IT201900000280A1 - PROCEDURE FOR OPENING A TANK - Google Patents

Description

DESCRIPTION

PROCEDURE FOR OPENING A TANK

The present invention relates to a method of opening a reservoir of the type specified in the preamble of the first claim.

In particular, the present invention relates to a process and / or a procedure through which to accredit the opening of a tank and therefore to monitor the closing and opening of valves and load manifolds of tank systems, tanks or other storage systems for fluids (liquefied or non-liquefied gases, petroleum and petrochemical products in general). Such storage systems are hereinafter simply referred to as tanks.

As is known, a tank has a container for the substances for which they are used and a valve, or union, which can be closed by a cap that is easily accessible by a user.

The cap is generally screw or bayonet.

The screw cap, as known, has a threaded support which can be screwed or unscrewed by rotation from the tank. Therefore the cap preferably has external threads compatible with the union. Opening this cap requires the operator to hold the cap and impose a mechanical moment on it to control its rotation with respect to the tank.

Many caps also have a lock, thus requiring the use of a key to open them.

The known art described includes some important drawbacks.

In particular, the process of opening a tank required up to now is easily bypassable since the opening procedure is extremely simple and substantially devoid of safety measures capable of avoiding unwanted opening.

In addition, the aforementioned caps and consequently the tank opening processes, in addition to not guaranteeing high safety in terms of accessibility, do not allow the supplier to check the integrity of the closing means used on the own tanks.

In this situation, the technical task underlying the present invention is to devise a process for opening a tank capable of substantially obviating at least part of the aforementioned drawbacks.

Within the scope of said technical task, an important object of the invention is to obtain a process for opening a tank that is difficult to carry out by unauthorized personnel.

The technical task and the specified purposes are achieved by a process of opening a tank as claimed in the attached claim 1. Examples of preferred embodiment are described in the dependent claims.

The features and advantages of the invention are clarified below by the detailed description of preferred embodiments of the invention, with reference to the accompanying drawings, in which:

Fig. 1 shows a method for opening a tank according to the invention;

Fig.2a illustrates, to scale, an assembly of the opening process;

Fig.2b shows, to scale, a second view of the assembly of Fig.2a; and Fig. 3 shows a schematic diagram of the procedure for opening a tank according to the invention.

In this document, when used, terms such as "first", "second", "superior", "inferior", "main" and "secondary" do not necessarily identify an order, relationship priority or relative position, but can simply be used to more clearly distinguish between different components.

Unless otherwise specified, as reflected in the following discussions, terms such as "processing", "computing", "determination", "computation", or the like, are deemed to refer to the action and / or processes of a computer or similar device electronic computation that manipulates and / or transforms data represented as physical, such as electronic quantities of registers of a computer system and / or memories into, other data similarly represented as physical quantities within computer systems, registers or other storage, transmission devices or information display.

With reference to the Figures, the method of opening a tank according to the invention is globally indicated with the number 1.

It is designed to monitor and in particular allow the opening of one or more tanks only to authorized personnel.

The opening method 1 comprises at least one tank 2 and at least one cap 3 closing the tank 2.

Preferably it comprises several tanks 2 and a cap 3 for tank 2.

The tank 2 is adapted to store a fluid (gas and / or liquid) as fuels. It can be, for example, a car tank or a tank used to contain large quantities of fuel and can therefore be underground or on the surface. Preferably, it is a tank used for containing fuel.

Each tank 2 comprises a container 21 defining a storage volume and an opening 22 for accessing said volume.

The cap 3 is able to engage the tank 2 and in particular the opening 22, preventing the introduction and / or extraction of the product.

It includes a memory 31; an envelope 32 defining an internal volume for the memory 31; and data connection means 33 suitable for defining a data connection between plug 3 (in particular the memory 31) and the control device described below.

The means 33 can define a physical connection (for example a USB or LAN port) or preferably a wireless connection and in detail radio such as Bluetooth or WI-FI.

The cap 3 comprises locking means 34 suitable for binding the cap 3 to the tank 2.

The locking means 34 define an opening block configuration (Fig. 2b) in which they prevent the removal of the cap 3 from the tank 2 and a free opening c (Fig. 2a) in which they allow the removal of the cap 3 from the tank 2.

To this end they include a first portion 34a integral with the casing 32; a second portion 34b engaging the tank 2 and movable with respect to the first portion; and a constraint block 34c defining an active position in which it mutually constrains the portions 34a and 34b defining said free opening configuration and an inactive position in which it allows a reciprocal motion between said portions defining said opening block configuration.

Conveniently, the locking means 34 are in said internal volume.

The cap 3 comprises a first clock 35 suitable for measuring the passage of time. Cap 3 comprises a first token generation unit 36.

Said unit 36 is in data connection with the various components of the cap 3 so as to control their operation and receive data from them.

Finally, cap 3 includes an electrical power supply for cap 3.

The power supply includes a battery suitably housed in the internal volume.

An example of a cap is described in Figs. 1-8 and from pag. 3 line 22 to page 19 line 16 of the Italian patent 102017000056266 (said pages and figures are included for reference).

The opening method 1 comprises an identification of at least one of the tank 2 and / or the cap 3. Preferably it provides a private identification of the cap 3 and conveniently at least a public identification of at least one of the tank 2 and / or cap 3. More preferably the opening method 1 comprises a private identifier and a public identifier of the cap 3 and optionally an additional public identifier of the tank 2.

In this document, the term "private" identifies a code that cannot be acquired and therefore cannot be transferred to a second device or acquired / read by an operator. On the contrary, the term "public" identifies a code that can be easily acquired and therefore that can be transferred (for example via a data connection) to a second device or acquired / read by an operator.

The public identifier can be external to the envelope 32 and therefore legible / acquirable from the outside. It can be a code (alphanumeric, bar, QR etc.) shown on the casing 32 or a plate attached to it.

Alternatively it is stored on memory 31.

The additional public identification can be printed on a plate affixed to the external surface of the tank 2.

The private identifier can be stored on memory 31.

The data connection means 33 are designed to allow a passage of data (for example the public identification) between cap 3 and a control device external to the cap. They do not transmit the private identifier.

The opening method 1 comprises a control device 4 adapted to control the cap 3 and in particular a configuration change of the cap 3. The control device 4 comprises at least one data connector suitable for allowing an exchange of data between the cap 3 and the command 4.

The data connector can define a physical connection (for example a USB or LAN port). Preferably it identifies a wireless connection such as a radio connection as Bluetooth.

The control device 4 comprises a second clock 41 adapted to measure the passage of time.

The control device 4 comprises a caps database associated with a cap 3 called at least one identifier.

The caps database associates for each cap 3 the private identifier to at least one public identifier of at least one of the tank 2 and / or the cap 3. In detail, it associates for each cap 3 the private identifier to the public identifier of the cap 3 and optionally the additional public tank identifier 2.

It should be noted that this association of the private identifier to at least one public identifier is executable upstream of the process / procedure. It can therefore be performed before the installation of cap 3 and / or through software allowing, exceptionally and exclusively, reader 4b to acquire the private identifier at the first data connection between cap 3 and reader 4b.

The control device 4 comprises a second token generation unit 42. The control device 4 comprises means 43 for acquiring said public identification.

The acquisition means 43 may comprise a camera or other device capable of acquiring the public identification on the cap 3 for reading a bar code or other similar code. Alternatively or in addition, they can acquire the public identifier for input by the operator, for example via keyboard, and / or for data connection with cap 3.

The control device 4 is a remote server 4a and conveniently a reader 4b of said public identification.

The remote server 4a comprises said plug database.

The remote server 4a comprises said second unit 42.

The remote server 4a comprises said second clock 41.

The reader 4b comprises said acquisition means 43.

The reader 4b can comprise a token database comprising one or more preferably command tokens each associated with a public identifier.

Said command tokens are described in detail below.

The remote server 4a comprises a first data connector 44 and the reader 4b comprises a second data connector 45 adapted to allow the plug 3 to enter a data connection with the plug 3 and the remote server 4b. Preferably there is a data passage between server 4a and plug 3 exclusively through the reader 4b.

Said connectors 44 and 45 are suitable for making a wireless connection.

Connectors 44 and 45 allow a data passage between reader 4b and remote server 4a without prejudice to the private identifier. Furthermore, the acquisition means 43 do not allow the acquisition of the secret identifier.

The opening method 1 comprises at least one process for generating opening codes for a tank 2.

The generation process comprises said tank 2, said cap 3 and said device 4.

The generation process is designed to generate a token controlling a configuration change of the cap 3 and in particular the passage in the configuration of free opening of the cap 3.

The generation process is adapted to be implemented by the plug 3 and / or by the server 4a. The generation process comprises a first calculation step in which at least one unit 36 and 42 determines at least a base code as a function of the identifier, preferably private and of a time stamp of at least one clock 35 and 41. Preferably called at least one. units 36 and 42 determine a primary base code which is a function of the preferably private identifier and a secondary base code which is a function of the time stamp of a clock 35 or 41. Said transformation functions can be different or identical to each other.

Alternatively, said at least one unit 36 and 42 determines a single basic code function of the preferably private identifier and time stamp.

The timestamp is identifiable in a day, i.e. a date indicating day, month and year. Alternatively, it can be identified in an hour, ie a date indicating the time, day, month and year.

Said at least one base code can be alphanumeric.

The generation process includes an encryption phase in which at least one unit 36 and 42 calculates an encrypted code by encrypting said at least one base code. Preferably the unit 36 or 42 determines a first encrypted code function of the primary base code and a second encrypted code function of the secondary base code. The encryption functions of the encrypted codes can be the same or different from each other.

Alternatively, unit 36 or 42 determines an encrypted code function of the primary base code and the secondary base code.

Said at least one encrypted code can be alphanumeric.

The generation process includes a second calculation phase in which at least one unit 36 and 42 determines at least an intermediate code function of the at least one encrypted code.

In the second calculation phase, unit 36 or 42 determines a first intermediate code as a function of the first encrypted code and a second intermediate code as a function of the second encrypted code. Alternatively, unit 36 or 42 determines only one intermediate code depending on the first encrypted code and the second encrypted code.

The generation process includes an extraction phase in which at least one unit 36 and 42 defines the token as a portion / part of at least one intermediate code.

In particular, in the extraction phase, at least one unit 36 and 42 defines the token as a portion of the single intermediate code.

Alternatively, the token is given by a first portion extracted from the first single intermediate code and a second portion extracted from the second intermediate code.

The extracted portion can comprise any number of alphanumeric characters such as, for example, 4, 6 and 8.

It can also be identified as the initial, central or final part of the intermediate code.

Preferably, the opening method 1 comprises at least a first generation process 110 in which the control device 4 and in particular the remote server 4a and more particularly the second unit 42 generate a control token function of the suitably private identifier; and one or more second generation processes 120 in which the cap 3 and in particular the first unit 36 generate an identification verification token, appropriately private, of the same cap 3.

The first generation process 110 comprises a first first computation step 111; a first encryption step 112; a first phase of second calculation 113; and a first extraction step 114.

The first steps 111, 112, 113 and 114 are described above with reference to the generation process.

Optionally, the first generation process can comprise an update step 115 of the plug database.

In the update phase 115 the control device 4 and in particular the remote server 4a updates the caps database by associating the public identifier connected to the private identifier used for the calculation of the same token to the command token. The second generation process 120 comprises a second first computation step 121, a second first encryption step 122, a second second computation step 123, and a second extraction step 124.

The second steps 121, 122, 123 and 124 are described above with reference to the generation process.

The opening procedure 1 comprises a first sending process 130 in which the remote server 4a sends to the reader 4b the command token and the public identifier associated with this token in the caps database.

Preferably in the first sending process 130 more command tokens and, for each of them, the corresponding public identifier are sent to the reader 4b.

Said one or more command tokens and, if present, said public identifiers are stored in the token database of reader 4b.

The opening method 1 comprises a reading process 140 in which the control device 4 and to be precise the reader 4b acquires at least one public identifier of at least one of the tank 2 and / or cap 3. In detail it acquires the public identifier of the cap 3.

The opening method 1 comprises a second sending process 150 in which the command device 4 and, more precisely, the reader 4b sends to the cap 3 the command token associated with the public identifier acquired in the reading process 140. In particular, the second sending process 150 comprises a search step 151 in which the reader 4b searches in the token database for the command token associated with the public identifier acquired in process 140; and a transmission step 152 in which the reader 4b sends the identified token to the plug 3.

The opening procedure 1 comprises a verification process 160, suitably subsequent to the second generation process 120, in which if the verification token is compatible with the command token, the locking means 34 pass into a free opening configuration allowing the removal of the cap 3. Otherwise, if the verification token is not compatible with the command token, the locking means 34 do not pass into the free opening configuration preventing the opening of the tank 2.

When passing into the free-opening configuration, the opening procedure 1 comprises an opening process 170 of the tank 2.

In this process 170 the operator removes the cap 3.

Below is an application of the generation process and the opening procedure 1 previously described in terms.

Once the tanks 2 to be opened have been defined (for example to refuel them), the opening procedure 1 envisages a first generation process 110 for each tank 2. In detail, the remote server 4a searches the caps database for the private identifier associated with each of the 3 caps or 2 tanks selected.

According to the first generation process 110, the remote server 4a determines a command token for each private identifier and stores it in the caps database associating it with at least one public identifier.

Once the first process 110 is completed, the opening procedure 1 provides for the first sending process 130 in which the server 4a, placed in data connection with the reader 4b by the data connectors 44 and 45, sends the one or more command tokens to the reader 4b and the public identifier associated with each of said command tokens.

When the reader 4b is in proximity to the tank 2, the opening procedure 1 provides for the reading process 140 in which the reader 4b acquires the public identification of the cap 3 to be removed: and the second sending process 150 in which the reader 4b having identified the command token associated with this public identifier, it sends this command token to the cap 3 using the data connection between the second connector 45 and the connection means 33.

Now the opening procedure 1 provides for the second generation process 120 in which the cap 3 generates the verification token; and the verification process 160 in which the cap 3 goes into the free opening configuration if and only if the verification token is compatible with the command token, otherwise it remains in the opening lock one.

The opening procedure 1 according to the invention achieves important advantages. In fact, the opening procedure 1, using the particular generation of tokens described above, allows the opening of the tank only to qualified personnel.

Another important advantage is given by the fact that reader 4b never acquires the secret identifier, thus making it impossible for a third party to generate tokens. This token generation difficulty is also defined by the particular process of generating opening codes which makes it impossible for a third party to reconstruct the token and / or the steps that led to its generation and therefore identify the starting data of the token generation.

The invention is susceptible of variants falling within the scope of the inventive concept defined by the claims.

For example, the method can provide, before the first generation process 110, the reading process 140.

In this case in the reading process 140 the reader 4b acquires the public identification of the cap 3 and sends it to the remote server 4b which, according to the first generation process 110, determines the command token and, according to the first sending 130, sends it to reader 4b.

In some cases, in addition or alternative to what is described above, the caps database could, in a technically equivalent manner, associate at least one identifier to tank 2.

In this context, all the details can be replaced by equivalent elements and the materials, shapes and dimensions can be any.

Claims (7)

CLAIMS 1. Procedure for opening (1) a tank (2) characterized in that it comprises - at least one tank (2); - a cap (3) closing said tank (2) and comprising or a memory (31); either an enclosure (32) defining an internal volume for said memory, or a first token generation unit (36), or data connection means (33) e or locking means (34) defining an opening block configuration in which they prevent the removal of said cap (3) from said tank (2) and a free opening configuration in which they allow the removal of said cap (3) from said tank (2); - a public identification of at least one of said tank (2) and said cap (3), - a private identifier of said plug (3) stored in said memory; - a remote server (4a) comprising or a first data connector (44), or a cap database associating for each cap (3) said private identifier to said public identifier e or a second token generation unit (42); - a reader (4b) of said public identification comprising a second data connector (45) adapted to allow data exchange between said reader (4b) and said plug (3) and between said reader (4b) and said server (4a); - a first generation process (110) in which said second unit (42) generates a command token as a function of said private identifier and associates said command token with said public identifier associated with said private identifier; - a first sending process (130) in which said remote server (4a) sends said command token and said second and said public identifier associated with said command token to said reader (4b); - a reading process (140) in which said reader (4b) acquires said public identifier; - a second sending process (150) in which said reader (4b) sends said command token associated with said public identifier acquired in said reading process (140) to said plug (3); - a second generation process (120) in which said first unit (36) generates a verification token as a function of said private identifier of said cap (3); And - a verification process (160) in which if said verification token is compatible with said command token said locking means (34) pass into said freely opening configuration allowing the removal of said cap (3) from said tank (2 ). Opening method (1) according to claim 1, wherein said public identifier is associated with said tank (2). Opening method (1) according to claim 1, wherein said public identifier is associated with said cap (3). 4. Opening method (1) according to at least one previous claim, in which said reader (4b) is adapted to acquire exclusively said public identifier and therefore does not acquire said private identifier. 5. Opening method (1) according to at least one preceding claim, in which in said second sending process (150) there is no passage of said private identifier from said cap (3) to said reader (4b). 6. Opening method (1) according to at least one preceding claim, in which in said first sending process (130) there is no passing of said private identifier from said server (4a) to said reader (4b). 7. Opening method (1) according to at least one preceding claim, comprising a plurality of said reservoirs (2) and said plugs (3) each of which engaged to one of said reservoirs (2); wherein said reader (4b) comprises a token database associating for each of said plugs (3) said command token to said public identifier; and in which in said second sending process (150) it comprises a search phase (151) in which said reader (4b) searches in said database token for the command token associated with said public identifier acquired in said reading process (140) and a transmission phase (152) in which said reader (4b) sends said command token identified in said search phase (151) to said plug 3.