The security-relevance of the reverse vending machines
Reverse vending machines generate an electronic data set for each valid, compulsory-deposit one-way drinks packaging with which they are fed, this serving as a basis for deposit clearing in the DPG-System.
Since each of these raw data sets has a value of 25 cents, it must be ensured that
the recognition of DPG packagings by Reverse Vending Machines is reliable
That DPG packagings for which a data set has been generated have been reliably devalued
That packagings not entitled to a deposit are reliably rejected
That for each input DPG packaging no more than one data set can be prepared
That a counterfeiting of raw data sets can be fully excluded
That a duplication of raw data sets is not possible
Two-Stage Certification Procedure
The certification procedure foreseen for the licensing of DPG collection machines is a two-stages procedure:
Stage 1 " Preliminary Check (once only)
The licensing of a counting centre is undertaken by DPG following a successfully completed preliminary check by one of the DPG licenced certification bodies. The preliminary check consists of the following part-checks:
This is a check to ensure that all of the necessary specification documents and proofs in accordance with DPG certification regulations are available (e.g. operating instructions, process description, etc).
The appraisal is undertaken on the basis of the DPG checklist for counting centres and covers all DPG specifications. It consists of an "on-site" appraisal of the company-internal infrastructure by the experts(s) / auditor(s) of the certification body. After successful examination, a report on the certification is prepared and, following a Stage-1 Certificate, issued on the preliminary check. This is the precondition for a DPG licence.
Generation of raw data sets
Apart from checking the mechanical components of the counting centres, a check on the IT side also forms a part of the certification. 6 months after passing the preliminary check (stage 1), at the latest, the first certification audit (stage 2) must be completed with the issuing of a certificate.
Stage 2 " Initial Certification
The first certification audit consists of an "on-site" appraisal by the certification body of the company-internal infrastructure. After successful initial certification a report on the certification is prepared and is issued as a Stage-2 Certificate.
After satisfying the initial certification or repeat certification, a certificate will be issued, this being valid for a maximum of 18 months, subject to the precondition that every 12 months a renewed repeat certification is undertaken on the basis of the DPG specifications valid at the time.