EP3483841B1 - Electronic blocking list management system and rights control method for using a refuse container - Google Patents

Description

The invention relates to an electronic blacklist management system and a method for checking authorization for the use of a garbage receptacle. The method is characterized in that entries are prioritized within an exclusion list according to the probability of a login attempt, the faster and with less data processing effort, the use of a garbage receptacle by unauthorized users can be prevented.

For the disposal of household waste, large-scale garbage containers are often provided, which are used by several households. Such garbage containers can, for example, belong to a house community or also to a municipality. As a rule, only registered users should have access to such garbage containers, whereby access can be blocked, for example if the disposal costs are not paid. This type of access can be implemented using a wide variety of electronic systems. It is known from the prior art, for example, that an identification code is assigned to a user. This identification code is stored, for example, on a chip or a card, which the user carries in or on (eg when using radio transmission technology of the identification code (eg by means of RFID)) a compatible reading device in order to identify himself. The corresponding authentication process is carried out either by a local control unit in the garbage container or via a central server that communicates with the local control unit of the dumpster is in communication. After successful authentication and the assignment of the identification code to the authorized group, the garbage container is then temporarily opened and the user can dispose of his garbage.

In the case of electronic access systems in which (writable) keys with a unique ID are used (e.g. transponders with RFID chips), it may be necessary to block one or more of these keys. The need arises, for example, if a key is lost and it must be prevented that it is still used on the access system by unauthorized persons. While it is advantageous for electronic access systems, to which only a few participants should have access (such as a residual waste bin for a one or two-family house), only this group of residents to be identified as authorized persons using a list of approved identification codes ("whitelist") The management of lists with a large number of entries of approved identification codes, for example for central waste glass, old clothes or green waste containers, to which, for example, all residents of a city have access, mean a high data processing effort. If an access system has a large number of keys, a large number of identification codes may be required, which must be stored in each access system. This has several disadvantages, in particular a) a large amount of memory is required for the identification codes, b) there is a high volume of data when the large identification code lists are transmitted, c) frequent updates of the identification code lists of all access systems in an area are necessary and d) large Identification code lists result in long search times, which result in longer waiting times caused by the identification for the user before any access authorization is granted. For such systems it is therefore advisable to replace the list of access-authorized identification codes with a comparatively short list of identification codes for which access to the disposal system is excluded ("blacklist").

For such a blacklist, a list with the lock entries (locked identification codes) must be stored in the memory area of the access system, which is searched when a key is authenticated. In some of the cases mentioned above, in which, for example, almost all residents of a city have access to the disposal system, these blacklists can also become very long in a short time for various reasons, so that the disadvantages arising above with regard to the whitelist can also occur here.

Such an access system must also be informed of many blocked identification codes in a short period of time and stored in the blacklist, for example when residents move away, do not pay fees or lose keys or cards. In this case, too, the result is that a) a large amount of memory would be required for the lock entries, b) a high volume of data is required for the transmission of the large blacklists, c) frequent updates of the blacklists of all access systems in an area are necessary, and d) large Blacklists can result in long search times. The blacklists for access systems are usually generated by the local disposal service provider using a suitable data management system. the KR20150051931 A discloses a system of garbage receptacles in which a blacklist is used in the course of access controls, which is managed by a blacklist management server, the server forwards blacklist information received from a garbage receptacle to the other garbage receptacles whose blacklist does not yet contain this information.

The present invention is therefore based on the object of providing a system and a method for data management which enables effective and, in particular, faster processing of a blacklist for electronic authorization control for the use of a garbage receptacle.

This object is achieved by an electronic blacklist management system for an authorization control for the use of a garbage receptacle according to claim 1 and by a method for data management of a blacklist in an access system for an electronic authorization control for the use of a garbage receptacle according to claim 8.

On the device side, it is thus provided that the electronic blacklist management system for an authorization control for the use of a garbage receptacle comprises a data management system and a plurality of access systems for an electronic authorization control for the use of an individual garbage receptacle assigned to each individual access system. The access systems can be activated by means of a large number of keys, which can each be assigned to a user or a user group. Both the data management system and each of the access systems have a communication interface by means of which data can be exchanged between the data management system and each individual access system. Furthermore, each access system has a memory device for creating and storing a list of the keys used on this access system in a specified period, as well as means for transmitting this list to the data management system by means of the communication interface. Such an access system preferably also has a time recording device, so that a time stamp can be added to every access attempt by means of a key. The time stamp is preferably stored with the respective entry of the access attempt of the key used on this access system. In particular, it is preferred that the time stamp is transmitted to the data management system together with the respective entry of the access attempt of the key used on this access system. As a result, the data management system, which preferably has a larger storage capacity and has greater computing power than the access system, can archive the data on access attempts with specific keys together with the time stamp. This ensures the usability of the data determined by the access system via access attempts over a long period of time.

The data management system has devices for creating a blacklist for the access system of a garbage receptacle, the data management system being set up to use a prioritization algorithm for prioritizing entries in the blacklist when creating the blacklist. The prioritization algorithm also takes into account at least the feature of the last use of a non-authorized key on the access system of the respective garbage receptacle. By using the feature of the last use of a non-authorized key on the access system of the respective garbage receptacle, it can be prevented that keys that have been destroyed or lost and not found no longer have to be kept on the blacklist and thus do not block any storage space. If a lost key were found again, if it were no longer on the blacklist due to the long period of non-use, it would be usable again because it is not on the blacklist, but it would be reused the next time it was updated due to the renewed use of the blacklist can be added again and, due to their recent use, are listed with a correspondingly high priority in the blacklist.

Each access system also has a memory device for storing the blacklist, which is transmitted from the data management system and from the data management system to the respective access system, for the garbage receptacle assigned to this access system. As a result, the blacklist is also available to this access system after the data transmission for comparison with keys that request the use of the assigned garbage receptacle. An existing data connection to the data management system is therefore not necessary. In addition, each access system comprises a data processing device and a control device for granting or denying access to the garbage receptacle assigned to the access system for a user assigned to the key, an access refusal being a consequence of a successful comparison of the key with the entries contained in the blacklist. The data processing device compares a key requesting the use of the garbage receptacle assigned to the access system with the entries contained in the blacklist. If the key is not excluded from the use of the garbage receptacle assigned to the access system, the control device can grant access to the garbage receptacle.

Precisely one garbage receptacle is preferably assigned to each access system. An access system can thus control access to the garbage receptacle assigned to it.

The authorization control for the use of a garbage receptacle is carried out by means of keys. A key is assigned to each user or user group. Such a key can be, for example, an identification number (ID). In this regard, it should be noted that the term identification number is not restricted to numbers, but is used in general for any character string that enables assignment to a user. This ID can be, for example, a PIN (personal identification number (PIN code)) to be entered by the user or it can be stored on a data carrier that can be read by the access system. Such a readable data carrier is preferably a data carrier that is selected from a group that includes a chip card, an RFID tag, a mobile phone, a tablet, a laptop, a finger (fingerprint), the face (face scan) and includes an eye (iris scan). Due to the lower outlay on equipment and the lower energy consumption, a chip card, an RFID tag or a mobile phone (e.g. via NFC (Near Field Communication) or Bluetooth) are particularly preferred for identifying a user. NFC technology is particularly preferred because Almost all smartphones now support this technology and there is therefore a very wide spread of corresponding identification devices.

Typically, an access system for monitoring and controlling access to the garbage receptacle requires energy, usually electrical power. Since the garbage receptacles are often in public spaces, there is no access to a power grid in many cases. A decentralized energy supply is therefore preferred. This could be done for example by batteries, accumulators or solar power. Combinations of these or supplements with other energy sources are also possible. For example, it is conceivable that the required energy is obtained from solar energy and stored in accumulators. A battery as an emergency power source, if no other energy sources are available, would also be conceivable (independently and in combination with other energy sources).

Since, as mentioned above, there is often no access to the power grid in such systems, the use of energy-intensive data processing systems is only possible to a very limited extent in the control and monitoring of access to the garbage receptacle. The associated limits in the performance of the data processing systems lead to the aforementioned delay in checking access authorizations from a list with a large number of entries. In order to avoid or at least reduce such delays, it is necessary to define a maximum number of entries in a list from which the access authorization is determined. A whitelist is therefore ruled out (as described at the beginning), especially in systems with a large number of authorized users. Systems with a large number of authorized users can be managed particularly efficiently using a blacklist or blacklist entries. Since lists with blacklist entries can also exceed a critical size over time, a maximum number of blacklist entries must also be specified for this in order to ensure that they can be processed quickly by the access system.

It is preferably provided that an access system has a lock device with a locking device. The lock device can be used, for example, to throw garbage into the garbage receptacle. Only when a locking device is unlocked can a lock access be opened by the user (or the access system itself). In a preferred embodiment, the control device emits a release signal for unlocking the locking device. However, this only takes place if the comparison of the key with the entries in the blacklist in the data processing device is negative.

Due to the frequent arrangement of the garbage receptacles in freely accessible public space, access to a wired data network is often not available or is very limited. Therefore, in a preferred embodiment, the communication interface for exchanging data between the data management system and a communication interface suitable for wireless communication for each individual access system. Because of the large network coverage, a mobile radio communication device is particularly preferred, which is particularly preferably selected from a group which comprises a GSM, a UMTS, a GPRS and an LTE mobile radio communication device. Alternatively or in addition to this, a WLAN connection (connection via a wireless local area network) would also be conceivable, since such a network is now also available in many cities. As an alternative to wireless data transmission, transmission by means of a data carrier (e.g. a memory card or memory stick (e.g. USB stick) would also be possible. This could take place, for example, when or during the emptying of the garbage receptacle. Since the data transmission is often not time-critical and, for example, overnight or during periods of low use of the transmission network, the speed of the data transmission is of subordinate importance, particularly in the case of wireless data transmission.

In a further preferred embodiment, an access system and / or a garbage receptacle has a localization device, by means of which the current location of the garbage receptacle can be determined. The localization device further preferably uses a global navigation satellite system to determine the current location. This is particularly preferably selected from a group comprising NAVSTAR GPS (Global Positioning System), GLONASS (Global Navigation Satellite System), Galileo and Beidou. The current location can preferably be transmitted to the data management system, preferably via the communication interface already mentioned above. The determination and transmission of the current location of the garbage receptacle to the data management system has the advantage that a garbage receptacle that has been removed from the intended location, e.g. due to vandalism or theft, can easily be located. In addition, the further garbage receptacles located in the vicinity of this garbage receptacle can also be determined, which, as shown later, can be taken into account for the determination of the blacklists.

The prioritization algorithm is of particular importance for an efficient assignment of individual keys to the blacklists of individual garbage receptacles or the respective access system assigned to this garbage receptacle. By using this prioritization algorithm, a blocking list can be generated which, on the one hand, is as short as possible, but on the other hand contains so many blocking entries that unauthorized use of the respective garbage receptacle is prevented or at least minimized with a high degree of probability.

• die Häufigkeit der Nutzung eines nicht zugangsberechtigten Schlüssels an dem Zugangssystem des jeweiligen Müllaufnahmebehältnisses,
• die letzte Nutzung eines nicht zugangsberechtigten Schlüssels an einem Zugangssystem eines anderen Müllaufnahmebehältnisses, welches geographisch in einem vordefinierten Abstand vom jeweiligen Müllaufnahmebehältnisses angeordnet ist,
• die Häufigkeit der letzten Nutzung eines nicht zugangsberechtigten Schlüssels an einem Zugangssystem eines anderen Müllaufnahmebehältnisses, welches geographisch in einem vordefinierten Abstand vom jeweiligen Müllaufnahmebehältnisses angeordnet ist,
• die Höhe eines ausstehenden Rechnungsbetrags des diesem Schlüssel zugeordneten Benutzers und
• die geographische Verteilung der Nutzung eines nicht zugangsberechtigten Schlüssels an einem Zugangssystem anderer Müllaufnahmebehältnisse

In a preferred embodiment, the prioritization algorithm comprises computation rules that map at least one feature that is selected from a group that

• the frequency with which a non-authorized key is used on the access system of the respective garbage receptacle,
• the last use of a non-authorized key on an access system of another garbage receptacle, which is geographically located at a predefined distance from the respective garbage receptacle,
• the frequency of the last use of a non-authorized key on an access system of another garbage receptacle, which is geographically located at a predefined distance from the respective garbage receptacle,
• the amount of an outstanding invoice amount for the user assigned to this key and
• the geographical distribution of the use of a non-authorized key on an access system of other garbage receptacles

By mapping one or more of these features in the computation rules of the prioritization algorithm, various conceivable scenarios of the improper use of a key can be foreseen and the corresponding access systems of the respective garbage receptacles can be prepared for the likely improper use of a key by including it in the respective blacklist.

If, for example, the frequency of use of a non-authorized key on an access system of a certain garbage receptacle is very high, it can be expected with a high degree of probability that the user who is (now) no longer permitted to use it will still want to use this garbage receptacle with a high degree of probability. A correspondingly high prioritization of its key on the blacklist created individually for this garbage receptacle can prevent improper use.

Likewise, the probability is high that a user who is no longer authorized to access will attempt to use garbage receptacles in the vicinity of the previously preferred and most frequently used garbage receptacle. Since (as mentioned above) the (current) position of the individual garbage receptacles can be known, monitored or determined if necessary, garbage receptacles can be quickly determined which are geographically located at a predefined distance from the garbage receptacle last used by the user to be excluded. If the last use of a non-authorized key on an access system of another garbage receptacle that is geographically located at a predefined (small) distance from the respective garbage receptacle was not long ago, this can also result in a high prioritization of this key on a user not previously used by this user used garbage receptacle.

If the frequency of the last use of a non-authorized key on an access system of another garbage receptacle, which is geographically located at a predefined (small) distance from the respective garbage receptacle, is very high, this can also indicate that the unauthorized user is frequently active in this area and with a high probability could also use this garbage receptacle in the future. A high prioritization of this key on this garbage receptacle also leads to a refusal of use even before the first attempt at use.

It would also be conceivable to base the prioritization on the geographical distribution of the use of a (now) no (no longer) authorized key on an access system of other garbage receptacles. For example, if a user has so far mainly used two different garbage receptacles (e.g. at home and at work), by taking into account the geographical distribution of the use of these garbage receptacles, garbage receptacles located in between (e.g. in the area of main roads) can be excluded from use for this user by this is recorded with a correspondingly high priority in the respective blacklists of the access system of the garbage receptacles positioned there.

Another possible criterion for a high prioritization could be the amount of an outstanding invoice amount of the user assigned to this key. Such a high prioritization can prevent users who do not receive bills over a long period of time The use of garbage receptacles that are very far away from the garbage receptacles usually used and on whose blacklist, due to the great distance, this defaulting user would otherwise not be included on the basis of the criteria outlined above, are also prohibited.

In a preferred embodiment, the electronic blacklist management system is characterized in that at least one of the access systems, preferably a plurality of access systems, more preferably all access systems, has a device for excluding a key from all access systems of the electronic blacklist management system. Such a device for excluding a key from all access systems of the electronic blacklist management system could, in a preferred embodiment, be, for example, a device for withdrawing the key or for deleting, overwriting or otherwise rendering an identification number stored on the key unusable.

If, for example, chip cards are used for identification, these could be retained by the access system after (possibly multiple) unauthorized or rejected access attempts. When the garbage receptacle is emptied, the operating personnel could also remove the retained chip card from the access system and thus take it out of circulation.

In the case of identification using a key that does not have to be physically brought into contact with the access system (e.g. an RFID tag, a mobile phone or another contactless system), retention is usually not possible, so the key can be deleted , Overwritten, or otherwise rendered unusable. It would be conceivable, for example, that all keys of an area contain a uniform prefix, which classifies them as belonging to this area (e.g. a city, a district, a place or a district). If this prefix is deleted, overwritten or made unusable in some other way, the access systems of this area no longer react to this key, so that the use of this key is excluded for the entire area.

If an access system detects the ID of an unauthorized key during the authentication process, the access system can destroy the data of the unauthorized key by means of a write access or at least change it in such a way that it Function is disturbed. This means that the authentication process for the unauthorized key no longer works on any other access system.

In this context, it is particularly preferred if the information about a destroyed key is transmitted from the destructive access system to the data management system. This means that the lock entry for this key can be deleted from all black lists, which creates free space for another unauthorized key.

1. a. Festlegen einer maximalen Anzahl der Sperrlisteneinträge,
2. b. Übertragung der in einem festgelegten Zeitraum an dem Zugangssystem jedes einzelnen Müllaufnahmebehältnisses aus einer Vielzahl von Müllaufnahmebehältnissen bisher verwendeten Schlüssel an ein Datenmanagementsystem,
3. c. Sofern die maximale Anzahl der Sperrlisteneinträge noch nicht erreicht ist: Aufnahme der nicht zugangsberechtigten Schlüssel in die Sperrliste und Übertragung der Sperrliste an die Zugangssysteme aller Müllaufnahmebehältnisse durch das Datenmanagementsystem, oder falls die maximale Anzahl der Sperrlisteneinträge erreicht ist:
4. d. Festlegen eines Priorisierungsalgorithmus zur Priorisierung von Einträgen in einer Sperrliste für das Zugangssystem eines Müllaufnahmebehältnisses, wobei der Priorisierungsalgorithmus zumindest auch das Merkmal der letzten Nutzung eines nicht zugangsberechtigten Schlüssels an dem Zugangssystem des jeweiligen Müllaufnahmebehältnisses berücksichtigt,
5. e. Erstellen jeweils einer individuellen Priorisierungsrangfolge aller nicht zugangsberechtigten Schlüssel für das Zugangssystem jedes einzelnen definierten Müllaufnahmebehältnisses durch das Datenmanagementsystem,
6. f. Aufnahme der nicht zugangsberechtigten Schlüssel beginnend mit dem Schlüssel mit der höchsten Priorisierung in absteigender Rangfolge der Priorisierung in die individuelle Sperrliste des Zugangssystems jedes einzelnen definierten Müllaufnahmebehältnisses bis die maximalen Anzahl der Sperrlisteneinträge erreicht ist durch das Datenmanagementsystem,
7. g. Übertragung der individuellen Sperrliste an das Zugangssystems jedes einzelnen definierten Müllaufnahmebehältnisses und
8. h. Gewährung oder Verweigerung des Zugangs zu einem definierten Müllaufnahmebehältnis gemäß der in der individuellen Sperrliste des Zugangssystems des jeweiligen definierten Müllaufnahmebehältnisses hinterlegten Schlüssel, auszeichnet.

In terms of the method, the object on which the invention is based is achieved by a method for data management of a blacklist in an access system for electronic authorization control for the use of a garbage receptacle, with the following steps

1. a. Define a maximum number of blacklist entries,
2. b. Transmission of the keys previously used on the access system of each individual garbage receptacle from a large number of garbage receptacles to a data management system,
3. c. If the maximum number of blacklist entries has not yet been reached: Inclusion of the non-authorized keys in the blacklist and transfer of the blacklist to the access systems of all garbage receptacles by the data management system, or if the maximum number of blacklist entries has been reached:
4. d. Establishing a prioritization algorithm for prioritizing entries in a blacklist for the access system of a garbage receptacle, the prioritization algorithm at least also taking into account the feature of the last use of a non-authorized key on the access system of the respective garbage receptacle,
5. e. Creation of an individual priority ranking of all inaccessible keys for the access system of each individual defined garbage receptacle by the data management system,
6. f. Inclusion of the inaccessible keys starting with the key with the highest priority in descending order of priority in the individual blacklist of the access system of each individual defined garbage receptacle until the maximum number of blacklist entries is reached by the data management system,
7. G. Transmission of the individual blacklist to the access system of each individual defined garbage receptacle and
8. H. Granting or denial of access to a defined garbage receptacle according to the key stored in the individual blacklist of the access system of the respective defined garbage receptacle.

The definition of a maximum number of blacklist entries takes place, as already shown above, preferably depending on the performance of the respective access system. Since a small number of blacklist entries enables comparatively fast data processing even with comparatively inefficient access systems, a low maximum number of blacklist entries is preferred. The maximum number of blacklist entries is particularly preferably 5000 entries, more preferably 2 ¹² entries, more preferably 2 ¹¹ entries, particularly preferably 2 ¹⁰ entries, more preferably 1000 entries, more preferably 2 ⁵ entries, more preferably 500 Entries, particularly preferred with 400 entries, further preferred with ²⁸ entries, further preferred with ²⁷ entries and particularly preferred with 100 entries. With such a small number of entries, with current hardware, even with extremely low power consumption, a comparison with a blacklist can be carried out by the access system almost without any noticeable delay for the user. The definition of a maximum number of blacklist entries does not have to be carried out every time a new blacklist is created. Therefore, maintaining a previously defined value of a maximum number of blacklist entries should also be understood as defining a maximum number of blacklist entries for the purposes of this invention.

As shown above, the last (and / or frequent) use of a key on this or a geographically nearby garbage receptacle is important for assessing the likelihood of improper use of a garbage receptacle. It is therefore provided that (preferably regularly recurring) the keys previously used on the access system of each individual garbage receptacle from a large number of garbage receptacles are transmitted to a data management system in a specified period of time.

If the maximum number of blacklist entries has not yet been reached, all non-authorized keys can be added to the blacklist. This blacklist is for the access systems of all garbage receptacles are the same, so that these can be transferred to all access systems by the data management system. However, at the latest when the maximum number of blacklist entries has been reached, provision is made for a prioritization algorithm to be set for the prioritization of entries in a blacklist for the access system of a garbage receptacle. The prioritization algorithm also takes into account at least the feature of the last use of a non-authorized key on the access system of the respective garbage receptacle. Since every attempt to access individual rubbish containers is taken into account in order to create the blacklists, individual blacklists are necessary. Each garbage receptacle is thus assigned an individual blacklist which, at least to a good approximation, reflects the probability of improper use of a key on precisely this garbage receptacle.

An individual prioritization ranking of all non-authorized keys for the access system of each individual defined garbage receptacle is thus created by the data management system. Based on this priority order, starting with the key with the highest priority in descending order of priority, an individual blacklist is generated for the access system of each defined garbage receptacle, with each entry being transferred to the individual blacklist until the maximum number of blacklist entries is reached. Alternatively, if the number of entries in accordance with the priority order exceeds the maximum permitted number of blacklist entries, the entry listed with the lowest priority could be deleted in this order of precedence until the number of keys in this individual priority order corresponds to the maximum permitted number of blacklist entries. Keys that are unlikely to be used on precisely this garbage receptacle are not included in the blacklist assigned to this garbage receptacle if their placement in the priority order exceeds the maximum number of list entries.

The individual blacklists generated in this way for a specific access system are then transferred to the access system of the respective garbage receptacle. Thus, the blacklist with the keys most likely misused for this garbage receptacle is available to the access system there in the future even without an existing data connection and enables the evaluation of an access authorization for a specific key.

If a user tries to gain access to the garbage receptacle with a specific key, the access system can grant or deny access according to the key stored in the individual blacklist for the respective garbage receptacle. Thus, it is only possible for users to use this garbage receptacle whose key is not contained in the individual blacklist stored in the access system of this garbage receptacle.

The term “individual blacklist” should be understood in the sense of this invention in such a way that a blacklist is determined separately for each garbage receptacle or each group of garbage receptacles. However, it is entirely conceivable that the separately determined blacklists can also be identical for different garbage receptacles. Such identical blacklists are also to be understood as individual blacklists in the sense of this invention.

• die Häufigkeit der Nutzung eines nicht zugangsberechtigten Schlüssels an dem Zugangssystem des jeweiligen Müllaufnahmebehältnisses,
• die letzte Nutzung eines nicht zugangsberechtigten Schlüssels an einem Zugangssystem eines anderen Müllaufnahmebehältnisses, welches geographisch in einem vordefinierten Abstand vom jeweiligen Müllaufnahmebehältnisses angeordnet ist,
• die Häufigkeit der letzten Nutzung eines nicht zugangsberechtigten Schlüssels an einem Zugangssystem eines anderen Müllaufnahmebehältnisses, welches geographisch in einem vordefinierten Abstand vom jeweiligen Müllaufnahmebehältnisses angeordnet ist,
• die Höhe eines ausstehenden Rechnungsbetrags des diesem Schlüssel zugeordneten Benutzers und
• die geographische Verteilung der Nutzung eines nicht zugangsberechtigten Schlüssels an einem Zugangssystem anderer Müllaufnahmebehältnisse umfasst.

As already described above on the device side, it is also advantageous in terms of the method if the prioritization algorithm continues to take into account features that are selected from a group that

• the frequency with which a non-authorized key is used on the access system of the respective garbage receptacle,
• the last use of a non-authorized key on an access system of another garbage receptacle, which is geographically located at a predefined distance from the respective garbage receptacle,
• the frequency of the last use of a non-authorized key on an access system of another garbage receptacle, which is geographically located at a predefined distance from the respective garbage receptacle,
• the amount of an outstanding invoice amount for the user assigned to this key and
• includes the geographical distribution of the use of a non-authorized key on an access system of other garbage receptacles.

Advantageously, if a specified number of denied access attempts of a key that is not authorized to access is exceeded, the key is transferred by the access system excluded from further use. This can preferably be done by the access system withdrawing the key or deleting, overwriting or otherwise rendering an identification number stored on the key unusable.

A method is also preferred in which the data processing by the data management system is carried out separately from the respective garbage receptacle. This has the advantage that the data processing by the data management system can take place centrally for all garbage receptacles. It is preferably carried out at a location where sufficient power is available for the operation of a powerful data management system and optionally also an archiving system. In this way, information about unauthorized access attempts can also be archived over a long period of time and / or when a key that has not been used for a long period of time is used again, the usage data associated with this key can be used again.

The data can be transmitted, for example, when the respective garbage receptacle is emptied. However, an alternative variant of the method is preferred in which the transmission of data between an access system of a garbage receptacle and the data management system takes place wirelessly. This also enables data to be exchanged between two empties, for example if improper use of a garbage receptacle is to be expected in the near future. With the wireless transmission of data, it is not necessary to send an employee to update the blacklist of a garbage receptacle.

A variant of the method is particularly preferred in which the transmission of data between an access system of a garbage receptacle and the data management system takes place by means of a mobile radio connection, which is preferably selected from a group consisting of a GSM connection, a UMTS connection, a GPRS connection and a Includes LTE connection.

In a preferred variant of the method, the above-mentioned steps b, e, f and g are carried out periodically repeating, the repetition preferably taking place in an interval which is selected from a group comprising daily, weekly, monthly, quarterly, semi-annual or annual repetition . In this way, an up-to-date data status can be guaranteed in the access systems of all garbage receptacles. Of course, it would also be conceivable to use the described system and method to control the access for garbage receptacles of different types of garbage, such as residual waste, paper, bottles, metal, wood, green waste, hazardous waste, drug residues or plastic containers.

Further advantages, objectives and properties of the present invention are explained on the basis of the following description of the attached figures. Components of the same type can have the same reference symbols in the various embodiments.

Fig. 1

eine Übersichtsdarstellung eines elektronischen Sperrlistenverwaltungssystems für die Berechtigungskontrolle zur Benutzung eines Müllaufnahmebehältnisses;

Fig. 2

eine Prinzipskizze des elektronischen Sperrlistenverwaltungssystem für die Berechtigungskontrolle zur Benutzung eines Müllaufnahmebehältnisses nach einer Ausführungsform;

Fig. 3

eine beispielhafte Darstellung für die Erstellung einer Priorisierungsrangfolge und einer daraus resultierenden individuellen Sperrliste.

In the figures show:

Fig. 1

an overview of an electronic blacklist management system for the authorization control for the use of a garbage receptacle;

Fig. 2

a schematic diagram of the electronic blacklist management system for the authorization control for the use of a garbage receptacle according to one embodiment;

Fig. 3

an exemplary representation for the creation of a priority ranking and a resulting individual blacklist.

Figure 1 shows an overview of the electronic blacklist management system for the authorization control for the use of a garbage receptacle. This system includes a data management system (1). This can be arranged centrally and is preferably spatially separated from each of the garbage receptacles (2.1, 2.2, 2.n). Each of the garbage receptacles (2.1, 2.2, 2.n) is connected to an access system (3.1, 3.2, 3.n) which controls access to the respective garbage receptacle (2.1, 2.2, 2.n). For this purpose, a lock device or transfer device (4.1, 4.2, 4.n) is provided, which can be locked by means of a locking device (5.1, 5.2, 5.n). If the lock device (4.1, 4.2, 4.n) is locked, access to the respective garbage receptacle (2.1, 2.2, 2.n) is blocked and refuse cannot be thrown into this garbage receptacle (2.1, 2.2, 2.n).

Whether a user is allowed to throw in garbage and the lock device (4.1, 4.2, 4.n) is opened by the user by unlocking the locking device (5.1, 5.2, 5.n) can be decided by the access system (3.1, 3.2, 3.n) on the basis of a key assigned to the user, for example an ID, (6.1, 6.2, 6.n). For this purpose, the access system (3.1, 3.2, 3.n) has a data processing device (7.1, 7.2, 7.n) and a memory device (8.1, 8.2, 8.n). In the respective memory device (8.1, 8.2, 8.n), an individual blacklist assigned to the respective garbage receptacle (2.1, 2.2, 2.n) is stored, in which those keys (6.1, 7.2, 6.n) are contained, which the Access to this garbage receptacle (2.1, 2.2, 2.n) is to be refused.

If, on the other hand, the user uses a key (6.1, 7.2, 6.n) that is not included in the individual blacklist of this garbage receptacle (2.1, 2.2, 2.n), an access system (3.1, 3.2, 3 .n) contained control device 9.1, 9.2, 9.n) the locking device (5.1, 5.2, 5.n) unlocked and the access to the lock device (4.1, 4.2, 4.n) released for the user, so that he can waste through the Lock device (4.1, 4.2, 4.n) can be thrown into the garbage receptacle (2.1, 2.2, 2.n).

The user's key (6.1, 7.2, 6.n) is read in by the respective access system (3.1, 3.2, 3.n) via a communication interface (10.1, 10.2, 10.n). The key (6.1, 7.2, 6.n) can be, for example, a chip card, an RFID tag or a mobile phone. The communication interface (10.1, 10.2, 10.n) is preferably suitable for wireless communication.

In the embodiment shown, the access system (3.1, 3.2, 3.n) of each garbage receptacle (2.1, 2.2, 2.n) also has a localization device (11.1, 11.2, 11.n) and a time recording device (12.1, 12.2, 12.n) ) on. The current location of the respective garbage receptacle (2.1, 2.2, 2.n) can be determined by means of the localization device (11.1, 11.2, 11.n), for example by means of NAVSTAR GPS (Global Positioning System), GLONASS (Global Navigation Satellite System), Galileo or Beidou or a combination of different systems can be determined. The time recording device (12.1, 12.2, 12.n) can be used to assign a unique time stamp to every attempt at use by a user, so that each attempt at use for each garbage receptacle (2.1, 2.2, 2.n) can be documented both in terms of location and time. In addition to this or as an alternative, the location of the access system could also be determined at the time of commissioning or maintenance on site by means of a service tool (e.g. smartphone app) that can record GPS data and the location data of the access system or the garbage receptacle either directly into the Data management system or in the access system deposited. The access system can then transmit this data to the data management system by radio.

The communication interface (10.1, 10.2, 10.n) is also used to transfer data to and from the data management system (1). For this purpose, the communication interface (10.1, 10.2, 10.n) preferably has a separate communication channel. This preferably differs from the one by means of which the key of a user is read in. The two communication channels of the communication interface (10.1, 10.2, 10.n) can also be designed as separate sub-units that are spatially separated from one another in or on the garbage receptacle (2.1, 2.2, 2.n) and / or the access system (3.1, 3.2, 3.n) be arranged.

The communication interface (10.1, 10.2, 10.n) is preferably designed for wireless communication with the data management system (1). This has the advantage that the data does not have to be exchanged manually (for example using a USB stick) by operating personnel. A mobile radio connection is preferably used for data exchange between the communication interface (10.1, 10.2, 10.n) and the data management system (1).

Figure 2 shows a schematic diagram of the electronic blacklist management system for the authorization control for the use of a garbage receptacle according to one embodiment. As shown in this schematic diagram, a list of all non-authorized keys is created in a step (21). If this list is so long that delayed authentication of keys on the access system (3.1, 3.2, 3.n) of the respective garbage receptacles (2.1, 2.2, 2.n) must be expected, a maximum number x of entries is made in step 22 defined per blacklist. If this number x is less than the number of all entries in the list of inaccessible keys, it is necessary in step (23) to define criteria by means of which a prioritization algorithm can determine a priority order of inaccessible keys.

To enable effective access control to a specific garbage receptacle (e.g. 2.1 from a large number of garbage receptacles (2.1, 2.2, 2.n), all access attempts of all keys on each access system (3.1, 3.2, 3.n ) of the system recognized and stored in step (25) for a specified period in the storage device of the access system (3.1, 3.2, 3.n).

In step (26), the data stored in one or more access systems (3.1, 3.2, 3.n) are transmitted to the data management system (1) via access attempts. This transmission can take place at regular intervals, user-initiated or when exceeding (e.g.> 75%, preferably> 80%, particularly preferably> 90%) a predetermined memory utilization of the storage device (8.1, 8.2, 8.n) of the respective access system (3.1, 3.2, 3.n). After the transfer, the transferred data can be stored and archived in the data management system (1), so that the storage device (8.1, 8.2, 8.n) of the respective access system (3.1, 3.2, 3.n) is emptied to store new data about access attempts can be.

If the data has been transferred to the data management system (1) via access attempts, in step (27) a priority order can be created for the inaccessible keys for each access system (3.1, 3.2, 3.n) on the basis of the previously defined prioritization algorithm (see step 23). Since the data on access attempts at the various garbage receptacles (2.1, 2.2, 2.n) differ, there is an individual prioritization order for each garbage receptacle (2.1, 2.2, 2.n) based on the access attempts and the underlying prioritization algorithm. In particular in the case of larger systems with a large number of garbage receptacles (2.1, 2.2, 2.n), a comparatively large amount of computing effort is to be expected.

On the basis of the individual prioritization order, an individual blacklist is generated for each garbage receptacle (2.1, 2.2, 2.n) in step (28). This is limited to a number of x entries in order to keep the data processing by the access system (3.1, 3.2, 3.n) on site as low as possible. Entries whose position in the priority order exceeds the number x are not included in the blacklist.

After the blacklists have been generated, the individual blacklist is transmitted to the respective access system (3.1, 3.2, 3.n) in step (29). Depending on the available bandwidth of the transmission network, this can be done jointly for all blacklists and access systems (3.1, 3.2, 3.n) or only for individual access systems (3.1, 3.2, 3.n) or a group of access systems (3.1, 3.2 , 3.n).

After the transfer, the respective blacklist is in the corresponding access system (3.1, 3.2, 3.n) for evaluating the access authorization for users of a specific key available. If the key with which a user requests access to the garbage receptacle (2.1, 2.2, 2.n) is contained in the blacklist of the access system (3.1, 3.2, 3.n) of this garbage receptacle (2.1, 2.2, 2.n), the Access to the garbage receptacle (2.1, 2.2, 2.n) is denied and the locking device (5.1, 5.2, 5.n) remains locked.

Figure 3 shows an example of the creation of a priority ranking and an individual blacklist resulting therefrom. In the left-hand area (columns 1 and 2), all data transmitted to the data management system (1) about access attempts to a specific garbage receptacle over a period of several consecutive days are shown. The respective data records contain a time stamp and a key ID. The data records contain both access attempts of authorized keys and (in this case two) non-authorized keys (key ID highlighted in bold).

In the data management system (1), certain weighting factors are stored for each time segment (in this case A, B, C and D) (in this case 10, 8, 6 and 4). In the example shown, the weighting factor assigned to the respective time segment is assigned to each of the access attempts with a key that is not permitted. The product of the number of access attempts per time segment and the respective weighting factor results in a value for each time segment and each non-permitted key. If you add up the values for each key individually, the sum results in a weighting value that can be used to prioritize. In the present example, the key A8E1AD06 is prioritized higher than the key 5CA3DA03, which only came to a total of 28, due to the determined total of 46.

The weighting values shown here as examples are for illustration purposes only. The weighting can be adapted to the respective needs. The system can also be optimized using other weighting factors. For example, between keys that are not authorized for access, the reason for the withdrawal of the authorization can also be included in the weighting.

If, for example, a key was lost and another lost access authorization due to a resident moving out, the lost key could be due to the unclear user and a higher probability of illegal use higher weighting can be advantageous, while the resident who has moved out can still be identified and thus any usage fees for the garbage receptacle can still be claimed.

In addition, for example, time stamps of unauthorized keys that are still in use can be weighted higher than those that are no longer used and / or unauthorized time stamps (e.g. after the key is lost) are weighted higher than authorized time stamps (i.e. before the key is lost).

List of reference symbols

1

Data management system

2.1, 2.2, 2.n

Garbage receptacles

3.1, 3.2, 3.n

Access system

4.1, 4.2, 4.n

Lock device

5.1, 5.2, 5.n

Locking device

6, 6.1, 6.2, 6.n

Key, ID

7.1, 7.2, 7.n

Data processing device

8.1, 8.2, 8.n

Storage facility

9.1, 9.2, 9.n

Control device

10.1, 10.2, 10.n

Communication interface

11.1, 11.2, 11.n

Location device

12.1, 12.2, 12.n

Time recording device

21-30

step

Claims (15)

1. An electronic blocking list management system for checking authorisation to use a rubbish receptacle (2.1, 2.2, 2.n), wherein the blocking list management system comprises a data management system (1) and multiple access systems (3.1, 3.2, 3.n), which can be activated by means of multiple keys (6), which are each assigned to a user or a group of users, for electronically checking authorisation to use an individual rubbish receptacle (2.1, 2.2, 2.n) associated with any individual access system (3.1, 3.2, 3.n), wherein both the data management system (1) and each of the access systems (3.1, 3.2, 3.n) have a communication interface (10.1, 10.2, 10.n), by means of which data can be exchanged between the data management system (1) and each individual access system (3.1, 3.2, 3.n), wherein
   each access system (3.1, 3.2, 3.n) has a memory device (8.1, 8.2, 8.n) for creating and storing a list of the keys (6, 6.1, 6.2, 6.n) used in a defined period of time at this access system (3.1, 3.2, 3.n) and means for transmitting this list by means of the communication interface (10.1, 10.2, 10.n) to the data management system (1), and the data management system (1) has devices for creating a blocking list for the access system (3.1, 3.2, 3.n) of a rubbish receptacle (2.1, 2.2, 2.n),
   wherein

   - the data management system (1) is configured to access a prioritisation algorithm for prioritising entries in the blocking list when creating the blocking list, wherein the prioritisation algorithm at least also takes into consideration the feature of the last use of a key (6, 6.1, 6.2, 6.n) not authorised for access at the access system (3.1, 3.2, 3.n) of the respective rubbish receptacle (2.1, 2.2, 2.n) to create, by means of the data management system (1), respectively, an individual prioritisation hierarchy for all keys (6, 6.1, 6.2, 6.n) not authorised for access for the access system (3.1, 3.2, 3.n) of each individual defined rubbish receptacle (2.1, 2.2, 2.n), wherein, by means of the data management system (1), the keys (6, 6.1, 6.2, 6.n) not authorised for access, starting with the key (6, 6.1, 6.2, 6.n) with the highest prioritisation in descending hierarchy of the prioritisation, in the individual blocking list of the access system (3.1, 3.2, 3.n) of each individual defined rubbish receptacle (2.1, 2.2, 2.n) are included until the maximum number of blocking list entries is reached,

   - each access system (3.1, 3.2, 3.n) has a memory device (8.1, 8.2, 8.n) for storing the blocking list created by the data management system (1) and transmitted therefrom to the respective access system (3.1, 3.2, 3.n) for the rubbish receptacle (2.1, 2.2, 2.n) associated with this access system (3.1, 3.2, 3.n), and each access system (3.1, 3.2, 3.n) comprises a data processing device (7.1, 7.2, 7.n) and a control device (9.1, 9.2, 9.n) for granting or refusing access to the rubbish receptacle (2.1, 2.2, 2.n) associated with the access system (3.1, 3.2, 3.n) for a user associated with the key (6, 6.1, 6.2, 6.n), wherein access refusal results from a successful comparison of the key (6, 6.1, 6.2, 6.n) with the entries contained in the individual blocking list of the access system (3.1, 3.2, 3.n) of this defined rubbish receptacle (2.1, 2.2, 2.n).
2. The electronic blocking list management system according to claim 1, characterised in that
   the prioritisation algorithm comprises computing specifications which display at least one feature selected from the group consisting of:

   - the frequency of use of a key (6, 6.1, 6.2, 6.n) not authorised for access at the access system (3.1, 3.2, 3.n) of the respective rubbish receptacle (2.1, 2.2, 2.n),

   - the last use of a key (6, 6.1, 6.2, 6.n) not authorised for access at an access system (3.1, 3.2, 3.n) of another rubbish receptacle (2.1, 2.2, 2.n) which is arranged geographically at a predefined distance from the respective rubbish receptacle (2.1, 2.2, 2.n),

   - the frequency of the last use of a key (6, 6.1, 6.2, 6.n) not authorised for access at an access system (3.1, 3.2, 3.n) of another rubbish receptacle (2.1, 2.2, 2.n) arranged geographically at a predefined distance from the respective rubbish receptacle (2.1, 2.2, 2.n),

   - the value of an outstanding invoice amount owed by the user associated with this key (6, 6.1, 6.2, 6.n), and

   - the geographic distribution of the use of a key (6, 6.1, 6.2, 6.n) not authorised for access at an access system (3.1, 3.2, 3.n) of other rubbish receptacles (2.1, 2.2, 2.n).
3. The electronic blocking list management system according to claim 1 or 2,
   characterised in that
   at least one of the access systems (3.1, 3.2, 3.n), preferably a plurality of access systems (3.1, 3.2, 3.n), more preferably all access systems (3.1, 3.2, 3.n) has/have a device for excluding a key (6, 6.1, 6.2, 6.n) with respect to all access systems (3.1, 3.2, 3.n) of the electronic blocking list management system.
4. The electronic blocking list management system according to claim 3,
   characterised in that
   the device for excluding a key (6, 6.1, 6.2, 6.n) with respect to all access systems (3.1, 3.2, 3.n) of the electronic blocking list management system is an apparatus for confiscating the key (6, 6.1, 6.2, 6.n) or for deleting, overwriting or otherwise making unusable an identification number stored on the key (6, 6.1, 6.2, 6.n).
5. The electronic blocking list management system according to any of the preceding claims,
   characterised in that
   the communication interface (10.1, 10.2, 10.n) for exchanging data between the data management system (1) and each individual access system (3.1, 3.2, 3.) is a communication interface (10.1, 10.2, 10.n) suitable for wireless communication, which is preferably a mobile communication device, which is particularly preferably selected from a group consisting of a GSM, UMTS, GPRS and LTE mobile communication device.
6. The electronic blocking list management system according to any of the preceding claims,
   characterised in that
   an access system has a port device (4.1, 4.2, 4.n) with a locking device (5.1, 5.2, 5.n), wherein the control device (9.1, 9.2, 9.) emits a release signal for unlocking the locking device (5.1, 5.2, 5.n) if the comparison of the key (6, 6.1, 6.2, 6.n) with the entries contained in the blocking list is negative in the data processing device (7.1, 7.2, 7.n).
7. The electronic blocking list management system according to any of the preceding claims,
   characterised in that
   an access system (3.1, 3.2, 3.n) and/or a rubbish receptacle (2.1, 2.2, 2.n) has a locating device (11.1, 11.2, 11.n), by means of which the current location of the rubbish receptacle (2.1, 2.2, 2.n) can be determined, preferably by means of a global navigation satellite system, particularly preferably selected from the group comprising NAVSTAR GPS (Global Positioning System), GLONASS (Global Navigation Satellite System), Galileo and Beidou, wherein the location can be transmitted to the data management system (1), preferably via the communication interface (10.1, 10.2, 10.n).
8. A method for data management of a blocking list in an access system for electronically checking authorisation to use a rubbish receptacle (2.1, 2.2, 2.n),
   with the following steps

   a. defining a maximum number of blocking list entries,

   b. transmitting to a data management system (1) the key (6, 6.1, 6.2, 6.n) used previously within a defined period of time at the access system (3.1, 3.2, 3.n) of any individual rubbish receptacle (2.1, 2.2, 2.n) from multiple rubbish receptacle containers (2.1, 2.2, 2.n),

   c. if the maximum number of blocking list entries is not reached: including the key (6, 6.1, 6.2, 6.n) not authorised for access in the blocking list and transmitting the blocking list to the access systems (3.1, 3.2, 3.n) of all rubbish receptacles (2.1, 2.2, 2.n) by means of the data management (1) system, or if the maximum number of blocking list entries is reached,

   d. defining a prioritisation algorithm for prioritising entries in a blocking list for the access system (3.1, 3.2, 3.n) of a rubbish receptacle (2.1, 2.2, 2.n), wherein the prioritisation algorithm at least also takes into consideration the feature of the last use of a key (6, 6.1, 6.2, 6.n) not authorised for access at the access system of the respective rubbish receptacle (2.1, 2.2, 2.n),

   e. creating, by means of the data management system (1), an individual prioritisation hierarchy for all keys (6, 6.1, 6.2, 6.n) not authorised for access for the access system (3.1, 3.2, 3.n) of each individual defined rubbish receptacle (2.1, 2.2, 2.n),

   f. including, by means of the data management system (1), the keys (6, 6.1, 6.2, 6.n) not authorised for access, starting with the key (6, 6.1, 6.2, 6.n) with the highest prioritisation in descending hierarchy of the prioritisation, in the individual blocking list of the access system (3.1, 3.2, 3.n) of each individual defined rubbish receptacle (2.1, 2.2, 2.n) until the maximum number of blocking list entries is reached,

   g. transmitting the individual blocking list to the access system (3.1, 3.2, 3.n) of the respective rubbish receptacle (2.1, 2.2, 2.n), and

   h. granting or refusing access to a defined rubbish receptacle in accordance with the keys (6, 6.1, 6.2, 6.n) stored in the individual blocking list of the access system (3.1, 3.2, 3.n) of the respective defined rubbish receptacle (2.1, 2.2, 2.n).
9. The method according to claim 8,
   characterised in that
   the prioritisation algorithm also takes into consideration features selected from the group consisting of

   - the frequency of use of a key (6, 6.1, 6.2, 6.n) not authorised for access at the access system (3.1, 3.2, 3.n) of the respective rubbish receptacle (2.1, 2.2, 2.n),

   - the last use of a key (6, 6.1, 6.2, 6.n) not authorised for access at an access system (3.1, 3.2, 3.n) of another rubbish receptacle (2.1, 2.2, 2.n) which is arranged geographically at a predefined distance from the respective rubbish receptacle (2.1, 2.2, 2.n),

   - the frequency of the last use of a key (6, 6.1, 6.2, 6.n) not authorised for access at an access system (3.1, 3.2, 3.n) of another rubbish receptacle (2.1, 2.2, 2.n) arranged geographically at a predefined distance from the respective rubbish receptacle (2.1, 2.2, 2.n),

   - the value of an outstanding invoice amount owed by the user associated with this key (6, 6.1, 6.2, 6.n), and

   - the geographic distribution of the use of a key (6, 6.1, 6.2, 6.n) not authorised for access at an access system (3.1, 3.2, 3.n) of other rubbish receptacles (2.1, 2.2, 2.n).
10. The method according to claim 8 or 9,
    characterised in that
    if a defined number of unsuccessful access attempts of a key (6, 6.1, 6.2, 6.n) not authorised for use is exceeded, the key (6, 6.1, 6.2, 6.n) is excluded by the access system (3.1, 3.2, 3.n) from further use.
11. The method according to claim 10,
    characterised in that
    the access system (3.1, 3.2, 3.n) confiscates the key (6, 6.1, 6.2, 6.n) or deletes, overwrites or otherwise makes unusable an identification number stored on the key (6, 6.1, 6.2, 6.n).
12. The method according to any of claims 8 to 11,
    characterised in that
    the data processing by means of the data management system (1) is performed at a location separately from the respective rubbish receptacle (2.1, 2.2, 2.n).
13. The method according to claim 12,
    characterised in that
    data are transmitted between an access system (3.1, 3.2, 3.n) of a rubbish receptacle (2.1, 2.2, 2.n) and the data management system (1) wirelessly.
14. The method according to claim 12 or 13,
    characterised in that
    data are transmitted between an access system (3.1, 3.2, 3.n) of a rubbish receptacle (2.1, 2.2, 2.n) and the data management system (1) by means of a mobile communication connection which is preferably selected from a group consisting of a GSM connection, a UMTS connection, a GPRS connection, and an LTE connection.
15. The method according to any of claims 8 to 14,
    characterised in that
    steps b, e, f and g are repeated periodically, wherein the repetition occurs preferably within an interval selected from a group comprising daily, weekly, monthly, quarterly, half-yearly, or yearly repetition.

Images