EP2110793B1 - Self-service device - Google Patents

Abstract

The device (1) has a switching unit i.e. changeover switch (5), connected with an auxiliary storage i.e. Universal Serial Bus (USB)-Stick (6) for intermediate storage of operational data. A data connection between a control unit (3) and the storage exists for the transmitting the data to a service unit (12) e.g. workstation, in a switching position of the switch, so that the data is transferred from the control unit to the storage. A data connection between the storage and a transmission unit (7) exists for transferring the data to the service unit in another switching position. An independent claim is also included for a method for transferring operational data from a self-service device i.e. information, vending or automated teller machine, to a service device.

Description

The invention relates to a self-service device, in particular information, sales or ATM, comprising a control unit for processing operating data and a transmission unit for the operation data transfer to a service unit and at least one sensor for detecting operating data.

Furthermore, the invention relates to a method for transmitting operating data from a self-service device, in particular an information, sales or ATM to a service unit, wherein the operating data are provided by a control unit of a connected via a data network with the service unit transmission unit as a self-service device.

It is known that in self-service devices operating conditions and parameters are monitored and recorded, which give, for example, information about the cash or paper supply. Furthermore, error messages are logged that inform about unexpected events. This allows a continuous optimization of the self-service device or the software used thereon.

A maintenance engineer accesses the operating data by authenticating himself with the user ID and a password to the self-service device. For this purpose, a so-called service unit is used, which is connected via a cable to the control unit. The disadvantage here is that the maintenance technician must be in the immediate vicinity of the self-service device. To rule out the misuse of the interface to the control unit, this is regularly arranged within the housing of the self-service device and preferably accessible via a closable opening, which is located on the back of the housing. If the self-service devices are accessible to the customer, for example, from one side of the street, the housing opening is often located in a building that is generally accessible to the service technician only during opening hours or business hours. Maintenance work, which would be necessary, for example, due to a disturbance on the weekend, must therefore be postponed to the next working day. The document EP-1139315 discloses a self-service device having a switching unit. Service unit known, from the DE 200 01 117 U1 a service unit is known that allows wireless operation of an ATM. The wireless connection is established between a transmission unit assigned to the control unit of the ATM and the service unit. It allows the service technician to gain access to the control unit of the self-service device even without entering the building interior. He can query the operating data of the self-service device as soon as it is within a distance range allowed for the wireless connection located at the respective ATM. The permitted distance differs depending on the selected data transmission method and ranges from a few meters in the transmission via infrared signal to any distance when using a mobile phone unit or a wireless Internet connection. However, the wireless communication between the service unit and self-service device has the disadvantage, from the perspective of the operator of the ATM, that in some circumstances even unauthorized persons can gain access to the control unit of the ATM. To prevent the misuse of this data connection, many ATM operators therefore do not permit this so-called remote access to their self-service devices.

The object of the invention is to provide a self-service device and a method for transmitting operating data from a self-service device such that the security needs of the device operator taken into account and a remote access to the provided in the control unit operating data of the self-service device for maintenance purposes is allowed externally.

The claims 1, 10 disclose the invention. Preferred embodiments are disclosed in claims 2-9, 11-13.

By providing a switching unit and an auxiliary memory assigned to the switching unit, a two-stage data transmission from the control unit to the service unit is realized. While the switching unit first connects the control unit to the auxiliary memory and the operating data is transmitted from the control unit to the auxiliary memory and stored there temporarily, there is no coupling of the auxiliary memory with the transmission unit. Only after dissolving the data connection between the control unit and auxiliary memory of the auxiliary memory is connected to the transmission unit, so that the operating data can be passed from the auxiliary memory to the transmission unit and from there to a service unit.

In this case, the auxiliary memory for temporary storage virtually assumes the role of a trust store: by transferring the data first from the control unit to the trust store and from there via the transfer unit to the service unit, the invention makes it possible to achieve this more advantageously Way to dispense with a direct data coupling of service unit and control unit. This makes it possible to deny unauthorized access to the outside of the control unit, while operating data from the self-service device to a service unit can be transferred. On the one hand, this is associated with a gain in security for the device operator. On the other hand, at the same time reduces the cost of maintenance of the most distributed self-service devices.

According to a preferred embodiment, the switching unit in the first switching position separates the control unit and the auxiliary memory galvanically from the transmission unit. In the second switching position of the switching unit, however, the auxiliary memory and the transmission unit are galvanically isolated from the control unit of the self-service device. By providing a switching unit which selectively separates the control unit from the auxiliary memory or the transmission unit from the auxiliary memory, the communication and data connection between the service unit and the control unit of the self-service device can also be physically interrupted. The data security and the protection against unauthorized access to the self-service device, for example, during a transfer of the operating data from the auxiliary memory to the service unit can be further increased thereby.

According to a development of the invention, the operating data between the transmission unit and the service unit are wired via a data network, in particular via a LAN or landline telephone connection, and / or wireless, for example via a UMTS, GPRS, Bluetooth, WLAN, infrared or WAP connection, transferable. By transferring the data via the data network to the service unit via a data network that appears adequate under local, operational and technical conditions, the existing communication infrastructure, for example a mobile telephone network or the Internet, can be used for data transmission. In this way, the investment costs for data transmission are reduced, and the economic advantage resulting from remote diagnostics and maintenance access to the self-service device is optimized.

According to a development of the invention, the service unit receiving the operating data is integrated in a location remote from the self-service device maintenance center, in which the operating data of at least two self-service devices are detected. By keeping the service units of a plurality of self-service devices centrally in a maintenance center, the effort for the function control and condition monitoring of the self-service devices is reduced. At the same time, the central acquisition of the diagnostic data allows rapid error detection and - as a result - a speedy correction of the same.

According to a development of the invention, the switching unit is designed as a changeover switch, preferably as a monopolar changeover switch. By the switching unit is realized as a changeover switch, resulting due the design of the switch a forcibly galvanic isolation of the control unit of the service unit. At no time is there a conductive connection between the control and service unit or a direct data transfer between the control unit and the service unit is possible. A penetration from the outside on the control unit of the self-service device is prevented by the design of the switch binding, so that an accidental or abusive misalignment of the switching unit is impossible.

According to a development of the invention, the switching unit is designed as a USB switching unit and the auxiliary memory as a USB stick. By the switching unit and the auxiliary memory are designed as a USB switching unit or as a USB stick, they can be powered via the data line with energy. In this way, an external power supply can be omitted, so that the installation costs are reduced. At the same time, the USB interface is a quasi-standard because of its high distribution, which allows retrofitting of the device according to the invention even in the self-service devices already on the market.

To achieve the object, the invention in conjunction with the preamble of claim 10 is further characterized in that first an auxiliary memory and the control unit are conductively connected and a transmission unit is electrically isolated from the auxiliary memory, then the operating data from the control unit to the auxiliary memory are transmitted, then the auxiliary memory and the transmission unit are conductively connected and the control unit is separated from the auxiliary memory, and then the operating data are transmitted from the auxiliary memory to the transmission unit for transmission to the service unit.

The particular advantage of the invention is that the four process steps of the demand of the operator of self-service devices for a reliable protection against external influences on the one hand and the need of the manufacturer of these devices for a cost-effective maintainability on the other equally take into account.

According to a preferred embodiment of the invention, the auxiliary memory is alternatively connected via a changeover switch to the control unit or the transmission unit. By making the connection between the auxiliary memory and the control unit or the transmission unit via a switching unit designed as a changeover switch, the method steps are simplified to the extent that no costly, for example software provisions must be made by the simultaneous connection of the switching unit with the control unit and the Transmission unit is prevented. The provision of a toggle switch thus simplifies the implementation of the method and affects abuse and errors.

According to a further development of the invention, the transfer of the changeover switch into the first switching position, in which the auxiliary memory and the control unit are conductively connected and the transmission unit is separated from the auxiliary memory, is time-controlled according to a schedule specified by a schedule. This makes it possible to set the intervals of data transfer as needed. The transfer routine is executed during operation of the self-service device without the need for external access.

According to a development of the invention, the switch can also be remotely controlled by a radio signal or spent by mechanical actuation in the receiving position. This option makes it possible to retrieve the operating data at any time, for example as part of an on-site maintenance or inspection, so that it can respond quickly to any faults and errors that may have occurred. Consequently, the maintenance and service work does not have to be stopped until the time at which the operating data is automatically transmitted to the service unit on the basis of the scheduled time control.

Further advantages of the invention will become apparent from the further subclaims.

An embodiment of the invention will be explained in more detail with reference to the figure, which shows a schematic diagram of the invention in the form of a block diagram.

A self-service device 1 has a housing 2 and a control unit 3 arranged within the housing 2. The control unit 3 are associated with sensors 4, 4 ', 4' ', which serve to monitor the operating state of the self-service device 1 and the determination of diagnostic data for the detection of errors and malfunctions. As sensors, for example, photoelectric sensors, temperature sensors, vibration sensors can be used. Similarly, voltage levels can be monitored by means of sensors or critical points in a paper or money transport path of the cash dispenser or bank statement printer trained self-service device can be observed by means of camera to z. To record music jams.

The data determined by the sensors 4, 4 ', 4' 'are supplied to the control unit 3 wired or wirelessly as sensor data. In the control unit 3, the sensor data can be prepared for diagnostic data, for example, filtered or compressed. The diagnostic data, together with other operational data, eg. B. provided by the operating software error messages stored as operating data in the control unit 3.

Downstream of the control unit 3 are a switchover unit in the present embodiment designed as a changeover switch 5, an auxiliary memory 6 and a transmission unit 7. The changeover switch 5 is connected to the auxiliary memory 6 via a permanent contact connection. Furthermore, the changeover switch 5 has a switchable first (data) port 8 and a second one switchable (data) port 9. About the first switchable (data) port 8, the change-over switch 5 with a control unit 3 associated interface 10 for the operation data transfer via a data line 11 is connectable. The changeover switch 5 can be connected to a transmission unit 7 via the second switchable (data) connection 9.

The control unit 3, its associated sensors 4, 4 ', 4 ", the changeover switch 5, the auxiliary memory 6, for example, as a data memory or electronic memory and the transmission unit 7 are arranged within the housing 2 of the self-service device 1. Ortsfern is a service unit 12th The service unit 12 may in this case be embodied as an independent module, for example as a personal computer or workstation, or may be present only virtually, for example as a stand-alone functional unit on a shared mainframe. comprising the service unit 12 and a plurality of service units of other self-service devices.

The self-service device 1 communicates by means of its assigned and serving as an interface transmission unit 7 via a data network 13 with the service unit 12. The communication between the self-service device 1 associated transmission unit 7 and the service unit 12 can here wired, for example via a Local Area Network (LAN) or over the fixed telephone network, or wirelessly, for example via the mobile telephone network, a Bluetooth or infrared interface or a WAP connection (Wireless Application Protocol). Of course, it is also possible that the transmission of operating data from the self-service device 1 to the service unit 12 is partially wired and partially wireless.

For the transmission of operating data from the control unit 3 to the service unit 12, the changeover switch 5 for producing a contact connection first in a first switching position (recording switching position) spent in the auxiliary memory 6 with the first switchable (data) port 8 via a data line 11 connected control unit 3 is connected.

In the recording switching position of the changeover switch 5, the transmission of the operating data stored in the control unit 3 to the auxiliary memory 6 serving as a buffer memory. This can be done, for example, by automatically executing an autorouting performed by establishing a conductive connection between the control unit 3 and the auxiliary memory 6. Program routine transmits the stored in a special storage in the control unit 3 operating data to the auxiliary memory 6. For this purpose, the autorun program routine can be stored, for example, on the auxiliary memory 6 or a CD-ROM (not shown) assigned to the auxiliary memory 6.

After the transmission of the operating data from the control unit 3 to the auxiliary memory 6, the changeover switch 5 is - for example, time-spent - in a second switching position (transfer switching position) spent in which the connection between the auxiliary memory 6 and the control unit 3 is separated and instead a Connection between the transmission unit 7 and the auxiliary memory 6 is made. By the switching unit is designed as a changeover switch (changeover switch) 5, a compulsory and uninterrupted electrical isolation between the transmission unit 7 and the control unit 3 is maintained on the hardware side. In this respect, this embodiment takes account of the demands of banks that do not allow access to the control unit 3 of the self-service device 1 from the outside.

In the second switching position, the quasi-fiduciary cached on the auxiliary memory 7 operating data are read and transmitted to the transmission unit 7 for transmission to the service unit 12. The data transmission can in this case be realized in the known manner via a second autorun program routine, which can be provided, for example, on the auxiliary memory 6, a CD-ROM assigned to it or a storage medium not assigned to the transmission unit 7.

In the figure, the recording switching position (first switching position) of the changeover switch 5 by a solid line of the contact connection and the relay switching position (second switching position) represented by a dashed line of the contact connection.

A particularly advantageous embodiment of the invention results from the switching unit being designed as a USB switching unit and forms a common assembly with the auxiliary memory 6. This embodiment, not shown, can be connected in a simple manner, for example, with the USB interface of a personal computer, which serves as a control unit. In this case, can be dispensed with the physical design of the service unit 12 and the switch 5 connecting data line 11.

Likewise, it can be provided that a control unit of an ATM is not provided for safety reasons in the housing of the self-service device and is instead arranged in a vault. In this case, in the housing of the self-service device connected via a data line to the control unit, often designed as a USB port interface is provided. In this case, the switching unit with its associated auxiliary memory and the transmission unit may optionally be provided in the housing of the self-service device - in this case, they are connected via the provided there interface with the stationarily held control unit - or they are like the control unit outside the housing the self-service device provided, for example, together with the control unit in the vault.

According to a further non-illustrated embodiment of the invention, the changeover switch is associated with a mechanical switch, by means of which the switching of the switching unit from one switching state to the other can be effected mechanically. By providing such a switch, it is possible for maintenance personnel to transmit the operating data to a service unit at any time and independently of a possibly provided timing. Likewise, the switch can be associated with an unillustrated radio receiver, via the remote control, a switching signal can be received, which causes the switching of the switching unit, the transmission of the operating data to a service unit.

According to an alternative embodiment, not shown, the switching unit is designed as an optocoupler. This results in the possibility of galvanic isolation of the control unit of the service unit, without a mechanical switching process is needed. This is advantageous, for example, if the separation of the control unit and the transmission unit is realized by software technology and mechanical components, in particular moving components, are to be dispensed with.

If the penetration from outside via the transmission unit and the switching unit to the control unit is limited by the software, this results in various advantages: It can be dispensed with mechanically moving parts, which are usually maintenance-intensive and follow-up costs if necessary replacement cause. Furthermore, it is possible to modify the interface without a complex and - at a later time, if necessary, possibly no longer possible - hardware-side change by reprogramming in their function. Finally, it is conceivable, with the consent of the operator of the self-service devices and under the provision of appropriate security mechanisms to allow access from the outside to the control unit temporarily and for a limited number of authorized persons. This can be useful, for example, for the remote maintenance of a very remote self-service device or when a security-critical software bug is discovered that can occur on a large number of identically constructed ATMs and must be corrected at short notice.

According to an alternative embodiment, not shown, the switching unit may consist of a plurality, optionally provided in a common housing switches. It is conceivable here that an auxiliary memory has at least two data connections, of which a first is connected to an on / off switch provided between a control unit and the auxiliary memory. The second data port of the auxiliary memory is in turn connected to an on / off switch, which is arranged between a transmission unit and the auxiliary memory. By mechanical, electrical or software measures can be ensured that at most times a maximum of an on / off switch is closed. In this case, the electrical isolation of the control unit and service unit also realized in a switching unit that dispenses with the use of a changeover switch. It is the need-based use of a variety of different switching elements for the realization of a switching unit conceivable.

LIST OF REFERENCE NUMBERS

1

Self-service device

2

casing

3

control unit

4, 4 ', 4' '

sensors

5

Changeover switch (changeover unit)

6

auxiliary memory

7

transmission unit

8th

(Data) connection

9

(Data) connection

10

interface

11

data line

12

Service unit

13

data network

Claims (13)

1. System comprising a self-service device (1) and a service unit (12), the self-service device (1) comprising:

   a control unit (3) for processing operating data,

   a transmission unit (7) for transferring operating data to the service unit (12),

   at least one sensor (4) for acquiring operating data, characterized in that
   the self-service device (1) contains a changeover switch (5) and an auxiliary memory (6),
   the changeover switch (5) having a first switching position and a second switching position,
   the changeover switch which is connected to the auxiliary memory (6) in order to buffer the operating data being arranged between the control unit (3) and the transmission unit (7), which forwards the operating data to the service unit (12), in such a manner

   that there is a data connection between the control unit (3) and the auxiliary memory (6) in order to transmit the operating data from the control unit (3) to the service unit (12) in the first switching position of the changeover switch (5), with the result that operating data can be transmitted from the control unit (3) to the auxiliary memory (6), the auxiliary memory (6) being isolated from the transmission unit (7) in this first switching position of the changeover switch,

   and in such a manner that there is a data connection between the auxiliary memory (6) and the transmission unit (7) in the second switching position of the changeover switch (5) in order to forward the operating data buffered in the auxiliary memory (6) to the service unit (12), the auxiliary memory (6) being isolated from the control unit (3) in the second switching position of the changeover switch (5).
2. System according to Claim 1, characterized in that the changeover switch (5) is designed in such a manner that the control unit (3) and the auxiliary memory (6), on the one hand, are galvanically isolated from the transmission unit (7), on the other hand, in the first switching position and the control unit (3) is galvanically isolated from the auxiliary memory (6), on the one hand, and from the transmission unit (7), on the other hand, in the second switching position.
3. System according to Claim 1 or 2, characterized in that the operating data can be transmitted between the transmission unit (7) and the service unit (12) via a data network in a wired manner, in particular via a LAN or landline network telephone connection, and/or in a wireless manner, in particular via a UMTS, GPRS, Bluetooth, WLAN, infrared or WAP connection.
4. System according to one of Claims 1 to 3, characterized in that the service unit (12) receiving the operating data is integrated in a maintenance centre which is remote from the self-service device (1) and in which the operating data of at least two self-service devices (1) can be acquired.
5. System according to one of Claims 1 to 4, characterized in that the operating data can be transmitted in encrypted form from the transmission unit (7) associated with the self-service device (1) to the service unit (12).
6. System according to one of Claims 1 to 5, characterized in that the changeover switch (5) comprises only a single changeover switch, preferably a single-pole changeover switch.
7. System according to one of Claims 1 to 6, characterized in that the changeover switch (5) is in the form of a USB changeover unit.
8. System according to one of Claims 1 to 7, characterized in that the auxiliary memory (6) is in the form of a USB stick.
9. System according to one of Claims 1 to 8, characterized in that the at least one sensor (4, 4', 4'') is connected to the control unit (3) in a wireless or wired manner in order to provide operating data in the form of diagnostic data for fault detection.
10. Method for transmitting operating data from a self-service device (1) to a service unit (12), the operating data being provided by a control unit (3) of the self-service device (1) to a transmission unit (7) of the self-service device (1), which transmission unit is connected to the service unit (12) via a data network (13), the self-service device (1) comprising a changeover switch (5), the changeover switch (5) having a first switching position and a second switching position, characterized in that

    - an auxiliary memory (6) and the control unit (3) are first of all conductively connected and the transmission unit (7) is isolated from the auxiliary memory (6) in the first switching position,

    - the operating data are then transmitted from the control unit (3) to the auxiliary memory (6) in the first switching position,

    - the auxiliary memory (6) and the transmission unit (3) are then conductively connected and the control unit (3) is isolated from the auxiliary memory (6) in the second switching position, and

    - the operating data buffered in the auxiliary memory (6) are then read and transmitted to the transmission unit (7) for forwarding to the service unit (12) in the second switching position.
11. Method according to Claim 10, characterized in that the auxiliary memory (6) is connected either to the control unit (3) or to the transmission unit (7) via a changeover switch (5).
12. Method according to either of Claims 10 and 11, characterized in that the changeover switch (5) is changed into a first switching position, in which the auxiliary memory (6) and the control unit (3) are conductively connected and the transmission unit (7) is isolated from the auxiliary memory (6), in a time-controlled manner according to a sequence plan predefined by a schedule, for example once a day.
13. Method according to one of Claims 10 to 12, characterized in that the changeover switch (5) is changed into the first switching position in a remotely controlled manner via a radio signal or by manual actuation.

Images