuming and expensive. If this software discovers a sub-franking, the invention will be used to secure a reminder to the customer.
  In one embodiment, an employee of the transporter first manually checks the transport process and verifies whether there is actually a lower franking or the software has made a false recognition. In another embodiment, it is only checked automatically whether the software has detected a lower franking or not.
  A reminder to the customer is generated on the basis of the counterfeit-proof stored record. The generation of the reminder is preferably triggered by the fact that a lower franking was discovered. This reminder includes
• Details of the transport process, z. Date and customer information,
• the measured parameter values that determine the transport charge, and
• the image of the mailing.

This reminder makes it easier for the customer to check whether the reminder is justified or not.

Claims (16)

Method for transporting an object, wherein at least one physical parameter of the object is measured, - The object is transported to a predetermined destination and a data record for the transport of the object is generated, stored and secured against manipulation, - wherein the data set comprises the measured parameter value and characterized in that - an image of the object is generated, - The record is generated so that it additionally includes the image and the backup of the data record includes the step of inhibiting the parameter value, the image and the assignment of the parameter value and the image to the data record against tampering. Method according to claim 1,
characterized in that
locking the record against tampering involves the step
that the data record is provided with an electronic signature. Method according to claim 2,
characterized in that
the electronic signature includes a public and a secret key. Method according to one of claims 1 to 3,
characterized in that
locking the record against tampering involves the step of
that the data record is stored in a data memory which is locked against manipulation. Method according to one of claims 1 to 4,
characterized in that
using the at least one measured parameter value
a fare is calculated for the transport of the item to the destination. Method according to claim 5,
characterized in that
an electronic document is generated which - information on the transport fee and - the image of the object includes. Method according to claim 5 or claim 6,
characterized in that
the generated document is electronically signed. Method according to one of claims 1 to 7,
characterized in that
a value which a given feature assumes for the item is determined;
wherein the image is evaluated for the determination of the feature value,
and the record is supplemented by an identification of the feature value. Method according to claim 8,
characterized in that
the object is provided with information on the destination point, the image of the object produced comprises an image of the destination information, and
the at least one feature determined by evaluating the image is the target point information provided to the article. Method according to claim 8 or claim 9,
characterized in that
the data record is stored in a data storage system for data records and
is searched after saving at least once among the data records stored in the data storage system for the record,
where the characteristic value is specified and used for the search. Method according to claim 10,
characterized in that
another image of the object is generated
again a value which the given feature assumes for the item is determined,
wherein the further image is evaluated for the re-determination of the feature value,
and the feature value thus determined is used to search for the record. Method according to one of claims 1 to 11,
characterized in that
the object is provided with an identifier and
the record is supplemented by the item identifier. Method according to claim 12,
characterized in that
the data record is stored in a data storage system for data records and
is searched after saving at least once among the data records stored in the data storage system,
wherein for the search the item identifier is given and used. Method according to one of claims 1 to 13,
characterized in that
the at least one parameter whose value is measured is at least one of the following parameters of the object: - his weight, a dimension of the article in one direction, - its volume or - its density. Method according to one of claims 1 to 14,
characterized in that - the object is provided with details of the destination before the image is generated, and - The target point is determined by evaluating the image. Device for transporting an object,
the device a measuring device for measuring at least one physical parameter of the object, Means for transporting the object to a predetermined destination, a memory device and - a locking device includes, where the memory device is designed to generate and store a data record for the transport of the object, - So that the generated and stored record includes the measured parameter value, and the locking device is designed to secure the data set against manipulation, characterized in that the device additionally comprises an imager for producing an image of the object, the memory device is designed to generate a data record for the transport which, in addition to the measured parameter value, comprises the generated image, and - The locking device is designed to lock the parameter value, the image and the assignment of the parameter value and the image to the record against tampering.