Classifications

• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07F—COIN-FREED OR LIKE APPARATUS
  • G07F9/00—Details other than those peculiar to special kinds or types of apparatus
  • G07F9/06—Coin boxes
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07D—HANDLING OF COINS OR VALUABLE PAPERS, e.g. TESTING, SORTING BY DENOMINATIONS, COUNTING, DISPENSING, CHANGING OR DEPOSITING
  • G07D11/00—Devices accepting coins; Devices accepting, dispensing, sorting or counting valuable papers
  • G07D11/10—Mechanical details
  • G07D11/12—Containers for valuable papers
• • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
  • Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
  • Y10T—TECHNICAL SUBJECTS COVERED BY FORMER US CLASSIFICATION
  • Y10T70/00—Locks
  • Y10T70/70—Operating mechanism
  • Y10T70/7051—Using a powered device [e.g., motor]
  • Y10T70/7062—Electrical type [e.g., solenoid]
• • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
  • Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
  • Y10T—TECHNICAL SUBJECTS COVERED BY FORMER US CLASSIFICATION
  • Y10T70/00—Locks
  • Y10T70/80—Parts, attachments, accessories and adjuncts
  • Y10T70/8027—Condition indicators
  • Y10T70/8054—With recorder
• • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
  • Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
  • Y10T—TECHNICAL SUBJECTS COVERED BY FORMER US CLASSIFICATION
  • Y10T70/00—Locks
  • Y10T70/80—Parts, attachments, accessories and adjuncts
  • Y10T70/8027—Condition indicators
  • Y10T70/8054—With recorder
  • Y10T70/8081—Electric

Definitions

• the present invention relates to a system for protecting documents or valuables, such as means of payment, banknotes, checks or bank cards, enclosed in a physically inviolable container, called throughout the container, passing through a succession of logical states identified in limited number, and which, in the event of aggression, causes their degradation by appropriate means.
• Such a protection system is fully described in European patent EP-0.409.725, and it is characterized in that the container is provided with internal management means functioning in the manner of a machine with "limited modes” whose cycle of operation has a limited number of logical states called “modes", the transition from a first mode to a second mode being the consequence of a one-off event the legality of which is, or has been previously verified, by an autonomous means capable of get in touch with said internal management means of the container, said transition being accompanied by memory loss of the previous mode.
• modes logical states
• the system can be used for the protection of funds placed in a container, for example by the manager of a bank branch appointed sender in order to be transported by a conveyor, for example to a branch of this bank branch; the succession of the logical states and, consequently, the transfer of responsibility is entrusted to a single computer playing in fact the role of supervisor to manage the logical security of the containers, that is to say to check the legality of the transitions of certain modes of operation of their internal management means towards certain other modes; in this regard, we can cite three particularly significant examples of transition: a) during transport, the protection of funds can only be ensured by the container: the system then includes only the container, b) at the end of a transport at the time of delivery, only a source of information outside the container can cause the mode in which it was placed at the start of its transport to be interrupted and which constitutes its only memory: the system must then be extended to the external source of information, i.e.
• the computer which must be recognized as a reliable and secure partner by the container before this extension, c) after delivery, the protection of the funds enclosed in the container is still total, because its opening requires the extension of the system to a second external source of information, the user of these funds (i.e. the recipient, the sender or the conveyor), who must in turn be recognized as a reliable and secure partner by the container and the computer r supervisor.
• the transitions between these three types of mode in fact decide the transfer of responsibility attached to the protection of funds, whether or not they are locked in the container.
• the container, the computer, the sender or the recipient and the conveyor are connected respectively to the departure and the arrival at a single terminal called "station" to constitute the point of departure and the end point a star network, of which said station is the center.
• a first station is therefore provided at the place of departure of a container, and at least one other station at its place of arrival.
• Such a protection system is particularly effective for all established funds transfers, of a habitual and above all repetitive nature, such as, for example, transfers between a bank and its various agencies; it is therefore entirely suitable to install, both at departure and at arrival, permanent reception terminals, otherwise called in the previous document already cited, "resident stations", serving as interfaces between the containers physically ensuring the transfer of funds, the human being - that is, the sender, the conveyor and later the recipient -, and the server center, otherwise known as a computer / supervisor.
• a secure transport system for valuables in particular means of payment, banknotes, checks, or bank cards from a central departure site to a destination site, enclosed in a container, which, in the event of aggression, causes their degradation by appropriate means, and which is provided with internal management means operating in the manner of a "machine with limited modes" whose operating cycle includes a number restricted from logical states, called modes, the transition from a first mode to a second mode resulting from a one-off event the legality of which is, or has been previously verified by an autonomous means which can be put in contact with said means of internal management, said transition then being accompanied by the loss of memory of the prior mode, said system being able to comprise successively, totally, or only partially, the elements of a set consisting of:
• a single server center located remotely that can get in touch with the internal management means of said container, at least when it is at the starting point, to check the legality of an event causing a transition from a mode to another mode, said elements being interconnected by means of a single terminal, called a station, so as to constitute a star network of which said station is the center, characterized in that the station of at least one recipient is not a resident station, but a mobile and transportable station.
• FIG. 1 is a block diagram of the network organization of the system according to the prior art described in European patent EP-0,409,725,
• FIG. 2 is a block diagram of an organization with a mobile station in accordance with
• the prior art system is used in particular for the protection of funds which have been placed in a container 1, for example by the manager of a central bank branch, hereinafter called sender 2.
• a container 1 for example by the manager of a central bank branch, hereinafter called sender 2.
• the container 1 must be transported by a conveyor 3 to an occasional recipient, for example a small trader.
• the general system according to the invention in accordance with FIG. 1 is constituted in a star network, connecting to a single terminal the container 1, the supervisor computer 4, the sender 2 and the conveyor 3; this single terminal, subsequently called station 5, constitutes the center of the star network.
• a first station 5 is naturally located at the place of departure of the container 1 and, in accordance with the invention and with reference to FIG. 2, the arrival station no longer has a resident character, but on the contrary it is mobile and transportable , for all the reasons largely developed in the preamble of these presents, namely that the carrier can deliver these funds in a very occasional way to a recipient who moreover can be located in any place without beforehand the same carrier is required to set up an arrival station there with heavy and therefore expensive equipment.
• the mobile station 6 comprises a terminal 7 with keyboard and screen 8 provided with a microprocessor and a memory card reader 9 capable of receiving from the correct recipient 10 a personalized and especially authenticated microprocessor card 11 by a confidential code 12 transmitted to the recipient 10 separately and beforehand by the carrier under the security conditions which will be indicated below.
• the mobile station 6 in accordance with an essential characteristic of the invention, is, during the transfer, completely disconnected from the supervisor computer 4, that is to say that no means of communication exists between the latter and the terminal when the funds are remitted.
• the mobile station 6 is put in contact with the container 1 by means of a communication interface 13 comprising, according to a secondary and advantageous characteristic of the invention, an autonomous source of power 14 of the container 1 and of its electromagnetic locking devices.
• the end user 10 Prior to the envisaged transport of funds, the end user 10 is given a microprocessor card 11 which is completely analogous in its form and in its operation to a conventional bank card; this card 11 is previously loaded with the cryptographic data which will subsequently be necessary not only for the exchange of messages between the stakeholders on the arrival site, but also for the initialization and the smooth running of all the steps intended to authorize the opening of the container and thereby the recovery of the funds which it contains by the legitimate recipient 10 while correctly programming the return of said container to the central departure site.
• all of the encryption data is before departure generated by the computer 4 operating here in the server center. In this way, the computer 4 no longer intervenes directly in the delivery stages; this is the reason why the exchanges between the latter, the station 6 via the card 11 and the container 1 at destination, have been shown in thin dashed lines in FIG. 2.
• the authentication of the part of the system which sends a message in fact consists in authenticating said message itself by verifying a computer signature calculated on the content of said message by means of a key algorithm, naturally only held by the only parties exchanging said message.
• an algorithm of the symmetrical type for example the DES algorithm (from the English Data Encryption Standard) whose characteristics are standardized; remember that in this algorithm, the container 1 / memory card 11 couple has a key K this key K is placed in a memory of container 1 while the card 11 which has the same key K, of course remains under the sole protection of the end user 11.
• the electronic signature intended to authenticate the message and its author will itself be calculated on the content of the messages according to an algorithm advantageously similar to the DES encryption algorithm which has just to be called back.
• the operation of the container 1 is completely identical to the operation of the containers widely described in the European patent EP-0.409.725 already cited, that is to say that the container 1 also functions here as a "machine”. limited modes ".
• it is therefore agreed to issue funds from a central agency to be delivered to an occasional user 10 not equipped with a resident station 5.
• the user 10 prior to the envisaged operation, receives on the one hand its microprocessor card 11 duly encrypted, and separately it receives in the manner of bank cards a secret code 12 corresponding to the card 11.
• the supervisor 4 In parallel, the supervisor 4 generates one or more encryption keys of the DES type which he will implement at the start of the transport of funds in the container 1 after having been previously inserted in the microprocessor of the card allowing the authentication of the recipient at the time of delivery of the container 1.
• the container or containers 1 intended for the mobile station 6 will be informed of this situation by an additional operation carried out by the manager of the central agency; in the example, the container 1 will be programmed for a destination on a mobile station 6 and not on a resident station 5.
• the conveyor 3 presents the terminal 7 to the alleged user 10 who must then introduce the encrypted microprocessor card 11 which he holds and at the same time type his confidential code 12 on the keyboard of said terminal 7.
• the conveyor 3 retrieves the terminal to connect it via the communication interface 13 to container 1 which, after successful confrontation of the authentication codes of the carrier and therefore of the destination, immediately transits in opening mode allowing the authorized user 10 to recover the funds which were normally intended for him.
• the container 1 is closed, reprogrammed and put in departure mode towards the original site, all this according to chained stages since independent of the supervisor 4 which cannot at this moment intervene.
• the conveyor 3 disconnects the container 1 from its interface 13, the user 10 resumes his microprocessor card 11; the conveyor 3 returns to the transport vehicle with the mobile terminal and the container 1 for a return to the departure site, that is to say to the central agency.
• microprocessor equipping the terminal 7 will advantageously be used to store all information from containers and concerning the traceability of daily operations, to sites not equipped with fixed stations 5.

Landscapes

• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Management, Administration, Business Operations System, And Electronic Commerce (AREA)
• Warehouses Or Storage Devices (AREA)
• Control Of Position, Course, Altitude, Or Attitude Of Moving Bodies (AREA)
• Control Of Conveyors (AREA)

Applications Claiming Priority (3)

Publications (2)

Family

ID=9493899

Family Applications (1)

Country Status (12)

Families Citing this family (10)

Family Cites Families (8)

• 1996
  • 1996-07-10 FR FR9608605A patent/FR2751111B1/fr not_active Expired - Fee Related
• 1997
  • 1997-07-10 US US09/214,608 patent/US6430689B1/en not_active Expired - Lifetime
  • 1997-07-10 AT AT97932877T patent/ATE214502T1/de active
  • 1997-07-10 WO PCT/FR1997/001254 patent/WO1998001833A1/fr active IP Right Grant
  • 1997-07-10 ES ES97932877T patent/ES2174268T3/es not_active Expired - Lifetime
  • 1997-07-10 EP EP97932877A patent/EP0960406B1/de not_active Expired - Lifetime
  • 1997-07-10 CA CA002259285A patent/CA2259285C/fr not_active Expired - Fee Related
  • 1997-07-10 AU AU36257/97A patent/AU3625797A/en not_active Abandoned
  • 1997-07-10 DE DE69711091T patent/DE69711091T2/de not_active Expired - Lifetime
  • 1997-07-10 PT PT97932877T patent/PT960406E/pt unknown
  • 1997-07-10 BR BR9712967-4A patent/BR9712967A/pt not_active IP Right Cessation
  • 1997-07-10 DK DK97932877T patent/DK0960406T3/da active

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events