DE102015106798A1 - Method for securing documents stored in lockable cassettes of shredders against unauthorized access and arrangement for carrying out the method - Google Patents

Abstract

The invention relates to a method for securing documents stored in lockable cassettes of document shredders against unauthorized access and to an arrangement for carrying out the method. According to the invention, in a method of this kind: after the cassette has been filled, an electronically controlled cassette lock is triggered, an electronic key is generated and stored as a master key in the locking controller and at the same time on a portable data carrier, the data medium is stored by an authorized user, - the document destruction is released, - after complete document destruction the cassette lock is canceled, and - the electronic key is deleted. When the data carrier is reconnected, the key already stored on the data carrier and already used for an annihilation process is also deleted.

Description

The invention relates to a method for securing documents stored in lockable cassettes of document shredders against unauthorized access.

There are devices for the destruction of documents in the form of files, CDs, DVDs, etc. known, in which the documents are first filled in cassettes and then depending on the capacity or from a predetermined date their destruction, for example by shredding in a shredder , is initiated.

The invention described below is assigned to devices in this field in which it is ensured by a lockable cartridge that before and during the destruction no unauthorized third party can access the documents in the cassette.

Document shredders with an electromagnetic lock for locking the cassette are already known. In this case, the lock is associated with a keypad, via which a specific, fixed predetermined numeric code is to be entered to trigger the lock. Unlocking is possible by entering the same number code. A concrete example of this is the document shredder currently offered by Rexel (www.rexel.com) under the name Auto + 500X, which has an electronic lock with a 4-digit PIN code.

In WO 2003/070606 A1 a procedure for the safe disposal of documents is described. In this case, documents that arise at a company are collected in containers and secured. The containers are transferred under surveillance into transport containers, transported to a disposal company, emptied there and handed over to a shredder or incinerator.

To monitor and control the containers used throughout the transport path, so-called TAGs on the containers and associated readers with data memories are used. Magnetic strips, bar code labels, embossed or magnetized metal or plastic labels, RFID transponders or similar articles are suitable as TAGs.

In EP 2 574 573 B1 is further stated that these TAGs are RFID tags (Radio Frequency IDentification), a technology for the automatic and contactless identification and localization of objects with transceiver systems.

A still unsatisfactorily solved problem with this procedure is the still incomplete security, since the PINs or TAGs for the collection containers are fixed and their period of validity is not limited in time. Thus, it can not be ruled out that the PINs or TAGs may become known to unauthorized third parties over the course of time and then be able to access the documents.

Based on this prior art, the invention has the object to further develop a method of the type described above, that the above defects are largely eliminated. Furthermore, an arrangement suitable for carrying out the method must be specified.

• – Befüllen der Kassette mit Dokumenten,
• – Auslösen einer mechanischen, elektronisch gesteuerten Kassettenverriegelung durch aktivieren einer elektronischen Verriegelungssteuerung,
• – Generieren eines elektronischen Schlüssels durch die Verriegelungssteuerung,
• – Speichern des elektronischen Schlüssels in der Verriegelungssteuerung und auf einem temporär mit der Verriegelungssteuerung verbundenen transportablen Datenträger,
• – Lösen des Datenträgers aus der Verbindung mit der Verriegelungssteuerung und Aufbewahren durch einen berechtigten Nutzer,
• – Auslösen der Dokumentenvernichtung,
• – Erfassung der vollständigen Dokumentenvernichtung und danach
• – Löschen des elektronischen Schlüssels in der Verriegelungssteuerung.

The object is achieved with a method of the type mentioned, comprising the following steps:

• - filling the cassette with documents,
• Triggering a mechanical, electronically controlled cassette lock by activating an electronic lock control,
• Generating an electronic key by the locking control,
• Storing the electronic key in the lock controller and on a portable storage medium temporarily connected to the lock controller,
• Detaching the data carrier from the connection with the locking control and storing it by an authorized user,
• - initiation of document destruction,
• - Recording the complete document destruction and afterwards
• - Delete the electronic key in the lock control.

Preferably, the cassette is opened after complete document destruction. The opening of the cassette after complete document destruction is preferably automatic, but can also be done manually.

In a preferred embodiment of the method according to the invention, the activation of the locking control takes place automatically when establishing the connection of the mobile data carrier with the locking control or with the writing of the key to the mobile data carrier.

Within the scope of the inventive idea it is either to completely regenerate the electronic key or to select it from a supply of stored keys by means of a random generator.

If the cassette is already filled with documents and locked, this can only by the owner of the mobile data carrier, which contains the current electronic key, again be opened by the connection between locking control and mobile data carrier restored, while the key on the disk with the key stored in the lock control key and in accordance with the opening of the cassette is caused by the lock control.

In this way it is possible, for example, to eliminate disturbances during document destruction or to fill up the cassette further. In any case, access to the inserted documents is only possible with the current key.

In the context of the invention, it is further to trigger the document destruction manually or via a schedule control.

According to the invention, after each document destruction, assuming the cassette was completely emptied, the electronic key is deleted in the locking control and a new key is generated upon refilling the cassette, which is then stored both in the lock control and on a mobile storage medium now being used. If an older key is still stored on this data medium, it will be deleted or overwritten.

• – eine Kassette mit einer Dokumenteneinfüllöffnung, die mit einem elektromechanischen Verriegelungssystem versehen ist,
• – eine Verriegelungssteuerung, ausgebildet zur elektronisch gesteuerten Verriegelung der Dokumenteneinfüllöffnung und zum gleichzeitigen Generieren eines elektronischen Schlüssels,
• – Mittel zum Speichern des elektronischen Schlüssels in der Verriegelungssteuerung und auf einem transportablen, von der Verriegelungssteuerung trennbaren Datenträger,
• – eine Einrichtung zum manuellen oder zeitgesteuerten Auslösen der Dokumentenvernichtung und zur Löschung des in der Verriegelungssteuerung gespeicherten elektronischen Schlüssels nach vollständiger Dokumentenvernichtung.

The object of the invention is further achieved with an arrangement for securing documents stored in cassettes of document shredders against unauthorized access, comprising:

• A cassette with a document filling opening provided with an electromechanical locking system,
• A locking control, designed for the electronically controlled locking of the document filling opening and for the simultaneous generation of an electronic key,
• Means for storing the electronic key in the lock controller and on a portable volume separable from the lock controller,
• - A device for manually or timed triggering the document destruction and deletion of the electronic key stored in the lock control after complete document destruction.

As a mobile disk USB sticks or RFID transponder can be provided, each locking the control is equipped with the appropriate read and write function.

In the context of this invention, the term "documents" is to be understood as meaning all forms of carriers of confidential information for the destruction of which the assigned shredder is suitable.

The invention will be explained in more detail with reference to an embodiment. In the accompanying drawings show:

1 the course of the cassette lock when using a USB stick as a mobile medium for the electronic key,

2 the expiration of the cassette lock when using an RFID transponder as a mobile disk for the electronic key.

According to 1 In the exemplary case of using a USB stick as a mobile data carrier for the electronic key generated according to the invention, the lock control is activated after the "start" and continuously the state of the cassette is checked with regard to "open" or "closed", such as with a Photocell on the cassette lid.

After e.g. Manual closing of the cassette lid is done, preferably regardless of whether a command "Start" was given or not, a check for "paper in the cassette present" or "paper in the cassette does not exist", for example by means of a light barrier in the cassette. If the former condition is fulfilled and a USB stick is connected to the interlock control and also recognized by the interlock control, the magnetic interlock is checked for "unlock" and under this condition an electronic key is generated in the interlock control, which is stored in the interlock control via EEPROM as master. key and stored on the USB stick. At the same time or, depending on the embodiment of the invention, after removal of the USB stick or separation of the connection between the USB stick and locking control, the locking of the cassette lid, for example by pressing a magnetic switch.

Depending on the embodiment of the invention, the master key is either a completely newly generated key or a key selected from a stored supply of, for example, 65,000 keys by random generator. The destruction process can start automatically depending on the combination of the locking control with the shredder's hardware and software, start automatically with a time delay or be triggered manually via a start button.

If access to the documents in the cassette is necessary before the start or before the end of the destruction process, the lock is released as soon as the USB stick containing the current electronic key is connected to the locking controller, the key is read from the USB stick and the match with the master key was determined. This may be necessary to troubleshoot or refill the cartridge.

If, after document destruction by the light barrier in the cassette detected that now the condition "paper in the cassette is not present" is given, preferably the lock is opened without intervention of an operator or without detecting a key stored on the USB stick key independently because there is no longer any risk of access to documents, especially confidential documents.

In the event that the USB key with the current key for unlocking is not available in the event of a fault, according to the invention the possibility of opening the cartridge by connecting the locking control with a master stick or a master code is provided as an emergency measure.

Essential to the invention is that for each renewed destruction process, ie refilling the cassette with documents, another key is generated on the same document shredder. Furthermore, existing on USB sticks older, already used for document destruction on the shredder concerned key - overwritten - preferably without demand.

In 2 the sequence of the cassette lock is shown when using an RFID transponder as a mobile data carrier for the electronic key. This process differs from that 1 only in the wireless coupling of the mobile data carrier via radio frequencies with the locking control, while the coupling via USB stick so to speak wired.

Of course, the invention also includes the use of further types of mobile data carriers and their wired or wireless coupling with the locking control for the purpose of storing a key generated by the locking control, such as storing the key on the mobile phone via USB interface, LAN, Bluetooth or WLAN.

It is essential to the invention in all cases that a different key is generated for each renewed destruction process.

The addressed cassette or cartridges for use on shredders may itself be a so-called autofeed unit or is at least part of such a unit, which is designed for automatically feeding the documents inserted in the cassette to the cutting unit of the shredder. The cassettes may be designed to receive documents in the form of sheet material and / or other form of material.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• WO 2003/070606 A1 [0005]
• EP 2574573 B1 [0007]

Claims (10)

Method for securing documents stored in lockable cassettes of document shredders against unauthorized access, comprising the following method steps: - filling the cassette with documents, Triggering a mechanical, electronically controlled cassette lock by activating an electronic lock control, Generating an electronic key by the locking control, Storing the electronic key in the lock controller and on a portable storage medium temporarily connected to the lock controller, Detaching the data carrier from the connection with the locking control and storing it by an authorized user, - initiation of document destruction, - Recording the complete document destruction and afterwards - Delete the electronic key for the current cassette lock in the lock controller. The method of claim 1, wherein the activation of the locking control is carried out automatically when establishing the connection of the mobile data carrier with the lock control. The method of claim 1 or 2, wherein the generation of the electronic key is done by rebuilding or by random selection from a plurality of stored keys. Method according to one of the preceding claims, in which an already performed cassette lock is canceled if necessary by re-connection of the mobile data carrier with the locking control. Method according to one of the preceding claims, in which the triggering of the document destruction takes place manually or time-controlled. Method according to one of the preceding claims, in which a new key is generated for each renewed document destruction and stored both in the locking control and on a mobile data carrier. Method according to one of the preceding claims, in which, after each complete document destruction by the locking control, the opening of the cassette is initiated. Arrangement for securing documents stored in shredder cassettes against unauthorized access, comprising: A cassette with a document filling opening provided with an electromechanical locking system, A locking control, designed for the electronically controlled locking of the document filling opening and for the simultaneous generation of an electronic key, Means for storing the electronic key in the lock controller and on a portable volume separable from the lock controller, - A device for manually or timed triggering the document destruction and deletion of the electronic key stored in the lock control after complete document destruction. Arrangement according to claim 8, in which a USB stick or an RFID transponder is provided as a mobile data carrier. Arrangement according to claim 8 or 9, wherein the locking control comprises means in the form of at least one circuit arrangement, which is designed such that method steps according to at least one of claims 2 to 7 executable, wherein the circuit arrangement is formed with electronic components, advantageously at least an electronic component is preprogrammed.

Images