Abstract: In a method and arrangement for loading data from a transmission device into a non-volatile memory of a receiver device that can be connected with the transmission device, the non-volatile memory being erased only sector-by-sector, the data to be loaded are divided by the transmission device into a number of data packets and at least one part of the data packets is loaded into the memory in a load step. A check step that is implemented before the current load step in which a current load state of the memory is checked, the current load state indicating whether at least a part of the data packets has already been successfully loaded into the memory in a preceding load step. The data packets to be loaded into the memory in the current load step are determined dependent on the current load state.

Abstract: In a method and an arrangement for generation of a franking imprint, in particular a franking machine, a base module has a printing device and a processing unit controlling the printing device for generation of the franking imprint, and a control module can be connected with the processing unit. The control module is fashioned to store and/or to generate at least one item of franking information; and the processing unit is fashioned to generate the franking imprint dependent on the franking information received from the control module. The control module can be freely connected with the processing unit by a user, and the franking information is fashioned such that it establishes at least one part of the workflow of the generation of the franking imprint.

Abstract: In a method and an arrangement for generation of a franking imprint, in particular a franking machine, a secure processing unit generates accounting data relevant for the accounting of the generated franking imprint, and a memory device can be connected with the secure processing unit for secured storage of the accounting data. The secure processing unit is arranged in a secure environment that is logically and/or physically secured from undetected, unauthorized access. The memory device is arranged outside of the secure environment. The secure processing unit is fashioned to provide the accounting data in a form secured from undetected manipulation, and the secure processing unit or a further processing unit that can be connected with the secure processing unit is fashioned to write the accounting data provided by the secure processing unit into the memory device in a form secured from undetected manipulation.

Abstract: In a security module and a method for protecting a security module, wherein security-relevant data are stored in a memory in the module, proper insertion of the security module on a device motherboard is monitored with a first function unit and a second function in the security module. The first function unit signals the status of the security module. The second function unit detects improper use or improper replacement of the security module, and upon detection of improper use or improper replacement, the second function unit causes the security-relevant data to be erased.

Abstract: In a method and an arrangement for controlling printing by a thermotransfer printing apparatus with relative movement between a thermotransfer print head and a print medium, a microprocessor that provides pixel energy data to a pixel energy memory by making an energy value calculation and by coding, and a print data controller prepares the pixel energy data by decoding during the printing in a number (corresponding to the pixel energy value) of binary pixel data each with the same binary value. The print data controller includes at least one pixel energy data preparation unit, a DMA controller, an address generator, a printer controller and a phase counter. The DMA controller allows an access to the pixel energy data stored in the pixel energy memory as code in order to provide the pixel energy data in print columns to the at least one pixel energy data preparation unit. The address generator generates addresses for selection of the buffered code during each phase of a number of phases.

Abstract: In a method and arrangement for preparation of data for loading from a first data processing device into a second data processing device via a first data connection, a number of transmission-ready transmission data packets are generated in at least one packetizing step from the data to be loaded into the second data processing device; and at least one load parameter influencing the total load time until a complete loading of the data into the second data processing device is determined in a determination step preceding the packetizing step. The generation of the transmission data packets ensues in the at least one packetizing step dependent on the first load parameter.

Abstract: An arrangement and a method for modifying the functionality of a security module employ a start loading program stored in a FLASH program memory for reprogramming the FLASH program memory by copying a portion of the start loading program into a main memory of the security module. Data of at least a part of an application program, an appertaining certificate code and identifier data are offered in the communication interface of the security module. The data of the part of the application program are stored on a free memory location of the FLASH program memory when the identifier data characterize a successor status for the stored status. The authenticity of the loaded part of the application program is checked with the certificate code, and given authenticity of the loaded part of the application program, it is stored as valid.

Abstract: In a security module and a method for protecting a security module, wherein security-relevant data are stored in a memory in the module, proper insertion of the security module on a device motherboard is monitored with a first function unit and a second function in the security module. The first function unit signals the status of the security module. The second function unit detects improper use or improper replacement of the security module, and upon detection of improper use or improper replacement, the second function unit causes the security-relevant data to be erased.

Abstract: A method for protecting a security module includes the steps of monitoring proper insertion of the module on a device motherboard with first, second and third function units, erasing sensitive data due to an improper use or a replacement of the module with the second function unit, inhibiting the functionality of the module with the third function unit during a replacement of the security module, re-initializing the previously erased, sensitive data following proper use or replacement of the security module, and re-commissioning by enabling the function units of the security module. An arrangement implementation of the method has an unplugged status detection unit that has a circuit for resettable self-holding of a status indicator, the self-holding being triggered when the voltage level on a test voltage line deviates from a predetermined potential. A processor connected to the other function units and is programmed to identify and modify the status of the security module.

Abstract: An arrangement for providing data in the context of security management for a franking system has a remote data center at which a list of data sets is stored the data sets containing security information as well as information regarding associated security policies, appertaining at least to security measures and the location of their storage in the franking system. A method for server-controlled security management of performable services in an electronic system includes the steps of receiving a request for a desired service, determining a security feature to be selected and generating a data set corresponding thereto, selecting a logical channel and transferring to data set via that channel establishing the service end, and waiting for receipt of a further service request or for the ending of the communication connection.

Abstract: In a method and an arrangement for increasing the throughput of mail when franking with a security imprint, the editing of the print image data is undertaken by a postage meter machine processor, and the calculation of the security code is undertaken by a separate security module while the print image data are being edited. A high system clock performance is achieved by interleaving of the two calculation tasks.

Abstract: A security module with status signaling, has a battery, and function units that are interconnected with one another and are covered by a casting compound. The battery is replaceably arranged on the security module, with the casting compound surrounding a first part of the printed circuit board, and a second part of the printed circuit board for the replaceably arranged battery being free of casting compound. For signaling the module status, an optical or acoustic signal element is connected to the printed circuit board.

Abstract: In an arrangement for a security module that is plugged via an interface onto a base plate of a postal device, particularly a postage meter machine, the battery is replaceably arranged on the security module, and the voltage monitoring unit includes a circuit for a resettable self-holding, the self-holding being triggered when the battery voltage drops below a predetermined threshold. The status can be interrogated by a processor. The resetting of the self-holding can only be triggered when the battery voltage has risen above the predetermined threshold.

Abstract: In a method and arrangement for determining a requirement to replace a component in a device, the measurement of a first parameter that has an unbeneficial influence on the consumption or the service life of the component is replaced by the measurement of at least two parameters that represent the first parameter and whose changes allow the current condition of the component to be calculated. A count reading is thereby modified such that it approaches an outage threshold that is specific for the component and such that the device emits a warning before the end of use or end of the service life of the component part is reached. The invention can be advantageously utilized for the indirect measurement of parameters of components that are located in a security module or in its immediate proximity, for example for determining a requirement for battery replacement for security modules.

Abstract: An arrangement and a method for modifying the functionality of a security module employ a start loading program stored in a FLASH program memory for reprogramming the FLASH program memory by copying a portion of the start loading program into a main memory of the security module. Data of at least a part of an application program, an appertaining certificate code and identifier data are offered in the communication interface of the security module. The data of the part of the application program are stored on a free memory location of the FLASH program memory when the identifier data characterize a successor status for the stored status. The authenticity of the loaded part of the application program is checked with the certificate code, and given authenticity of the loaded part of the application program, it is stored as valid.

Abstract: In a security module and a method for protecting a security module, wherein security-relevant data are stored in a memory in the module, proper insertion of the security module on a device motherboard is monitored with a first function unit and a second function in the security module. The first function unit signals the status of the security module. The second function unit detects improper use or improper replacement of the security module, and upon detection of improper use or improper replacement, the second function unit causes the security-relevant data to be erased.

Abstract: In a method and arrangement for determining a requirement to replace a component in a device, the measurement of a first parameter that has an unbeneficial influence on the consumption or the service life of the component is replaced by the measurement of at least two parameters that represent the first parameter and whose changes allow the current condition of the component to be calculated. A count reading is thereby modified such that it approaches an outage threshold that is specific for the component and such that the device emits a warning before the end of use or end of the service life of the component part is reached. The invention can be advantageously utilized for the indirect measurement of parameters of components that are located in a security module or in its immediate proximity, for example for determining a requirement for battery replacement for security modules.

Abstract: In an arrangement for the power supply for a security domain of a device, a first battery is connected to a first input of a battery switchover device in the security region and a second battery is arranged in a non-security region of the device housing and is connected to a second input of the battery switchover device. The battery switchover device is coupled to a monitoring unit in the security region of the device. The monitoring unit is preferably composed of an analog-to-digital converter and a module processor for the evaluation of the connected battery voltages.

Abstract: In a data security and a security module, first and second data processing units are employed having non-volatile memories for postal register data. At a first point in time at least following letter insertion and following a check of the previously valid accounting data on the basis of an authorization code, the first data processing unit undertakes an advance calculation of the new postal register setting, which is made taking the previously set postage value into consideration, and forms a new authorization code. At a second point in time, the second data processing unit undertakes an accounting with calculation of the new postal register setting, which occurs taking the previously set postage value into consideration. A storage of the pre-calculated, new authorization code and of the new postal register set determined by the second data processing unit in the non-volatile memories subsequently ensue.

Abstract: In a security module and method for monitoring security in an electronic system, a microprocessor that is interconnected to further function units is programmed for overlapping processing with validation of the system status occurring in the meantime, and drives an indicator for signaling the module status.