FR3013952A1 - SECURED OPENING GOODS TRANSPORT TROLLEY, SECURE OPENING / SECURING SYSTEM AND METHOD USING SUCH TROLLEY. - Google Patents

Abstract

The present invention relates to a trolley, a system and a method for securely closing a freight transport trolley (1) (2) for on-board retail sale (72), comprising a container (3) on rollers (10), provided with a door (11) for lateral opening and a locking device (V, 15) for the door (11). The device (V, 15) comprises means (16) for mechanically locking the door and means (17) for controlling the mechanical locking means (16) comprising an actuating motor (26), a reader (33) radio identification tags of a user, arranged means of geolocation of the truck, and calculation means for operating the engine according to the identity of the user and / or the location of the truck, and means timestamps for recording the opening and / or closing of the door (11) as a function of the moment of said opening and / or of said geolocation of the corresponding carriage.

Description

The present invention relates to a trolley for transporting merchandise for retail sale on board an aircraft, of the type comprising a container, and to a secure opening and closing system using such a trolley parallelepiped mounted on wheels provided with a side opening door and a door locking device, the locking device comprising mechanical locking means and control means of the locking means. It also relates to a system and a method 15 of secure opening / closing using such a carriage. It finds a particularly important, although not exclusive, application in the field of the sale of bonded goods on board 20 commercial airline aircraft through pre-filled carts of luxury or other products by an independent service provider, when stops. It is known that the loading and unloading operations of the carriages during sales or replenishment require particularly delicate follow-up. It concerns a logistics chain comprising several stakeholders with or without access to the contents of the truck, factor of several types of risk. Thus, there is a risk of diversion of the contents of the cart (essentially theft). This can represent up to 15% of the value of the goods. There is also a security risk (placement inside the dangerous goods cart, bomb for example). We already know (WO 2008/065416) sales trolleys on board aircraft in which a key by smart card allows the authorization or not the opening of the carriage. 10 Such devices, if they are intended to allow access to the contents of the carts only authorized persons, on the one hand require the cabin crew to carry a key in addition to their regulatory package and other On the other hand, it is not possible to identify the people who actually had access to the goods in real or near real time. Indeed, besides the use of key is tedious, this is insufficient to determine the place and time of opening. We also know the use of seals for sealing the doors of carts. Only the holder of a cutting plier can open it, which is done in the presence of a third to whom the carriage is handed over. The risk of theft appears to be limited, the truck being dumped once used on board the aircraft. Unfortunately, such a system is not forgery-free due to unauthorized sealing / de-molding / replumping and in fact unreliable. The object of the present invention is to provide a securely opening merchandise transport trolley, a system and a method that better than those previously known to meet the requirements of the practice, in particular by enabling the identification of natural and / or legal persons. under the responsibility of which the truck was opened, while adapting without additional cost to the regulatory constraints of civil aviation (dimensions, structural strength of the truck, electromagnetic emissions, certifications, ...).

In other words, it is possible to have a perfect traceability of the identities of the people who had access to the contents of the trolley and therefore of the responsibilities in question, and this in the respect of the social right and the economic and normative constraints in force . The device is also easy to use. It does not require, for the sailing staff to have recourse to an additional tool (pliers, key ...) or to appeal to a third party for the opening (removal of seals, padlocks, ...). For this purpose, the invention proposes, in particular, a freight transport trolley for the retail sale on board an aircraft of the type defined above, characterized in that the control means comprise: driving means for actuating the means mechanical blocking of the door between an open position of the door and a locking position when closing the door, a radio identification tag reader (RFID) arranged for reading a label associated with the user , means arranged to geo locate the carriage, calculating means arranged to actuate said motor means according to information acquired on the identity of the user from the tag reader and / or the location of the carriage, and time stamping means for recording the opening and / or closing of the door as a function of the moment of said opening and / or of said geolocation of the corresponding carriage.

In embodiments, further and / or otherwise, one and / or the other of the following provisions is used: - the container forming a box with four lateral walls, a bottom and a cap, the means of Control are housed in the thickness of the container door; - The thickness of the wall of the door in which are housed the control means is less than 13 mm; The control means comprise a means of communication with a computer network enabling communication with at least one database allowing the comparison of the information acquired with information from said data base as an additional condition for authorizing or not allowing opening of the door; the geolocation means comprise radio identification means of at least one terminal positioned in the vicinity; The mechanical locking means of the door are disengageable; the control means comprise an electric linear actuator for clutching the means for blocking the door. The invention also provides a system using a carriage as described above. It thus proposes a secure system for transporting merchandise for on-board retailing comprising at least one transport trolley manually manageable by a user, provided with a lateral opening door and with a locking device. of the door by mechanical locking means, characterized in that the carriage comprises an actuating motor mechanical locking means 15 of the door, a radio identification tag reader arranged for reading a label associated with the user, means arranged to geo locate the carriage, calculating means arranged to actuate the engine based on information acquired on the identity of the user from the tag reader and / or the geolocation of the trolley, and registering means for recording the opening and / or closing of the door as a function of the moment of said opening and / or said geolocation of the trolley corres and said system comprises a plurality of fixed or removable terminals arranged to respectively transmit corresponding specific geolocation information, and a plurality of user identification tags.

Advantageously, the system comprises a computer network for communication with at least one database for comparing the acquired information with information from said database as an additional condition to allow or not the opening of the door. In an advantageous embodiment the mechanical locking means of the door are fully integrated in the door and / or are disengageable. Also advantageously the mechanical blocking means comprise an electric linear actuator for clutching said door locking means. The invention also proposes a method for implementing the system and / or the carriage described above. It also proposes a method of securely opening / closing a freight transport trolley for retail sale on board an aircraft, said trolley comprising a container provided with a lateral opening door comprising locking means. mechanical mechanism of the door and means for actuating the locking means from a comparison of data acquired by the carriage and data stored in the database, characterized in that it comprises the following steps: it is transmitted to the trolley the data acquired from a user badge comprising a radio identification tag by means of a radio identification tag reader integrated in the carriage, the acquired data are compared with the data of the database, and the opening of the door is authorized or not according to the result of the comparison by the calculation means. Advantageously, the carriage comprises timestamping means and a memory for the registration of timestamped events and the time and the data acquired when they are available are entered in the memory at each opening. Also advantageously the time of passage of the carriage on its path is automatically recorded by means of previously arranged sensors, hour that we compare with the opening data, so as to identify the geographical area where it was performed .

In an advantageous embodiment, the aircraft and the system MVT (Anglo-Saxon "Aircraft Movement Message") of international communication on its position as a virtual terminal for the carriage at the time of its loading and unloading on board. The invention will be better understood on reading the following description of embodiments given as non-limiting examples. The description refers to the accompanying drawings in which: Figure 1 is a perspective view of a carriage (and a label) according to one embodiment of the invention. FIG. 2 is an exploded schematic view in transparency and in perspective of the locking device of the carriage of FIG. 1. FIGS. 3A to 3D show partial views of other embodiments of the locking device that can be used with the device according to FIG. the invention. Fig. 4 illustrates a secure goods transport system according to one embodiment of the invention. Figure 5 is a diagram showing partially the steps of a method of opening / closing a secure carriage according to one embodiment of the invention. Figure 1 shows a goods vending cart 1 stored in the cart. It is essentially formed by a parallelepipedal container 3, provided with vertical walls 4, 5, 6, 7, a bottom 8 and a cap 9 for example 15 can form plateau. The carriage 1 is mounted in a manner known per se on rollers 10, making it manageable by a user in particular in the central corridor of the passenger cabin of an airliner. The container is for example made of metal, of dimensions respecting one of the standards known to those skilled in the art under the names ATLAS, KSSU or ACE, relating to the dimensions of trolleys (trolleys in English language) aboard the 25 civil aircraft. In the case of trolleys more particularly referred to herein, the vertical walls 4, 5, 6, 7 have a thickness e of between 10 mm and 13 mm, for example 12 mm (see FIG. The wall 5 is provided with a door 11 extending substantially over the entire surface of the wall and / or constituting the wall, allowing access to the goods inside the container, for example arranged on trays 12, in known manner. The access door is for example rotational opening (arrow 13) around hinges 14.

According to one embodiment the container comprises a locking device V of the door 11 which will or will not cause the opening of the door securely. The locking device V of the door is fully included or substantially within the thickness of said door. According to another embodiment of the invention more particularly shown in the figures the container comprises a locking device 15 of the door 11 in a wall adjacent to that of the wall of the door as described below. Both embodiments differ only in the positioning of the locking means V, 15. With reference to FIG. 2, this locking device 15 of the door 11 comprises means 16 for mechanical locking of the door and control means 17 thereof. The mechanical locking means 16 are mounted inside the thickness of the wall 4, and comprise a latch lug 18, rotatable between a vertical position 19 for unlocking / opening the door and a horizontal position 20. In particular, and in this embodiment, the latch 18 is mounted perpendicularly and at the end 21 of a horizontally displaceable pin 22 (arrow 23) between a disengaged position of the latch 18 and a latch 18. position 25 engaged with a motor 26 via threads meshing 27/28 arranged for one (27) on an axis 29 integral in rotation with the motor 26 and for the other (28) on the axis 22 integral in rotation The pin 22 is horizontally movable by means of an actuator 30 (for example a piston) between the disengaged positions 24 and engaged with the meshing threads 27/28. On the other side of the first part of the locking device which has just been described, this time in the thickness of the door 11, there is provided a slot 31 in which will come to cooperate (embed) the latch 18 when the latter is in horizontal position 20, allowing the locking of the door. In addition to the motors 26, 30 allowing the latch 18 to move between an open position of the door and a locking position when the door is closed, the control means 17 comprise a microprocessor 32 for calculating and controlling the door. actuators (rotary motor 26 and horizontal actuator 30). They also include, for example on the same wall 4, accessible to the user, a reader 33 labels E radio identification (RFID reader) 25 known in itself. In another embodiment, the tag reader is included in the gate. The acquisition can be done by contact between the acquisition surface and the label E or, at a distance d, but meeting the normative and regulatory requirements (standards RICA DO-160G and EUROCAE ED-14G «Environmental Conditions and test Procedures for Airborne Equipment ") fixing the emission power limits of electromagnetic radiation in aircraft. The E RFID label is mounted in a rectangular plastic support and is also part of the identification badge of the user personnel. The presentation of his badge by the user at a distance less than the distance of acquisition, will allow to recover predetermined data of the card corresponding to the identification of the wearer of the badge (such as his names, first names, the name of the company or company, opening authorizations according to the location of the container, a personal number, an encrypted code of electronic signature of transmitted data to check their integrity etc ...). These predetermined data have, for example, been previously uniquely generated, associating a single coding of the RFID tag with a given person, and vice versa. They are then transmitted to the control means 17 which comprise, in addition to the microprocessor 32, for example on a single electronic card 34, a rewritable, nonvolatile memory of the flash memory type containing identification data comparable to that contained in the RFID tag, each identification data being associated with authorization data of opening or not the door. In one embodiment of the invention this memory may be connected and its data content modified in a manner known per se from a remote database (not shown).

In other words, the memory 35 can be connected via a known communication means (WIFI for example) with a computer network such as for example the Internet which thus gives access to the remote database. In another embodiment the communication means comply with version four of the Bluetooth standard known to those skilled in the art under the name BLE (acronym for Bluetooth Low Energy). This allows a reduced energy consumption. In yet another embodiment, said communication is performed using the reader 33 of labels E. More specifically, the reader 33 comprises means for transmitting and receiving electromagnetic signals (not shown). The communication between the memory and a remote computer network uses the transmitting / receiving means parameterized, for example, with the same transmission / reception frequency as for the communication with the label E. In this case the transmitted data comprise a code for discriminating the source of transmission between a badge and an external source (network).

Such a code may be a prefix to any message received by the tag reader 33 of the "BADGE" or "EXTER" type encoded for example on the same number of bits. The communication may also be different in frequency from that used for the badges to that for the other data sources.

A communication frequency can be 13560 Hz which reduces the risk of nuisance tripping. This communication can be carried out continuously, in a normal mode, for example by carrier detection, and / or can include a degraded mode prohibiting communication while the carriage is on board an aircraft. In the embodiment more particularly described here the carriage is geolocatable by means of an antenna associated with a unique identifier. This may be a representation) identifying another RFID tag (not uniquely the carriage, or consist of an antenna associated with electronic means (not shown) of communication according to the Bluetooth standard (the communication can also be parameterized to function according to the Bluetooth standard.) The antenna, RFID or not, allows a communication 20 in long-distance reception, for example greater than 50 m, with a frequency of 32 kilo Hertz but low transmitting range for example less than 5 m, for example less than one meter and for a power of a few milliwatts As we have seen, the calculation means 32 are designed to actuate the mechanical locking means allowing or not the opening of the door. control of the opening of the door by the calculation means is a function of its result during a comparison operation of the data acquired from the card and data in database.

In the case of identity of the information authorization is then given to the locking device 15 to release the opening of the door. The control means furthermore comprise time stamping means 36 comprising a microcontroller clock or an external clock. They are arranged so that, independently of the data generation by the calculation means, time-stamped events, ie door opening data are recorded therein. The door opening data comprise at least the hourly data of the opening of the door, for example "17h34m28s" but may also include additional data such as the identity of the last person authorized to open the door, its location etc_. The control of the registration of the opening data in the memory 35 is performed by means 37, 37 'of automatic detection of the opening of the door. These automatic detection means comprise, for example, a magnetic switch 37 ', of the REED switch or flexible reed switch type and / or a light detector.

The REED switch 37 'is then mounted in the door facing a magnet 37 mounted in the amount thereof and / or the adjacent wall 4 (or vice versa). The light detector may for example be a photoresistor.

The information that the door is opened or not is then used by the calculation means.

Advantageously, and to further improve security, the data stored and / or exchanged, whether or not during transmission, for example on a computer data bus, are encrypted.

The encryption is of any type, for example an encryption by AES (acronym of the standard method of advanced encryption) on 128 bit. All the elements requiring energy are fed by a power supply 38 10 in a manner known per se (batteries, rechargeable batteries, etc.). FIGS. 3A to 3D show embodiments of the control means. blocking means that can be used with the carriage and / or the system 15 for locking the door of a carriage according to the invention. In the first embodiment (FIG. 3A), the control means 40 comprise an axis 41 of rotation integral with a circular cam 42. The cam 20 comprises at least one blocking rod 43 collaborating with a recess (not shown) corresponding in the door jamb (when facing it). The rod 43 has an end 44 attached to the cam 42, tangentially thereto. During the rotation of the cam, the rod operates (over a small distance) a substantially rectilinear movement (arrow 45) which inserts or withdraws the other end 46 of the rod in the corresponding recess 30. The control means further comprises a spring 47, compressed in normal mode, mounted in the plane of the door and connected to the periphery 48 of the cam. The cam is then in the closed position. An electromagnet 49 at one of the ends of the spring forces it to additional compression which causes a rotation of the cam, which releases the rod. Stopping the electromagnet brings the rod back to the closed position. In the second embodiment (Fig. 3B), a motor 50 is mounted in the door. The motor has an axis of rotation 51 which is not parallel to the movement 52 of the locking rod 53. The end of the motor is provided with a pinion solidly driving a rack 54 formed in the part of the corresponding locking rod. The motor is slaved to limit stops 55 which stop the motor once the desired position of the rod reached, such as for example microswitches. In the third embodiment (Fig. 3C), a shape memory actuator 56 is connected to the rod 57. The rod is preloaded by a pre-compressed spring (not shown). When an electric current passes through the shape memory actuator, it deforms to release the rod. It then resumes its initial position when it stops being fed. In the fourth embodiment (FIG. 3D), the wall 11 of the door is pierced with two openings 30 01 and 02, namely a first opening 01 for the passage of a T-shaped locking pin (not shown), and a second opening 02 for passage of a handle system P.

The handle system P comprises a cam C. The cam is of axially symmetrical shape and constitutes an angular sector. The sector comprises two edges B1 and B2 right substantially orthogonal interconnected by a third edge B3 arcuate, each edge B1, B2 and B3 being connected to another by a rounded corner. The cam C comprises a hole T1 at its center in which is housed a means MB blocking / unblocking the opening. The locking / unlocking means MB is a generally parallelepipedal piece with two of its opposite sides C1 and C2 in an arc of a radius of curvature slightly smaller than that of the second opening. One of the sides C1 curve comprises, for example in the middle, a PN retractable bolt. The retraction is effected for example by a linear electric actuator, such as a brushless motor, or self-controlled synchronous machine with permanent magnets ("brushless" according to the English name) pushing or retracting the PN bolt according to the command applied. The PN bolt is opposite a recess G corresponding in the cam forming strike with which it collaborates when it is in extension.

The cam C is held in stable position by two tabs P1 and P2 in S-shapes. The tabs P1 and P2 are symmetrically disposed on either side of the cam C with respect to the axis of symmetry of the cam C in FIG. the plan of the door 11.

The legs P1, P2 are retained by a fixing point Fl, F2 in the thickness of the door. The fixing point F1, F2 is formed by a collaboration of the dovetail type of the end of each leg P1, P2 with the thickness of the door 11. The legs P1, P2 are clad by two springs R1 and R2 with a blade against the respective straight edges Bl, B2 of the cam C and terminate parallel to each other to the right of the first opening 01 forming a jaw for the locking pin. Thus, when the bolt P is retracted, which is its normal position at rest, the locking / unlocking means MN is free to rotate in the hole T of the cam. A user turning the handle turns it empty. Then when the bolt P is controlled to be released, it drives the cam C in gear rotation with the keeper G. The user then turns the handle and the cam C then rotates while fighting against the forces of the leaf springs R1 and R2 by separating the legs P1 and P2. The tabs P1 and P2 being fixed by an end Fl and F2, they deviate at the other end, namely the parallel portion of the tabs P1, P2 forming jaw. This spacing then releases the locking pin allowing the opening of the door. A system 70 comprising a carriage 71 as described above will now be described with reference to FIGS. For a sale operation on board an aircraft 72, the carriage 71 is first filled by a first user 73 of goods for sale in flight to a warehouse 74. Once the goods installed inside of the carriage and the door closed and locked, the parking means record the corresponding data.

The carriage, via the RFID sensor means, also detects and records the position of the truck for example by means of tags 75, 75 ', 75 "installed in the airport area.

A communication 76 with a remote server 77 is then also possible with synchronization between the tag and the database of the carriage. Note that in a manner known in itself and to save energy, when there is more data sent by the tag and / or the carriage, a timer is triggered at the end of which the means of communication put themselves in sleep mode. More precisely, information is exchanged and entered in the trolley's memory such as contextual information such as the flight number, the company, etc. as well as authorization or non-opening information, such as, first name, name, number, times during which the person is allowed to open the cart and the time at which the door is closed. Once this operation is carried out the carriage is then transmitted to a second user 78 which also records on its behalf in the memory the data relating to them, in the same way as before (presenting its card). The carriage then passes in front of the beacon 75 ', where it is transmitted for example to a third user 79 which brings it to the airplane 72, at the foot of which is a third beacon (mobile) 75 ".

The carriage is then transmitted to the cabin crew (not shown) to be introduced on board the aircraft 72.

When the flight crew wishes to proceed with a retail operation, they present their badge including the first RFID tag to the RFID reader of the cart.

The identification data are then transmitted and / or acquired by the RFID tag reader of the carriage (Step 80, FIG. 5). The acquired identification data are compared, by means of trolley calculation means, with the opening authorization data or not, contained in the first database of the carriage updated before take-off (Step 81, FIG. 5). . The control means controlled by the calculation means allow or not the opening of the door (Step 83, Figure 5) according to the result of the comparison by the calculation means (Step 82, Figure 5). The authorization by the control means corresponds, for example, to a voltage applied to the electrical terminals of the blocking means. Then the carriage, after landing the aircraft, is recovered by a fifth user 84 and brought to the next airport warehouse if necessary. The carriage 71 automatically records the time of its passage on its path near the beacons 75, 75 ', 75 ", the time is then compared with the opening data, so as to identify the geographical area where it is located. In another embodiment the data is recorded and the data processing and correlation to obtain the opening location is performed a posteriori by "post" processing.

In another embodiment of the invention, the authorization or not of the opening data further include directly information on the place where said person is authorized to open the door. This information is obtained by the tags themselves and are recorded in the memory or are obtained by geolocation (GPS for example). Thus not only is it necessary that there is correspondence between the identity of the badge and the authorization to open in the database but also that the carriage is in a place where said user of the badge is authorized to open the carriage .

As we have seen, the communication between the carriage and the beacon is done by a second RFID tag. Finally, it will be noted that, in order to ensure that the carriage 71 communicates with beacons inside the aircraft, means of communication, for example of the server 77, are adapted to receive messages already transmitted in aircraft and known to the man of the aircraft. trade under the name Anglosaxon "Aircraft Movement Message" known as MVT by networks such as those developed by the International Society of Aeronautical Telecommunication (SITA). The remote server 77 can thus, once the aircraft on the ground, transfer these messages to the truck. These messages are for example of the form "closing gates - Paris Charles de Gaule (Paris) - 18h27m42s". The aircraft, without structural modification, thus acts as a virtual beacon.

For example, if on arrival at the destination airport, an unauthorized person mechanically opens the carriage, the opening detection means then detect this situation and generate a time-stamped event that is entered in the memory database. of the carriage, for example in the form. "15h37m26s / opening / during 4minutes". Thanks to the time and location information of the aircraft it is therefore possible to determine the area of custody responsibility of the truck and thereby identify who would be the alleged perpetrator of a product disappearance and / or a anomaly in the opening cycle. Securing the truck is therefore indirectly greatly improved. As is obvious and as also follows from the above, the present invention is not limited to the embodiments more particularly described. On the contrary, it encompasses all the variants and in particular those in which the opening of the container is effected from above, where the walls are made of a material other than metal for example made of plastic, or those where the control means are placed in the wall adjacent to the wall provided with the door.

Claims (15)

REVENDICATIONS1. Cargo transport trolley (1) (2) for on-board retail sale (72), comprising a parallelepipedic container (3) mounted on wheels (10) and manually operable by a user, provided with a door (11) of lateral opening and a locking device (V, 15) of the door (11), the locking device (V, 15) comprising means (16) for mechanical locking of the door and means (17) for controlling the mechanical locking means (16), characterized in that the control means (17) comprise motor means (26, 30) for actuating the mechanical locking means (16) for the door (11) between a door open position and a door lock position, a radio identification tag reader (33) arranged for reading a label (E) associated with the door; user, means arranged to geo locate the carriage, calculating means arranged to actuate said motor means e n function of information acquired on the identity of the user from the tag reader (33) and / or the geolocation of the carriage, and time stamping means for recording the opening and / or closing of the door (11) as a function of the moment of said opening and / or of said geolocation of the corresponding carriage. 2. Trolley according to claim 1, characterized in that the container (3) forming a box with four side walls (4, 5, 6, 7), unfond (8) and a cap (9), the control means are housed in the thickness of the door (11) of the container. 3. Trolley according to claim 2, characterized in that the thickness of the wall of the door (11) in which are housed the means (17) of control is less than 13 mm. 4. Trolley according to any one of the preceding claims, characterized in that the means (17) for controlling comprises a means of communication with a computer network for communication with at least one database (77) of data allowing the comparison of information acquired with information (76) from said database as an additional condition to allow or not the opening of the door (11). 5. Trolley according to any one of the preceding claims, characterized in that the geolocation means comprise radio identification means of a terminal (75, 75 ', 75 ", ...) positioned nearby. 6. Trolley according to any one of the preceding claims, characterized in that the means (16) for mechanical locking of the door (11) are disengageable. 7. Trolley according to claim 6, characterized in that the control means comprise a piezoelectric actuator (MB) for clutch locking means (16) of the door. 8. A secure cargo transportation system (2) for on-board retail (72) comprising at least one manually maneuverable carriage (1) provided with a door (11) for lateral opening and a locking device (V, 15) of the door (11) by mechanical locking means (16), characterized in that the carriage (1) comprises an actuating motor of the mechanical locking means of the door, a reader (33) of radio identification tags arranged for reading a label (E) associated with the user, means arranged to geo locate the carriage, calculation means arranged to operate the engine based on information acquired on the identity of the user from the tag reader and / or the geolocation of the carriage, and the time stamping means for recording the opening and / or closing of the door by function of the moment of said opening and / or of said geolocation of the corresponding carriage, and in that said system comprises several fixed or removable terminals arranged to respectively emit corresponding specific geolocation information, and several user identification tags. 9. System according to claim 7, characterized in that it comprises a computer network for communication with at least one base (77) of data for comparing the information (676) acquired with information from said database as additional condition to allow or not the opening of the door. 10. System according to any one of claims 8 and 9, characterized in that the mechanical locking means (16) of the door are fully integrated with the wall of the carriage adjacent to that of the door (11) and are disengageable. 11. System according to claim 10, characterized in that the mechanical blocking means (16) comprises a piezoelectric actuator for clutching said door locking means (11). 12. A method of securely opening / closing a freight transport cart (1) (2) for on-board retail sale (72), said cart comprising a container (3) provided with a door (11) for lateral opening comprising mechanical locking means (16) for the door and means for actuating (17) locking means from a comparison of data acquired by the carriage and data ( 77) stored in a database, characterized in that it comprises the following steps: the data acquired from a user badge comprising a radio identification tag is transmitted to the trolley by means of a reader of radio identification tags integrated in the carriage, said acquired data is compared with the data of the database, and the opening of the door is authorized or not according to the result of the comparison by the calculation means. 30 13. The method of claim 9, characterized in that the carriage comprising timestamping means and a memory for the registration of events timestamped, is entered in the memory each time opening and the data acquired when they are available. 14. The method of claim 10, characterized in that one automatically records the time of passage of the carriage on its path by means of previously arranged sensors, time that is compared with the opening data, so as to identify the geographical area where it was carried out. 15. The method of claim 10, characterized in that the aircraft and the MVT system of international communication is used on its position as a virtual terminal for the truck at the time of its loading and unloading on board.