Method of remote diagnostics for franking machines

Description

[0001] This invention relates to remotely diagnosing faults which may occur in franking machines.

[0002] Franking machines in use in the field may develop faults at indeterminate periods. Some faults may be insignificant and merely prevent use of certain facilities normally provided by the machine or may be intermittent and affect use of the franking machine at indeterminate times. Other more serious faults may occur which result in inhibition of use of the machine for franking of mail items. The latter more serious faults cause significant inconvenience to the user of the machine because the machine is not available for use in franking mail. It is desirable to reduce or prevent the occurrence of faults in machines in order to ensure that generally the machines are always available for use when required. By maintaining a fault history of each machine in the field it is possible from analysis of the fault history of any individual machine to predict and provide an early warning of the possible occurrence of a specific fault. From this predictive information action may be taken to service or modify the franking machine prior to the occurrence of the predicted fault and thereby prevent loss of use of the machine.

[0003] GB-A-2 178 880 discloses a postage meter inspection system in which the postage meter is provided with sensors responsive to attempts to tamper with the postage meter, i.e. attempts to obtain fraudulently postage charges for mail items. The sensors are interrogated and indications of tampering attempts are communicated to a central location either electronically or by mailing imprinted postcards.

[0004] According to one aspect of the invention a method of remotely obtaining data from a franking machine in which data is stored in a memory of the franking machine; the franking machine is periodically placed in communication with a remote central computer and during said communication data is read from the memory and transmitted to the remote central computer characterised in that a fault code identifying a fault occurring during normal operation of the franking machine in franking mail items is stored in the memory upon occurrence of the fault to form a fault history of the franking machine; in that during each communication between the franking machine and the remote central computer for remote recrediting of the franking machine the fault history stored in the memory automatically is read out and transmitted to the remote re-crediting computer and is written to a fault history store; and further characterised by analysing said fault history stored in the fault history store to provide an indication of impending faults.

[0005] According to another aspect of the invention a franking machine system including a plurality of franking machines; each franking machine including accounting registers for storing accounting data; communication means to transmit data between a remote central resetting computer and each of said franking machines; each said franking machine being operable to be remotely recredited by said remote central resetting computer characterised in that each franking machine includes a fault history memory and means operative upon occurrence of a fault in said franking machine during normal operation of the franking machine in franking mail items to write into said fault history memory a fault code representing the fault which has occurred so that the memory stores a fault history comprising a series of faults codes representing a series of occurred faults; in that during each recrediting of each franking machine, the franking machine being recredited is operative automatically to read out the fault history from the fault history memory and transmit the fault history to the remote central resetting computer; in that the remote central resetting computer includes a fault storage memory to store the fault histories transmitted from the respective franking machines; and further characterised by a fault analysis computer operable periodically to communicate with said remote central re-setting computer to read out the fault histories stored in said fault storage means relating to said franking machines; to analyse said fault histories and to generate for each said franking machine an indication of impending faults.

[0006] The method in accordance with the invention will now be described by way of example with reference to the drawings in which:-

Figure 1 is a block diagram illustrating franking machines connected for communication with a remote resetting centre and service centre, and

Figure 2 is a flow chart of a sequences of events in remote fault diagnosis and remedial action in respect of a franking machine.

[0007] Referring first to Figure 1, a franking machine 10₁ comprises an electronic microprocessor 11 for carrying out control and accounting functions in the franking machine. A keyboard 12 is provided for input of data by a user of the machine and a display device 13 is provided to enable the microprocessor to display information to assist the user in using the franking machine. A read-only memory (ROM) 14 is provided for the storage of fixed information such as program routines for controlling operation of the microprocessor 11 and a random access memory 15 is provided as a working store for the microprocessor. Non-volatile memories 16, 17 are provided for the storage of accounting data and as is well known in franking machines may include a descending register for storing a value of credit available for use in franking of mail items with postage value, a tote register for storing an accumulated value of postage used in franking mail items, an items register storing a count of the number of items franked and a high items register for storing a count of the number of items franked with a postage value in excess of a predetermined value. A printing device 18 is controlled by the microprocessor to print franking impressions on mail items. In franking machines which operate in a prepayment mode, the user of the machine makes a payment to the postal authority and the value of the payment is entered into the descending register of the franking machine to provide an amount of credit available for use in franking mail items with postage value. The read-only memory 14 stores a program routine for controlling the microprocessor in carrying out franking operations. In such franking operations, the user of the machine inputs by means of the keyboard 12 a value of postage with which a mail item is to be franked and the microprocessor checks to determine that there is a sufficient value of credit in the descending register for required franking. If there is sufficient credit the microprocessor continues with the program routine to modify the contents of the registers to take account of the franking being effected and to operate the printing device to print a franking impression with the required postage value on the mail item. If there is insufficient credit available the franking routine is terminated and printing of the franking impression is not effected. The franking machine remains incapable of carrying out further franking operations until such time as additional credit has been entered into the descending register.

[0008] As is well known in franking machines those operational parts of the machine which maintain accounting records and which effect printing of the franking impression are protected from attempts to fraudulently interfere with the operation thereof. To this end the operational parts of the machine are housed in a secure housing access to which may be made only by authorised personnel of the postal authority or of an authorised service organisation and any external electrical connections to the machine are protected to prevent external application of unauthorised signals in an attempt to use the machine fraudulently. The accounting operations and storing of the accounting records are carried out in a manner to ensure integrity of the accounting data even in the event of the occurrence of faults in the machine. For example, each register is duplicated in each of the non-volatile memory devices 16, 17 so that if one device should fail, the registers in the other device will continue to store the accounting data.

[0009] The franking machine is provided with an input/output interface 19 communicating with the microprocessor to enable the microprocessor to communicate with apparatus external to the franking machine.

[0010] Previously, when the credit value in the descending register had fallen to a low value it was necessary for the postage meter of the franking machine to be taken to a resetting authority such as the postal authority to have an increased value of credit entered into the descending register. However current postage meters are constructed to have provision to enable increased credit to be entered remotely without removing the postage meter from the user's premises. A system for re-setting credit in a franking machine remotely by means of a re-crediting computer 20 is described in our European patent application 89313220.9 (EP-A-0 376 573). Communication is established between the microprocessor of the franking machine and a re-crediting authority computer 20 via the interface 19 and a telephone network 21. The microprocessor 11 and the computer 20 carry out a series of steps in which credit update information is transmitted from the computer to the franking machine and in which the franking machine sends accounting data from its registers to the computer. Security in transmission of the information over open telephone lines is maintained by transmitting a transaction identity code comprising a pseudo-random number in messages between the computer and franking machine and by encrypting the messages.

[0011] During operation of franking machines faults may occur which in themselves do not prevent operation of the machine for franking purposes but which may provide an indication that a more serious fault condition preventing use of the machine has a probability of occurring in the future. Accordingly it is desirable to log faults as they occur in each machine to provide a fault history for each individual franking machine and to analyse these faults to determine if from experience any of the machines in use in the field have a fault history which suggests that they are likely to fail in operation. The franking machine 10₁ is provided with a fault register 22 having a number "n" of storage locations. Upon occurrence of a fault, the microprocessor writes a code representing the type of fault which has occurred into a storage location of the fault register, the codes being written into the storage locations in turn. Thus at any time, the register stores a log of the most recent "n" faults which have occurred. The program routine carried out by the franking machine during re-setting of credit includes a sub-routine in which the contents of all the storage locations of the fault register 22 are read out and transmitted to the re-crediting authority computer 20. The storage locations of the fault register are erased so that after read out, the register is ready to receive the code representing the next fault when it occurs. Instead of erasing the storage locations of the fault register, the storage locations may be overwritten in turn in such a manner that when the code for each new fault is written to the register the code for the oldest fault is overwritten. Accordingly the codes stored in the register always represent the most recent "n" faults which have occurred. The re-crediting authority computer is provided with memory 23 and when the computer receives the log of fault codes from a franking machine in the course of re-setting credit in that franking machine, the computer writes the log of fault codes into its the memory 23. It will be appreciated that a large number of franking machines 10₁ - 10_n are re-credited as and when required by a single central re-crediting computer. Accordingly the log of fault codes is stored in the memory together with information identifying the meter from which the log has been received. Thus over a period of time, the computer 20 will receive and store in memory 23 the fault logs or histories of all those machines 10₁ - 10_n which have had credit updated during that period. It will be appreciated that this transmission of fault data occurs automatically each time a franking machine is re-credited and hence as result does not require communication with the franking machine specifically for the purpose of transmitting fault data. Accordingly the user of the machine is not required to carry out any additional operation and the accumulation and transmission of fault data is transparent to the user. Furthermore by transmitting the fault log data as part of the re-crediting routine, the data is transmitted and collected at the computer memory 23 at a periodicity which corresponds to some extent upon the amount of use of each franking machine. In Figure 1, the fault register 22 is shown as a separate element however if desired the fault register may be implemented as a register in the non-volatile memories 16, 17 and like the accounting registers in these memories may be duplicated in each of the memories 16 and 17.

[0012] Servicing and correcting faults in franking machines is carried out by an authorised service organisation. The service organisation is provided with a computer 24 which is capable of communicating with the re-crediting authority computer 20 and is permitted to have access to the fault log data in memory 23. Periodically the computer 24 accesses the fault log in memory 23 and an analysis of the faults which have occurred on the franking machines is carried out. Such an analysis may predict that a specific franking machine is likely to develop a specific fault and in accordance with that prediction a service engineer visits the site of the franking machine to carry out modification or repair of the machine to prevent occurrence of the predicted fault. The analysis alternatively may predict that a specific batch of machines is prone to one or more specific faults in which event action may be taken to modify all machines in that batch to prevent occurrence of that fault in those machines of the batch which are not yet affected.

[0013] Where the re-crediting of franking machines is carried out by means of transportable memory modules as in the CREDIPAC re-crediting system marketed by Alcatel Business Systems Limited, the transportable modules may be utilised to convey fault log data from the franking machine to the computer 20 instead of utilising the telephone network. For a more detailed description of the operation of re-crediting utilising a transportable memory module reference may be made to the specification of our British patent No. 2173738.

[0014] As hereinbefore described, transmission of the fault log data from the franking machine is effected each time the franking machine is re-credited. However transmission of the fault log data may be effected as part of another routine which occurs periodically for each machine. For example, franking machines which are operated in a post payment mode do not carry out re-crediting operations. However periodically the postal authority require to receive data relating to usage of the machines and for this purpose receive the values stored in the accounting data registers to enable the authority to audit usage of the machines. Where the data relating to usage of the machines collected remotely by transmission of the data either by means of the telephone network or for example by means of a transportable module the transmission of fault log data may be effected as a sub-routine of the main routine for collection of account data.

[0015] The flow chart of Figure 2 illustrates the steps carried out in each of the franking machines 10₁ - 10_n, the central re-crediting computer 20 and the service computer 24 to provide fault histories of each machine, to transmit these fault histories to the service computer and to modify or repair the machines in dependence upon analysis of the fault histories.

[0016] Analysis of the fault log of a specific franking machine may indicate that there is a probability of failure of a component of that machine which would result in the machine becoming inoperable to effect franking of mail items and hence require an on-site visit by a service engineer to effect an early repair or replacement of that component to ensure that the machine continues to operate satisfactorily and remains in service. However the analysis of the fault log may indicate a fault history which does not require physical replacement or repair of a component. For example fault may arise from software program routines or sub-routines particularly under certain conditions of use of the machine in which there is interaction between sub-routines which had not been envisaged when the software was written or installed in the machine. Such faults may also arise due to change in tolerances of electronic components such that they are required by a software routine to operate close to a current tolerance limit. A modification of the software routine may be made which has the effect of operating the component safely within its current tolerance. In response to such faults being registered in any of the franking machines, transmitted to the re-credit computer 20, and written to the memory 23 and then being transferred to the service computer for analysis, the software may be modified to overcome any tendency for the detected fault to occur. Instead of installing the modified software by on-site visists of a service engineer, the service computer 24 may communicate via the telephone network 21 with a selected one of the franking machines 10₁ - 10_n to enable the modified software code to be transmitted to the franking machines from the service computer via the telephone network. The modified software code may be transmitted to all franking machines of a specified model number in the field or only to those franking machines which, from analysis of their fault histories, indicate a need for modification of the software. Acess to the memories in the franking machines which store software code must be restricted to prevent unauthorised modification of the software and accordingly any transmission from the service computer to the franking machines for the purpose of modifying or writing new software routines into the memories of the franking machines includes signals which enable access to the software code memories to be obtained. Such transmissions are carried out in a secure manner to ensure that only authorised transmissions enable access to the software code memories and that only the software code transmitted in an authorised transmission is written to the memories of the franking machines. A method of securely transmitting data over a telephone network for the purpose of re-crediting a franking machine is described in our European patent application 89313220.9 referred to hereinbefore. A similar secure method of transmitting data may be used for transmission of signals to modify operation of the franking machine. Where re-crediting is effected by means of a transportable memory module as described in our British patent No. 2173738 and referred to hereinbefore modification of software code in a franking machine may be effected by utilising the transportable memory module to carry the modified software code to be written into the memory of the franking machine. Our British patent describes a method of ensuring security of the data carried by the module and such a method may be utilised to ensure security of signals carried by the module to be utilised to modify operation of the franking machine.

[0017] The modification of software may include re-configuration of variables capable of being set in the franking machine software program routine. The software memories of the franking machine may be loaded with a number of sub-routines in manufacture of the franking machine. Some of these sub-routines may be activated upon installation of the franking machine while others of these sub-routines are left in-activated. During use of the franking machine in the field it may be desired to de-activate or activate selected ones of these co-resident sub-routines either to modify the facilities provided by the franking machine or in order to overcome the probability of a fault arising as indicated by the analysis of the fault history of that machine.

[0018] When faults occur in the franking machine, fault flags are set to indicate the occurence of the fault. Some faults may arise due to a delected error in data stored in the franking machine. Electronic accounting data is handled by the circuits of the franking machine in a manner such that, except in the event of catastrophic failure, the data can be re-constructed. For example each register which stores accounting data is replicated four times and in each operation of the franking machine involving the accounting data the contents of the four replications of the registers are compared. If the contents are identical continued operation of the franking machine is permitted. However if the contents of three replications of the register are the same but one register is different a fault flag is set to inhibit continued operation of the machine. Since the contents of three replications of the register are identical it is clear that these replications contain correct data. Accordingly a sub-routine can be activated to correct the data in that one of the replications which is different from the other three replications and to reset the fault flag. This sub-routine may be activated remotely by the service computer using a secure transmission and then the fault flag may be reset remotely by a secure transmission. If the data has been corrected the fault flag can be reset. Other faults may occur which do not involve electronic data. If the fault is transitory or intermittent a transmission to reset the fault flag will be successful in resetting the fault flag. However where a permanent or non-transitory fault exists the reset of the fault flag will fail. Many faults are transitory or intermittent and hence the remote resetting of the fault flag allows the franking machine to be continued to be used until a service repair can be effected.

[0019] In Figure 1, the service computer 24 is shown as communicating with the re-credit computer by means of a dedicated communication link 25. However it is to be understood that the service computer may communicate with the re-credit computer via the telephone network 21.

Claims

1. A method of remotely obtaining data from a franking machine in which data is stored in a memory (22) of the franking machine (10₁) ; the franking machine is periodically placed in communication with a remote central computer (20) and during said communication data is read from the memory (22) and transmitted to the remote central computer (20) characterised in that a fault code identifying a fault occurring during normal operation of the franking machine (10₁) in franking mail items is stored in the memory (22) upon occurrence of the fault to form a fault history of the franking machine; in that during each communication between the franking machine and the remote central computer (20) for remote recrediting of the franking machine the fault history stored in the memory (22) automatically is read out and transmitted to the remote re-crediting computer and is written to a fault history store (23); and further characterised by analysing said fault history stored in the fault history store (23) to provide an indication of impending faults.

2. A method as claimed in claim 1 further characterised by the step of storing at the remote central computer (20) the fault history received from each of a plurality of franking machines (10₁-10_n) during each recrediting of the respective franking machines by the remote central computer (20).

3. A method as claimed in claim 2 including the step of periodically accessing the fault histories stored by the remote central computer (20) and transmitting said fault histories to a fault analysis computer (24).

4. A method as claimed claim 2 or 3 further characterised in that the fault history is transmitted from the franking machine (10₁-10_n) to the remote central computer (20) via an input/output interface (19) of the franking machine and a telephone network (21).

5. A method as claimed in claim 2 or 3 further characterised in that the fault history is transmitted from the franking machine to the remote central computer (20) by connecting a transportable memory module to the franking machine and writing said fault history into the transportable memory module; connecting said module to the remote central computer (20) and reading the fault history from the module to the computer.

6. A method as claimed in any one of claims 2 to 5 further characterised by the steps in response to the analysis of the fault history stored in the fault history store of establishing communication between the remote central computer and a selected one of the franking machines (10₁-10_n) and by said communication effecting modification of operation of said selected franking machine.

7. A method as claimed in claim 6 further characterised in that during the communication established with the selected one of the franking machines (10₁-10_n) the remote central computer transmits a signal to the selected franking machine effective to modify a program routine or sub-routine in said selected franking machine.

8. A method as claimed in claim 6 further characterised in that the modification of the program routine comprises activating or de-activating program sub-routines which are co-resident in the selected franking machine.

9. A method as claimed in claim 6, 7 or 8 further characterised by the step of transmitting from the central computer a reset signal to the selected franking machine effective to reset a fault flag in said selected franking machine.

10. A method as claimed in any one of claims 6 to 9 further characterised in that the transmission of signals to modify operation of a selected franking machine is effected in a secure manner.

11. A franking machine system including a plurality of franking machines (10₁-10_n) ; each franking machine including accounting registers (16, 17) for storing accounting data; communication means (21) to transmit data between a remote central resetting computer and each of said franking machines; each said franking machine being operable to be remotely recredited by said remote central resetting computer characterised in that each franking machine includes a fault history memory (22) and means (11) operative upon occurrence of a fault in said franking machine during normal operation of the franking machine in franking mail items to write into said fault history memory (22) a fault code representing the fault which has occurred so that the memory (22) stores a fault history comprising a series of faults codes representing a series of occurred faults; in that during each recrediting of each franking machine, the franking machine being recredited is operative automatically to read out the fault history from the fault history memory (22) and transmit the fault history to the remote central resetting computer; in that the remote central resetting computer includes a fault storage memory to store the fault histories transmitted from the respective franking machines; and further characterised by a fault analysis computer (24) operable periodically to communicate with said remote central re-setting computer (20) to read out the fault histories stored in said fault storage means (23) relating to said franking machines; to analyse said fault histories and to generate for each said franking machine an indication of impending faults.

Ansprüche

1. Verfahren zum Gewinnen von Daten auf Distanz aus einer Frankiermaschine, in welchem Daten in einem Speicher (22) der Frankiermaschine (10₁) gespeichert werden, die Frankiermaschine periodisch mit einem entfernten Zentralcomputer (20) in Verbindung gesetzt wird und während dieser Verbindung Daten aus dem Speicher (22) gelesen und an den entfernten Zentralcomputer (20) übermittelt werden, dadurch gekennzeichnet, dass ein Fehlercode, der einen während des normalen Betriebs der Frankiermaschine (10₁) zum Frankieren von Postgegenständen auftretenden Fehler identifiziert, nach dem Auftreten des Fehlers in dem Speicher (22) gespeichert wird, um eine Fehlergeschichte der Frankiermaschine zu bilden, dass während jeder Verbindung zwischen der Frankiermaschine und dem entfernten Zentralcomputer (20), zum Neuausstatten der Frankiermaschine mit Kredit aus Distanz, die in dem Speicher (22) gespeicherte Fehlergeschichte automatisch gelesen und an den entfernten Neukreditier-Computer übermittelt wird und in einen Fehlergeschichte-Speicher (23) geschrieben wird und dass die in dem Fehlergeschichte-Speicher (23) gespeicherte Fehlergeschichte analysiert wird, um eine Anzeige von bevorstehenden Fehlern zu erzeugen.

2. Verfahren nach Anspruch 1, dadurch gekennzeichnet, dass in dem entfernten Zentralcomputer (20) die Fehlergeschichte gespeichert wird, die von jeder einer Mehrzahl von Frankiermaschinen (10₁ - 10_n), während des Neukreditierens der betreffenden Frankiermaschinen durch den entfernten Zentralcomputer (20), erhalten werden.

3. Verfahren nach Anspruch 2, in welchem die im entfernten Zentralcomputer (20) gespeicherten Fehlergeschichten periodisch gelesen werden und die Fehlergeschichten an einen Fehleranalyse-Computer (24) übermittelt werden.

4. Verfahren nach Anspruch 2 oder 3, dadurch gekennzeichnet, dass die Fehlergeschichte von der Frankiermaschine (10₁- 10_n) über eine Ein-/Ausgangs-Schnittstelle (19) der Frankiermaschine und ein Telefonnetz (21) an den entfernten Zentralcomputer (20) übermittelt wird.

5. Verfahren nach Anspruch 2 oder 3, dadurch gekennzeichnet, dass die Fehlergeschichte von der Frankiermaschine an den entfernten Zentralcomputer (20) übermittelt wird, indem ein tragbares Speichermodul mit der Frankiermaschine verbunden wird und die Fehlergeschichte in das tragbare Speichermodul geschrieben wird, das Modul dann mit dem entfernten Zentralcomputer (20) verbunden wird und die Fehlergeschichte aus dem Modul in den Computer gelesen wird.

6. Verfahren nach einem der Ansprüche 2 bis 5, dadurch gekennzeichnet, dass in Abhängigkeit von der Analyse der im Fehlergeschichte-Speicher gespeicherten Fehlergeschichte eine Verbindung zwischen dem entfernten Zentralcomputer und einer ausgewählten der Frankiermaschinen (10₁ - 10_n) hergestellt wird und über diese Verbindung der Betrieb der ausgewählten Frankiermaschine geändert wird.

7. Verfahren nach Anspruch 6, dadurch gekennzeichnet, dass während der mit der ausgewählten Frankiermaschine (10₁ - 10_n) hergestellten Verbindung der entfernte Zentralcomputer ein Signal an die ausgewählte Frankiermaschine übermittelt, welches eine Aenderung einer Programmroutine oder Unterroutine in der ausgewählten Frankiermaschine bewirkt.

8. Verfahren nach Anspruch 6, dadurch gekennzeichnet, dass die Aenderung der Programmroutine eine Aktivierung oder Inaktivierung von nebeneinander in der ausgewählten Frankiermaschine vorhandenen Programm-Unterroutinen enthält.

9. Verfahren nach Anspruch 6, 7 oder 8, dadurch gekennzeichnet, dass vom Zentralcomputer ein Löschsignal an die ausgewählte Frankiermaschine übermittelt wird, welches die Löschung einer Fehlermarke in der ausgewählten Frankiermaschine bewirkt.

10. Verfahren nach einem der Ansprüche 6 bis 9, dadurch gekennzeichnet, dass die Uebermittlung von Signalen zur Aenderung des Betriebes einer ausgewählten Frankiermaschine in einer gesicherten Weise erfolgt.

11. Frankiermaschinenanlage, die eine Mehrzahl von Frankiermaschinen (10₁ - 10_n) enthält, wobei jede Frankiermaschine Buchhaltungsregister (16, 17) zum Speichern von Buchhaltungsdaten enthält, Verbindungsmittel (21) zum Uebermitteln von Daten zwischen einem entfernten, zentralen Neueinstell-Computer und jeder der Frankiermaschinen vorgesehen sind und jede Frankiermaschine betätigbar ist, um von dem entfernten, zentralen Neueinstell-Computer aus Distanz neu mit Kredit ausgestattet zu werden, dadurch gekennzeichnet, dass jede Frankiermaschine einen Fehlergeschichte-Speicher (22) und Mittel (11) enthält, welche nach dem Auftreten eines Fehlers in der Frankiermaschine während des normalen Betriebs der Frankiermaschine zum Frankieren von Postgegenständen wirksam sind, um in den Fehlergeschichte-Speicher (22) einen Fehlercode zu schreiben, der den aufgetretenen Fehler darstellt, so dass der Speicher (22) eine Fehlergeschichte speichert, welche eine Reihe von Fehlercodes enthält, die eine Reihe von aufgetretenen Fehlern darstellt, dass während jedes Neukreditierens jeder Frankiermaschine die Frankiermaschine, die neu kreditiert wird, wirksam ist zum automatischen Lesen der Fehlergeschichte aus dem Fehlergeschichte-Speicher (22) und Uebermitteln der Fehlergeschichte an den entfernten, zentralen Neueinstell-Computer, dass der entfernte, zentrale Neueinstell-Computer einen Fehlergeschichte-Speicher zum Speichern der von den betreffenden Frankiermaschinen übermittelten Fehlergeschichten enthält und dass ein Fehleranalyse-Computer (24) vorgesehen ist, der periodisch betätigbar ist, um mit dem entfernten, zentralen Neueinstell-Computer (20) in Verbindung zu treten, die in den Fehlerspeichermitteln (23) gespeicherten, die Frankiermaschinen betreffenden Fehlergeschichten zu lesen, diese Fehlergeschichten zu analysieren und für jede Frankiermaschine eine Anzeige von bevorstehenden Fehlern zu erzeugen.

Revendications

1. Procédé pour obtenir à distance des données provenant d'une machine à affranchir, dans lequel les données sont stockées dans une mémoire (22) de la machine à affranchir (10₁) ; la machine à affranchir est placée périodiquement en communication avec un ordinateur central (20) placé à distance et, pendant cette communication, les données sont lues dans la mémoire (22) et transmises à l'ordinateur central à distance (20),
caractérisé en ce que

- un code de défaut identifiant un défaut apparaissant pendant le fonctionnement normal de la machine à affranchir (10₁) dans l'affranchissement d'articles de courrier, est stocké dans la mémoire (22) à l'apparition du défaut, pour former un historique de défauts de la machine à affranchir ;

- pendant chaque communication entre la machine à affranchir et l'ordinateur central à distance (20) destiné à recréditer à distance la machine à affranchir, l'historique de défauts stocké dans la mémoire (22) est automatiquement lu et transmis à l'ordinateur de reconstitution de crédit à distance, pour être écrit dans une mémoire d'historique de défauts (23) ; et en outre

- on analyse l'historique de défauts stocké dans la mémoire d'historique de défauts (23) pour obtenir une indication de défauts menaçant d'arriver.

2. Procédé selon la revendication 1,
caractérisé en outre par
l'étape consistant à stocker dans l'ordinateur central à distance (20) l'historique de défauts reçu de chacune d'un certain nombre de machines à affranchir (10₁-10_n) pendant chaque reconstitution de crédit des machines à affranchir respectives par l'ordinateur central à distance (20).

3. Procédé selon la revendication 2,
comprenant
l'étape consistant à accéder périodiquement aux historiques de défauts stockés par l'ordinateur central à distance (20), et à transmettre ces historiques de défauts à un ordinateur d'analyse de défauts (24).

4. Procédé selon la revendication 2 ou 3,
caractérisé en outre en ce que
l'historique de défauts est transmis de la machine à affranchir (10₁-10_n) vers l'ordinateur central à distance (20) par l'intermédiaire d'une interface d'entrée/sortie (19) de la machine à affranchir, et par un réseau téléphonique (21).

5. Procédé selon la revendication 2 ou 3,
caractérisé en outre en ce que
l'historique de défauts est transmis de la machine à affranchir vers l'ordinateur central à distance (20) en connectant un module de mémoire transportable à la machine à affranchir et en écrivant l'historique de défauts dans le module de mémoire transportable, en connectant le module à l'ordinateur central à distance (20), et en lisant l'historique de défauts transmis du module à l'ordinateur.

6. Procédé selon l'une quelconque des revendications 2 à 5,
caractérisé en outre par
les étapes consistant, en réponse à l'analyse de l'historique de défauts stocké dans la mémoire d'historique de défauts, à établir une communication entre l'ordinateur central à distance et l'une, sélectionnée, des machines à affranchir (10₁-10_n), et à effectuer, par cette communication, une modification de fonctionnement de la machine à affranchir sélectionnée.

7. Procédé selon la revendication 6,
caractérisé en outre en ce que
pendant la communication établie avec celle, sélectionnée, des machines à affranchir (10₁-10_n), l'ordinateur central à distance transmet à la machine à affranchir sélectionnée, un signal servant à modifier un programme ou un sous-programme dans la machine à affranchir sélectionnée.

8. Procédé selon la revendication 6,
caractérisé en outre en ce que
la modification du programme comprend l'activation ou la désactivation de sous-programmes qui cohabitent dans la machine à affranchir sélectionnée.

9. Procédé selon la revendication 6, 7 ou 8,
caractérisé en outre par
l'étape consistant à transmettre de l'ordinateur central à la machine à affranchir sélectionnée, un signal de remise à l'état initial servant à remettre à l'état initial un drapeau de signalisation de défaut dans la machine à affranchir sélectionnée.

10. Procédé selon l'une quelconque des revendications 6 à 9,
caractérisé en outre en ce que
la transmission des signaux pour modifier le fonctionnement d'une machine à affranchir sélectionnée, est effectué d'une manière sécurisée.

11. Système de machines à affranchir comprenant un certain nombre de machines à affranchir (10₁-10_n), chaque machine à affranchir comprenant des registres de comptabilité (16, 17) pour stocker des données de comptabilité, des moyens de communication (21) pour transmettre les données entre un ordinateur de remise à l'état initial central, à distance, et chacune des machines à affranchir, chaque machine à affranchir pouvant fonctionner pour être recréditée par l'ordinateur de remise à l'état initial central, à distance,
caractérisé en ce que

- chaque machine à affranchir comprend une mémoire d'historique de défauts (22) et des moyens (11) fonctionnant au moment de l'apparition d'un défaut dans la machine à affranchir pendant le fonctionnement normal de celle-ci dans l'affranchissement d'articles de courrier, pour écrire dans la mémoire d'historique de défauts (22) un code de défaut représentant le défaut qui est apparu, de façon que la mémoire (22) stocke un historique de défauts comprenant une série de codes de défauts représentant une série de défauts ayant apparu ;

- pendant chaque reconstitution de crédit de chaque machine à affranchir, la machine à affranchir qui est recréditée fonctionne automatiquement pour lire l'historique de défauts dans la mémoire d'historique de défauts (22), et pour transmettre l'historique de défauts à l'ordinateur de remise à l'état initial central, à distance ;

- l'ordinateur de remise à l'état initial central, à distance, comprend une mémoire de stockage de défauts pour stocker les historiques de défauts transmis par les machines à affranchir respectives ; et en outre

- par un ordinateur d'analyse de défauts (24) pouvant fonctionner périodiquement pour communiquer avec l'ordinateur de remise à l'état initial central, à distance, (20), pour lire les historiques de défauts stockés dans les moyens de stockage de défauts (23) concernant les machines à affranchir, afin d'analyser ces historiques de défauts et de générer, pour chaque machine à affranchir, une indication retardant les défauts.

Drawing