EP3195276A1

EP3195276A1 - Device for unlocking at least one opening leaf and equipment for receiving objects, associated data storage assembly and associated object distribution system

Info

Publication number: EP3195276A1
Application number: EP15771671.3A
Authority: EP
Inventors: Jean-Paul Fabre
Original assignee: LA POSTE
Current assignee: LA POSTE
Priority date: 2014-09-16
Filing date: 2015-08-27
Publication date: 2017-07-26
Also published as: FR3025823A1; WO2016042232A1; FR3025823B1

Abstract

The present invention relates to a device (22) for unlocking at least one opening leaf (20) forming access to a zone. The unlocking device (22) comprises at least one electronic lock (24) and a control module (26), the electronic lock (24) comprising drive means capable of locking and unlocking the opening leaf (20) according to the value of a data item, the control module (26) comprising a sensor (44) of a signal (56) comprising a digital key and an electronic component for authenticating the digital key, the authentication of the digital key by the electronic component (46) generating a command signal to deactivate the drive means. The electronic lock (24) comprises means of detecting a closing of the opening leaf (20), and the control module (26) comprises means (50) of emitting a signal (62), and means (52) of generating digital keys capable of generating a unique digital key for each closing of the opening leaf (20), the electronic component (46) being able to authenticate the digital key received by comparison with the unique digital key generated.

Description

DEVICE FOR UNLOCKING AT LEAST ONE OPENING DEVICE, AND OBJECT RECEIVING EQUIPMENT, DATA STORAGE ASSEMBLY AND SYSTEM FOR DISTRIBUTING OBJECTS THEREOF

TECHNICAL FIELD OF THE INVENTION

The present invention relates to the field of unlocking devices of an opening forming access to a zone, such as for example a setpoint opening or mailbox. Such devices make it possible to secure access to the zone, for example to the contents of the deposit or the mailbox. More particularly, the invention relates to unlocking devices electronically controlled by means of a portable object such as a mobile phone equipped with coupling means to the unlocking device.

STATE OF THE PRIOR ART

There are many devices for closing and unlocking an opening forming access to a zone.

In particular, the document EP 2 628 418 A1 describes a device for unlocking an opening of a receiving instruction of an object. The device is equipped with an electronic lock capable of automatically locking the opening during the manual closing thereof, and unlocking the opening after receiving a signal issued by an electronic chip card. A disadvantage of this device is that the smart card may be lost or stolen, or compromised by duplication, which affects the security of the whole and may allow an unauthorized person to easily access the contents of the instruction. .

Other devices are known, which include data acquisition means allowing for example the input of an alphanumeric code by the user to cause the unlocking of the opening. A problem encountered in such devices, besides the constraining aspect of the manual entry of the code, is again that of the possible theft of the code by a malicious person.

A known solution to overcome part of the aforementioned drawback is provided by devices for securing access to a zone from a digital key transmitted by a mobile phone. Such devices include a memory storing a list of predetermined digital keys allowing the unlocking of the opening.

However, the security relative to the unlocking by such a device can be compromised if an unauthorized user uses one or more digital keys that have already served and belonging to the list of predetermined digital keys. In addition, such a device requires a relatively complex and expensive maintenance, especially to update at any time in the memory of the device, the list of "valid" digital keys. SUMMARY OF THE INVENTION

The invention described below aims to remedy all or part of the disadvantages of the state of the art and in particular to provide an unlocking device of at least one opening forming access to a zone to ensure a simple and reliable way closing and unlocking the door, while improving the level of security of the device.

For this purpose, the invention relates to a device for unlocking at least one opening forming access to a zone, the device comprising at least one electronic lock and a control module connected to the electronic lock via a link. of data, the electronic lock comprising motor means able to lock and unlock the opening according to the value of a setpoint received via the data link, the control module comprising a sensor of a signal comprising a digital key and a component electronic recognition to authenticate the digital key, the sensor being able to transmit the signal to the electronic recognition component, said component being connected to the data link and being powered by power supply means, the authentication of the digital key by the electronic component generating a deactivation control signal of the motor means for unlocking the door leaf, in which the electronic lock comprises means for detecting an opening of the door that can emit a closing detection signal on the door; data link, and the control module further comprises means for transmitting a signal and means for generating digital keys connected to the power supply means, the electronic component and the transmission means, the means for generation being able to generate a unique digital key at each closing of the opening, the transmitted signal comprising the unique digital key generated, the recognition electronic component being able to authenticate the digital key received by comparison with the unique digital key generated.

Thanks to the presence of means for detecting a closure of the opening in the electronic lock and means for generating a single digital key within the control module, and the fact that the electronic component recognition is able to authenticate the digital key received by comparison with the unique digital key generated, the risk that an unauthorized person compromises the area using key (s) having already served (s) is greatly reduced. This makes it possible to obtain a high level of security and thus be able, for example, to attribute to an identified user the temporary or non-temporary use of the zone, by providing this user with the generated digital key. The unlocking device according to the invention thus advantageously ensures that only the identified user, or one of the proxies he has previously designated, is able to unlock the door to access the area. According to a particular technical feature of the invention, the control module further comprises a data coding component connected on the one hand between the sensor and the electronic component and on the other hand between the key generation means digital and means for transmitting a signal, the coding component being able to code the digital keys generated by the generation means and to transmit the coded digital keys to the transmission means, the coding component being able to decode a coded digital key contained in a signal received by the sensor and transmitting the decoded digital key to the electronic component.

This makes it possible to increase the level of confidentiality of the generated keys, in particular in case of theft of these after their transmission by the transmitting means. The overall security level of the device is thus improved. Advantageously, the electronic component comprises an electronic clock, a timestamp information is associated with the generated unique digital key, and the electronic component is only able to authenticate a received digital key by comparison with the generated unique digital key that for a predetermined duration. This feature reduces the risk of compromise access to the area in case of theft, after its issuance, a digital key generated. An additional security gain is thus obtained.

According to another aspect, the invention also relates to an object receiving equipment comprising at least one instruction provided with an opening forming an access to an interior space of the setpoint for receiving an object, the equipment further comprising an unlocking device of the opening, wherein the unlocking device is as described above, the electronic lock being arranged within the setpoint.

In a particular embodiment of the invention, the control module is arranged within the setpoint. In other words, according to this particular configuration, the object of the invention is a set-piece provided with an opening and comprising a device for unlocking the door as described above. According to this particular embodiment of the invention, the bulk of the object receiving equipment is reduced.

In another particular embodiment of the invention, the object receiving equipment comprises a plurality of instructions, each instruction being provided with an opening, and the unlocking device comprises a plurality of electronic locks, each lock. electronic being arranged within one of the set (s) and being able to lock and unlock the opening of this setpoint, the control module being connected to each electronic lock via a data link and being able to generate a digital key unique at each closing of one of the opening.

This other particular embodiment of the invention allows, through the pooling of the control module connected to several electronic locks, to centralize access to the unlocking device of the opening instructions. The costs are thus reduced.

According to another aspect, another subject of the invention is a data storage assembly adapted to be connected to at least one object receiving equipment via a communication network, in which the or each reception equipment The objects are as described above, the storage assembly being suitable for storing at least one digital key intended, after analysis by the electronic component of the control module, to unlock the one or more of the instruction (s) of the equipment for receiving objects. According to a particular technical feature of the invention, the data storage assembly comprises a management module of the availability of instructions, the module comprising a storage table of a plurality of consignment notes, each bulletin of logging being associated with one of the setpoints and being adapted to take a first value corresponding to a free state of the setpoint, and a second value corresponding to a busy state of the setpoint.

With this feature, a pooling of access to the deposit is possible, by sequential booking of the deposit to different users, without risk to the confidentiality of deposited objects. This thus allows a reduction in the size of the object receiving equipment and therefore a reduction in costs.

According to another aspect, the invention also relates to an object distribution system comprising: · at least one object receiving equipment, the or each equipment being as described above;

At least one communication device capable of emitting a signal comprising a digital key, the signal being able to be picked up by the sensor of one or more of the unlocking device (s) and analyzed by the electronic recognition component of said device for unlocking, the or each communication device comprising data receiving means adapted to communicate with the transmission means of the unlocking device so as to receive the digital key (s) generated by the module controlling said device;

A data storage assembly, connected to the or each communication device via a communication network, the data storage assembly being as described above. Advantageously, the object distribution system comprises at least two communication devices adapted to transmit a signal comprising a digital key, and the storage assembly is adapted to transmit, to a first of said communication devices, the or each digital key provided by a second of said communication devices, and, for the or each received digital key, generating a notification message indicative of the presence of an object in the one or more instructions and to transmit this message of notification to the first communication device. Thus, the second communication device makes it possible to transmit to the storage assembly the digital key generated by the unlocking device. The data storage assembly can then transmit this digital key to the first communication device, corresponding to a communication device of a predetermined recipient of the object, an identifier of this first communication device having preferably been previously provided. saved in the storage set.

According to a particular technical feature of the invention, the first communication device is provided with data acquisition means comprising a user interface and an application stored within the first communication device.

Advantageously, the storage assembly is adapted to be connected, via the communication network, to a recipient database, the recipient database comprising records previously validated as recipient authentication values, and the data acquisition means of the first communication device are clean, via the user interface, to receive an identification input from a user, the storage assembly being able to transmit, to the first communication device, the or each digital key received only if the entry identification is one of the records in the recipient database.

This allows a more secure authentication of the identity of the recipient, prior to delivery of the digital key to the recipient via its communication device. The overall security level of the object distribution system is thus improved.

In another aspect, the invention also relates to a computer program product downloadable from a communication network and / or recorded on a computer readable medium and / or executable by a processor, including program instructions. said program instructions forming the application of the data acquisition means of the first communication device of the object distribution system as described above, when the program product is executed on said communication device. BRIEF DESCRIPTION OF THE FIGURES

Other features and advantages of the invention will become apparent from reading the description which follows, given solely by way of example, and with reference to: FIG. 1 is a schematic representation of a distribution system of objects, the system comprising two communication devices and an object receiving equipment, the assembly being provided with six setpoints and an unlocking device according to one embodiment of the invention, the unlocking device comprising six electronic locks; Figure 2 is a schematic representation of one of the electronic locks of Figure 1, arranged within one of the instructions; Figure 3 is a schematic representation of an application stored in a memory of one of the communication devices of Figure 1; Figure 4 is a schematic representation of an unlocking device according to an alternative embodiment of the invention.

DETAILED DESCRIPTION OF AN EMBODIMENT

In the remainder of the description, the term "opening" means any movable mechanical element between a closed position of access to a zone and an open position for access to the zone.

The term "communication device" also means any nomadic electronic device able to transmit and receive data via a network or a portion of wireless network, such as for example a laptop, a phone, a smartphone, or still a digital tablet, without this list being exhaustive.

Also meant by "motor means" mechanical engagement means for changing a first position or mechanical configuration of an element of the invention to a second position or mechanical configuration. Also means "set" any mechanical container defining an interior space that can receive an object.

In the remainder of the description, a signature or a numerical key is referred to either interchangeably.

With reference to FIG. 1, an object distribution system 1 comprises at least one object receiving equipment 10, at least one communication device 12A, 12B and a data storage assembly 14, connected to the or to each communication device 12A, 12B via a communication network 16. In the embodiment of FIG. the object distribution system 1 comprises a single object receiving equipment 10, a first communication device 12A and a second communication device 12B. In this particular embodiment, the object distribution system 1 is connected, via the communication network 16, to a database 17 of recipients.

The communication network 16 is provided with a private or extended communication infrastructure for connection or access to communication equipment type servers and / or databases and / or mobile communication devices. Typically, the communication infrastructure forms a wireless network, or a wired network, or a network comprising a wireless portion and a wired portion. In a particular embodiment, the communication network 16 is designed as comprising an Internet-type network portion and a UMTS (Universal Mobile Telecommunications System) type mobile network portion.

The equipment 10 for receiving objects comprises at least one set 18 provided with an opening 20 forming an access to an interior space of the set 18 for receiving an object. The equipment 10 further comprises a device 22 for unlocking the opening 20. In one embodiment of the invention illustrated in FIG. 1, the equipment 10 comprises at least two instructions 18. As an example, no For example, the object receiving equipment 10 comprises six instructions 18, as shown in FIG. 1.

The unlocking device 22 comprises at least one electronic lock 24 and a control module 26 connected to the or each electronic lock 24 via a data link 28. In the embodiment of the invention illustrated in Figure 1 , the unlocking device 22 comprises at least two electronic locks 24. By way of non-limiting example, the equipment 10 for receiving objects comprises for example six electronic locks 24, as shown in FIG. Each electronic lock 24 is arranged within one of the instructions 18 and is able to lock and unlock the opening 20 of this setpoint 18. The control module 26 is connected to each electronic lock 24 via a separate data link 28, three data links 28 only being shown in Figure 1 for reasons of clarity.

Each electronic lock 24 comprises motor means 30 and means 32 for detecting a closure of the opening 20 of the associated instruction 18, as shown in Figure 2. In the embodiment of the invention FIGS. 1 and 2, each electronic lock 24 further comprises means 34 for powering the motor means 30.

The motor means 30 are able to lock and unlock the opening 20 according to the value of a setpoint received via the data link 28, as detailed later. The motor means 30 are for example formed of a micro-motor for moving in translation a mechanism protecting the lock against shocks related to the displacement of the opening 20.

The detection means 32 are capable of transmitting a signal for detecting the closure of the opening 20, on the data link 28. In the embodiment of FIG. 2, the detection means 32 comprise a motion sensor 36 capable of detecting an opening of the opening 20 and a data transceiver 38 connected to the motion sensor 36 and to the data link 28. The transceiver 38 is further connected to the drive means 30 The power supply means 34 are connected to the motor means 30. In a particular embodiment, illustrated in FIG. 2, the power supply means 34 comprise a dynamo 40 equipped with a piezoelectric system. connected to the opening 20, and an electrical energy storage element 42 connected to the dynamo 40. Such a device configuration makes it possible to generate an electric current during each opening and closing movement of the opening 20 and thus be able to advantageously recharge the electrical energy storage element 42, for the power supply of the motor means 30. Alternatively, the power supply means 34 comprise an electrical energy storage element such as consumable batteries, rechargeable batteries by an external device, or a battery. According to this variant, the power supply means 34 are able to generate a signal indicative of the current charge level of the cells or the battery, and the transceiver 38 is able to transmit this signal to the control module 26, via the data link 28. The control module 26 is then able to transmit this indicative signal to the storage assembly 14, for example via one of the communication devices 12A, 12B. This allows in particular to generate an alert to inform that replacement or recharging of the electrical energy storage element is necessary.

The control module 26 comprises a signal sensor 44, an electronic component 46 connected to the sensor 44 and to each data link 28 and power supply means 48 connected to the electronic component 46, as shown in FIG. 1 . The control module 26 further comprises means 50 for transmitting signals and means 52 for generating digital keys connected to the power supply means 48, to the electronic component 46 and to the transmission means 50. Preferably, as illustrated in FIG. 1, the control module 26 also comprises a data coding component 54.

The sensor 44 is adapted to receive a signal 56 comprising a digital key CN, CNC issued by a device 12A, 12B disposed near the control module 26. The sensor 44 is adapted to transmit this signal 56 to the electronic component 46 Preferably, the The sensor 44 is further adapted to receive a lock control signal from one of the openings 20 and to transmit this signal to the electronic component 46.

The electronic component 46 is an electronic recognition component for authenticating a digital key CN received via the signal 56. The electronic component 46 is clean, when authenticating the digital key received CN, to generate a set signal deactivating one of the motor means 30 for unlocking one of the openings 20, and transmitting this signal on the corresponding data link 28. The electronic component 46 is also clean, following the reception of a locking control signal from one of the openings 20, to generate an activation command signal from the motor means 30 for locking this opening 20, and to transmit this signal on the corresponding data link 28. The electronic component 46 is for example provided with an analog-digital converter connected to the sensor 44, and a calculation module connected to the converter and formed of at least one processor associated with at least one memory, these different elements not shown in the figures for the sake of clarity. Preferably, as illustrated in FIG. 1, the electronic component 46 also comprises an electronic clock 60. The electronic clock 60 is for example connected to the processor of the electronic component 46.

In a particular embodiment, the power supply means 48 comprise an electrical energy storage element and an energy conversion element connected to the electrical energy storage element. The energy conversion element is for example an element for converting light energy into electrical energy such as, for example, a photovoltaic cell. In a variant, the energy conversion element is an element for converting thermal energy into electrical energy. This allows a continuous and autonomous recharge of the energy storage element, and thus contributes to reducing or eliminating the replacement operations of the power supply means 48. In another embodiment, the power supply means 48 are formed by an electrical energy storage element such as consumable batteries, rechargeable batteries by an external device, or a battery.

The transmission means 50 comprise for example a radio frequency transmitter associated with a digital-to-analog converter. The radio frequency transmitter is for example suitable for transmitting a signal included in the group consisting of: a frequency signal comprised in the Bluetooth band, a frequency signal included in the NFC (Near Field Technology) band, a frequency signal included in the Wi-Fi band and a frequency signal included in the Zigbee band.

The means 52 for generating digital keys are able to generate a unique digital key at each closure of one of the openings 20, the transmission means 50 being adapted to emit a signal 62 comprising the generated digital key. More specifically, the generation means 52 are able to generate a unique digital key following each reception by the electronic component 46 of a detection signal of the closing of one of the openings 20. The generation means 52 are also suitable for transmit each generated digital key to the electronic component 46, for storage in its memory, thus allowing subsequent authentication of a received digital key CN by comparison with the generated digital key. More specifically, the electronic component 46 is clean, for each instruction 18, to authenticate a digital key CN received only by comparison with the last digital key generated when closing the opening 20 of this setpoint 18. In a mode of the invention, the processor of the electronic component 46 is clean, for each 18, to replace in the memory of the electronic component 46 a possible digital key already stored by the unique newly generated digital key when closing the opening 20 of the instruction 18. This advantageously reduces the memory space required for storing the digital keys in the memory of the electronic component 46.

The generation means 52 are for example formed of a software module for generating unique digital keys.

In the preferred embodiment in which the electronic component 46 also comprises an electronic clock 60, a timestamp information is associated with the unique digital key generated and the electronic component 46 is only able to authenticate a digital key. CN received by comparison with the generated digital key only for a predetermined duration. This allows, in case of theft of a single digital key after its transmission by the control module 26, to reduce the duration of a "dummy" time window during which access to the interior space of an instruction 18 may be compromised. An additional security gain is thus obtained.

The data coding component 54 is connected on the one hand between the sensor 44 and the electronic component 46, and on the other hand between the digital key generation means 52 and the signal transmission means 50. The coding component 54 is able to code the unique digital keys generated by the generation means 52. The coding component 54 is furthermore able to decode a CNC coded digital key contained in the signal 56 and to transmit the decoded digital key CN to the electronic component 46. The coding component 54 is also able to transmit the coded digital keys to the transmission means 50, after reception by the electronic component 46 of a locking control signal of one of the openings 20. As a variant not shown, the motor means 30 of each electronic lock 24 are able to lock the associated opening 20 when closing the opening 20. According to this variant, the coding component 54 is able to transmit the coded digital keys to the transmission means 50 immediately after their coding. In the preferred embodiment of Figure 1, the coding component 54 is a symmetric encryption component. More particularly, the coding component 54 is able to apply, on the unique digital key generated by the generation means 52, a symmetric encryption algorithm having as a parameter a symmetric cryptographic key. In a preferred embodiment, the symmetric encryption component 54 includes a memory. According to this preferred embodiment, the symmetric encryption component 54 is able to regenerate, after a predetermined duration, a new symmetric cryptographic key serving as a parameter to the symmetric encryption algorithm, and to keep in its memory the each symmetric cryptographic key generated previously, as long as unique numerical keys encoded by these symmetric keys are still in circulation. This makes it possible, in the event of theft of a symmetric encryption key after its generation by the symmetric encryption component 54, to reduce the duration of a "fictional" time window during which access to the interior space of a set point 18 can be compromised. An additional security gain is thus obtained.

By keeping the symmetric cryptographic key generated, the coding component 54 is thus the only one able to decode the coded digital keys transmitted to the transmission means 50. This increases the confidentiality level of the generated keys. In an alternative embodiment, the coding component 54 is a masking or obfuscating component of data. In another embodiment, which can be combined with the previous embodiments, the coding component 54 is furthermore able to apply, on a digital key that it has previously coded, an encryption algorithm asymmetric parameter having a public cryptographic key previously transmitted by the storage set 14. The asymmetric encryption algorithm is for example an RSA type algorithm (Rivest Shamir Adleman). This makes it possible to avoid, in the event of compromise of the coding component 54 by a malicious user, that this user may compromise access to all of the instructions 18. An additional security gain is thus obtained. In another embodiment, which can be combined with the previous embodiments, the coding component 54 has the ability to add a digital signature to each unique digital key generated. The digital signature is for example a digital signature of SHA (Secure Hash Algorithm) type.

Each data link 28 is a wired or non-wired bidirectional link. In the embodiment of the invention of FIG. 1, each data link 28 is for example a bidirectional coded point-to-point link.

Each communication device 12A, 12B is adapted to emit a signal 56 comprising a digital key coded CNC or non-coded CN. More specifically, each communication device 12A, 12B comprises a transmitter 64 capable of transmitting such a signal 56 over a wireless link 65. Each communication device 12A, 12B further comprises means 66 for receiving data transported over the link without wire 65, such as a signal receiver as shown in FIG. Preferably, as shown in this figure, each communication device 12A, 12B is also provided with a computing unit formed of a processor 70 connected to a memory 72, and means 74 for data acquisition.

The transmitter 64 is for example a radio-frequency transmitter adapted to emit a signal included in the group consisting of: a frequency signal included in the Bluetooth band, a frequency signal included in the NFC band (Near Field Technology ), a signal of frequency in the Wi-Fi band and a frequency signal in the Zigbee band. The transmitter 64 is further connected to the communication network 16 and is also suitable for transmitting radio signals in accordance with the UMTS standard. Each wireless link 65 is for example a wireless link chosen from the group consisting of: a Bluetooth link, an NFC link, a Wi-Fi link and a Zigbee link.

The means 66 for receiving data are adapted to communicate with the transmission means 50 of the unlocking device 22 so as to receive each unique digital key generated by the device 22. The transmitter 64 is adapted to transmit each key single digital receiver received at the storage assembly 14 via the communication network 16.

The receiving means 66 are further connected to the communication network 16 and are also suitable for receiving radio signals in accordance with the UMTS standard.

The processor 70 is connected to the transmitter 64, the means 66 for receiving data and the means 74 for data acquisition. In a particular embodiment, the processor 70 is able to generate, following the reception of a control signal transmitted by the data acquisition means 74, a signal indicative of the "free" state of one of the instructions 18. The processor 70 is able to transmit this signal to the transmitter 64, for transmission to the storage assembly 14. The processor 70 is also able to generate, following the reception of a control signal transmitted by the means 74 for acquiring data, a control signal for locking one of the openings 20 and for transmitting this signal to the transmitter 64, for transmission on the wireless link 65. In a particular embodiment, the memory 72 is able to store each unique digital key generated by the unlocking device 22. According to this embodiment, the processor 70 is able to control the transmission to the storage assembly. 14, via the transmitter 64, of each digital key stored in the memory 72 only if the connection is established on the network 16 between the communication device 12A, 12B and the storage assembly 14. This ensures a transmission to the storage assembly 14 of all the unique digital keys generated by the unlocking device 22, even if at the moment of their reception by the communication device 12A, 12B the connection is not possible on the network 16. Thus, the implementation of the object distribution system 1 is facilitated, regardless of the coverage of the communication network 16 with respect to the location of the reception equipment. Objects 74. The data acquisition means 74 comprise a user interface 76 and an application 78A, 78B stored within the memory 72 and capable of being implemented by the processor 70. More specifically, the means 74 data acquisition of the first communication device 12A, respectively the second communication device 12B, comprise a first application 78A, respectively a second application 78B.

The user interface 76 of the first communication device 12A is for example a touch screen. The user interface 76 of the second communication device 12B comprises, for example, a touch screen associated with a geolocation data sensor of GPS type (Global

Positioning System) and / or a camera.

The first application 78A is for example downloadable from the communication network 16. The first application 78A comprises a module for acquiring a user identification input. Such an identification input can for example take the form of a sequence of alpha-numeric characters, such a sequence of alpha-numeric characters may for example correspond to a digital identity of type Verified Digital Identity of a user, as detailed later. Advantageously, the first application 78A also includes an electronic signature module.

The second application 78B is for example downloadable from the communication network 16. In a particular embodiment, the second application 78B comprises a data acquisition module 80 and / or a compliance control module 82. an identity of a user and / or a module 84 for creating a digital identity and / or an electronic signature module 86. In the exemplary embodiment of Figure 3, the second application 78B comprises the four modules 80, 82, 84, 86 above.

The data acquisition module 80 is for example clean, in combination with the user interface 76, to acquire input data in the form of textual data, geolocation data or still photographs. A user of the second communication device 12B, carrying one or more objects to be distributed via the object distribution system 1, can thus advantageously record in the second communication device 12B the address of a recipient user, or an identification entry corresponding to a digital identity of the user, or acquire a photograph of an identity document of the user.

The module 82 for checking compliance of a user's identity is clean, from a digital identity or a photograph of an identity document acquired by the acquisition module 80, to compare that digital identity or photograph to a pre-recorded list of identities or pieces of identification considered "valid". The pre-registered list is for example stored in the memory 72. In a variant, the pre-registered list is stored in a memory. remote server connected to the second communication device 12B via the communication network 16. Depending on the result of the comparison made, the compliance control module 82 is thus able to authenticate the identity of a user, for example a recipient user. an object or document.

In a particular embodiment, the module 84 for creating a digital identity is able to create a digital Identity Identity Digital Verified, called in the following description "IDN". The IDN is here presented in combination with the present invention, but it should be noted that the process of issuing the IDN as well as all the afferent characteristics, can be implemented independently of the present invention and of its embodiments. Thus, the IDN system as described later allows an IDN user to have a verified digital identity, which can be used for identification purposes for any type of service.

The IDN system will now be described independently.

In an IDN system, the attributes of an IDN user relate, in particular:

• account information (pseudonym, password),

• the identity of the IDN user (title, surname, first name, date of birth),

• a physical, postal or geographical address (street name, postal code, city, country, etc.), · a digital identifier of a user's identity document,

• E-mail, • a mobile phone number.

The principle of the IDN system is that an IDN user declares information, which will be verified by the compliance control module 82, and which can then be used without requiring a new verification at each use.

The implementation of an IDN process includes, for example, the following steps:

1. A start of registration step during which an IDN user declares, for example via the user interface 76, elements of his identity (title, surname, first name, date of birth, e-mail address, postal address, mobile number) and a personal password;

2. A step in which the IDN service sends a registration notification message to the email address declared by the IDN user; this message contains, in particular, a url link to a page for confirming the registration and thus the IDN IDN of the user of the IDN service;

3. A step during which the IDN user confirms the registration, for example by visiting a website corresponding to the link provided in the message;

4. A step in which the service sends an SMS activation code to the mobile number declared by the IDN user;

5. A step during which the IDN user enters, via the interface, the SMS code received, so that the existence and validity of the mobile number he has declared are verified and confirmed; 6. A step during which the service sends the IDN user an activation code by post to the address he has declared;

7. A step in which the postal mail, or any means of issuing the activation code, is delivered to the address, by hand or by any other means to verify the recipient's postal address and identity the IDN service user;

8. A step during which the IDN user enters, for example via the user interface 76, the activation code received by mail and delivered by hand, in order to validate the physical address declared by the user. IDN and confirm verification of the identity of the IDN user he has declared;

9. A final step during which the service confirms to the IDN user, through the module 84 for creating a digital identity, the creation of his personal IDN.

Thus, such an IDN service makes it possible to check one by one all, or a subset, of the data provided by the IDN user and in particular the identity that he has declared. User data is stored securely.

The data storage assembly 14 is connected to the recipient database 17 via the communication network 16. The storage assembly 14 is further connected to the or each equipment 10 for receiving objects. via the communication network 16. In the exemplary embodiment of FIG. 1, the storage assembly 14 is connected to the object receiving equipment 10 via the communication network 16 and the communication devices 12A. 12B. As a variant, not represented, the storage assembly 14 is connected directly to the equipment 10 via the communication network 16 which is for example a network of low-speed communication, and the control module 26 of the unlocking device 22 comprises an access terminal to the communication network 16.

The data storage assembly 14 is adapted to store each unique digital key generated by the unlocking device 22. In the embodiment of FIG. 1, the storage assembly 14 comprises a server 88 connected to a database 90.

The server 88 comprises for example a processor 92 and a memory 94 connected to the processor 92. The processor 92 is able to transmit, to the first communication device 12A, each unique digital key provided by the second communication device. 12B. Preferably, the processor 92 is able to generate notification messages. The processor 92 is thus able to transmit to the first communication device 12A, for each digital key received from the second communication device 12B, a notification message indicative of the presence of an object in one of the instructions 18.

According to a particular embodiment of the invention, the memory 94 forms a management module of the availability of the instructions 18. According to this embodiment, the management module 94 includes a table 96 for storing several newsletters. consignations. Each logbook is associated with one of the setpoints 18 and is able to take a first value corresponding to a "free" state of the setpoint 18, and a second value corresponding to a "busy" state of the setpoint 18. The processor 92 is able to modify, in the storage table 96, the current value of each logbook. This makes it possible to be able to sequentially assign the same instruction 18 to different users, without risk as to the confidentiality of the deposited objects. In particular, the processor 92 is clean, following reception a signal indicative of the "free" state of one of the instructions 18, to assign the first value corresponding to the "free" state to the consignment note associated with this instruction 18.

The database 90 is adapted to store each unique digital key generated by the unlocking device 22. In the embodiment of FIG. 1, the database 90 is able to store each unique digital key transmitted by the second communication device 12B. Preferably, the database 90 is also suitable for storing a table associating communication device identifiers 12A, 12B with pre-registered recipient identification data.

The database 17 of recipients stores previously validated records as recipient authentication values, for example obtained following the implementation of an IDN process as described above. In the particular exemplary embodiment of FIG. 1, the processor 92 is able to transmit, to the first communication device 12A, each unique digital key received only if an identification entry acquired via the data acquisition means 74 of the first communication device 12A corresponds to one of the records of the database 17 of recipients.

The operation of the object distribution system 1 will now be described.

It is assumed that the user of the second communication device 12B, hereinafter referred to as "distributor", carries an object to be distributed to the user of the first communication device 12A hereinafter called "recipient". ". The object to be distributed is for example a registered letter provided with a digital identification code of the letter. It is assumed that initially one of the instructions 18 is free, that is to say, the logbook associated with this instruction in the management module 94 has the first value corresponding to the "free" state. It is assumed that the opening 20 of this setpoint 18 is locked and that the other instructions 18 are occupied. Finally, it is assumed that the database 90 stores a digital coded key CNC capable, after decoding, to be authenticated by the electronic component 46 for the unlocking of the opening 20. The memory of the electronic component 46 stores a digital authentication key initial. The distributor starts by scanner, via its communication device 12B, the numerical code of the registered letter. This digital code is then recorded by the data acquisition module 80 and then transmitted to the storage assembly 14.

In a next step, the distributor enters, in the user interface 76 of the second communication device 12B, an identification entry corresponding to a digital identity of the recipient. Once acquired by the module 80, this identification input is transmitted to the storage assembly 14 via the transmitter 64.

The processor 92 of the storage assembly 14 then verifies that the received identification entry corresponds to one of the records stored in the database 17. If this verification is positive, the processor 92 consults the consignment notes. stored in the table 96 and checks their current value to identify a possible set 18 free. Otherwise, the processor 92 informs the second communication device 12B and the process stops. If the processor 92 identifies a free setpoint 18, it reserves this setpoint 18, that is to say, it assigns the second value corresponding to the "busy" state to the consignment note associated with this setpoint 18. Otherwise, the processor 92 informs the second communication device 12B and the process stops. In the exemplary embodiment described here, the processor 92 identifies the only logbook presenting the first value corresponding to the "free" state and assigning the second value corresponding to the "busy" state to this logbook.

In a next step, the processor 92 retrieves the CNC coded digital key stored in the database 90 and transmits, to the second communication device 12B, this numeric key encoded CNC accompanied by an identifier of the setpoint 18 reserved.

In a next step, the distributor, provided with the second communication device 12B, approaches the control module 26 and enters, in the user interface 76 of the device 12B, an instruction to send the The second communication device 12B then transmits the signal 56 containing the digital coded key CNC on the wireless link 65, to the control module 26. After reception by the sensor 44, the CNC-encoded digital key is decoded by the coding component 54 and then transmitted to the electronic recognition component 46. The electronic recognition component 46 authenticates the digital key CN, generates a deactivation control signal of the motor means 30 of the electronic lock 24 concerned. , and transmits this signal on the associated data link 28. After reception by the electronic lock 24 of the deactivation command signal of the motor means, the motor means 30 unlock the opening 20, thus freeing access to the interior space of the instruction 18.

In a next step, the distributor consults on his communication device 12B the identifier of the reserved setpoint 18, approaches this setpoint 18 and opens the opening 20 of the setpoint 18. In a variant, unlocking the opening 20 by the motor means 30 automatically opens the opening 20, thus providing visual information to the distributor to identify the set 18 reserved. The distributor then places the object to be distributed, in this case the letter recommended, in the interior of the set 18 and closes the opening 20 of the deposit.

During a next step, the detection means 32 arranged in the setpoint 18 detect the closing of the opening 20 and emit a detection signal of the closure of the opening 20 on the data link 28. Following reception of the detection signal by the electronic recognition component 46, the generation means 52 generate a unique digital key. The generation means 52 transmit this unique digital key to the electronic component 46 and the coding component 54. The electronic component 46 replaces the initial authentication digital key with the new unique digital key in its memory, and the coding component 54 codes. the digital key.

In a next step, the distributor enters, through the user interface 76 of the device 12B, a lock control command of the opening 20. The processor 70 then generates the lock control signal of the 20, and transmits this signal to the transmitter 64, for transmission on the wireless link 65. Following receipt of the control signal by the electronic component 46 via the sensor 44, the electronic component 46 generates a set signal activating the motor means 30 for locking the opening 20, and transmits this signal on the associated data link 28. After reception by the electronic lock 24 of the activation setpoint signal of the motor means, the motor means 30 locks the opening 20. At the end of this step, the coding component 54 transmits the coded digital key to the control means. transmission 50 of the control module 26. The transmission means 50 transmit the signal 62 comprising the coded digital key to the second communication device 12B, via the wireless link 65.

During a next step, if the connection is established on the network 16 between the second communication device 12B and the set 14, the processor 70 controls the transmission to the storage assembly 14, via the transmitter 64, the coded unique digital key. In a particular embodiment, if the connection is not established on the network 16 between the second communication device 12B and the storage assembly 14, the memory 72 stores the unique coded digital key. The processor 70 then controls, during a next step, the transmission to the storage assembly 14 of the digital key stored in the memory 72 as soon as the connection is established on the network 16.

In a next step, the server 88 receives the unique coded digital key. The processor 92 of the server 88 associates the coded single digital key with the previously received recipient identification entry, and controls the storage of these data in the database 90. The unique digital key thus stored is a CNC coded digital key. . In a next step, the processor 92 identifies, via the table stored in the database 90, the first communication device 12A as being the recipient's communication device. The processor 92 then generates a notification message indicative of the presence of the registered letter in one of the instructions 18 and transmits this message to the first communication device 12A. According to a preferred exemplary embodiment, the recipient receiving the notification message enters in the user interface 76 of the device 12A an identification entry, for example a digital Identity Identity Digital Verified. The communication device 12A transmits the entered identification entry to the server 88, and the processor 92 of the server

88 checks whether the entered identification entry corresponds to one of the records of the recipient database 17. If the check is positive, the processor 92 transmits to the first communication device 12A the unique numerical key coded CNC, stored in the database 90. Otherwise, this means that the user of the first communication device 12A is not the same. intended recipient, and the key The unique digital coded CNC is not transmitted to the first communication device 12A. This makes it possible to obtain a more secure authentication of the identity of the recipient, prior to the delivery of the digital key to this recipient. In another embodiment, the unique numeric key encoded CNC is transmitted by the processor 92 together with the notification message.

In the particular embodiment described, the recipient then signs "electronically" via its user interface 76 and the electronic signature module of the first application 78A of its device 12A, the registered letter received. This feature allows an advantageous application of the object distribution system according to the invention upon receipt of objects delivered against a signature, such as a registered letter for example. Indeed, no physical presence of the recipient of the object delivered against signature is necessary when receiving the object.

In a next step, the recipient proceeds to the recovery of the object received in one of the instructions 18. To do this, a first possibility is that the recipient goes near the control module 26. The The recipient then enters, into the user interface 76 of the device 12A, an instruction to send the CNC-encoded digital key to the control module 26. The first communication device 12A then transmits the signal 56 containing the CNC-encoded digital key on the wireless link 65, to the control module 26. After reception by the sensor 44, the numeric key coded CNC is decoded by the coding component 54 and then transmitted to the electronic recognition component 46. The electronic recognition component 46 authenticates the digital key CN, generates a deactivation command signal of the motor means 30 of the electronic lock 24 concerned, and transmits this signal on the data link es 28 partner. After reception by the electronic lock 24 of the reference signal of deactivation of the motor means, the motor means 30 unlock the opening 20, thus freeing access to the interior space of the set 18.

During a next step, the recipient consults on his communication device 12A the identifier of the instruction 18 enclosing the object, approaches this instruction 18 and opens the opening 20 of the instruction 18. Alternatively, the unlocking of the opening 20 by the motor means 30 automatically opens the opening 20, thus providing visual information allowing the recipient to identify the instruction 18. The recipient then retrieves the object, in this case the registered letter, in the interior of the set 18 and closes the opening 20 of the deposit.

During a next step, the detection means 32 arranged in the setpoint 18 detect the closing of the opening 20 and emit a detection signal of the closure of the opening 20 on the data link 28. Following reception of the detection signal by the electronic recognition component 46, the generation means 52 generate a unique digital key. The generation means 52 transmit this unique digital key to the electronic component 46 and the coding component 54. The electronic component 46 replaces, in its memory, the digital authentication key present by the new digital key generated, and the coding component. 54 codes the digital key and transmits the coded digital key to the transmission means 50. The transmitting means 50 transmit the signal 62 comprising the coded digital key to the first communication device 12A, via the wireless link 65. [00101] In a next step, if the connection is established on the network 16 between the first communication device 12A and the storage assembly 14, the processor 70 controls the transmission to the storage assembly 14 via the transmitter 64, of the unique coded digital key. In a particular embodiment, if the connection is not established on the network 16 between the first communication device 12A and the set storage 14, the memory 72 stores the unique coded digital key. The processor 70 then controls, during a next step, the transmission to the storage assembly 14 of the digital key stored in the memory 72 as soon as the connection is established on the network 16. The unique digital key thus stored in the storage assembly 14 is a numeric key coded CNC.

During a next step, the recipient enters, via the user interface 76 of the device 12A, a command command "release" of the reservation of the instruction 18. Following receipt of this command instruction , the processor 70 of the device 12A generates a signal indicative of the "free" state of the instruction 18 and transmits this signal to the server 88, via the transmitter 64. The processor 92 of the server 88 then releases the reservation of the instruction 18 that is, it assigns the first value corresponding to the "free" state to the consignment note associated with this instruction 18.

[00103] As a variant of the first possibility described above, a second possibility is that the recipient seize, in the user interface 76 of the device 12A, a transfer instruction of the CNC-encoded digital key to a communication device. another user, later called "proxy". According to this variant, the database 90 is able to store a list of pre-registered proxy identification data, as well as a table associating identifiers of communication devices with these identification data. The first device 12A then transmits a transfer request signal of the CNC coded digital key, to the storage assembly 14. Following the reception of this signal by the processor 92, the latter checks, via the stored list in the database 90, that the requested proxy is one of the pre-registered proxies. If the check is negative, a new notification message indicative of the unauthorized character of the proxy is transmitted to the first communication device 12A. If the check is positive, the processor 92 identifies, via the table stored in the database of data 90, the communication device associated with the requested proxy, then generates a notification message indicative of a request for recovery of the registered letter in one of the instructions 18, and transmits this message to the proxy communication device. According to a preferred embodiment, the proxy receiving the notification message enters into the user interface of its communication device an identification entry, for example a digital Identity Identity Verified Digital. The communication device then transmits the entered identification entry to the server 88, and the processor 92 of the server 88 checks whether the entered identification entry corresponds to one of the records of the database 17. If the verification is positive , the processor 92 transmits to the communication device of the proxy the unique numeric key coded CNC, stored in the database 90. Otherwise, this means that the user of the communication device is not the intended proxy, and the digital key unique CNC code is not transmitted to the latter. The following steps for the object to be retrieved by the proxy are identical to the recipient's previously retrieved object recovery steps, and are therefore not described in more detail. [00104] This embodiment allows a proxy to recover the object to be distributed in the absence of the recipient, and thus can advantageously release the instruction 18 concerned for possible other use. This in turn reduces operating costs. It is thus conceived that the unlocking device 22 according to the invention ensures a simple and reliable way closing and unlocking the opening 20, while improving the level of security of the device.

FIG. 4 illustrates an alternative embodiment of the invention for which the elements similar to the first exemplary embodiment, described in FIG. previously with reference to FIGS. 1 to 3, are identified by identical references, and are therefore not described again.

In this variant embodiment, the unlocking device 22 comprises as many control modules 26 as electronic locks 24, the number of control modules 26 being furthermore equal to the number of setpoints 18. Each control module 26 is in fact arranged within one of the setpoints 18 and is connected to the electronic lock 24 arranged within this setpoint, via one of the data links 28. In a particular embodiment of this variant, the receiving equipment 10 of objects comprises a single instruction 18 provided with an opening 20, and the unlocking device 22 comprises a single electronic lock 24 and a single control module 26, arranged within the setpoint 18.

In the embodiment of Figure 4, the power supply means 34 comprise an element 42 for storing electrical energy such as for example consumable batteries.

Preferably, according to this embodiment, each data link 28 is a bidirectional wired link.

Preferably, according to this embodiment, the transmitter 64 of each communication device 12A, 12B is a transmitter capable of emitting a frequency sound signal included in the audio band [20 Hz - 16 kHz]. Alternatively, the transmitter is capable of transmitting a signal with a frequency below 20 Hz or a signal with a frequency greater than 16 kHz. This makes it possible, for example, to use as the transmitter 64 the loudspeaker of any conventional telephone 12A, 12B and as a signal sensor 44 an audio sensor. This further allows a given instruction 18 to automatically recognize, when receiving the signal 56 comprising a numeric key coded CNC or non-coded CN, the communication device 12A, 12B emitting the signal. In operation, the only difference between the object distribution system according to the embodiment shown in Figure 4 and the object distribution system according to the first embodiment illustrated in Figures 1 to 3 is that the distributor, as the recipient, instead of approaching a single control module to issue a CNC-encoded digital key, approaches the instruction 18 concerned which contains one of the control modules.

The rest of the operation of the object distribution system according to the embodiment variant illustrated in FIG. 4 being similar to that of the object distribution system according to the first embodiment illustrated in FIGS. 1 to 3, that it will not be described in more detail.

The object distribution system according to the invention offers several advantages:

• It allows a user to an object, for example an object delivered against signature, to retrieve this object quickly in one of the instructions, even when the user is absent during the distribution of the object;

• It allows a flexible and shared use of the instructions between the users, thus offering a service of making available several instructions. Each deposit is bookable and temporarily attributable to a user;

• It allows a "reversible" operation, in other words a user wishing to return an object can deposit this object in one of the instructions 18 and use the unlocking device 22 according to the invention to close the instruction; a distributor can then recover this object, for example during one of his periodic distribution rounds. The invention is described in the foregoing by way of example. It is understood that the skilled person is able to achieve different embodiments of the invention without departing from the scope of the invention. In particular, although the invention is described with reference to an unlocking device of at least one opening forming an access to an interior space of a setpoint, it applies more generally to any unlocking device of at least one opening to access an area that a user wishes to secure.

Claims

Device (22) for unlocking at least one opening (20) forming access to a zone, the device (22) comprising at least one electronic lock (24) and a control module (26) connected to the electronic lock (24) ) via a data link (28), the electronic lock (24) comprising motor means (30) able to lock and unlock the opening (20) according to the value of a setpoint received via the data link (28) , the control module (26) comprising a sensor (44) of a signal (56) comprising a digital key and an electronic recognition component (46) for authenticating the digital key, the sensor (44) being suitable for transmitting the signal (56) to the electronic recognition component (46), said component (46) being connected to the data link (28) and being powered by power supply means (48), key authentication digital signal by the electronic component (46) generating a signal set point for deactivating the motor means (30) for unlocking the door (20), characterized in that the electronic lock (24) comprises means (32) for detecting a closing of the door (20) capable of transmitting a closing detection signal on the data link (28), and in that the control module (26) further comprises means (50) for transmitting a signal (62) and means (52) for generating digital keys connected to the power supply means (50), to the electronic component (46) and to the transmission means (50), the generation means (52) being able to generate a unique digital key at each closure of the opening (20), the transmitted signal (62) comprising the unique digital key generated, the electronic recognition component (46) being able to authenticate the received digital key by comparison with the generated unique digital key. Device (22) according to claim 1, characterized in that the control module (26) further comprises a data coding component (54) connected on the one hand between the sensor (44) and the electronic component (46). and secondly between the means (52) for generating digital keys and the means (50) for transmitting a signal, the coding component (54) being able to code the digital keys generated by the generation means (52) and transmitting the coded digital keys to the transmitting means (50), the coding component (54) being adapted to decode a coded digital key contained in a signal (56) received by the sensor (44) and to transmitting the decoded digital key to the electronic component (46).

Device (22) according to claim 1 or 2, characterized in that the electronic component (46) comprises an electronic clock (60), in that timestamp information is associated with the unique digital key generated and that the electronic component (46) is only able to authenticate a received digital key by comparison with the generated unique digital key for a predetermined duration.

Equipment (10) for receiving objects comprising at least one set (18) provided with an opening (20) forming an access to an interior space of the set (18) for receiving an object, the equipment (10) comprising in addition a device (22) for unlocking the opening (20), characterized in that the unlocking device (22) is in accordance with any one of the preceding claims, the electronic lock (24) being arranged within the instruction (18).

Equipment (10) according to claim 4, characterized in that the control module (26) is arranged within the set (18).

Equipment (10) according to claim 4, characterized in that it comprises a plurality of setpoints (18), each instruction (18) being provided with an opening (20), and in that the unlocking device (22) comprises a plurality of electronic locks (24), each electronic lock (24) being arranged within one of the set (s) (18). ) and being able to lock and unlock the opening (20) of this setpoint (18), the control module (26) being connected to each electronic lock (24) via a data link (28) and being able to generate a digital key unique to each closure of one of the openings (20).

Data storage assembly (14) adapted to be connected to at least one object receiving equipment (10) via a communication network (16), characterized in that the or each object receiving equipment (10) is according to one of claims 4 to 6, the storage assembly (14) being adapted to store at least one digital key intended, after analysis by the electronic component (46) of the control module (26), to unlock the or one of the set (s) (18) of the equipment (10) for receiving objects.

Storage assembly (14) according to claim 7, characterized in that it comprises a module (24) for managing the availability of the setpoints (18), the module (24) comprising a table (96) for storing a set of plurality of consignment notes, each consignment note being associated with one of the set points (18) and being able to take a first value corresponding to a free state of the setpoint (18), and a second value corresponding to a busy state of the deposit (18).

An object dispensing system (1) comprising:

at least one item receiving equipment (10), the or each item of equipment (10) being according to one of claims 4 to 6;

at least one communication device (12A, 12B) adapted to emit a signal (56) comprising a digital key, the signal (56) being adapted to be picked up by the sensor (44) of the or one of the unlocking device (s) (22) and analyzed by the electronic recognition component (46) of said unlocking device (22), the or each communication device (12A , 12B) comprising data receiving means (66) adapted to communicate with the transmission means (50) of the unlocking device (22) so as to receive the digital key (s) generated (s). ) by the control module (26) of said device (22);

A data storage assembly (14) connected to the or each communication device (12A, 12B) via a communication network (16), the data storage assembly (14) being in accordance with claim 7 or 8.

10. System (1) for dispensing objects according to claim 9, characterized in that it comprises at least two communication devices (12A, 12B) adapted to emit a signal (56) comprising a digital key, and in that that the storage assembly (14) is adapted to transmit, to a first (12A) of said communication devices, the or each digital key provided by a second (12B) of said communication devices, and, for the or each digital key received, to generate a notification message indicative of the presence of an object in the one or more instructions (18) and to transmit this notification message to the first communication device (12A). 1 1. Object distribution system (1) according to claim 10, characterized in that the first communication device (12A) is provided with data acquisition means (74) comprising a user interface (76) and an application (78A stored in the first communication device (12A).

12. System (1) for dispensing objects according to claim 1 1, characterized in that the storage assembly (14) is adapted to be connected, via the communication network (16), to a recipient database (17), the recipient database (17) comprising previously validated records as recipient authentication values, and in that the means (74) for acquiring data of the first communication device (12A) are clean, via the user interface (76), for receiving an identification input from a user, the storage unit (14) being capable of transmitting, to the first communication device (12A), the or each digital key received only if the identification entry corresponds to one of the records of the database (17) of recipients.

13. Computer program product downloadable from a communication network (16) and / or recorded on a computer readable medium and / or executable by a processor (70), characterized in that it comprises program instructions, said program instructions forming the application (78A) of the data acquisition means (74) of the first communication device (12A) of the object distribution system (1) according to claim 1 1 or 12, when the program product is executed on said communication device (12A).