EP1255906B1 - Device and method for safe transport on an object - Google Patents

Abstract

The invention relates to a device (2) for the secure transportation of an object (3), characterized in that it comprises: means (4, 6) for containing an object (3) to be transported, also known as a container, and closure means (6, 8, 10, 14) for closing said means (4, 6) for containing an object or container, communication means (16, 18) for connecting the means for containing an object or container to a communication network and for sending over said communication network a signal relating to a state of the means for containing said object or container, and receiver means (16, 18) for receiving a signal for opening closure means for closing the means for containing the object.

Description

TECHNICAL FIELD AND PRIOR ART

The invention relates to the field of secure transport of objects, such as for example cash values (including banknotes) and / or checks and / or valuable or confidential documents.

It may also apply to the transport of precious goods, by examples intended for any industrial transformation, for example rough diamonds, or rare materials.

It applies in a general way to the transport of all materials or documents or information that require, for one reason or another, to be transported from one point to another, or from one person to another, with a certain degree of security.

In known manner, this type of secure transport is currently achieved by using armored vehicles. This is particularly the case for transfer of tickets, from a store to a bank, or from a bank to another local bank.

It is clear that this type of transport has a number of constraints, such as the need to order one, or to have a vehicle shielded, and to resort to physical protections for people who are responsible for carrying out the conveyance.

In addition, the use of armored vehicles is expensive, and leads to important fees for those who have to use them.

Finally, armored vehicles are generally bulky.

There is therefore the problem of finding a method and a device for transport, with a certain degree of security, but allowing a conveyance to using less expensive or less bulky means than armored vehicles.

EP 0,692,599 discloses a secure transport device comprising a transmission station, a reception station, a transport system of the transmitting station at the receiving station and control means of the whole system.

SUMMARY OF THE INVENTION

• des moyens pour contenir un objet à transporter, encore appelés contenant, et des moyens pour fermer ou verrouiller ces moyens ou ce contenant,
• des moyens de communication, ou de connexion, pour connecter les moyens pour contenir un objet, ou le contenant, à un réseau de communication.

The subject of the invention is precisely a device for the secure transport of an object comprising:

• means for containing an object to be transported, also called containers, and means for closing or locking these means or this container,
• communication means, or connection means, for connecting the means for containing an object, or the container, to a communication network.

Thus it is possible, after connecting the container to the network of communication, to send to a correspondent (for example a system of monitoring or remote monitoring) a signal relating to a state of the means for contain said object.

The container can then receive, in response, an opening signal container or means for containing said object.

• des moyens pour contenir un objet à transporter, encore appelés contenant, et des moyens pour fermer ou verrouiller ces moyens ou ce contenant.
• des moyens de communication, pour connecter les moyens pour contenir un objet, ou le contenant, à un réseau de communication, et pour envoyer, sur ce réseau, un signal relatif à un état des moyens pour contenir ledit objet ou le contenant,
• des moyens de réception pour recevoir un signal d'ouverture des moyens pour contenir ledit objet.

The subject of the invention is also a device for the secure transport of an object comprising:

• means for containing an object to be transported, also called container, and means for closing or locking these means or container.
• communication means, for connecting the means for containing an object or the container, to a communication network, and for sending, on this network, a signal relating to a state of the means for containing said object or the container,
• receiving means for receiving an opening signal means for containing said object.

Thus, an opening of the container, or means that contain the object, can be conditioned to the state of these means or of this container. If the signal relating to the condition of the container indicates an attempted tampering with the container, no opening signal will be transmitted, and intervention will be required. example that of the sender himself, to achieve the opening of the container.

If the signal reflects a normal state of the container, the opening thereof may take place after receipt of the signal authorizing the opening. It is therefore a remote opening.

The secure transport device according to the invention therefore allows a remote control of the state of the container, which control can be carried out by the sender himself or by a third party, who is instructed by the sender to supervise the transport of the container and the object to the intended destination or consignee.

It is possible to use containers of any size, not requiring no particular sign of recognition, but the container used is preferably compatible with manual transport (it is then a device for manual and secure transport) or with a postal item. In the latter case, the format of the container may be of the type used by postal services (envelopes or parcels for example).

In other words, the transport device according to the invention is of preferably designed for manual transport or for mailing or steed.

The mention of the consignee may also be made on the containing, in particular if the transport is carried out by post or courier.

Consequently, the transport device according to the invention replaces advantageously the secure transport means known in the prior art, which armored cases that must be transported by guard staff, most often armed.

Preferably, the communication means are means for, or specially programmed to send a coded or encrypted signal relating to the condition of the container.

Coding or encryption adds an extra degree of security: a third party, who would obtain the information by monitoring the network of communication used, would not be able to capture information on the status of containers only in encrypted or encrypted form.

The device according to the invention comprises means for identifying a normal or abnormal operating status, and / or to identify an attempt tampering or violation or opening without authorization or a type of attempt break-in or violation or unauthorized opening of the transport or its means of closure.

Thus, the secure transport device, or the container, can be equipped with means for detecting or measuring the temperature of the atmosphere container and / or means for detecting or measuring the degree of hygrometry of this surrounding atmosphere.

According to a variant, a conductive circuit can be arranged to the inside of the container as well as means to detect a break in this circuit.

A variation outside of a specified range (s), or below or above a predetermined threshold value of the temperature and / or the hygrometry and / or the detection of a break in the driver circuit can trigger means, arranged inside the container, to destroy or to damage or stain or mark an object contained in this container.

Advantageously, the communication means of the device of secure transport according to the invention are means of connection to a network telephone.

After connecting to the telephone network, the means of communication of the transport device according to the invention dial a number telephone number, for example that of the shipper or the transport supervisor.

The latter, once the communication is established, compares the number telephone number of the place or telephone socket to which the transport is connected to one or more predetermined numbers that is / are the one of the recipient chosen initially.

When the number from which the secure transport device the name of the recipient chosen initially, and after verification of the state of the container, it can be proceeded to the remote opening of the container.

Preferably, the telephone network with which the communication takes place is an analog network, which is safer than a network digital.

According to other embodiments, the communication network can be a network of Internet or LAN type, or ETHERNET or ISDN or X25 or of any other type. The secure transport device according to the invention is then equipped with means for sending, on such a network, signals relating to its state, or a signal or identification signals of a recipient, such as example a predetermined TRANSPAC address or Internet.

When connected to the network, this device dials a number identification of a terminal or apparatus or monitoring system to which is connected, for example, the sender or a transport supervisor.

After establishment of the connection, a signal or signals, relative to the state of the container is / are sent via the network. to a person (by example, shipper or transport supervisor) or terminal or device or the monitoring system that is likely to be able to send a signal to open the means that close or lock the container during all the transport. Once communication is established, the email address or the identification of the place or terminal to which the transport device is connected can be compared with a predetermined address or identification which is that of the recipient chosen initially. When the address or the identification is that of the recipient chosen initially, and after check the condition of the container, it can be proceeded to the remote opening of the container.

In another aspect, the secure transport device according to the invention furthermore comprises means for supplying electrical energy, for provide energy to the means of connection or communication and / or reception means.

Thus, the device according to the invention is autonomous. Just make sure, before transport, that the means of supplying electrical energy have a sufficient capacity to be able to send, upon receipt, the corresponding signal actually in the state in which the container is.

• des moyens, reliés à un réseau de communication, pour recevoir un signal relatif à un état du contenant,
• des moyens pour, ou spécialement programmés pour, déterminer un état du contenant en fonction du signal reçu relatif à l'état du contenant,
• des moyens pour, ou spécialement programmés pour, déterminer un signal à envoyer au contenant, ou pour déterminer si un signal d'ouverture peut être envoyé ou émis vers ce contenant, en fonction de l'état du contenant déterminé,
• des moyens pour, ou spécialement programmés pour, envoyer un signal ou un signal d'ouverture au contenant.

The invention also relates to a device for monitoring the secure transport of an object contained in a closed container, for example of the type according to the invention and as described above, this monitoring device being characterized in that it comprises :

• means, connected to a communication network, for receiving a signal relating to a state of the container,
• means for or specially programmed to determine a state of the container according to the received signal relating to the condition of the container,
• means for or specially programmed to determine a signal to be sent to the container, or for determining whether an opening signal can be sent or transmitted to that container, depending on the state of the determined container,
• means for or specially programmed to send a signal or an opening signal to the container.

• des moyens, reliés à un réseau de communications, pour recevoir un signal relatif à un état du contenant,
• des moyens pour, ou spécialement programmés pour, envoyer un signal d'ouverture au contenant, après réception et en fonction du signal relatif à l'état du contenant.

The invention also relates to a device for monitoring the secure transport of an object contained in a closed container, for example of the type according to the invention and as described above, this device being characterized in that it comprises:

• means, connected to a communications network, for receiving a signal relating to a state of the container,
• means for or specially programmed to send an opening signal to the container after reception and as a function of the signal relating to the state of the container.

A monitoring device according to one of the definitions given above allows remote monitoring of the status of a container of a device of secure transport according to the invention, when this device or container is delivered to a recipient.

This monitoring device may be provided with means for, or specially programmed to, send a signal of destruction or staining or inclusion or marking of an object contained in the container, when the received status signal indicates that the container has been or is being forced, or has been or is attacked by an outside agent, or that the container is still closed after a predetermined closing time.

It may indeed be advantageous, in some cases, to be able to destroy or immediately neutralize the object contained in the container, provided that it is noted, upon receipt of the closed container, that it has undergone an attempt aggression, or where it is found that the container has not been opened at the time that was agreed.

According to one embodiment, the monitoring device according to the invention furthermore comprises means for arming, beforehand, means destruction or staining or inclusion or marking of a contained object in the container, then to disarm these means, before sending the signal opening.

The operation or the step of arming the means of destruction or staining or inclusion or marking can be done right after loading of the object in the container, for example at the operator of the monitoring.

The communication network to which the monitoring device the invention is connected maybe of one or other of the types already described above (telephone network, or Internet or Ethernet or LAN or ISDN or X25 or any other type of network).

The system according to the invention preferably also comprises, or is preferably further connected to, a local communication line, a network local network, for example of a local telephone network, making it possible to arming means of destruction or staining or inclusion or marking an object contained in the container.

Thus, when the container is also connected to the local network, by example to the local telephone line, the arming step can take place, and this without the need for coding information exchanged between the device surveillance and the container.

In another aspect, the monitoring device is further provided with means for storing an identification code of a recipient or a place of destination of the transported object, and to compare an identification code received with this identification code of the recipient or purpose of the object.

The monitoring system then emits a signal, for example which takes into account the consignee identification code or the place of destination of the transported object.

• le chargement de l'objet dans des moyens pour contenir cet objet, et la fermeture ou le verrouillage de ces moyens, ces moyens étant de préférence du type décrit ci-dessus dans le cadre de la présente invention,
• le transport de cet objet et des moyens qui le contiennent,
• la connexion des moyens qui contiennent l'objet à un réseau de communication,
• l'envoi, sur ce réseau de communication, d'un signal relatif à l'état des moyens qui contiennent l'objet.

The invention also relates to a method for the secure transport of an object, comprising:

• loading the object in means for containing this object, and closing or locking these means, these means preferably being of the type described above in the context of the present invention,
• the transport of this object and the means that contain it,
• connecting the means that contain the object to a communication network,
• sending, on this communication network, a signal relating to the state of the means that contain the object.

In response to the transmission of the signal relating to the state of the means which contain the object, and in particular when the status signal transmitted by the container indicates that it is in a predetermined state, preferably a normal state, an opening signal is received by the means which contain the object.

According to another embodiment, such a method comprises, before the transport stage, a preliminary step of arming means for the destruction or the staining or inclusion of the object contained in the container.

It may then proceed to the neutralization or destruction or staining or inclusion of the object contained in the container, when the signal transmitted by the container indicates that the container is in a different state from the predetermined state, and in particular is different from the normal state, or that it has been or has been forced, or has been or is being assaulted, by an outside is always closed after a predetermined closing time.

• la réception, par des moyens reliés à un réseau de communication, d'un signal relatif à un état du contenant, après connection de ce contenant audit réseau,
• l'envoi au contenant d'un signal d'ouverture après réception du signal d'état, relatif à l'état du contenant, notamment lorsque le signal d'état correspond à au moins un type d'état prédéterminé, ou l'envoi, après réception du signal d'état, d'un signal qui est fonction ou qui dépend de ce signal d'état.

The invention also relates to a method of monitoring the secure transport of an object contained in a closed container, this container preferably being of the type described above in the context of the present invention, this method being characterized in that includes:

• receiving, by means connected to a communication network, a signal relating to a state of the container, after connection of said container to said network,
• sending the container an opening signal after receiving the status signal, relating to the state of the container, in particular when the status signal corresponds to at least one predetermined type of state, or sending after reception of the status signal, a signal which is a function of or which depends on this status signal.

• la réception, par des moyens reliés à un réseau de communication, d'un signal relatif à un état du contenant, après connection de ce contenant audit réseau,
• la neutralisation ou la destruction ou la maculation ou l'inclusion de l' objet contenu dans le contenant, lorsque le signal d'état transmis par le contenant indique que celui-ci a été ou est forcé, ou violé ou agressé, par un agent extérieur, ou lorsque le signal d'état transmis par le contenant est différent d'au moins un signal prédéterminé ou ne correspond pas à au moins un signal ou à un type de signal prédéterminé, ou lorsque le contenant est toujours fermé après une durée de fermeture prédéterminée.

The invention also relates to a method for monitoring the secure transport of an object contained in a closed container, this method being characterized in that it comprises:

• receiving, by means connected to a communication network, a signal relating to a state of the container, after connection of said container to said network,
• the neutralization or the destruction or the staining or the inclusion of the object contained in the container, when the status signal transmitted by the container indicates that it was or is forced, or violated or attacked, by an agent outside, or when the status signal transmitted by the container is different from at least one predetermined signal or does not correspond to at least one signal or a predetermined type of signal, or when the container is still closed after a period of time. predetermined closure.

Thus it can be done either at the opening of the container, remotely, when the condition of the container is identified as satisfactory, or as according to a predetermined state, ie to the neutralization of this container, when the state of the container does not correspond to a predetermined state, chosen as satisfactory.

BRIEF DESCRIPTION OF THE FIGURES

• la figure 1 représente un dispositif de transport selon l'invention,
• la figure 2 représente un dispositif de transport selon l'invention et un système de surveillance, reliés à un réseau,
• la figure 3 représente schématiquement la structure d'un dispositif informatique d'un système de surveillance selon l'invention,
• la figure 4 représente un système de surveillance selon l'invention et une pluralité de dispositifs de transport reliés par réseau ou par liaison locale, à ce système de surveillance,
• les figures 5A et 5B représentent un mode de réalisation d'un autre dispositif de transport selon l'invention,
• la figure 6 représente l'architecture fonctionnelle de moyens de communication et de commande de la sécurité d'un dispositif de transport sécurisé selon l'invention,
• la figure 7 représente un mode de réalisation de moyens de communication et de contrôle de la sécurité d'un dispositif de transport sécurisé selon l'invention.
• la figure 8 est un exemple d'une architecture de réseaux d'un mode de réalisation de l'invention.

The features and advantages of the invention will become more apparent in the light of the description which follows. This description relates to the exemplary embodiments, given for explanatory and nonlimiting purposes, with reference to the appended drawings in which:

• FIG. 1 represents a transport device according to the invention,
• FIG. 2 represents a transport device according to the invention and a monitoring system, connected to a network,
• FIG. 3 diagrammatically represents the structure of a computer device of a surveillance system according to the invention,
• FIG. 4 represents a surveillance system according to the invention and a plurality of transport devices connected by network or by local connection to this monitoring system,
• FIGS. 5A and 5B show an embodiment of another transport device according to the invention,
• FIG. 6 represents the functional architecture of communication and control means for the security of a secure transport device according to the invention,
• FIG. 7 represents an embodiment of communication and security control means of a secure transport device according to the invention.
• Figure 8 is an example of a network architecture of an embodiment of the invention.

DETAILED DESCRIPTION OF EMBODIMENTS OF THE INVENTION

FIG. 1 schematically represents a transport device secure according to the invention. In the illustrated embodiment, this device 2 has the form of a case whose two parts 4, 6 can be closed by closing or locking means 8, 10, 12, 14.

This case can be used to carry numeric values 3, or well any other goods whose transport must be carried out in such a way confidential or requires certain precautions.

A handle 7 allows manual transport of the device.

The closing or locking means may be for example electromagnetic type, for example essentially comprising a miniature electromagnet. According to another embodiment, the means of closing or locking essentially comprise a mechanical system enslaved.

The device may further contain feed means voltage (for example: lithium battery, small footprint) which confer a certain autonomy.

Means 16 make it possible to connect to a network of communication and means 18 make it possible to transmit, via the means 16, to a monitoring system to be described later, signals, including signals relating to a transport device state or identification signals the place where the device is connected 2. These means also make it possible receive signals from the surveillance system.

In the illustrated embodiment, the reference 16 designates a socket for a connection on a network such as the telephone network, and the means 18, arranged inside the transport device, are electronic means which transmit or receive signals via the established connection using means 16 or the socket 16.

Preferably, these means 18 also control the opening and the closing means 8, 10, 12, 14 closing or locking. Other said, these means of closure receive an order of closure or opening to from means disposed within the transport device itself.

The walls which delimit the transport device according to the invention may be made of flexible plastic material, in particular for package type devices, or material such as rubber for devices "envelope" format. These types of material are compatible with insertion, in the container, means or a management device 18, made for example in the form of an electronic card, and with the making of a connection socket 16 in one of the walls or external surfaces.

For larger devices, such as cases of the type of illustrated in Figure 1, walls of non-deformable material may be provided.

As indicated above, the socket 16 allows connection to a communication network. Figure 2 shows the case of a connection of the Briefcase 2, in the closed state. to a telephone network 20, which is shown schematically in broken lines. The socket 16 makes it possible to connect the case to a telephone jack 19 via a cable 17.

A monitoring device 22 is also connected to the network of communication 20, for example, in the case described here, by connection to a socket In the example shown, the surveillance system includes essentially a microcomputer 22 having an interface for communicating via a telephone network, for example a modem. An operator 24 conducts surveillance, in a manner to be described later.

The monitoring system 22 comprises a display device 23, a keyboard 26, peripheral means such as a mouse 27 allowing move a cursor on the screen 23.

Figure 3 schematically shows, in block, various components of the monitoring system 22. A microprocessor 34 is connected by a bus 38, to RAMs 30 for storing data, to a memory ROM 32 in which monitoring program instructions can be stored. The system further comprises the display device, or screen, 23. and peripheral means 26 (keyboard) and 27 (mouse).

Reference 36 designates a modem making it possible to establish a communication with a telephone network 20.

A personal computer can be used as the computer of the system 22 in the context of the present invention. The system 22 can be by example made using a PC Pentium PC, running on Windows NT.

More generally, several users, that is to say several each carrying one or more different objects, may be connected to the 22. This embodiment is illustrated in FIG. containers, or transport devices, 48, 50 (shown here in the form of parcels, for example postal parcels) are connected, via a network of 46, such as the public telephone network, to 42, such as a reception center, the latter means being itself connected to the monitoring system 22 by a connection 44 (for example of the type RS 232).

A local connection, at the operator of the surveillance system 22, can be carried out between containers 52, 54, via one or more line (s) of local connection (s) 56. The interest of this type of connection will be explained below.

The assembly is connected to electrical supply means 58.

• du côté système de surveillance 22: à l'aide d'un PC équipé d'une carte de communication, et dont l'adresse est connue;
• du côté du destinataire : par le dispositif de transport lui-même, et plus précisément par les moyens électroniques 18, qui comportent par exemple un microprocesseur programmé ainsi qu'une carte réseau (ou des moyens d'interface de ligne) pour la liaison avec le réseau de communication.

The system described above mentions a telephone line as a communication network. It is also possible to use any other type of communication network operating with an addressing system of equipment or stations connected to it. For example, it is possible to implement the Internet network, the link being for example:

• on the surveillance system 22 side: using a PC equipped with a communication card, and whose address is known;
• on the recipient side: by the transport device itself, and more precisely by the electronic means 18, which comprise for example a programmed microprocessor and a network card (or line interface means) for connection with the communication network.

A secure transport method using the devices described above will now be explained. First, the object 3 to be transported is placed in the transport device 2, and the latter is closed. The means 8, 10, 12, 14 are locked so that an opening, other than an opening controlled by the monitoring system 22, can not be achieved without forcing the device 2.

Locking means 8, 10, 12, 14 can be achieved by any medium, but preferably by the means 16, 18 which will control the opening when receiving the container. It is realized in this case, before shipment of container and its contents, a first connection of the means of transport to the system 22, and the latter sends a closing or locking signal to the container (s) 2, 52, 54. This first connection is advantageously made of locally, for example using a local area network such as local lines (Figure 4), so as to overcome, during this stage, the problems of which may arise when using a public network such as the public telephone network: the communication between surveillance system 22 and container (s) does not need to be coded or encrypted.

During or after this lockout phase, the information that will be used during the opening procedure are transmitted from the system of monitoring 22 to the container 2, 52, 56.

After shipping and transport, the transport device is received by its recipient. It establishes, using the means 16, 17, 19 a connection with the system 22 via the network 20.

When the container 2 is in a normal state, for example when attempts to open it without permission, or to force it, or to force closure means 8, 10, 12, 14, or to force or destroy or disrupt the means 18 of opening control, have not occurred, the means 18 emit a signal reflecting this normal state, signal that is received by the surveillance system 22. Operator 24, or system 22, specially programmed for this purpose, may then determine a state of the container (here: a normal state) according to the signal received, and determine a signal to be sent, in response (here: an opening signal of the container). The system 22 can then send an opening signal to the device of This signal is received and processed by the means 18, which then emits a control or an order of opening to the locking means 8, 10, 12, 14.

When the device 2 has undergone an attempt to open without authorization or has been or is being forced, or where the locking means 8 - 14 or the control means 18 are forced or undergo a disturbance which can translate an attempt to force them, means 18 emit another signal, which translated this state. The operator 24, or the system 22, specially programmed for this effect, can then determine a state of the container (here: an abnormal state) depending of the received signal, and determine the answer to be formulated (here: no opening signal container). The system 22 does not send an opening signal to the device 2. He may send a signal indicating the existence of an anomaly and the impossibility of sending an opening signal. This signal is received and processed by the means 18, which may transmit this information to a display device incorporated into the walls of the container or to a device to emit an alarm signal.

The device 2 and its means 18 can transmit or are programmed to transmit, a predetermined signal, depending on the state of the container or the 2. They may also possibly transmit an identification signal from the containing itself.

Similarly, the system 22 transmits an opening signal if the status signal received corresponds to a predetermined type of signal, which an operator 24 can qualify, or not, normal.

In other words, system 2 is programmed, or specially programmed, to transmit an opening signal, or another type of signal (for example a signal signaling the impossibility of transmitting an opening signal, or still a signal of neutralization of the content as will be explained below) according to the received signal.

The system 2 can be programmed so that certain signals do not corresponding to a completely intact condition of the container, be accepted or interpreted by System 2 as translating an almost normal state; to this guy of signals, it can then be answered by an opening signal.

Means for detecting an attempted break-in device 2 can be the means 18 themselves, or additional means such as sensors that transmit a signal to the device or the means 18, this signal reflecting a variation, normal or abnormal, of a certain Physical size.

For example, the inner walls of the transport device 2 can be provided with electrical means forming a circuit when the container is in a closed state, this circuit being interrupted when an attempted break-in that an attempt to separate the two parts 4. 6 of the device 2, takes place. The internal walls of the device 2 may for example be coated with a mesh electrical or electrical conductors that are connected to electronic means 18. In a normal closed state of the device 2, the current flows normally in this mesh or these conductors, and a prescribed current value is detected by current detection means, for example arranged in the 18. When the circuit is open, the current no longer circulates, and a variation of the current is recorded by the means 18. After connection to the network 20, these means 18 send a signal reflecting this variation.

The device 2 may also be provided with one or more sensors, such as a thermal probe which makes it possible to detect any abnormal movement of the temperature in the environment of the device 2, or a humidity sensor that allows to detect any abnormal variation of the hygrometry in the environment 2. Such sensors detect an attempt to open without authorization or violation, carried out using one or more variation (s) abrupt temperature (s) and / or by introducing a liquid around the container or means 18 for transmitting signals or controlling the opening of the device for transport.

Other attacks can be made on the device 2, for example by applying high voltage on the visible elements of the device, or by application of electromagnetic disturbances. Sensors can be provided to detect a voltage variation applied to the device 2 or a variation of an electromagnetic quantity, such as for example a field magnetic, applied in the environment or inside the device 2.

According to one example, two temperature sensors equip the device, a first to detect temperatures below a threshold value T ₁ (for example: -25 ° C or 0 ° C), a second to detect temperatures above a threshold T ₂ (for example: 60 ° C or 40 ° C).

In another example, two protection meshes can be glued on the device 2: the first mesh for the upper part 4 and the second mesh for the lower part 6. For each of these meshes, a potentiometer can be provided to adjust an impedance that varies depending on the surface of the device 2. Each potentiometer is connected to the means 18 by two soldered wires.

In another example, a contact can be mounted directly on the device 2 to signal its opening. This contact delivers information "everything or nothing. "It is connected to the means 18 by two welded wires.

The implementation of sensors, such as electrical sensors or electromagnetic fields (eg voltages or magnetic fields) or thermal or hygrometric sensors, or electrical meshes, or means staining or destruction or inclusion is consistent with the realization of a device according to the invention in any of the formats already indicated above. Just select the sensors or adjust the size of the device staining or destruction or inclusion with that of the transport device selected.

In order to increase security, a recipient identification code or a destination of the transported object can be previously stored by the monitoring device 22. In the case where the network 20 is a network telephone number, it may be the telephone number of the place where device 2 to be delivered. When connecting the device 2 to the telephone network 20 through through a phone jack 19, the phone number of the place of arrival, or which corresponds to the socket 19 to which the device has been connected, can be sent automatically to the monitoring system 22 which identifies the place where the device 2 is located, or where it was delivered, and which check whether this place corresponds to the place where the transport device was actually be issued initially. It is therefore possible to add, as when the system 22 delivers the opening signal of the device 2, the following condition: the identification code is that of the recipient or destination originally planned. The connection of the system 22 to the network telephone 20 may also include an automatic identification service device 2 calling, once it is connected to the telephone network.

In the case where, as already mentioned above, the means 18 are designed or programmed to further transmit an identification signal from the container, the system 22 may further verify whether the intended container has been delivered to the addressee or the place intended. This verification is carried out by checking the recipient data and container identification data previously stored in the storage means of the system 22.

Another condition for the delivery, by the system 22, of the signal opening of device 2, may therefore be the following condition: the container is the one intended for the intended consignee or destination initially.

In order to complete the protection obtained by using one or other means already described above, the transport device according to the invention can in additionally incorporate means of destruction and / or staining and / or inclusion and / or marking an object it contains.

Thus, the content of the device 2 can be made unusable for someone who would succeed in forcing, or opening without authorization, the device 2. By example, numeric values 3 may be smeared, or documents confidential information may be destroyed, or valuable objects may be included in a solid mass during such an attempt to open the device 2.

According to one embodiment, a specific compartment provided for in the interior of the device comprises a product or a liquid adapted to such neutralization, such as an indelible stain for staining, or an acid mineral or an organic solvent for destruction, or a synthetic resin to achieve inclusion.

Preferably, the transport device is then made of a material which ensures maximum efficiency of the process of neutralization of the object by the product or the neutralization liquid.

Also preferably, the specific compartment which contains the liquid or the neutralization product is isolated from the part receiving the transported by a wall, for example polyurethane foam, thus protecting it possible shocks during handling and transport operations.

Means are also provided, which allow the expulsion of the product or neutralization liquid on the object transported in the device 2. These means comprise for example a second compartment containing a gas tablet that allows the expulsion of the product.

The product then spreads uniformly over the values or documents or objects transported, for example using ejection ramps disposed in the vicinity of the area in which the object 3 is transported.

A process of staining or destruction or inclusion may be triggered by internal means to the container, such as the means 18 and / or by the remote monitoring system 22.

The triggering of means of destruction or staining or of inclusion can therefore be achieved using the electronic device 18, by example from information received from one or more sensors such as already described above (break of a circuit, and / or a conductor mesh, and / or detecting an abnormal change in humidity, and / or detecting a variation abnormal temperature, and / or detection of abnormal variation of a voltage and / or an electromagnetic magnitude such as a magnetic field, and / or detection of an abnormal variation of any other physical parameter translate an attempted break-in on the device 2).

Possibly, the device for staining or destruction or of inclusion can be triggered from the system 22, when the latter detects a anomaly, for example after receiving, via the network 20, a signal that reflects a abnormal state of the device 2. It can also be triggered if the system 22 identifies a recipient that does not conform to the intended recipient or a container which does not correspond to the intended recipient, even though the recipient is well that originally planned.

In this case, not only the system 22 does not send a signal opening, but it also sends a signal or an order to trigger the destruction, staining or inclusion of the object. More precisely, this signal is received by the means 18 which trigger the means of destruction or staining or inclusion.

• un signal de désarmement ou de désactivation des moyens de maculation ou de destruction ou d'inclusion,
• un signal d'ouverture du dispositif 2.

When, after connection on the network 20, the means 16, 18 send to the monitoring system 22 a signal reflecting a normal state of the transport device, the system 22 sends, in response:

• a signal for disarming or deactivating the means of staining or destruction or inclusion,
• an opening signal of the device 2.

In another aspect, it can be provided that device 2 must be open, and its contents must be removed, within a certain period of time after reception of the signal authorizing its opening. Beyond this time interval, the device is locked again, and / or the means of destruction or staining or inclusion are re-armed or reactivated.

For this purpose, the means 18 comprise a clock and, after a certain time, a signal is emitted by these means 18, to re-trigger the lock and / or the arming system.

When loading the transport device 2 with the object 3, the device is closed, locked, and then possibly the staining system or of destruction or inclusion is armed. These operations are done for example on order of the operator 24 of the system 22, by connection on a local line, such than one of lines 56 of FIG.

Figs. 5A and 5B show an embodiment of a transport device 60 according to the invention, which comprises means for neutralization of a transported content.

In these figures, the reference 16 designates the socket for the connection to the network and reference 18 the electronic means of communication and signal processing. Reference 62 designates the staining system, connected to maculation ramps 70, 72 arranged at the bottom of a compartment 78 in which can be locked up bank notes or documents. A cover 80, located in the upper part 4 of the device allows to close the compartment 78.

Closing contacts 74, 76 make it possible to detect a possible opening of transport device, in the way and with the consequences already described above.

The closure system 82, 84 operates on the principle of a electromagnetic locking: the opening or closing of the device 60 is electrically, with an electromagnet. The set is connected to the device 18. In one example, the coil power of the electromagnet is 3 W and the coil voltage is fixed at 6 V.

Means 119 for supplying voltage and means 124 accumulators are also shown in the wall of the suitcase 60.

FIG. 6 represents the electronic means 18 for controlling and control of a secure transport device according to the invention, provided with different peripheral elements.

More specifically, the means 18 comprise a first subset 18-1 which allows to manage the communication with the system of monitoring, via the socket 16, which also controls signaling means 17 to indicate to an outside operator or a carrier a system anomaly.

The means 18 comprise a second portion 18-2 which ensures the locking and security management of the device. This second part is connected, in the example given in FIG. 6, to a mesh 92 of the container, to a thermal sensor 94 and an opening detector 96. The means 18-2 also control the opening and closing of locking means 90 of the device.

These means 18-2 also control the implementation of the system of staining or destruction or inclusion 62. with its two compartments 62-1 and 62-2 and two ejection ramps 70, 72.

The diagram of Figure 6 relates to a particular embodiment. A transport device according to the invention can also be implemented, without any of the elements 92, 94, 96, and without the means 62 for staining. The safety is then obviously lower, but the remote opening of the container, depending on a status signal of the device, however, can be ensured.

Figure 7 shows, in more detail, the realization of means 18 for communication and control of a transport device according to the invention.

All the components of this device is organized around a microprocessor or microcontroller 100. and storage means 102 (of non-volatile memory type) and a clock 103.

• capteur de température 94,
• capteur d'hygrométrie 104,
• maillage de protection 106 de la partie supérieure 4 du dispositif,
• maillage de protection 108 de la partie inférieure 6 du dispositif,
• détecteur 96 d'ouverture, ou contact d'ouverture,
• moyens 110 de détection de la présence d'un objet dans le dispositif, ou contact vide/plein.

In the illustrated embodiment, the following sensors or detectors are provided:

• temperature sensor 94,
• humidity sensor 104,
• protective mesh 106 of the upper part 4 of the device,
• protection mesh 108 of the lower part 6 of the device,
• opening detector 96, or opening contact,
• means 110 for detecting the presence of an object in the device, or empty / full contact.

Each of the sensors or detectors is connected to means or a shaping circuit 95, 105, 107, 97 of the signal emitted by the sensor or the detector. Once formatted, the signal is transmitted to the microprocessor 100. The latter is programmed in such a way as to trigger the actions necessary to following reception of signals from sensors or detectors above (send to the monitoring system 22 a signal reflecting a state defect, triggering a control signal of the neutralization, displaying a message for a user, for example the carrier or the recipient of the object).

The microprocessor 100 also triggers the opening of the means 8 - 14 (FIG. 1) or 82, 84 (FIG. 5A, 5B) or 90 (FIG. a signal formatted using a shaping circuit 112.

Communication with the monitoring system is carried out by via line interface means 114, a modem 116 and a circuit 118 DTMF broadcast.

According to an exemplary embodiment, the modem 116 is a V23 modem, 1,200 bauds for transmission in the container-to-supervisor direction, and 75 bauds for transmission in the supervisor to container direction. The choice of these values make it possible to optimize the power consumption of the system.

Signals received from the monitoring system 22 pass through the socket 16, the interface 114, the modem 116 and are transmitted to the processor 100 which is programmed to trigger the necessary actions after receiving this signal (for example: opening of the transport device, or triggering of the neutralization (staining, inclusion, destruction), or displaying a message on a display screen 130 of the transport device).

Signals emitted by the means 18 to the system of monitoring 22 pass through the circuit 118, the interface 114 and the socket 16.

Power supply means 119, such as a battery, contained in the transport device according to the invention are also connected to the means 18, and in particular to means 120 for regulating the voltage. The latter are themselves connected to means 122 for switching the supply which supply a voltage V _DC to the microprocessor 100 and a supply voltage to the interface circuit 114. The regulation means 120 can also be connected to a charger 127, which can itself be connected to a DC charger 125 and a diode 123 for indicating the state of charge of the battery.

Finally, backup accumulator means 124 can be provided, which feed the interface 114. Thus, a malfunction or a decrease of the supply voltage of the voltage supply system of the transport device according to the invention does not interfere with the communication with the surveillance system 22.

The means 124 backup accumulators also allow establish communication with the supervisor 22, when the battery or voltage supply means are completely destroyed, for example to the outcome of an inclusion operation, or staining, or destruction. So, the opening command of the device can be operated without resorting to mechanical means of the crowbar type.

The means 119 and 124 are also shown in FIG. 5A, in position in the wall of the suitcase 60.

All the means 18 can be realized using circuits printed matter, the temperature and hygrometry sensors can be themselves soldered on the printed circuit board. The meshes 106, 108, the opening contact 96 are themselves connected to the electronic card by soldered wires. Two soldered wires also enable the card to be connected to the locking means of the transport.

The transport device according to the invention can, according to a variant, be equipped with means to locate it continuously during transport.

For example, a GPS location can be performed.

In this case, transmitter / receiver (GPS) means are arranged in the transport device according to the invention.

The latter can therefore receive at any time information on his position.

It is furthermore equipped with means, for example transmitter / receiver means to re-transmit or receive RF signals to and from, Surveillance system.

The latter is also equipped with transmitter / receiver RF signals. It then processes the signals received from the transport and containing information on the position of the latter, and thus controls the journey of the latter.

If this route departs, or deviates from a planned trip, the system monitoring can send a trigger signal means of neutralization transported content.

A detailed method of transporting an object will be described in the of the present invention.

The transport operation preferably begins, for reasons of in the premises where the means of control are installed.

Values or documents or items to be transported will have previously loaded into the device 2, 60 or the carrying case, or are loaded into this device or this briefcase in the premises of the means of control 22.

Once the container, loaded with its contents, is closed, the following operations can be performed.

The supervisor 22 receives information about the recipient of the content, for example in the form of a telephone number. This operation can be done automatically after a dialogue with the computer system 22 from the operator, or by manual entry.

The local telephone line 56 is connected to the container.

A telephone call is established between the supervisor 22 and containing 2 or 60.

Confidential information can then be exchanged. They will be used during the procedure of opening the container.

The control system 22 can on this occasion check the status of the 119 battery and sensors. The corresponding information can be displayed on the control screen and / or on an LCD display and / or be memorized. An account rendered may then be sent to the operator's computer system and a armament confirmation slip can be printed.

The local telephone line 56 is then disconnected, and the container is delivered to the carrier.

The disarming operation of the device can be done at the customer who comes into possession of the container, or at the operator who recovers a non-empty container. In both cases, the goal is to open without provoking neutralization of the content.

This operation is done under the supervision of the supervisor 22, after connection of the container on a specific telephone line, provided initially.

After receipt of the container, it may therefore be carried out following.

A container connection to the local or direct phone line is realized. This connection leads to an automatic line take and the dialing a phone number which is in this case the phone number supervisor 22.

A communication between the supervisor 22 and the container is then established.

Information is exchanged to authorize the opening of the container. The authorization to open the container is done after checking the confidential information loaded during the arming operation, and in particular of the identity of the recipient. Detecting a defect can end the procedure for opening the container.

The opening authorization is then issued. This authorization may be valid for a certain period only, for example for 10 s.

If the opening does not take place during this period, the container is locked again.

Otherwise, the container is open, which can be immediately reported to supervisor 22, with, for example, display in a table of Supervisor Events 22 and / or Reporting to the System IT of the operator.

The telephone line is then disconnected.

If an opening of the container can not take place, the user disconnects his phone line and resumes the operation later. This automatic redial feature of the phone number can be blocked after a certain delay (for example: 1 min) so that during the operation of disarming, the customer or the recipient remains in front of the container.

The control device 18 can also be programmed to make impossible any opening after several (for example: three) attempts successive openings. The device then returns for example to the operator, only authorized to intervene.

Specific indications, corresponding to one or the other of the stages above, can be displayed on display means of the container.

In particular, the display means signal to the user that opening of the container can not take place.

The operations described above assume that a step of staining or destruction or inclusion did not occur. Such a step intervenes on an armed container, closed and not empty. When the container does not not find in this state, any anomaly is recorded to be recorded in the supervisor 22, but does not activate the staining or destruction command.

This override command can also be triggered at by the supervisor 22. This allows the operator to intervene on containers that have been reported to be stolen.

Once opened and emptied of its contents, the container may be redirected to the surveillance system, which may assign it to the transport of another object at another recipient. The email address or identification of the new recipient may be registered in the system of surveillance 22, to verify the identity of the new recipient, after delivery and before opening.

According to another mode of use, the container can be loaded with another object to a first recipient, then sent directly to a second recipient without first being sent back to the surveillance system.

The procedure is then the same as that previously described, with however this difference that the closing step as well as the possible steps arming means of neutralization, and / or control of the state of the battery and sensors, take place remotely. These steps can take place after unloading the container, while the container is still connected to the line or the socket 19 (Figure 1) of the first recipient.

The new email address or the new number identification of the new recipient may also be transmitted during this connection.

There is then programming of the new destination of the container (composition of a code or email address or number identification of the new recipient).

According to one variant, this new electronic address or this new identification number may have been previously established and stored at the time of preparation of the container at the operator of the surveillance system, before shipping to the first recipient.

In other words, several e-mail addresses or numbers identification of successive recipients may be previously provided. This avoids having to pass one or more confidential codes identification on a public communication network such as the network telephone.

Before the first putting into service of a container, the means or the electronic card 18 do not yet have identification. An operation allows to assign a number to the container, to copy this number in the nonvolatile memory 102 of the card 18, and to add this new number in a database maintained by the supervisor 24. This operation can be done during the container connection on a local line 56 (Figure 4). This operation also allows to associate a given container with a given operator name 24, and thus to prohibit exploitation with the supervisory device 22 of another operator. This identification data may be part of the data sent by the container to the supervisory system 22, after it has been received by a recipient and its connection to the network, at this recipient. This data is first verified (Is the transmitter container allowed to work with the supervisor contacted?), then the system 22 performs the verification operations already explained above (verification of the condition of the container and possibly verification of the identity of the recipient).

Thus, a system according to the invention makes it possible to initialize each of the containers it uses, and manage these different containers through the networks existing.

• l'identification ou la reconnaissance des contenants à distance, par l'intermédiaire d'un ou de plusieurs réseaux de communication, après connexion de ces contenants à un de ces réseaux,
• l'ouverture éventuelle de ces contenants, en fonction de leur état et selon une des procédures déjà décrites ci-dessus,
• ou bien l'envoi d'un message d'impossibilité d'ouverture à l'un de ces contenants, ou bien l'envoi d'un signal ou d'un message de déclenchement de neutralisation d'un des contenus.

A method of managing a set of containers according to the present invention therefore comprises in particular the following steps:

• identification or recognition of the containers remotely, via one or more communication networks, after connection of these containers to one of these networks,
• the possible opening of these containers, according to their state and according to one of the procedures already described above,
• or the sending of a message of impossibility of opening to one of these containers, or the sending of a signal or a triggering message of neutralization of one of the contents.

Beforehand, each user or recipient can specify to a manager of a fleet of containers the type of object to be transported, and the type of access to a network that he has. The manager can then identify the content to use, and initialize it according to the procedure already described above.

The transport method as already described above can then be implemented.

The monitoring system described above can be implemented in connection with a management system of a set of transport devices according to the invention.

FIG. 8 represents this embodiment, in which the system Supervisor (or supervisor) is equipped with supervision software on a local computer network 29 and is connected to the local network 150 of the management system (or manager).

Reference 22 designates a microcomputer of the monitoring, as for example already described above in connection with the FIGS. 2 and 3, and the reference 42 of the reception centers, such as the one already mentioned below in connection with Figure 4.

Conveniently, in this embodiment, it is the system of management 150 which will proceed to the edition of a transport ticket which is transmitted to the supervisor 29.

A firewall 153 ("firewall") isolates the two networks.

• n° de la valise ou du contenant,
• code client,
• n° de bordereau de livraison,
• date de début d'autorisation d'ouverture (facultatif) et durée d'ouverture.

The transport ticket provided by the manager 150 is composed for example of:

• n ° of the bag or container,
• customer code,
• delivery note number,
• opening authorization start date (optional) and opening time.

Preferably, the interconnection between the two networks 29 and 150 is in such a way that the seizure of the transport ticket can also be from the network 29, if necessary.

The supervisor ensures, or is specially programmed to ensure, the programming of containers and receiving remote calls.

It can also ensure the reception of the bags and their maintenance, services respectively designated in Figure 8 by references 152 and 154.

• données client (sur disque 25 du réseau de surveillance 29),
• informations du ticket de transport fourni par le gestionnaire.
• fichier des valises et bordereau de livraison en état temporaire (entre le gestionnaire et le superviseur)
• fichier des bordereaux de livraison saisis et non traités pour cause de défaut de valise en programmation,
• fichier des expéditions de valises vides depuis le central,
• fichier des relances client avant neutralisation du contenu d'un dispositif de transport,
• retour d'information sur test de la valise en mode local ou distant,
• information sur le succès ou l'échec d'une tentative d'ouverture d'une valise à distance,
• nature des incidents en connexion (fausse prise, faux code, fausse valise...),
• statut d'une valise,
• état d'une valise,
• liste des valises déjà ouvertes et/ou désarmées, et/ou encore en mission,
• liste des valises opérationnelles prêtes au départ
• historique des opérations (événements),
• compteur des connexions clients.

The supervisor software makes it possible, for example, to store, in the storage means available to the supervisor, the following information:

• customer data (on disk 25 of the surveillance network 29),
• information of the transport ticket provided by the manager.
• bag file and packing slip in temporary state (between the manager and the supervisor)
• file of the delivery notes entered and not treated because of lack of suitcase in programming,
• file of empty baggage shipments from the exchange,
• client retry file before disabling the contents of a transport device,
• feedback on test of the bag in local or remote mode,
• information on the success or failure of an attempt to open a remote bag,
• nature of the incidents in connection (false catch, false code, false suitcase ...),
• status of a suitcase,
• condition of a suitcase,
• List of cases already open and / or disarmed, and / or on mission,
• list of operational bags ready to go
• history of operations (events),
• counter for client connections.

• disponible (batterie en charge d'entretien sur râtelier),
• en mission (hors site du dispositif de surveillance),
• en tournée (programmé à distance),
• ouvert à distance.
• attendu vide au central,
• attendu plein au central,
• stocké chez le client,
• code "vol",
• code "perte",
• batterie en charge,
• en maintenance,
• en réparation usine.

The possible status of a container or bag can be defined as follows:

• available (battery in charge of maintenance on rack),
• on mission (off-site monitoring device),
• on tour (programmed remotely),
• open at a distance.
• waited empty at the central,
• waited full at central,
• stored at the customer's,
• code "flight",
• code "loss",
• battery charging,
• under maintenance,
• in factory repair.

• vide/plein,
• ouvert/fermé,
• armé/non armé,
• encré/non encré,
• bloqué/non bloqué,
• température bonne/mauvaise,
• humidité bonne/mauvaise,
• maillage OK : oui/non,
• batterie bonne/mauvaise.

The possible states of a container can be defined as follows:

• empty full,
• opened closed,
• armed / unarmed,
• inked / not inked,
• blocked / not blocked,
• good / bad temperature,
• good / bad humidity,
• mesh OK: yes / no,
• good / bad battery.

• prise incorrecte
• code d'échange incorrect
• code valise incorrect
• non ouverture après 3 essais.

The supervisor can also handle the following connection problems:

• incorrect plug
• wrong exchange code
• incorrect suitcase code
• not open after 3 trials.

Various procedures or stages of operation of such a system will now be given as an example.

The first procedure described is the departure of luggage from central or the surveillance system.

It is the manager 150 which proceeds to the edition of the transport ticket, as already defined above, and which fixes it on the bag or the container.

The manager begins by opening his own screen entry screen. mission (using a PC or PC 171), and accesses the disk supervisor computer 29.

Each parameter is then transmitted to the database of the supervisor disk 29, by any computer means of the manager 150.

• un code opérateur,
• la date d'autorisation d'ouverture,
• la date d'encrage (ou, plus généralement, de neutralisation),
• un numéro de bordereau de livraison,
• un numéro de code client,
• un numéro de valise, par exemple par lecture d'un code barre sur la valise,
• une date/heure de relance du client avant encrage ou neutralisation du contenu,

These parameters are for example:

• an operator code,
• the opening authorization date,
• the date of inking (or, more generally, of neutralization),
• a delivery slip number,
• a customer code number,
• a suitcase number, for example by reading a barcode on the bag,
• a date / time of recovery of the customer before inking or neutralization of the content,

The application of the manager 150 requests to validate the input screen, and installs these data in a table of delivery notes, included in a "Edit" table, before programming the bag.

There is only one delivery slip number waiting to be programming by suitcase and a single suitcase by delivery slip. All other arrangement is managed by the manager's IT.

Then the operator of the manager fills the bag with its contents, and his delivery note. He locks the suitcase. He sticks the label of the recipient and transmits the bag to the shipping service 160 (which has a microcomputer or PC 161).

The operator of the system 29 or dispatch service 160 connects the suitcase to a programming line. The transaction is then done for him in blind (without a screen) and this time it is processed directly by the system 29.

• reconnaissance d'une valise pleine.
• reconnaissance des données associées telles que le n° de bordereau de livraison, le code et/ou le nom du client et le code de la valise,
• affectation d'un code éphémère client (invisible),
• affectation d'un code éphémère maintenance (invisible),
• armement de la valise,
• autotest des composants,
• allumage de la diode, sur la valise, à l'état permanent,

The operator of the system 29 then proceeds to the steps of:

• recognition of a full suitcase.
• recognition of associated data such as the delivery slip number, the code and / or the customer's name and the code of the bag,
• assigning an ephemeral client code (invisible),
• assignment of an ephemeral maintenance code (invisible),
• arming the suitcase,
• self-test of the components,
• lighting of the diode, on the bag, in the permanent state,

The operator then removes the plug and proceeds with the shipment.

Any rapid flashing of a diode on the bag, during the programming, returns the bag while maintaining for diagnosis.

For security reasons, ephemeral codes are not chosen in drop-down list, but are preferably generated randomly at each internal or external transaction request.

In addition, to ensure a possible wiretapping during remoting an exchange code across the network (for example when departure of a full suitcase from the client), the code is delivered encrypted.

It may also be planned to send a suitcase empty from the supervisor system.

Some customers will then be able to get an empty suitcase, for example as an additional service or as a replacement for a defective bag during a tour request.

• un code opérateur est introduit,
• un code valise est généré,
• une date conventionnelle d'encrage ou de neutralisation est choisie,
• un numéro de bordereau de livraison est choisi dans la liste normale du gestionnaire,
• la valise est fermée,
• l'étiquette d'expédition et le bordereau de livraison sont collés sur la valise,
• la valise est transmise au service expédition 160 du système superviseur.

The procedure for traveling an empty suitcase from the manager is as follows:

• an operator code is introduced,
• a suitcase code is generated,
• a conventional date of inking or neutralization is chosen,
• a delivery slip number is chosen from the normal list of the manager,
• the suitcase is closed,
• the shipping label and the packing slip are stuck on the bag,
• the bag is transmitted to the dispatch department 160 of the supervisory system.

On arrival at the dispatch department, and after connection by the operator of the supervisor system, the latter recognizes the bag in his pending delivery, as well as the conventional inking date and proceeds only to the self-test before permanently lighting the diode that equips the suitcase. In this case, there is no ephemeral code assignment. The operator then send the suitcase.

• fait clignoter la diode de la valise en mode rapidement permanent,
• enregistre l'anomalie au journal des événements,
• renseigne une table des bordereaux de livraison saisis mais non traités,
• renseigne une table des valises qui sont, techniquement, hors service.

As soon as it detects a technical anomaly, for example if a programming has failed, the supervisor:

• flash the diode of the bag in fast permanent mode,
• save the anomaly to the event log,
• enter a table of delivery notes entered but not processed,
• informs a table of suitcases that are, technically, out of order.

The procedure for returning the bag can be as follows. The suitcase returns to maintenance 154 for diagnosis. Maintenance recovers content orphaned and forwarded it to manager 150 for a new expedition. The manager can enter a second time this delivery slip, since it is seen by the supervisor in the file of "delivery notes entered but not Treaties ".

Maintenance can then manually inform the supervisor the new status of the case "in maintenance".

• crée les nouveaux codes des valises (valises neuves),
• dispose des outils de diagnostic du dysfonctionnement de la valise,
• traite les motifs de l'anomalie technique en retour de programmation,
• ouvre les valises en défaut d'ouverture chez le client, par exemple après 3 essais,
• diagnostique les défauts d'ouverture de tous ordres, chez le client ou lors du retour chez le gestionnaire,
• ouvre les valises à l'aide de son code éphémère, associé au code éphémère client,
• reçoit les alertes des défauts de programmation à distance (par exemple par le réseau 29 et un avertisseur sonore 170), et prévient le client de l'éventuelle annulation de la mission,
• procède à l'entretien physique et électronique des valises (notamment après les retours des valises pleines au service des retours),
• gère l'état des retours des valises en usine,
• ouvre les valises encrées ou neutralisées.

The 160 maintenance service:

• creates the new suitcase codes (new suitcases),
• has tools to diagnose the malfunction of the bag,
• treats the reasons of the technical anomaly in return of programming,
• opens suitcases in default of opening at the customer, for example after 3 tests,
• diagnoses the opening faults of all orders, at the customer's or when returning to the manager,
• opens suitcases using its ephemeral code, associated with the ephemeral client code,
• receives the alerts for remote programming faults (for example by the network 29 and a buzzer 170), and warns the client of the possible cancellation of the mission,
• carry out the physical and electronic maintenance of the suitcases (in particular after the returns of the full suitcases in the service of returns),
• manages the return status of the bags at the factory,
• open the suitcases inked or neutralized.

At least one PC 156 is dedicated to maintenance operations. of the Receiving cards or programming cards are connected to this PC.

In general cases, all reception centers 42 belonging to to the monitoring system can open or program suitcases depending internal cards they have. But the opening will be refused to a receiving center if the bag arrives directly from the programming without have made its remote opening at the customer.

The maintenance 154 has access to all the parameters described in the programming procedure, except for clear reading of ephemeral codes. During the return a suitcase directly from the programming, so it can open the suitcase by a banal procedure if it is not armed, or by exchanging the ephemeral maintenance code associated with the mission, if the suitcase is full.

• valise normalement vide,
• valise normalement pleine.

The maintenance 154 also diagnoses on the supervisor's screen the differences that appeared during the processing of the bag at the reception service, with the two standard cases which are:

• suitcase normally empty,
• suitcase normally full.

The tooling of the service 152 for receiving the suitcases is composed only reception center. No PC is required. The operator is called recipient.

After connecting the bag in return for the customer, the supervisor analyze its state and status.

Various cases may arise, which will be analyzed successively (case A-H below):

A) Case of a normally empty suitcase

• rapproche le numéro de valise avec le code client et le numéro de bordereau de livraison de la dernière connexion, et s'assure d'une association correcte,
• constate l'état vide de la valise,
• vérifie que ce code bordereau de livraison/client n'a effectué aucune transaction pour retourner cette valise pleine (dans ce cas, la valise serait anormalement vide),
• teste les éléments techniques,
• remplit la liste des valises revenues,

The supervisor:

• reconcile the bag number with the customer code and the delivery slip number of the last connection, and make sure of a correct association,
• note the empty condition of the bag,
• verify that this delivery / customer code has not made any transactions to return this full bag (in this case, the bag would be unusually empty),
• tests the technical elements,
• complete the list of returned suitcases,

The diode of the case lights up (the opening is possible), and the receiver disconnects the bag and sends it to the battery pack for recirculation.

B) Abnormally empty suitcase

1° La valise est encrée ou neutralisée et le contenu est réputé avoir été maculé (en l'absence probable du destinataire).

2° La valise a été forcée, sans neutralisation de son contenu, car le client n'a pas procédé à la transaction d'armement à distance avant expédition (anomalie de procédure seulement, car la valise est attendue normalement vide).

3° La valise n'est pas neutralisée. Il faut d'abord vérifier si un objet quelconque n'a pas aveuglé provisoirement le système optique dédié au capteur de logement plein. Il s'agit, dans ce cas, d'une mystification au chargement de la valise. Toute autre cause doit faire l'objet d'une investigation précise en maintenance.

The suitcase was opened after remote programming by a non-recipient third party.

1 ° The bag is inked or neutralized and the contents are deemed to have been stained (in the probable absence of the recipient).

2 ° The bag was forced, without neutralization of its contents, because the customer did not proceed to the transaction of arming at a distance before dispatch (procedural anomaly only, because the suitcase is expected normally empty).

3 ° The suitcase is not neutralized. It must first be checked whether any object has not temporarily blinded the optical system dedicated to the housing sensor full. This is, in this case, a mystification to the loading of the bag. Any other cause must be the subject of a precise investigation in maintenance.

C Typical case of a normally full suitcase

• diagnostique,
• lit les instructions de la dernière transaction,
• reconnaít le code éphémère d'ouverture de la valise attribué à la prise "réception autorisée" sur laquelle la valise est connectée,
• remplit la liste des valises revenues au stock physique,
• allume la diode de la valise,
• ouvre la valise,

The supervisor:

• diagnostic,
• read the instructions of the last transaction,
• recognizes the ephemeral opening code of the bag assigned to the "authorized reception" socket on which the bag is connected,
• fill the list of suitcases returned to the physical stock,
• light the diode of the bag,
• open the suitcase,

The receiver retrieves the contents and delivers the bag to the maintenance for perform technical tests and maintenance.

D) Abnormally full suitcase

The customer returned his full bag without going through the procedure armament. The LED in the bag flashes quickly at the receiving service. The transition to maintenance can detect the client's procedural error by noting that the suitcase is full.

E) Case of a suitcase returned after a failure of opening at the customer

• the supervisor recognizes an abnormally full suitcase and flashes the diode accordingly,
• the recipient transfers the bag for maintenance.

F) Case of a suitcase with a lack of external appearance

The reception service sends it directly to maintenance. More generally, all the different cases of cases A) and C) lead the bag into maintenance.

The computer system will treat all the cases in anomaly.

Two significant examples of procedural errors, as well as their treatment, are given below (§ G and H):

G) Example of procedural error n ° 1

Case of a suitcase returned full to the manager, instead of being shipped to customer # 2 as part of a scheduled tour.

• diagnostique la valise pleine,
• ne reconnaít pas le code éphémère attaché à cette livraison et cette prise téléphonique,
• déclenche le clignotement de la diode de la valise.

The supervisor:

• diagnoses the full suitcase,
• does not recognize the ephemeral code attached to this delivery and this phone jack,
• triggers the flashing of the diode of the bag.

The receiver transmits the bag to the maintenance.

The maintenance 154 connects the bag and reads on its screen the last transaction (customer code, delivery person, requested tour to etc ...). She finds the destination error and open the case from the ephemeral code of the client recipient.

1° Elle a le temps matériel de réexpédier la valise au destinataire.

2° Ce temps est trop court pour une réexpédition, sans risquer un encrage ou une neutralisation du fait d'une batterie basse ou de la durée restante avant neutralisation. Dans ce cas, la maintenance annule la procédure de livraison initialement mémorisée dans le superviseur et elle fait procéder à la programmation, en local, d'une autre valise pour le client final. Enfin, elle modifie manuellement le statut de la valise.

Maintenance then has 2 options:

1. It has the material time to return the bag to the addressee.

2 ° This time is too short for a re-dispatch, without risking inking or neutralization because of a low battery or the remaining time before neutralization. In this case, the maintenance cancels the delivery procedure initially stored in the supervisor and it makes proceed to the programming, locally, another bag for the end customer. Finally, it manually changes the status of the bag.

H) Example of procedural error 2

Case of a suitcase arriving directly at reception service 152 without to be passed to the customer.

The defect is noted by the supervisor since the suitcase does not call since the preprogrammed intake. LED flashes and the case leaves for maintenance 154.

Maintenance notes that the suitcase was not opened by the remote procedure (state of the unopened case). Maintenance ends, manually, at the mission by erasing the programming elements. She return the suitcase and its contents to the manager for a new edition with a new delivery slip.

The supervisor manages the fleet of suitcases on mission. He knows how to distinguish list of the bags present in the central office (available in stock + in charge of battery + in maintenance + under repair) from the list of cases in mission (in departure from the central + on tour + in stock at the customers + lost + stolen).

• quand elles doivent être ouvertes avant encrage (délai d'ouverture programmé en local ou à distance),
• où elles se trouvent (destination indiquée lors de la programmation),
• quand elles doivent rentrer (connaissance approximative en fonction des aléas de transport et des délais de stockage chez les clients).

To recover your luggage in the best conditions, the system is informed of:

• when they must be open before inking (local or remote opening time programmed),
• where they are (destination indicated during programming),
• when they have to return (approximate knowledge according to transport risks and storage times at the customers).

The last point is random by the very nature of the procedure (without flow management constraint for the client). The second point is uncertain because the destination of the bags is known until an outside event decides otherwise (loss, theft, tour demand, etc.). As for the first point, he can the customer is re-launched, before being inked or neutralized, to avoid that the customer forgets to open his suitcase.

Some statuses of a suitcase are changed automatically during a transaction (from "expected to central" to "on tour"). Other statuses are Manually informed by maintenance (lost, stolen, processing ...).

The procedure of starting a full suitcase, from a customer to a another customer without going through the central office or the supervisor (this is then a traffic or a tour of the bag), may be the following.

The client informs a server to be defined by the manager (minitel, voice guide ...).

• code du client expéditeur,
• code du client destinataire,
• n° de bordereau de livraison ou équivalent,
• code valise,
• date/heure de connexion prévue,
• date limite d'ouverture à programmer.

The supervisor 29 retrieves, through this server, the following information, whose manager guarantees the authenticity:

• Sender client code,
• recipient's customer code,
• delivery note number or equivalent,
• suitcase code,
• expected date / time of connection,
• opening date to be programmed.

Supervisor 29 changes the status of the bag from "expected full "to" on tour ".

The client has filled and closed (locked) his suitcase. He connects her to her telephone jack permitted.

The bag then calls the supervisor 29.

The latter recognizes the suitcase number and accepts / refuses the transaction. depending on the status of the bag (lost, stolen ...) or a possible incident of connection (wrong jack connected).

A diode may blink slowly to signal acceptance of the transaction.

The supervisor associates this connection with the request made above by the client on the server, and proceed to test the technical elements of the bag (battery, full case, sensor circuit ...). It sends the encrypted ephemeral code of the tour, and the ephemeral encrypted code of the maintenance associated with this tour.

The suitcase is then armed.

At the end of the transaction, the diode stabilizes on to signal a correct transaction. In this case, there is no limit on the ignition time of the diode, such as when requesting a remote opening of a suitcase full.

As soon as the diode is stabilized, the customer can remove the plug. It sets the packing slip on the bag and proceeds to the expedition itself.

If an anomaly occurs in the process above, especially during technical tests (empty battery, etc.), or because of a procedural error (wrong codes), the LED will flash continuously. An action is then taken from the maintenance department to warn the customer of a technical impossibility. For this, a sound signal is provided for the service maintenance as soon as the anomaly arrives on the network 29.

To retrieve the contents of his suitcase before resending it empty, the customer must then reiterate the connection of the bag. It is the supervisor who delivers in this case an opening order on the unarmed suitcase. If the suitcase does not open and that the LED flashes quickly, the customer then applies a return instruction secure the suitcase.

It is not deliberately taken into account any particular status of the suitcase when programming it remotely for a tour. In particular, does not prohibit the tour of a suitcase if it is not the first or the last delivery to the customer, or if the bag is stolen.

However, the bag must have been used by the sending customer for the last opening. The transaction will therefore be refused in the terms if the suitcase comes from a third party who has stored it, but who is not a customer or recipient.

The physical limit of a suitcase tour is related to the expense of its drums. Some customers may be allowed to hold a fast battery charger allowing a charge with the lid of the suitcase open.

Finally, the status of a suitcase that is at the customer, but not yet scheduled for a tour, is that of a suitcase expected at the central or by the supervisor.

Program instructions for implementing a method according to the invention, according to one or other of the embodiments described above, are stored in a memory zone of the surveillance system 22 and / or 29 and. management system 150. These instructions are example installed from a device that can be read by the system 22 and / or 29 and on which they are recorded. Such support can for example a hard disk, a ROM, an optical disk compact, DRAM dynamic random access memory or any other type of memory RAM, a magnetic or optical storage element, registers or other volatile and / or nonvolatile memories.

Thus are stored the computer program instructions for implement a monitoring method according to the invention and / or a method of transport according to the invention.

According to one embodiment, a monitoring device according to the invention further comprises means for or specially programmed to receive a communication request signal transmitted by the container, when it is connected to the communication network.

In another aspect, in a secure transport method according to the invention, a communication fault signal is sent to the means which contain the object when, after connecting it to the network of communication, communication is not established.

Finally, in a monitoring method according to the invention, a signal can be emitted by the closed container and to the means 22 for monitoring, when the container fails to open after reception by the latter of the signal opening issued by the monitoring means 22.

Claims (48)

1. A device (2, 48, 50, 52, 54, 60) for the secure transportation of an object (3), including:

   means (4, 6, 78, 80) for containing an object (3) to be transported, also known as a container, and closure means (6, 8, 10, 14, 82, 84, 90) for closing said means (4, 6, 78, 80) for containing an object or container, said device being characterised in that it further includes:

   communication means (16, 18) for connecting the means for containing an object or container to a communication network (20) and for sending over the communication network (20) a signal relating to a state of the means for containing said object or container, and

   receiver means (16, 18) for receiving a signal for opening the means for closing the means for containing the object.
2. A device according to claim 1, the communication means (16, 18) being adapted to send an encoded or encrypted signal relating to a state of the means for containing said object.
3. A device according to claim 1 or claim 2, including means (18, 62, 74, 76, 92, 94, 96, 100) for identifying or detecting a normal or abnormal operating state and/or for identifying or detecting an attempt at breaking into, violating or opening without authorization the transportation device or its closure means or a type of attempt at breaking into, violating or opening without authorization the transportation device or its closure means.
4. A device according to one of claims 1 to 3, further including means (94) for sensing or measuring the temperature of the atmosphere around the container or in the container and/or means for sensing or measuring the relative humidity of said surrounding atmosphere or in said surrounding atmosphere.
5. A device according to one of claims 1 to 4, further including a conductive circuit or a conductive mesh (92) inside the secure transportation device and means (18, 100) for detecting interruption of said circuit or said mesh.
6. A device according to claim 1 to 5, further including means (62, 70, 72) for destroying or spoiling or staining an object contained in the means (4, 6, 78, 80) for containing an object.
7. A device according to one of the preceding claims, further including means for determining the location of the device during its transportation.
8. A device according to claim 7, further including means for sending and receiving radio frequency signals.
9. A device according to one of claims 1 to 8, the communication means including means (16, 114, 116) for connecting it to a telephone network.
10. A device according to one of claims 1 to 9, the communication means being adapted to dial automatically an identification number of a remote terminal, device or station also connected to the communication network after the transportation device is connected to the network.
11. A device according to claim 10, the communication means being adapted or programmed to dial said identification number automatically several times if no opening signal is received or if no call is set up after connecting the communication means to the network.
12. A device according to one of claims 1 to 11, further including first electrical power supply means (119) for supplying electrical power to the communication means and/or the receiver means.
13. A device according to claim 12, further including second electrical power supply means (124) for supplying power to the communication means in the event of dysfunction or malfunction of the first power supply means (119).
14. A device according to one of claims 1 to 13, the container having the format of a mailing envelope or parcel.
15. A device according to one of claims 1 to 14, the container having walls made of a flexible material or rubber.
16. A device according to one of claims 1 to 15, further including memory means (102).
17. A device according to one of claims 1 to 16, further including display means (130).
18. A system (22) for monitoring the secure transportation of an object (3) contained in a closed container (4, 6, 78, 80), which system is characterised in that it includes:

    means (22) adapted to be connected to a communication network (20) to receive a signal relating to a state of the container, and

    means (22, 30, 32) for sending, or specially programmed to send, an opening signal to the container after receiving, and as a function of, the signal relating to the state of the container.
19. A system according to claim 18, further including means for sending, or specially programmed to send, a signal for the destruction, potting or staining of the object contained in the container if the signal relating to the state of the container that is received indicates that the container has been forced or is being forced or violated or attacked by an external agent or that the container is still closed after a predetermined closure time.
20. A system according to claim 19, further including means for arming beforehand, or specially programmed to arm beforehand, means (18, 62, 70, 72) for destroying, staining or potting the object contained in the container.
21. A system according to claim 20, adapted to be connected to a local communication line to arm the means for destroying, staining or potting the object.
22. A system according to one of claims 18 to 21, further including means for initializing, or specially programmed to initialize, communication with the container when the container is connected to the communication network.
23. A system according to one of claims 18 to 22, further including means for receiving, or specially programmed to receive, a call request signal sent by the container when the container is connected to the communication network.
24. A system according to one of claims 18 to 23, further including means (30, 32) for storing in memory an identification code of a recipient of the transported object and for comparing a received identification code with this identification code of the recipient of the object.
25. A system according to one of claims 18 to 23, further including means (30, 32) for storing in memory the identification or an identification code of the container and for comparing said code or said identification with the code or the identification of a container for a given recipient of the transported object.
26. A monitoring system according to one of claims 18 to 23, further including means for sending and receiving radio frequency signals.
27. A method for the secure transportation of an object (3), including:

    loading the object (3) into means (4, 6, 78, 80) for containing said object and closing said means,

    transporting said object (3) and the means (4, 6, 78, 80) that contain it to a first predetermined recipient, said method being characterised in that it further includes:

    connecting the means (4, 6, 78, 80) that contain the object to a communication network (20), and

    sending over said communication network a signal relating to the state of the means that contain the object.
28. A method according to claim 27, further including receiving a signal for opening the means that contain the object when the signal relating to the state of the means that contain the object sent by the container indicates that it is in a predetermined normal state.
29. A method according to claim 27 or 28, including, before the transportation step, a preliminary step of arming means (18, 62) for destroying, staining or potting the object contained in the container.
30. A method according to claim 29, further including destroying or staining of the object contained in the container if the signal relating to the state of the means that contain the object sent by the container indicates that it is in a state other than the predetermined normal state, or that it has been forced or is being forced, or has been attacked or is being attacked, by an external agent, or that the container is still closed after a predetermined closure time.
31. A method according to one of claims 27 to 30, the communication network being a telephone network.
32. A method according to claim 31, the communication network being an analog telephone network.
33. A method according to one of claims 27 to 30, the communication network being an electronic communication network.
34. A method according to one of claims 27 to 33, a communication error signal being sent to the means that contain the object if no call is set up after connecting said means to the communication network.
35. A method according to one of claims 27 to 34 including, after the means that contain the object are connected to the communication network (20), sending a signal identifying the recipient who has actually received the object (3) and the container.
36. A method according to claim 35, further including sending a signal identifying the means for containing the object.
37. A method according to one of claims 27 to 36, including a preliminary step of storing an identification code of at least one recipient of the container to be transported in memory in a data processing system.
38. A method according to one of claims 27 to 37, a plurality of recipients of the container to be transported being predetermined beforehand or a plurality of identification codes of a plurality of recipients of the container being stored in memory beforehand.
39. A method according to one of claims 27 to 38, including, after the container is opened, closing the means (4, 6, 78, 80) for containing the same object or another object and:

    transporting said object (3) and the means (4, 6, 78, 80) that contain it to a second recipient,

    connecting the means (4, 6, 78, 80) that contain the object to a communication network (20), and

    sending over said communication network a signal relating to the state of the means that contain the object.
40. A method of monitoring the secure transportation of an object (3) contained in a closed container (4, 6, 78, 80), which method is characterised in that it includes:

    means (22) connected to a communication network (20) receiving a signal relating to a state of the container after connection of said container to said network, and

    sending an opening signal to the container after receiving the signal relating to the state of the container, or neutralizing, destroying, staining or potting the object (3) contained in the container if the signal relating to a state of the container sent by the container indicates that the container has been, or is being, forced, violated or attacked by an external agent or that the container is still closed after a predetermined closure time.
41. A monitoring method according to claim 40, including a preliminary step of arming the security means for neutralizing, destroying, spoiling, staining or potting the object (3) contained in the container.
42. A method according to claim 41, the preliminary step of arming the security means being executed by the means (22) connected to the communication network (20).
43. A method according to claim 42, the means (22) connected to a communication network being also connected to a local communication network (56) and the preliminary step of arming the security system is executed via said local network after connection of the container to said local communication network.
44. A monitoring method according to one of claims 41 to 43, including disarming said security means if the signal relating to the state of the container indicates that the state of the container is satisfactory.
45. A monitoring method according to claim 44, the security system being re-armed after disarming it if the container is not opened after disarming the security system.
46. A method according to claim 44 or claim 45, said security system being disarmed by the monitoring means (22) sending a signal to command disarming over the communication network (20) after connection of the closed container to said network.
47. A monitoring method according to one of claims 40 to 46, further including the closed container sending a signal to the monitoring means (22) in the event of a container opening error after the container receives the opening signal sent by the monitoring means (22).
48. A method according to one of claims 40 to 47, the means (22) connected to a communication network comparing a signal or code identifying the recipient who has actually received the container, or the place in which the container is located, with a signal identifying an intended recipient of the container or a location to which the container is intended to be sent or transported.

Images