DE19509775C2 - Verifiable storage medium - Google Patents

Description

The invention relates to a verifiable storage medium with the features of The preamble of claim 1.

Recognized legal-for-trade measuring instruments which are of type approval u. a. known for scales. The verification requirement is made here by the human visual control or by the "Alibi" printer, which is directly on the scale is arranged. With this printer the measured value data, like the consecutive number, the measured value data and possibly the time of the measurement expelled. There is no traceability and no reference here especially if measurement data from several scales are stored Tamper-proof archiving is also necessary with the "Alibi" printer reported data not given.

In order to eliminate these disadvantages, in particular legal-for-trade measurement data from To record several measuring devices, to represent them live and to store them are several Known solutions.

According to GB 2167561 A, data from several scales are recorded, converted, displayed on the screen and stored in the computer. Consequently the "intelligence" of the scale is transferred to the personal computer. The only advantage is that the measured value data live individually and in succession from multiple scales are displayed on the screen and by saving are available again, with the integration of an "Alibi" printer same test reports are shown as with the verifiable scales the "Alibi" printer.

Furthermore, according to EP 0510312 A1, a device is known after the scales on at least one personal computer Central station are connected, the scales have hardware that provide the weighing data in digital form with an appropriate protocol the central personal computer. The measured values determined of the individual scales can either individually or together on the screen  being represented. With this solution too, evaluation devices are used Measured value data stored in a known manner or further processed or printed out that are not recognized as legal for trade.

So the solution has the disadvantages

• - That access to the memory of the PC’s is not excluded,
• - that there is no uninterrupted processing of measured values,
• - that the data record has no reference number and no check number,
• - that there is no custody transfer path,
• - That access to the operating system level is not excluded, the access to the operating system level is not locked (single and multi-tasking Operating system).

After the publication "Handbuch des Wägens" 2nd, edited edition 1989 ISBN 3-528-18572-4 by Manfred Kochsiek (ed.), Publisher: Friedr. Vieweg & Sohn Braunschweig / Wiesbaden on page 67 section 6.5.3 with the picture 6.29 is that Principle of a weighing system with digital verifiable data storage for the Intermediate storage of weighing results with product-related data shown. This is mainly used to store weighing data Semiconductor memory is used as part of the verifiable data storage the evaluation electronics. In connection with IT components Weighing data can also be transferred to external storage media (e.g. Disk, disk, drum or tape storage). On page 567 section 6.5.4 Fig. 6.30 is a system structure for measured value processing and Output of measured values shown with microcomputer. It is an evaluation device which is used as the central device in weighing technology.

The function is characterized in that evaluation data is queried and identified by transmitting them to the correct channels and further processed into results or commands.

In the technical journal "Weighing and dosing" 6192, page 9, section 9, a scale with an open bus system is shown. After this solution is one  legal-for-trade scales with an open bus connection for connecting any legal-for-trade additional facilities represented by none of the Stretch connections of the bus line are sealed, also others, not the Devices subject to mandatory verification can be connected (external EDVA, PC for internal use), whereby the bus line system of the scale is open and the result is that a false display, false impressions, a fraudulent use is easily possible.

Other disadvantages of the solutions according to the aforementioned documents are in seeing that

• - Access by unauthorized persons to the memory of the PC is not sufficient is closed
• - the processing of measured values is not without authorization,
• - no reference number and no check number are assigned to the data record,
• - there is no legal data path,
• - Access to the operating system level is not blocked.

The invention has for its object a verifiable storage medium for develop legal and not legal for trade data, which as recognized legal-for-trade institution to any existing legal-for-trade and not Calibratable measurement data acquisition device can be assigned.

According to the invention the object is achieved by the in claim 1 specified features solved.

Preferred developments of the invention result from the subclaims.

The advantages of the invention are

• - That the data record in addition to the measured values from the reference number with secret Polynomials, a consecutive number that uniquely maps for time operation in custody transfer (year, weekday, Scale number etc.) and consists of the check number,
• - that the measurement processing is uninterrupted,
• that the tamper-proof archiving of the measured value data is given,  
• - that access to the memory is blocked,
• that access to the operating system level is excluded,
• - that the measured value data cannot be falsified and cannot be deleted,
• - that measured value data that is subject to verification and not subject to verification by means of a cross network a measured value data acquisition device from a computer workstation to one are transferable to others,
• - That measured value data is fed and processed in real time for EDP processing become,
• - That a larger throughput of measured data, especially with continuous weighing (Weighing with the conveyor belt running through) for the first time without sources of error is possible,
• - That the measurement data simultaneously or additionally on the screen or on the Screen to be displayed on an additional window
• - That the measurement data as a one-line in a separate window on a screen Additional display or as the main display for additional measuring devices.

Embodiments of the invention are described below with reference to the attached Drawings explained in more detail.

According to Fig. 1, the method for a calibratable capturing and storing determined legal and non requiring calibration is based on a approved calibrating device 1 to verifiable and / noncalibratable measurement data acquisition or 2, however, is at least connected to a verifiable or not verifiable measurement data acquisition device 2 , illustrated by the recognized legal-for-trade device 1 consisting at least of a computer 3 with a storage unit, an operating unit 4 , a screen 5 and possibly a printer 6 , the computer 3 including two serial interfaces, the interface I 7 for one Driver I 8 and the interface II 9 for a driver II 10 and an EEPROM card 11 has. The EEPROM card 11 is an expansion card which provides a non-volatile memory, the memory being able to be individually populated and used.

The driver II 10 as device driver E01EP automatically determines the available capacity.

A flash EEPROM is comparable to an EPROM. It can with normal Memory cycles can be read out. However, data is saved only with special programming algorithms. Compared to EPROM's happens deletion in principle also by component with the help of a separate deletion Algorithm. This makes it possible to flash memory in the inserted state Describe and delete without a special programming or Extinguishing device, as with EPROM's, is necessary. At the same time, this is also a unintentional deletion no longer possible.

The EEPROM card 11 is provided with PAGING hardware.

The specially developed flash driver as driver II 10 is the interface of a specially developed driver under IO-SYS, such as. B. all scale drivers. It is a "custody transfer program" and therefore carries the name "EP" in its name (eg flash driver E01EP).

Driver I 8 is also identified as a "program subject to verification" with an "EP" at the end of the name.

For example, the new driver I 8 for scale "X" is now called W08EP.EXE.

The EEPROM card 11 can be operated with this driver II 10 during production with an internal serial no. be preprogrammed.

Function calls are as follows:
Driver II 10 can be called up by a specially developed flash backup program (EP program), which takes over the backup of the data subject to calibration from the flash memory to a storage unit, and by driver I 8 .

The following OP codes are implemented for flash memory management:
(Expansion possible as required)

The procedure for weight control using driver I 8 is as follows:
After the driver I 8 has received the weight request command from the application program, it sends a request command to the calibratable and / or non-verifiable measurement value data determination device 2 and waits for the data record. This process is only possible via the information in the interface description for the drivers I 8 ; II 10 possible.

After receipt of the last byte of the weight string of the calibratable and / or non-verifiable measurement data determination device 2 , the data record is checked for validity (reception or logical errors). In the event of an error, only the error code is returned to the requesting application program and this process is ended.

In this solution, the programs of the application are started by the same station (EEPROM card 11 ), the programs not necessarily being stored on the same station. These application programs are usually located on the same station or are connected to the storage unit (e.g. in the network, drive, hard disk, diskette). The tasks of the application can be operated, controlled and triggered remotely.

Otherwise, driver I 8 creates the relevant specially developed standard weight data record from the received data and adds the driver channel number to the data. as well as your own driver name. This is the name of the software interface to the measuring devices. Subsequently, driver II 10 with the OP code WRITE is called up by the respective driver I 8 in order to program the relevant data record in a tamper-proof manner in the flash memory.

Driver II 10 now adds the card serial number, the next sequential record number and the current time and date to the relevant data record before it forms the CRC according to a secret polynomial over the entire record.

Then this saved string is protected against power failure in the flash EEPROM memory programmed and the new flash status determined.

This specially developed standard weight data record is now returned to driver I 8 together with the current flash status.

The driver I 8 reactivated in this way now checks the return code (OK or error code) of the E01EP and in the event of a positive response, the weight data record plus the current flash status is only reported back. The driver I 8 again remains inactive until the application transfers a new job to it.

The backup is carried out by transferring the verifiable data from the EEPROM card 11 to the memory unit of the computer 3 .

The EEPROM cards 11 are provided with a serial number during manufacture, e.g. B. this serial number. (2 bytes) with a 16-bit status word programmed into each flash module for security reasons.

For this reason, at least two flash modules must be used for safe operation of this driver II 10 , otherwise this error is reported and further operation is prevented.

After the specially developed flash backup program has issued the delete command, this driver II 10 executes the following sequences:

• 1. Change the 16 bit status in the last block to "Deletion 1 started".
• 2. Deletion of the entire content of the first flash module (including the one there stored serial number lost).  
• 3. Reprogramming the serial number. to the beginning of the first building block successful deletion with status "serial no. OK".
• 4. Individual deletion of all subsequent blocks with subsequent new programming the serial no. and the status "serial no. OK status".
• 5. After successfully deleting the last block, it also receives the Serial no. and the same status.
• 6. At the end, all modules are once again assigned the same serial number. and checked the OK status before the E01EP driver determined the total Flash capacity reports to the calling program and is therefore available stands.

This rather cumbersome sequence was realized, since a power failure or an accidental shutdown of the computer cannot be ruled out during this time, the serial no. card 11 is lost before it has been reprogrammed.

In the event of the premature termination of the deletion process, the error program is reported to the backup program at the next OPEN, which then issues a new delete command which driver II 10 can now complete. The function of the specially developed flash backup program is characterized in that the specially developed backup program is started automatically each time the computer is booted.

The message: "To check the data subject to verification, please press (F10)" on the The computer screen appears for approx. 10 seconds.

If the function key F 10 was pressed, a list 1 appears with which the files of the individual measurement days are displayed.

List 1: (example)

Display of the card's data subject to legal verification: 003 as SIN of the EEPROM card

Help can be displayed using the function key (F1). A selection of the Measurement days can be viewed using the up and down arrow keys and picture from, pos. 1 and end or by entering the measurement date in the format YY.MM.DD.

After selection and confirmation with the Enter key, the content of the File containing the legal-for-trade records on the computer screen.

List 2: (example)

Display of legal-for-trade data as an example

By pressing z. B. the Enter key switches back to list 1.

The calibration officer can now use the displayed data records to determine whether, for example: the weight value shown on the invoice printout, possibly output by the printer 6 , matches the measured value. Comparison by e.g. B. the reference number, the date, the time.

The check number of the installed EP programs appears on screen 5 next to list 1 on the right side of the screen. The channel no. for the installed measuring device (s) 2 (not relevant for the calibration) and next to it the check number of the EP programs installed on this channel (important for the calibration).

After the program has been initialized, the OPEN- Submit command that reports the current memory status on return. The The backup program then checks the date of the last and first set in flash memory by means of appropriate READ commands. If the relevant Data are from the same working day and there is still enough flash capacity available Is available, the program ends its activity.

Otherwise, all data are now read out in sets by corresponding READ commands to driver II 10 , starting with set 1 , and copied to a memory unit in the PC. The CRC backup of each record is retained because the data is stored 1: 1 again. After successfully completing the last READ and storing the data, the OP code CLEAR is transferred to driver II 10 in order to delete the entire flash memory for the new working day.

The backup program ends after the positive acknowledgment of the flash driver his activity.

When the data subject to calibration is read back later from the storage unit for display on the screen 5 , the data record is checked again for corruption by means of the CRC coding via the secret polynomial and this is displayed if necessary.

After the backup program has ended, the specially developed application program (not subject to calibration) is started. This program opens all of the set drivers I 8 one after the other (programs that require verification, which were already loaded when booting). From the application program, data can be taken interactively or at any time in the manner described above, e.g. B. for billing, booking, (remote) transmission, further processing, printing, archiving, evaluation, the application itself with the aforementioned functional range no longer needs to be verifiable by the clear assignment to the verifiable measurement data is retained.

According to FIG. 2, the use of several approved calibrating devices 1 is shown, at least two with each other via the computer 3 by means of line A in operative connection with the approved calibrating devices 1 data determination unit in each case at least one verifiable and / or non-verifiable measured value is assigned 2 , whereby two of the recognized legal-for-trade institutions 1 do not have to have a screen 5 which serve as a computer workstation.

According to the exemplary embodiment according to FIG. 1, the recognized legal-for-trade devices 1 also consist of the operating unit 4 , optionally the printer 6 and the computer 3 with a storage unit, the computer 3 being the interface I 7 for the driver I 8 and the interface II 9 for the driver II 10 and the EEPROM card 11 is assigned.

This device configuration and the active connection between the recognized legal-for-trade facilities 1 via the computer 3 resulted in a surprising, unexpected effect, which is represented as a cross-connection of measured value data that is subject to legal and / or legal for trade standards.

By means of this cross-connection, the legal-for-trade and / or non-legal-for-trade measurement data of a legal-for-trade and / or non-legal-for-trade measurement data determination device 2 can be transmitted from one computer work station I 12 to another computer work station II 13 .

Without a cross-connection, the available legal-for-trade and / or non-legal-for-trade measurement data from the legal-for-trade and / or non-legal-for-trade measured data determination device 2 are requested at the computer work station I 12 via the recognized legal-for-trade device 1 and via the EEPROM card 11 to the memory of the computer 3 at the work place I 12 stored locally as legal-for-trade measured data. These measured value data that are subject to verification and / or not subject to verification can be displayed on the screen 5 of the work station I 12 as measurement data that can be verified.

With the cross-wound composite can 12 to trigger the measurement of the workplace II 13 adjacent custody and / or not requiring calibration at Work I by this as the calibration measured value data received by the workplace II 13 existing approved calibrating device 1 and here locally via the associated EEPROM - Card 11 are stored in the memory of the computer 3 , which calibratable measurement data can be displayed on the respective screen 5 of the workplace I 12 and / or the workplace II 13 .

Thus, 14 measured value data determinations can also be triggered from all n workplaces III, also at the calibratable and / or non-verifiable measured value data determination device 2 not connected to these workstations, these calibrated and / or not verifiable measured value data as verifiable measured value data locally at the respective workplace by the respective Recognized legal-for-trade device 1 provided with references via the EEPROM card 11 are recorded , saved and stored in the memory unit of the respective computer 3 by this legal-for-trade measurement data can be displayed locally as well as on the requesting n work station III 14 on the respective screen 5 .

Reference list

1 recognized legal-for-trade institution
2 verifiable and / or not verifiable measurement data determination device
3 computers
4 control unit
5 screen
6 printers
7 interface I
8 driver I (measuring device driver)
9 Interface II
10 driver II (card driver)
11 EEPROM card
12 Work place I
13 Workplace II
14 n workplace III
A line

Claims (8)

1. Verifiable storage medium with a recognized verifiable unit ( 1 ), which can be connected to any verifiable and / or not verifiable measurement data acquisition unit ( 2 ) and has a non-retroactive dialogue with them, characterized in that the verifiable unit ( 1 ) is the one with the measurement data acquisition unit ( 2 ) determines the measured value data that is subject to verification and / or not subject to verification, provides it with references using specially developed drivers I ( 8 ) and driver II ( 10 ) and an EEPROM card ( 11 ) and programs them first on the EEPROM card ( 11 ) tamper-proof and non-volatile as custody transferable measured value data and then fed to the memory unit of the computer ( 3 ) for backup, these custody transferable measurement data are available at all times and these, as well as the currently available custody transfer and / or non-custody transferable measurement data of the connected custody transfer and non-approved capable measurement data determination unit ( 2 ) can be called up in any order from the memory unit of the computer ( 3 ) as calibratable measurement value data and can appear on the screen ( 5 ). 2. Verifiable storage medium according to claim 1, characterized in that the recognized verifiable unit ( 1 ) with at least one verifiable and / or not verifiable measurement data determination device ( 2 ) a work station I ( 12 ); II ( 13 ). 3. Verifiable storage medium according to claim 1 and 2, characterized in that the workplaces I ( 12 ); II ( 13 ) are in operative connection with one another via a line (A) via their respective computers ( 3 ). 4. Verifiable storage medium according to one of claims 1 to 3, characterized in that the workplaces I ( 12 ); II ( 13 ) n workplaces III ( 14 ) can be assigned. 5. Verifiable storage medium according to one of claims 1 to 4, characterized in that from all workplaces I ( 12 ); II ( 13 ); III ( 14 ) Measured value data determinations can be triggered at one's own and at any other work station, these measured value data which are subject to legal and / or non-verifiable data being recorded locally as verifiable measured value data at the respective work station where the verifiable and / or non-verifiable measured value data determination units ( 2 ) are located and stored securely by this calibratable measurement data both locally and at the requesting work station I ( 12 ); II ( 13 ); III ( 14 ) can be displayed on the respective screen ( 5 ). 6. Verifiable storage medium according to one of claims 1 to 5, characterized featured, that data can be called up interactively from the application program and used for Billing, booking, (remote) transmission, further processing, archiving, Evaluation and to be used for printing, the application itself with the aforementioned range of functions no longer needs to be calibratable, by maintaining the clear assignment to the legal-for-trade measurement data. 7. Verifiable storage medium according to one of claims 1 to 6, characterized in that the measurement data are displayed simultaneously or additionally on the screen ( 5 ) or on the screen in an additional window. 8. A verifiable storage medium according to one of claims 1 to 7, characterized in that the measurement data one-line are displayed in a separate window on the screen ( 5 ) as an additional display and / or as a main display for additional measuring devices.