GB2357878A - Mobile security system - Google Patents

Abstract

A mobile security system (e.g. cash carrier van) comprises a closure member which can be opened from a closed position and a lock (16, 17, 18) for physically locking the closure member in its closed position. When an unlock request for a particular point of call is keyed in (28), the system checks whether the van's actual location, e.g. indicated by a GPS unit (26), is correct, and if so displays (30) a code which is then keyed in (24) to a transfer unit (23). The transfer unit is then plugged into a control unit (22) which performs unlocking (16, 17, 18) if the code is correct.

Description

2357878 A MOBILE SECURITY SYSTEM The present invention relates generally

to a mobile security system, and particularly, although not exclusively, to a system for use in vehicles acting to carry cash and/or valuables. Such vehicles typically follow a predetermined route during the working day (not necessarily the same route each day) and this route is known, in advance, at least to the operators. It may, of course, be concealed from the driver, apart from the next immediate destination, with means being provided to notify the driver of each new destination once a specific task, either a collection of cash or valuables or a delivery has been completed.

It is known in the operation of such vehicles to provide a plurality of lockable enclosures, each assigned to a particular task or category of contents. As the vehicle follows its route during the working day, therefore, it is necessary to open individual enclosures either to withdraw the contents for a delivery or to introduce or add fresh contents from a collection. Such enclosures may be highly secure safes or lockers, having thick walls, robust doors and locks, or less secure lockers or even boxes within the van which can only be opened utilising a security code which is either programmed into the lock or into a central security system of the vehicle. Such central security system may be computer controlled with a processor 2 operating to perform a program of tasks and a memory for storing information relating to the release codes needed to release each individual lock of each locker.

It is known from GB Patent 2262640 to provide a security installation comprising a closure member which can be opened from a closed position, and a lock for physically locking the closure member in its closed position, said lock being of a type which is arranged to receive release signals and which is enabled for unlocking by those signals when the lock recognises the signals as representing a release code known to the lock, the security installation further comprising: first communication means for transmitting a request to a remote station that the lock be enabled for unlocking, second conununication means for receiving release signals provided by the remote station in response to the request, and transfer means for transferring the release signal from the second communication means to the lock; the transfer means being such as to keep from any person present at the security installation the identity of the release signals corresponding to the release code otherwise then for serving a current request.

In use of such a system a release request signal is transmitted, typically by radio transmission means, from the vehicle to a remote central station at which the validity of the release request signal can be assessed. If a correct release request signal has been received the central station may automatically, or under the 3 command of an operator, transmit an authorisation signal for enabling release of a locker appropriate to the task in hand and for which the lock release request has been generated.

Upon receipt of this authorisation signal, which may be itself in the form of a code, the operator may act to release the lock. This may be achieved in one embodiment by entering the code on a hand held unit programmed with other information concerning the vehicle and the locks, which unit is then plugged into the appropriate locker to enable it to communicate with the lock by transmitting a further code, based on the authorisation code entered by the user and other parameters such as the sequence of tasks during the day, the date, time, identification code of the vehicle andlor the operator and a random or pseudo random number generated the last time the lock was operated. The transfer unit then acts to generate a signal which, in the case of a programmable lock, is recognised by the lock as its release code. The unit may, of course, in other embodiments, simply generate a. voltage signal which acts to operate a solenoid to release the lock.

This system is reliable and secure in that it prevents unwanted opening of lockers by, for example, corrupt employees, prevents all the lockers from being open at once except in a timed sequence, and ensures that if any suspicious requests are received by the central station the central operator can refuse to authorise opening of a locker, instead requesting the driver to return to base.

4 This system has, however, several disadvantages. First, it relies on the central operator to recognise an anomalous condition and refuse to issue an authorisation code. A sophisticated corrupt employee could, therefore, time a number of requests for opening of lockers at times when it would be expected that such opening requests would be made in order properly to perform the duties assigned to that day. Unless communication is received at the central station from the collection or delivery point indicating that the collection or delivery anticipated for that day had not been made, there may be no other way for the central operator to discern that an anomalous condition has arisen. Moreover, being reliant on radio communications means that occasional failures occur even when the employee is properly performing his or her duties, because of a failure in the radio communication network, either from a hardware failure in the system itself, or because atmospheric conditions detrimentally affect the transmission of signals so that, at a location where reception may be expected, it may unexpectedly fail to arrive even though the equipment is working. Such radio communication transmissions are, for example, affected by sunspot activity and other astronomical and terrestrial meteorological factors so that the 20 absolute security of a system such as that described in the prior art cannot be guaranteed.

The present invention seeks to provide a security system suitable for a mobile carrier such as a cash van or other vehicle, in which the above disadvantages are overcome and other features are obtained.

According to one aspect of the present invention, therefore, a mobile security system comprises a closure member which can be opened from a closed position and a lock or other retaining device for physically locking the closure member in its closed position, the lock or other retaining device being of a type requiring a release signal to effect or enable unlocking, is provided with means for determining whether the security system is within a predetermined location within which the release of the lock or other retaining device is enabled upon entry of a release signal.

The means for determining whether the security system is within a predetermined location may be one of several types. It may be a "local" system, for example involving the generation of a coded signal in a limited region, such as a low power short wave radio signal emanating from a destination building or a suitable building adjacent a destination building and which can be detected by a radio receiver only within a limited range. Such a system has certain advantages, but is dependent on the installation of a large number of radio transmitters on or within range of the destinations. This may be unnecessarily limiting, except in circumstances where the vehicle has a relatively fixed number of known destinations, and an alternative and preferred system for determining whether the security system is within a predetermined location or not involves the detection of 6 position signals from a communication satellite, particularly the global positioning satellite system. This system is available globally in the public domain, and can be used to generate signals identifying the position co-ordinates of a receiver without requiring any preliminary arrangements with a destination. It is possible, therefore, to program a sequence of destination points or regions into a security system such as that defined above, with a suitable record of the sequence within which the locations must be entered.

In one embodiment of the invention, therefore, the means for determining whether the security system is within a predetermined location comprises memory means for storing one or a plurality of sets of signals representing one or a plurality of the said predetermined locations, and means for comparing the or a set of stored signals with a signal representing the location of the security system when a release request signal is input to the system.

If the stored signals representing predetermined locations are sets of coordinates it is preferred that the signals representing the location of the security system are coordinate position signals derived from satellite communication means.

Of course, even though satellite communication means may be used for deriving co-ordinate position signals, it may be appropriate in some circumstances also to maintain communication with a central station by radio transmissions. This, however, is not an essential requirement of the present invention since the necessary information on the route and the position co-ordinates in sequence to 7 determine the required collection and/or delivery points, can be programmed into the memory at the beginning of each work period, typically each day.

The stored signals representing predetermined locations may be coded signals, and the signals representing the location of the security system may be transmitted thereto from transmitters at or in the vicinity of the or a said predetermined location, said signals each being coded signals defining one location.

Whether the signals are coded signals transmitted from a local transmitter, or positioning signals derived from satellite communication means, there may be provided input means operatively connected or connectable to the said lock by means of which an operator can input signals to the lock or other retaining device.

Such input means may comprise for example a transfer unit releasably connectable to the lock by a plug and socket connection and having a keypad or like user interface for entry of an intermediate authorisation code from which a release code is generated upon transcription.

In use of the security system, therefore, the user, on arriving at the location determined by the daily programme and after having made the appropriate collection (or being ready to make a delivery) enters the information indicating that a release request is being made. This may be information relating to that location provided by the daily programme or may be no more than a sequential number identifying the next destination in sequence. Of course a more complex input system may require the operator to put in details of the request for verification 8 purposes whereas in the simplest case only operation of a single key to indicate C6next release" may be needed. In response the security system generates an intermediate authorisation code. This may be entered into the user interface unit if one is provided (the transfer unit) which is then connected to the appropriate locker (for example by plug and socket connection) to make the connection therewith. If the vehicle is in the appropriate location the location- sensing means enables the signal from the unit to be transferred to the appropriate lock or other retainer for release. The location-sensing means may provide enablement at any of three different levels, namely at the initial request for an intermediate authorisation code, at the transcription or transfer unit or at the lock or retainer itself In each case the effect is that the lock or container cannot be released unless the vehicle is in the vicinity of the predetermined location.

It is not, therefore, necessary for the mobile security system to have 15 communication with a remote central station although such communication may in fact be provided if additional monitoring is required.

In a simple embodiment the said "other retaine?' may be no more than a remotely activated bolt such as a motor-operated or solenoid-operated bolt which is displaced upon receipt of an energising voltage or current. In such a system the "locks", in this case solenoid or like bolts, may be permanently wired to the control system so that an appropriate locker is released upon entry of a release request if all the conditions for release are correct, without the operator having to do any more.

9 According to a further embodiment of the invention, there may further be provided second conununication means for receiving an input signal from a remote central station and relay means for relaying this input signal to conversion means for converting this input signal into an input digital code and means for relaying the said input digital code to the said memory means for comparison with the stored code.

Embodiments of the system may, therefore, be provided in which the said release signal also comprises a digital release code known to the lock and the lock may provide decryption means provided with a decryption key for decrypting release signals intended for the lock. The digital release code may be formed in a number of different ways. For example it may comprise a sequence number which is changed in a predetermined manner for successive unlockings of the lock whereby the release signals enabling unlocking of the lock differ for each unlocking. Twoway communication, with the lock itself generating part of the next release code, may also be employed.

Means for transferring the release signal from the communication means to the lock in digitally encoded form without the intervention of a human operator may, likewise, be provided such that the limit of the operator's involvement is to provide the initial release request. The release code is then generated by the system, enabled by the position-sensitive means, and transferred to the lock to cause consequent release without the operator needing to take any further action. In such a system the operator does not at any time have any information concerning the release code. Even in an embodiment employing an intermediate code, this does not give the operator any information which could be usable at any other time since the intermediate code necessary to generate the release code for the lock is different each time the lock is opened as a result of the operation of an algorithm by which the release code is generated from different input codes on successive occasions.

Embodiments of the present invention will now be more particularly described, by way of example, with reference to the accompanying drawings, in which:

Figure 1 is a perspective view illustrating the operation of the system of the present invention; and Figure 2 is a block diagram illustrating one embodiment of the invention.

Referring now to Figure 1 there is shown a cash carrier van generally indicated 11 making a delivery to a building 12. The cash carrier van has within it a series of lockers each of which has an independently closable door secured by a bolt which is electromagnetically actuated. The vehicle 11 may be used for collection and/or delivery of valuables, including cash, at a number of different sites. A region in the vicinity of each site, illustrated by the broken outline area 13 in Figure 1 is defined, in this case by the co-ordinates from a global positioning satellite system represented by the satellite 14 and the aerial 15 on the vehicle 11.

Figure 2 illustrates schematically the configuration of the security system showing a set of bolts represented by boxes 16, 17, 18 although these may be considered as the solenoids which, effectively, energise the bolts in order to release these to allow opening of a closure member such as a door of a locker. Each bolt 16, 17, 18 is controlled by a respective switch 19, 20, 21 selectively energised by an electronic control unit 22 which controls the energisation of the locker bolts 16-18 via the switches 19-21 selectively in dependence on a signal input via a transfer unit 23 which has a keypad 24 and a display screen 25. By entering a suitable transfer code into the keypad, generated as will be discussed hereinbelow, then causes, via a suitable algorithm with which the unit 23 is programmed, energisation of appropriate connector pins 25 so that when the unit 23 is plugged into the locker electronic control unit 22 a comparison is made between the signal generated by the unit 23 and a set of signals stored in the unit 22.

The intermediate code for the entry into transfer unit 23 is generated by a security system controller unit 27 comprising a control computer with a keyboard 28 and a memory 29. The global positioning satellite unit 26 is also connected to the control computer 27. In operation, at the commencement of each working day, the computer 27 is loaded with information concerning the location of each collection and/or delivery, in the form of GPS co-ordinates stored in the memory 29, and also with information identifying which locker is to be associated with each call in sequence. Call allocation codes, which may be a simple numerical sequence, are also programmed into the computer, and the operator is provided with a separate paper list of this information. Obviously the paper list identifying the location of 12 the call sites will provide the information to the operator in the form of a conventional street address rather than global positioning co- ordinates as stored in the memory 29.

When the vehicle 11 arrives at the first collection point, for example the building 12 in Figure 1, and the operator is ready to make the delivery, or has made the collection, the keyboard 28 is used to enter the identification code or sequential number representing the task to be performed at that site. The computer 27 compares the co-ordinates received from the GPS unit 26 with those stored in the memory 29 as being appropriate to this call, and if these match it generates an intermediate code on the basis of a stored algorithm, which is displayed on a screen 30 of the computer. In this case the intermediate code is a four digit code which the operator then reads and transfers to the transfer unit 23 by acting on the keypad 24. The intermediate code appears in the screen 25 of the transfer unit as confirmation that the correct keys have been pressed. This unit is then taken to the locker control unit at the rear of the vehicle 11 and plugged in. The locker unit 22 is programmed with a corresponding algorithm which enables the unit to recognise whether the code is a correct identification for one of the lockers at this event. The algorithm may be dependent on variables such as time of day, date, vehicle, position in the sequence of calls during the day, a code identifying the operator and or other random or pseudo random numerical information. If the codes match the locker unit 22 generates a signal which is recognised by one of the switches 19, 20, 21 causing it to close and apply a signal to the appropriate bolt 16, 17, 18 causing that to withdraw allowing the locker door on the appropriate locker to be opened.

13 This system guards against the possibility that a corrupt employee, knowing that valuables are stored in any particular locker for delivery, may simply drive the vehicle to a remote location before entering the request signal for opening of the locker. If, when the release request signal is entered on the keyboard 28, the GPS co-ordinate information received on the unit 26 does not match the information stored in the memory 29 the algorithm will produce an incorrect code on the screen 30 such that, when this entered into the transfer unit 23 and the unit plugged into the locker unit 22 no locker is correctly identified and the lockers all remain closed. In this way the corrupt operator cannot determine at what point the system is failing to operate correctly, since he or she does not know whether the correct intermediate code has been generated as these are unique to each event and have no significance for any other event.

The system also protects employees from coercion by criminals since, again, even if the vehicle has been hijacked, the operator has no information which can be forced from him or her except for the information to enter into the keyboard 28 for the next release request.

In a further refined embodiment the transfer unit 23 connectable to the locker unit 22 to transfer the information concerning the identified locker to be released, may also receive back from the locker, once the bolt has been released, a signal which modifies the information stored therein so that, in order to generate the next release code, the transfer unit must be connected to the computer 27 whereupon the 14 computer 27 generates the release request code which the operator must enter on the keyboard 28 when at the next location due in sequence. In this way the operator does not need to be provided with a paper copy of the day's programme but only the information on the first site, and even this could be programmed into the computer so that the screen will only show the next collection or delivery point after a previous collection or delivery has been successfully completed and the driver has to do no more than to drive to that site and then enter into the keyboard 28 the code displayed by the screen upon arrival.

The distance between each site is, of course, known in advance when the information is being loaded into the computer 27 at the beginning of each day, and correspondingly a delay time can be set between each successive opening of a locker so that the lockers are not openable between those times. If, for example, it should take thirty minutes from the first to the second site then even if a correct code is entered into the locker unit 22 by some corrupt means, the locker will not open for thirty minutes. After this delay time has elapsed, of course, the locker may be opened at any time in that traffic delays may cause the vehicle to arrive late by an unquantifiable amount.

In other embodiments, not shown, a simpler configuration, in which the locks are in the form of solenoid-operated bolts and the release signals are generated directly by control means which may be permanently wired in the vehicle, thereby avoiding the need for the transfer unit 23. When the operator makes a release request it will then have the automatic response of a lock release on the appropriate locker if the vehicle is in the correct location without any further action being required of the operator. Other forms of retainer may include magnetic retainers which act to secure a door or other closure member in place by magnetic attraction rather than replacement of a physical blocking member such as a bolt.

16

Claims (12)

1. A mobile security system comprising a closure member (22) which can be opened from a closed position and a lock (16, 17 18) or other retainer for physically locking or blocking the closure member in its closed position, said lock or other retainer being of the type requiring a release signal to effect or enable release, in which the security system further comprises means (26, 27, 29) for determining whether the security system is within a predetermined location within which lock release is enabled upon entry of a release signal.

2. A mobile security system according to Claim 1, in which the means for determining whether the security system is within a predetermined location includes memory means for storing one or a plurality of sets of signals representing one or a plurality of said predetermined locations, and means for comparing the or a set of stored signals with a signal representing the location of the security system when a lock release request signal is input to the system.

3. A mobile security system according to Claim 2, in which the stored signals representing predetermined locations are sets of co-ordinates, and the signals representing the location of the security system are co-ordinate position signals derived from satellite communication means.

17

4. A mobile security system according to Claim 2, in which the stored signals representing predetermined locations are coded signals, and the signals representing the location of the Security System are transmitted thereto from transmitters at or in the vicinity of the or a said predetermined location, said signals each being coded signals defining one location.

5. A mobile security system according to any of Claims 2, 3 or 4, in which there are input means operatively connected or connectable to said lock means by which an operator can input signals to the lock.

6. A mobile security system according to Claim 5, in which the said input means comprise an interface unit releasably connectable to the lock by a plug and socket connection and having a keypad for entry of an intermediate authorisation code from which a release code is generated upon transcription.

7. A mobile security system according to any preceding claim, further comprising second communication means for receiving an input signal from a remote central station and relay means for relaying this input signal to conversion means for converting this input signal into a input digital code, and means for relaying the said input digital code to the said memory means for comparison with the stored code.

8. A mobile security system according to any preceding claim, in which the said release signal also comprises a digital release code known to the lock and the 18 lock includes decryption means provided with a decryption key for decrypting release signals intended for the lock.

9. A mobile security system according to Claim 8, in which the said digital release code comprises a sequence number which is changed in a predeterTnined manner for successive unlockings of the lock whereby the release signals enabling unlocking of the lock to differ for each unlocking.

10. A mobile security system according to any preceding claim further comprising transfer means for transferring the said release signal from the communication means to the said lock in digitally encoded form without the intervention of an operator.

11. A mobile security system according to Claim 10, in which the said transfer means comprise output means operatively connected to the said second communication means to generate a human discernable output representative of said release signals.

12. A mobile security system substantially as herewithbefore described with reference to and as shown in the accompanying drawings.