GB2253080A

GB2253080A - Data collection system with secure access

Info

Publication number: GB2253080A
Application number: GB9127338A
Authority: GB
Inventors: David Mottram
Original assignee: Distribution Systems and Computers Ltd
Current assignee: Distribution Systems and Computers Ltd
Priority date: 1990-12-28
Filing date: 1991-12-24
Publication date: 1992-08-26
Also published as: GB9028155D0; GB9127338D0

Abstract

A data collection system comprises a data processing unit 12 and storage units 18, 20 which are removable from the unit 12. The unit 18 provides storage for a security code and for information required by the data processing unit 12 for executing its operations. The unit 12 tests the security code before seeking the other information in the unit 18. Similarly, the storage unit 20, which is for storage of collected data, stores a security code which is checked by the unit 12 before the unit 12 attempts to access the stored data. Unit 12 may be powered via contacts (76, 78, Fig. 3) which engage when the unit is mounted magnetically (74, 76) on a support, a Hall-effect probe 86 and optical sensor 88 enabling power supply 80 after engagement of the contacts. The system may be portable and used to record sales of products from delivery vehicles. <IMAGE>

Description

Data Collection System The present invention relates to data collection systems and in particular, but not exclusively, to data collection systems of the type previously proposed for use in the sale of products from mobile vehicles (commonly referred to as "van sales").

Various products, especially food products, are commonly sold by the van sales technique. A seller loads a van or other vehicle with stock, for instance at a food wholesale market, and travels to customers such as restaurants who then select from the stock on the vehicle and take immediate delivery. Payment may be made immediately to the driver, but it is more common for businesses such as restaurants to hold accounts with the supplier (who may deliver daily). Consequently, the supplier requires an efficient system of recording purchases for the purpose of subsequent invoicing. It is also desirable that the driver knows the current level of stocks on his vehicle in order to deal with subsequent customers.It has previously been proposed to provide the van driver with a portable computer which can store data relating to stocks on the vehicle, prices, discounts allowed to particular customers etc. Each time a customer makes a purchase, the details are entered into the computer which then amends its record of the stocks on the vehicle. The stock level can be checked by the driver in response to a future order, which can then be accepted or rejected according to the result of the enquiry.

It has previously been proposed that such a system should be implemented in large delivery businesses by providing each vehicle with a computer which records the data on conventional discs. At the end of each delivery round, the discs are removed and replaced with fresh discs. The discs which have been removed are then used by administration staff to prepare invoices for customers. This system suffers serious disadvantages.

The computers on the vehicles are valuable and therefore vulnerable to theft. Furthermore, the discs contain commercially valuable information such as client lists, price tables and discount details. Consequently, a disc left in the computer of an unattended vehicle would have a high commercial value to a competitor of the business running the vehicle.

The present invention seeks to obviate or mitigate these and other disadvantages.

The invention provides a data collection system comprising a data processing unit and at least one storage unit which is removable from the data processing unit, the storage unit providing storage for a security code and for information required by the data processing unit for executing the operations of the data processing unit, and the data processing unit being operable, in use, to seek the said information from the storage unit only after the security code stored in the storage unit has been tested by comparison with a predetermined code.

The system may comprise a first storage unit which provides storage for data or software which is required by the data processing unit in order to operate. The first storage unit may provide storage for data or software which is required by the data processing unit in order to gain access to another storage unit. The first storage unit may provide storage for an operating system.

The first storage unit may provide storage for a predetermined code identifying another storage unit or set of storage units as aforesaid, the data processing unit being inoperable until connected to the identified storage unit or one of the identified set of storage units.

The system may comprise at least one storage unit providing permanent storage, and at least one storage unit providing storage of collected data. The storage unit for collected data may comprise a RAM. The storage unit providing permanent storage may comprise a ROM.

The data processing unit may comprise data input apparatus for use in collecting data to be stored in the storage unit or units.

The invention also provides a method of collecting data, in which a data processing unit is provided with at least one storage unit removable from the data processing unit, the storage unit is used to provide storage for a security code and for information required by the data processing unit for executing the operations of the data processing unit, and the data processing unit is operated to seek the said information from the storage unit only after the security code stored in the storage unit has been tested by comparison with a pre-determined code.

Conveniently, data collection systems of the type set out above can be used as portable systems so that in van sales, for instance, the data processing unit can be removed from the vehicle during a delivery. This allows the convenient entry of data relating to an order. At the end of a visit, the data processing unit is then returned to the vehicle. Accordingly, the data processing unit must be portable and in particular, must incorporate its own power supply. This may advantageously be based on rechargeable batteries. The invention also seeks to provide improved apparatus for providing a power supply to a portable device.

In accordance with this aspect of the invention, there is provided power supply apparatus for a portable device, comprising a magnet and a magnetic member which cooperate to provide a releasable mounting for use in storing the device, and electrical connection means associated with the mounting and arranged to make an electrical connection to the device when the device is mounted on the mounting, to allow power to be supplied to the device.

The magnetic member is preferably carried by the device, the permanent magnet forming part of a fixed portion of the mounting. The magnetic member may be steel.

The electrical connection means may comprise electrically conduting members which come into contact when the device is mounted in the mounting. The apparatus may comprise an electrically conducting and magnetic member which serves as the magnetic member and as one of the electrically conducting members. There may be at least one further electrically conducting member against which the electrically conducting and magnetic member is drawn by the magnet to complete the electrical connection. The-mounting may comprise electrically conducting members located alongside the magnet, and against which the electrically conducting and magnetic member is drawn by the magnet.

Preferably the apparatus comprises at least two mountings as aforesaid.

The apparatus may further comprise sensor means operable to disconnect power to the electrical connection means until detecting the presence of a device mounted on the mounting or mountings. The sensor means may comprise a sensor forming part of a fixed portion of the mounting, and a member carried by the device at a position which causes the member to be sensed by the sensor when the device has been mounted. The sensor means may comprise a permanent magnet and a Hall effect probe.

The apparatus may further comprise detector means operable to detect the operating state of the device and to allow power to be supplied only when the device is in a predetermined operating state. The device may comprise a light emitting member operative when the machine is operable, the detector means comprising an optical sensor operable to detect light from the light emitting member.

The detector means may allow power to be supplied only when the device is operable. The detector means may allow power to be supplied for an initial period if the light emitting member is inoperative, and thereafter to be supplied only if the light emitting member becomes operative.

The apparatus may further comprise additional light emitting members and optical sensors carried by the device and a fixed part of the mounting, and operable to provide optical transmission of signals between the device and the said fixed part. Serial optical transmission may be provided.

The power supply apparatus may form part of a data collection system of the type set out above.

Embodiments of the present invention will now be described in more detail, by way of example only and with reference to the accompanying drawings, in which: Fig. 1 is a highly schematic block diagram of a data collection system according to the present invention; Fig. 2 is a flow diagram relating to the operation of the system of Fig. 1; and Fig. 3 is a highly schematic part-sectional diagram of a power supply apparatus for use in the data collection system of Figs. 1 and 2.

Turning to the drawings, there is shown schematically in Fig. 1 a data collection system 10 comprising a data processing unit 12 having an associated printer 14 and screen 16. Two data storage units 18,20 are removably connected to the data processing unit 12.

It is envisaged that when the system 10 is for use for van sales, the printer 14 may be permanently mounted in the vehicle, the data processing unit and the data storage units being removable from the vehicle, and portable. The screen 16 may be incorporated in the data processing unit. Alternatively, the screen may be permanently mounted in the vehicle, in which case the data processing unit 12 will incorporate at least a limited form of display arrangement.

The data processing unit 12 consists of a central processing unit (CPU) which performs the processing functions of the unit including the receipt of data from a keyboard or other input device, the transfer of data to and from the printer 14 and screen 16 and to and from the data storage units 18,20. The CPU of the unit 12 runs a software BIOS (binary operating system), as indicated in Fig. 1. In particular, the BIOS controls the transfer of information between the unit 12 and the units 18,20.

The data storage unit 18 is a security device of the type sometimes referred to as a dongle, but operates differently to a conventional dongle, as will be described. The dongle 18 provides permanent ROM storage of a modified disc operating system (DOS) for use by the BIOS in running data stored in the unit 20. The dongle 18 also provides permanent (ROM) storage for a machine number which identifies the unit 12 with which the dongle 18 is intended to be used, thereby identifying the intended user. The dongle 18 is removable from the unit 12, but is normally left connected to the unit 12. The dongle provides a software protection function for the equipment supplier, as will be described.

The unit 20 incorporates a large solid state RAM which, in use, provides storage for data collected by the unit 12, including information relating to prices, discounts, stock levels and sales in the case of a van sales application. The unit 20 also contains permanent (ROM) storage for a code specifying the authorised user of the unit 20, that is, the user for whose data the unit 20 is intended.

The contents of the dongle 18 and the user code in the unit 20 are referred to when the unit 12 is initially switched on. A general flow diagram of this operation is shown in Fig. 2.

Initially, the unit 12 checks at 30 for the presence of a dongle 18 and a memory data storage unit 20. Fig. 2 shows this as a loop 32 which is continuously executed until the dongle 18 and memory 20 are detected, but this is only illustrative, because it is preferred to route power lines through the device so that they are broken unless both are present. In other words, the whole device is disabled until the dongle and the memory unit 20 are both present to complete the power lines.

The unit then checks at 34 that the key switch is turned on and at 36 that an adequate power supply is available.

A power supply monitoring device within the unit 12 checks at 38 that supply voltages around the unit 12 are within preset tolerances and in the event of a fault being located, the sequence terminates with an error message at 40.

If no faults are located, the unit 12 begins to execute the BIOS at 42. Initially, various system diagnostics are completed at 44 and 46, for instance to determine the size of the RAM in the memory 20, to configure the display to which the unit 12 is connected etc. If any errors or faults are located during this operation, the sequence terminates at 48 with an appropriate error message.

If no errors are located, the BIOS boots the CPU at 50, and if any errors are then located, the sequence terminates at 52 with an approriate error message. The BIOS in the unit 12 then loads the DOS from the dongle at 54. Further configuration of the CPU software can then take place at 56, under the control of the DOS. If errors or faults are located, the sequence terminates at 58 with an appropriate error message. Until the DOS has been loaded, the unit 12 is unable to read data in a memory 20.

The operation at 60 looks at the user number stored in the memory 20. This should correspond to a user identified by a number permanently stored in the dongle 18. If it does not, the unit 12 knows that the memory 20 is not intended to be used by the same user as the dongle 18. A mismatch of this type may arise accidentally, but is more likely to be as a result of an unauthorised user attempting to gain access to another users information.

Consequently, the operation of the unit in checking the user number in the memory 20 ensures that the data of every user of similar systems is protected from access by other users, even if they can obtain the memory 20. If a mismatch is detected, the sequence terminates at 62.

Alternatively, the required user number may be generated from a pre-determined operation applied to data permanently stored in the unit 12, dongle 18 or both.

If the system passes the tests at 60, the unit 12 knows that the correct dongle and memory are being used and can therefore come into operation.

When in operation, data can be entered through the keyboard or another device such as a bar code reader in order to instruct the unit about orders from customers, changes in stock level etc. Data collected in this way is stored in the memory 20, for instance by modifying information already contained therein.

The above procedure is followed each time the unit 12 is switched on by a user. When the user completes a delivery round, the unit 12 can be switched off and the memory 20 removed for subsequent processing by administrative staff using apparatus which also requires the correct user number in the memory 20, before operating. Thus, the security of the information is again preserved.

The dongle should not be removed by the user. The dongle 18 performs the function of a software key whose contents are variable only by the manufacturer of the system and which prevent the unit 12 operating except on memories dedicated to a particular user. Thus, a stolen unit 12 could only be used with a legitimate dongle removed from a legitimate machine, which is therefore disabled. A stolen memory 20 cannot be used by the wrong user, because the legitimate dongle will not validate the stolen memory 20. A stolen unit and dongle could not be used with legitimate data. Clearly, security problems posed by the complete theft of a unit 12, dongle 18 and memory 20 would be dealt with by conventional software security arrangements such as passwords etc.

The use of RAM in the memory 20 provides various advantages, including virtually instantaneous booting of the unit 12.

The unit 12 has been described as portable and consequently requires an on-board power supply.

Preferably, this is in the form of a rechargeable battery carried in the unit 12. This will require recharging.

Apparatus shown in Fig. 3 provides a convenient arrangement for this, and also provides connections between the unit 12 and external apparatus such as a printer 14 or screen 16. Furthermore, the arrangement shown in Fig. 3 provides a mounting arrangement for the unit 12. The mounting 70 comprises a fixed part indicated generally at 72 which may support the unit 12.

The fixed part 72 incorporates two permanent magnets 74.

Two steel plates 76 are carried by the unit 12 and have a spacing corresponding to the spacing of the magnets 74.

Consequently, the unit can be offered up to the fixed part 72, and the magnets 74 will attract the plates 76 to secure the unit 12 on the mounting 70. It may be necessary to provide more than two permanent magnets and corresponding steel plates, according to the weight of the unit 12.

Electrical connections 78 are associated with each permanent magnet 74. The connections 78 are connected to a permanent power supply 80, such as a vehicle battery.

Within the unit 12, the plates 76 are connected into the power lines of the unit 12. When the plates 76 are offered to the magnets 74, the plates 76 are drawn into physical contact with the connections 78, to complete the electrical connection from the power supply 80 to the unit 12. This power can be used to recharge internal batteries.

A further permanent magnet 84 is mounted in the unit 12. At a corresponding position on the fixed part 72, there is a Hall effect probe 86 which consequently detects the presence of the unit 12. The strength of the magnet 84 and the sensitivity of the probe 86 are preferably chosen to ensure that the unit 12 is only detected when the mounting provided by the plates 76 and the magnets 74 is secure, so that the electrical connections are completed for charging. Until then, the sensor 86 disables the power supply 80. When the unit 12 is detected, the probe 86 allows the power supply 80 to supply the connections 78.

However, this may be subject to an overriding control provided by means of an optical sensor 88 on the fixed part 72, and a light emitting element, such as an LED 90, on the unit 12. The LED 90 is illuminated whenever the unit 12 is switched on. The optical sensor 88 is located on the fixed part 72 at a position corresponding to the position of the LED when the unit 12 is installed on the mounting. The output of the optical sensor 88 is used to disable the power supply 80 unless an illuminated LED 90 has been detected. Consequently, even if the probe 86 detects the presence of a unit 12, the power supply 80 will not operate unless the LED is illuminated to indicate that the unit 12 is switched on and requiring power.

A potential difficulty arises from the possibility that the batteries of the unit 12 become drained to such an extent that they are unable to illuminate the LED 90 sufficiently to allow the power supply 80 to operate.

This difficulty can be overcome by configuring the power supply 80 to allow it to provide an initial short charging pulse as soon as a unit 12 is detected by the probe 86, even if the LED 90 is not illuminated. The length of this initial pulse is chosen to create sufficient charge to illuminate the LED 90 if the unit 12 is switched on. Thus, at the end of this initial period, the power supply again checks the probe 86 and the optical sensor 88 to determine if the LED 90 has now become illuminated. If so, charging continues. If not, the supply 88 then knows that the unit is switched off, and charging therefore ceases.

The fixed part 72 may incorporate one or more optical sensors 92 corresponding to a light emitting elements or LED 94 on the unit 12. These allow the transmission of data to a printer or screen, or for other purposes. Clearly, additional data ports may be provided in either direction by appropriate location of LED's and optical sensors. A serial data port, such as an 8 bit serial port with check bits, is preferred.

It may be convenient or desirable to provide a light emitting element on the fixed part 72 which is illuminated according to the ambient light levels and which is read by an optical sensor on the unit 12 in order to control the brightness of a display. For instance, the LED may be connected to the lighting circuits of a vehicle, so that when those lights are illuminated, indicating reduced ambient light conditions, the display brightness is also reduced for the comfort of the user.

Many variations and modifications to the arrangements described above may be made without departing from the spirit and scope of the present invention.

Whilst endeavouring in the foregoing specification to draw attention to those features of the invention believed to be of particular importance it should be understood that the Applicant claims protection in respect of any patentable feature or combination of features hereinbefore referred to and/or shown in the drawings whether or not particular emphasis has been placed thereon.

Claims

1. A data collection system comprising a data processing unit and at least one storage unit which is removable from the data processing unit, the storage unit providing storage for a security code and for information required by the data processing unit for executing the operations of the data processing unit, and the data processing unit being operable, in use, to seek the said information from the storage unit only after the security code stored in the storage unit has been tested by comparison with a predetermined code.

2. A system according to claim 1, and comprising a first storage unit which provides storage for data or software which is required by the data processing unit in order to operate.

3. A system according to claim 2, in which the first storage unit provides storage for data or software which is required by the data processing unit in order to gain access to another storage unit.

4. A system according to claim 2 or 3, wherein the first storage unit provides storage for an operating system.

5. A system according to any of claims 2, 3 or 4, wherein the first storage unit may provide storage for a predetermined code identifying another storage unit or set of units as aforesaid, and the data processing unit is inoperable until connected to the identified unit or one of the identified set of units.

6. A system according to any preceding claim, comprising at least one storage unit providing permanent storage, and at least one storage unit providing storage of collected data.

7. A system according to claim 6, wherein the storage unit for collected data comprises a RAM.

8. A system according to claim 6 or 7, wherein the storage unit providing permanent storage comprises a ROM;

9. A system according to any preceding claim, wherein the data processing unit comprises data input apparatus for use in collecting data to be stored in the storage unit or units.

10. A method of collecting data, wherein a data processing unit is provided with at least one storage unit removable from the data processing unit, the storage unit is used to provide storage for a security code and for information required by the data processing unit for executing the operations of the data processing unit, and the data processing unit is operated to seek the said information from the storage unit only after the security code stored in the storage unit has been tested by comparison with a predetermined code.

11. Power supply apparatus for a portable device, comprising a magnet and a magnetic member which cooperate to provide a releasable mounting for use in storing the device, and electrical connection means associated with the mounting and arranged to make an electrical connection to the device when the device is mounted on the mounting, to allow power to be supplied to the device.

12. Apparatus according to claim 11, wherein the magnetic member is carried by the device, the permanent magnet forming part of a fixed portion of the mounting.

13. Apparatus according to claim 11 or 12, wherein the magnetic member is steel.

14. Apparatus according to claim 11, 12 or 13, wherein the electrical connection means comprise electrically conducting members which come into contact when the device is mounted in the mounting.

15. Apparatus according to claim 14, wherein the apparatus comprises an electrically conducting and magnetic member which serves as the magnetic member and as one of the electrically conducting members.

16. Apparatus according to claim 15, comprising at least one further electrically conducting member against which the electrically conducting and magnetic member is drawn by the magnet to complete the electrical connection.

17. Apparatus according to claim 15 or 16, wherein the mounting comprises electrically conducting members located alongside the magnet, and against which the electrically conducting and magnetic member is drawn by the magnet.

18. Apparatus according to any of claims 11 to 17, comprising at least two mountings as aforesaid.

19. Apparatus according to any of claims 11 to 18, the apparatus further comprising sensor means operable to disconnect power to the electrical connection means until detecting the presence of a device mounted on the mounting or mountings.

20. Apparatus according to claim 19, wherein the sensor means comprises a sensor forming part of a fixed portion of the mounting, and a member carried by the device at a position which causes the member to be sensed by the sensor when the device has been mounted.

21. Apparatus according to claim 20, wherein the sensor means comprises a permanent magnet and a Hall effect probe.

22. Apparatus according to any of claims 11 to 21, and further comprising detector means operable to detect the operating state of the device and to allow power to be supplied only when the device is in a predetermined operating state.

23. Apparatus according to claim 22, wherein the device comprises a light emitting member operative when the machine is operable, the detector means comprising an optical sensor operable to detect light from the light emitting member.

24. Apparatus according to claim 22 or 23, wherein the detector means allows power to be supplied only when the device is operable.

25. Apparatus according to claim 24, wherein the detector means allows power to be supplied for an initial period if the light emitting member is inoperative, and thereafter to be supplied only if the light emitting member becomes operative.

26. Apparatus according to any of claims 11 to 25, and comprising additional light emitting members and optical sensors carried by the device and a fixed part of the mounting, and operable to provide optical transmission of signals between the device and the said fixed part.

27. Power supply apparatus according to any of claims 11 to 26, and forming part of a data collection system according to any of claims 1 to 10.

28. A data collection system substantially as described above with reference to the accompanying drawings.

29. Power supply apparatus substantially as described above with reference to the accompanying drawings.

30. Any novel subject matter or combination including novel subject matter disclosed, whether or not within the scope of or relating to the same invention as any of the preceding claims.