EP3093072A1 - Method for securing documents stored in lockable cartridges of document shredders against unauthorized access and device for carrying out the method - Google Patents

Abstract

The invention relates to a method for securing documents stored in lockable cassettes of document shredders against unauthorized access and to an arrangement for carrying out the method. According to the invention, in a method of this type: - triggered an electronically controlled cassette lock after filling the cassette, generated an electronic key and stored as a master key in the lock control and at the same time on a portable data carrier, - the data carrier is kept by an authorized user, - the document destruction triggered, - after complete document destruction the cassette lock is released, and - the electronic key deleted. When the data carrier is reconnected, the key already stored on the data carrier and already used for an annihilation process is also deleted.

Description

The invention relates to a method for securing documents stored in lockable cassettes of document shredders against unauthorized access and to an arrangement for securing documents stored in cassettes of document shredders.

There are devices for the destruction of documents in the form of files, CDs, DVDs, etc. known, in which the documents are first filled in cassettes and then depending on the capacity or from a predetermined date their destruction, for example by shredding in a shredder , is initiated.

The invention described below is assigned to devices in this field in which it is ensured by a lockable cartridge that before and during the destruction no unauthorized third party can access the documents in the cassette.

Document shredders with an electromagnetic lock for locking the cassette are already known. In this case, the lock is associated with a keypad, via which a specific, fixed predetermined numeric code is to be entered to trigger the lock. Unlocking is possible by entering the same number code. A concrete example of this are the ones currently offered by the company Rexel (www.rexel.com) under the name Auto + 500X Shredders that have an electronic lock with 4-digit PIN code.

In WO 2003/070606 A1 a procedure for the safe disposal of documents is described. In this case, documents that arise at a company are collected in containers and secured. The containers are transferred under surveillance into transport containers, transported to a disposal company, emptied there and handed over to a shredder or incinerator.

To monitor and control the containers used throughout the transport path, so-called TAGs on the containers and associated readers with data memories are used. Magnetic strips, bar code labels, embossed or magnetized metal or plastic labels, RFID transponders or similar articles are suitable as TAGs.

In EP 2 574 573 B1 is further stated that these TAGs are RFID tags (Radio Frequency IDentification), a technology for the automatic and contactless identification and localization of objects with transceiver systems.

A still unsatisfactorily solved problem with this procedure is the still incomplete security, since the PINs or TAGs for the collection containers are fixed and their period of validity is not limited in time. Thus, it can not be ruled out that the PINs or TAGs may become known to unauthorized third parties over the course of time and then be able to access the documents.

Based on this prior art, the invention has the object to further develop a method of the type described above, that the above defects are largely eliminated. Furthermore, an arrangement suitable for carrying out the method must be specified.

• Befüllen der Kassette mit Dokumenten,
• Auslösen einer mechanischen, elektronisch gesteuerten Kassettenverriegelung durch aktivieren einer elektronischen Verriegelungssteuerung,
• Generieren eines elektronischen Schlüssels durch die Verriegelungssteuerung,
• Speichern des elektronischen Schlüssels in der Verriegelungssteuerung und auf einem temporär mit der Verriegelungssteuerung verbundenen transportablen Datenträger,
• Lösen des Datenträgers aus der Verbindung mit der Verriegelungssteuerung und Aufbewahren durch einen berechtigten Nutzer,
• Auslösen der Dokumentenvernichtung,
• Erfassung der vollständigen Dokumentenvernichtung und danach
• Löschen des elektronischen Schlüssels in der Verriegelungssteuerung.

The object is achieved with a method of the type mentioned, comprising the following steps:

• Filling the cassette with documents,
• Triggering a mechanical, electronically controlled cassette lock by activating an electronic lock control,
• Generating an electronic key by the lock controller,
• Storing the electronic key in the lock controller and on a portable storage medium temporarily connected to the lock controller,
• Releasing the data carrier from the connection with the locking control and storing it by an authorized user,
• Triggering document destruction,
• Recording the complete document destruction and afterwards
• Delete the electronic key in the lock control.

Preferably, the cassette is opened after complete document destruction. The opening of the cassette after complete document destruction is preferably automatic, but can also be done manually.

In a preferred embodiment of the method according to the invention, the activation of the locking control takes place automatically when establishing the connection of the mobile data carrier with the locking control or with the writing of the key to the mobile data carrier.

Within the scope of the inventive idea it is either to completely regenerate the electronic key or to select it from a supply of stored keys by means of a random generator.

If the cassette is already filled with documents and locked, this can only be reopened by the owner of the mobile data carrier, which contains the current electronic key, by the connection between Locking control and mobile disk restored, while the key is compared on the disk with the key stored in the lock control and in accordance with the opening of the cassette is caused by the lock control.

In this way it is possible, for example, to eliminate disturbances during document destruction or to fill up the cassette further. In any case, access to the inserted documents is only possible with the current key.

In the context of the invention, it is further to trigger the document destruction manually or via a schedule control.

According to the invention, after each document destruction, assuming the cassette was completely emptied, the electronic key is deleted in the locking control and a new key is generated upon refilling the cassette, which is then stored both in the lock control and on a mobile storage medium now being used. If an older key is still stored on this data medium, it will be deleted or overwritten.

• eine Kassette mit einer Dokumenteneinfüllöffnung, die mit einem elektromechanischen Verriegelungssystem versehen ist,
• eine Verriegelungssteuerung, ausgebildet zur elektronisch gesteuerten Verriegelung der Dokumenteneinfüllöffnung und zum gleichzeitigen Generieren eines elektronischen Schlüssels,
• Mittel zum Speichern des elektronischen Schlüssels in der Verriegelungssteuerung und auf einem transportablen, von der Verriegelungssteuerung trennbaren Datenträger,
• eine Einrichtung zum manuellen oder zeitgesteuerten Auslösen der Dokumentenvernichtung und zur Löschung des in der Verriegelungssteuerung gespeicherten elektronischen Schlüssels nach vollständiger Dokumentenvernichtung.

The object of the invention is further achieved with an arrangement for securing documents stored in cassettes of document shredders against unauthorized access, comprising:

• a cassette having a document filling opening provided with an electromechanical locking system,
• a locking control, designed for the electronically controlled locking of the document filling opening and for the simultaneous generation of an electronic key,
• Means for storing the electronic key in the lock controller and on a portable volume separable from the lock controller;
• means for manually or timely triggering the document destruction and deleting the electronic key stored in the lock control after complete document destruction.

As a mobile disk USB sticks or RFID transponder can be provided, each locking the control is equipped with the appropriate read and write function.

In the context of this invention, the term "documents" is to be understood as meaning all forms of carriers of confidential information for the destruction of which the assigned shredder is suitable.

Preferably, the circuit arrangement of the locking control is formed with electronic components, wherein advantageously at least one electronic component is preprogrammed. The pre-programmed electronic component of the circuit preferably includes a plurality of electronic keys as a supply.

The arrangement according to the invention can be part of a document shredder with the following features:

Shredder, which has at least one housing, a cutting unit, a motor and a gear for driving the cutting unit, a control unit with a cutting mechanism control, an operating unit and a collecting container arranged below the cutting unit, wherein the operating unit comprises at least one probe element for signal input to the cutting mechanism control, and wherein the housing has a closable opening for removal of the collecting container and for automatic insertion of documents to the cutting leading towards the first feed channel, and wherein for the automatic insertion of documents on the housing and aligned with the first feed channel at least one cassette for receiving a stack of documents is arranged, wherein the cassette is a closable Document filling opening and the cassette is associated with an arrangement for securing the documents stored in the cassette against unauthorized access, characterized in that the cassette is provided with an electromechanical locking system for the document filling opening, and the document shredder has a locking control, designed for electronically controlled locking the A document filling opening and for simultaneously generating an electronic key, and means for storing the electronic key in the lock control and on a portable, separable from the lock control disk and also means for manually or timed triggering the document destruction and deletion of the electronic key stored in the lock control after complete document destruction.

In this case, the housing for the manual insertion of documents may have another leading to the cutting second supply channel.

If the security requirements are not too high, the following alternative to the generation of the electronic key by the locking control can be realized according to the invention:

An authorized user makes available a transportable data medium under his storage sovereignty on which an electronic key is already temporarily or permanently stored. This portable data carrier is preferably a writable or non-writable RFID transponder. If the data carrier is connected wirelessly or by wire to the locking control, then it can read out and store the electronic key pre-stored in the data carrier. It is only possible to open the cassette before or during document destruction if the portable data carrier has been brought back into a wireless or wired data connection with the locking control by the authorized user. This then reads the electronic key stored in the disk again and compares it with the electronic key stored in the lock control. If both match, the lock controller unlocks the cassette for access to its contents by the authorized user.

Fig.1

einen Aktenvernichter mit erfindungsgemäßer Anordnung in einer Perspektivansicht;

Fig.2

den Aktenvernichter nach Fig. 1 mit geöffneter Kassette;

Fig.3

eine schematische Darstellung des Zusammenwirkens der Baugruppen/Baueinheiten des Aktenvernichters nach Fig. 1;

Fig.4

den Ablauf der Kassettenverriegelung bei Anwendung eines USB-Sticks als mobiler Datenträger für den elektronischen Schlüssel; und

Fig.5

den Ablauf der Kassettenverriegelung bei Anwendung eines RFID-Transponders als mobiler Datenträger für den elektronischen Schlüssel.

The invention will be explained in more detail with reference to an embodiment. In the accompanying drawings show:

Fig.1

a document shredder with inventive arrangement in a perspective view;

Fig.2

after the shredder Fig. 1 with opened cassette;

Figure 3

a schematic representation of the interaction of the modules / assemblies of the shredder after Fig. 1 ;

Figure 4

the expiration of the cassette lock when using a USB stick as a mobile medium for the electronic key; and

Figure 5

the expiration of the cassette lock when using an RFID transponder as a mobile disk for the electronic key.

In the Fig. 1 and 2 is schematically shown in perspective a document shredder 1 with an automatic document feeder, which is also equipped with an arrangement for securing against unauthorized access stored in a cassette 4 documents.

This document shredder 1 has at least one housing 2, a cutting unit 6, a motor 7 and a gear 8 for driving the cutting unit 6, a control unit 9 with a cutting mechanism control 9a, an operating unit 3 and a collecting container 10 arranged below the cutting unit 6.

Its operating unit 3 comprises at least one probe element for signal input to the cutting mechanism control 9a. The housing 2 has a closable opening for removal of the collecting container 10 and for automatic insertion of documents to the cutting unit 6 leading first feed channel 11. For the automatic insertion of documents on the housing 2 and aligned with the first feed channel 11 at least one cassette 4 arranged to receive a stack of documents. For the manual insertion of documents, another second feed channel 12 leading to the cutting unit 6 is provided.

The cassette 4 has a closable document filling opening; and the cassette 4 is assigned an arrangement for securing the documents stored in the cassette 4 against unauthorized access.

The Fig. 3 shows a schematic block diagram of the interaction of the modules / assemblies of shredder with the inventive arrangement.

According to Fig. 4 In the exemplary case of using a USB stick as a mobile data carrier for the electronic key generated according to the invention, the lock control 13 is activated after the "start" and the state of the cassette is continuously checked with regard to "open" or "closed", for example using a light barrier / sensor 14 on the cassette lid 4a.

After, for example, manually closing the cassette lid 4a, preferably regardless of whether or not a "start" command has been given, there is a check for "paper in the cassette 4" or "paper not present in the cassette", for example by means of a light barrier 14 in the cassette 4. If the former condition is met and a USB stick 16 connected to the locking control 13/5 and also recognized by the locking controller 13, the magnetic lock is checked for "unlock" and under this condition in the locking control 13 an electronic Key generated, which is stored in the locking control by EEPROM as a master key and on the USB stick 16. At the same time or, depending on the embodiment of the invention, after removal of the USB stick 16 or disconnection of the connection between the USB stick 16 and locking control 13/5, the locking of the cassette lid 4a, for example by pressing a magnetic switch 15th

Depending on the embodiment of the invention, the master key is either a completely newly generated key or a key selected from a stored supply of, for example, 65,000 keys by random generator. The destruction process can start automatically depending on the combination of the lock control 13 with the hardware and software of the shredder, automatically start with time delay or manually triggered by a start button.

If access to the documents in the cassette 4 is necessary before the start or before the end of the destruction process, the lock is released as soon as the USB stick 16, which contains the current electronic key, is connected to the locking controller 13, the key from the USB Stick 16 was read and the match with the master key was detected. This may be necessary for troubleshooting or to refill the cassette 4.

Is detected after the destruction of documents by the photocell 14 in the cassette 4, that now the condition "paper in the cassette 4 is not present" is given, preferably the locking even without intervention of an operator or without detection of a USB stick 16 stored key independently, since the risk of access to, especially confidential, documents no longer exists.

In the event that the USB key 16 with the current key for unlocking is not available in the event of a malfunction, the possibility of opening the cartridge 4 by means of a connection of the locking control is according to the invention 13 provided with a masterstick or a master code troubleshooting as an emergency measure.

It is essential to the invention that for each renewed destruction process, ie refilling of the cassette 4 with documents, another key is generated on the same document shredder. Furthermore, on existing USB sticks 16 older, already used for a document destruction on the document shredder key - preferably without demand - overwritten.

In Fig. 5 the sequence of the cassette lock is shown when using an RFID transponder as a mobile data carrier 16 for the electronic key. This process differs from that Fig.1 only in the wireless coupling of the mobile data carrier via radio frequencies with the locking control, while the coupling via USB stick 16 is done so to speak wired.

Of course, the invention also includes the use of other types of mobile data carriers and their wired or wireless coupling with the locking controller 13 for the purpose of storing a key generated by the locking controller 13, such as storing the key on the mobile phone via USB interface, LAN, Bluetooth or WLAN.

It is essential to the invention in all cases that a different key is generated for each renewed destruction process.

The addressed cassette or cartridges for use on shredders may itself be a so-called autofeed unit or is at least part of such a unit, which is designed for automatically feeding the documents inserted in the cassette to the cutting unit of the shredder. The cassettes 4 can be used for recording documents be formed in the form of sheet material and / or other form of material.

In the RFID tag in the sense of Fig. 5 it may alternatively be such an RFID tag in which an electronic key is temporarily or permanently already pre-stored. In this alternative variant, a different key is then not generated for each renewed destruction process. Instead, the authorized user, in whose retention the RFID tag is located, has the possibility to use the same electronic key stored on the RFID tag at each renewed destruction process. The latter is read out of the RFID tag at each renewed destruction process by the locking control 13 and stored in it. This readout process is wireless when the RFID tag is spatially sufficiently close to the locking controller 13 introduced. Since the electronic key in this variant is not always regenerated for each renewed destruction process or generated by random generator, it is suitable only for those of documents stored in lockable cassettes of document shredders, to whose security lower demands are made.

LIST OF REFERENCE NUMBERS

1

paper shredder

2

casing

3

operating unit

4

cassette

4a

cassette cover

5

socket

6

cutting

7

engine

8th

transmission

9

control unit

9a

Cutterbar control

10

receptacle

11

first feed channel

12

second feed channel

13

lock control

14

Light barrier / sensor

15

Locking System / magnetic switch

16

Data carrier (mobile, detachable)

Claims (17)

Method for securing documents stored in lockable cassettes of document shredders against unauthorized access, comprising the following method steps: - filling the cassette with documents, Triggering a mechanical, electronically controlled cassette lock by activating an electronic lock control, Generating an electronic key by the locking control, Storing the electronic key in the lock controller and on a portable storage medium temporarily connected to the lock controller, Detaching the data carrier from the connection with the locking control and storing it by an authorized user, - initiation of document destruction, - Recording the complete document destruction and afterwards - Delete the electronic key for the current cassette lock in the lock controller. The method of claim 1, wherein the activation of the locking control is carried out automatically when establishing the connection of the mobile data carrier with the lock control. The method of claim 1 or 2, wherein the generation of the electronic key is done by rebuilding or by random selection from a plurality of stored keys. Method according to one of the preceding claims, in which an already performed cassette lock is canceled if necessary by re-connection of the mobile data carrier with the locking control. Method according to one of the preceding claims, in which the triggering of the document destruction takes place manually or time-controlled. Method according to one of the preceding claims, in which a new key is generated for each renewed document destruction and stored both in the locking control and on a mobile data carrier. Method according to one of the preceding claims, in which, after each complete document destruction by the locking control, the opening of the cassette is initiated. Arrangement for securing documents stored in shredder cassettes against unauthorized access, comprising: a cassette with a document filling opening provided with an electromechanical locking system, a locking control, designed for the electronically controlled locking of the document filling opening and for the simultaneous generation of an electronic key, Means for storing the electronic key in the lock controller and on a portable volume separable from the lock controller, - A device for manually or timed triggering the document destruction and deletion of the electronic key stored in the lock control after complete document destruction. Arrangement according to claim 8, in which a USB stick or an RFID transponder is provided as a mobile data carrier. Arrangement according to claim 8 or 9, wherein the locking control comprises means in the form of at least one circuit arrangement which is designed such that the activation of the locking control takes place automatically when establishing the connection of the mobile data carrier with the locking control. Arrangement according to one of claims 8-10, wherein the locking control comprises means in the form of at least one circuit arrangement, which is designed such that the generation of the electronic key is carried out by rebuilding or by random selection from a plurality of stored keys. Arrangement according to one of claims 8-11, wherein the locking control comprises means in the form of at least one circuit arrangement which is designed such that an already performed cassette lock can be canceled by reconnecting the mobile data medium containing the current key, if necessary, with the locking control becomes. Arrangement according to one of claims 8-12, wherein the locking control comprises means in the form of at least one circuit arrangement, which is designed such that the triggering of document destruction takes place manually or timed. Arrangement according to one of claims 8-13, wherein the lock control comprises means in the form of at least one circuit arrangement which is designed such that a new key is generated for each renewed document destruction and stored both in the lock control and on a mobile data carrier. Arrangement according to one of claims 8-14, wherein the locking control comprises means in the form of at least one circuit arrangement, which is designed such that after each complete document destruction by the locking control, the opening of the cassette is caused. Method for securing documents stored in lockable cassettes of document shredders against unauthorized access, comprising the following method steps: - filling the cassette with documents, Triggering a mechanical, electronically controlled cassette lock by activating an electronic lock control, Reading an electronic key by the locking controller from a portable data medium of an authorized user, Storing the electronic key in the lock control, - initiation of document destruction, - Recording the complete document destruction and afterwards - Delete the electronic key for the current cassette lock in the lock controller. Arrangement for securing documents stored in shredder cassettes against unauthorized access, comprising: a cassette with a document filling opening provided with an electromechanical locking system, a locking control, designed for electronically controlled locking of the document filling opening, Means for reading an electronic key by the lock controller from a portable data carrier of an authorized user, Means for storing the electronic key in the lock control, - A device for manually or timed triggering the document destruction and deletion of the electronic key stored in the lock control after complete document destruction.

Images