GB2458967A

GB2458967A - A Delivery Container with two stage opening and proof of delivery

Info

Publication number: GB2458967A
Application number: GB0809048A
Authority: GB
Inventors: Andrew Edward Nesling
Original assignee: Individual
Current assignee: Individual
Priority date: 2008-05-19
Filing date: 2008-05-19
Publication date: 2009-10-07
Anticipated expiration: 2028-05-19
Also published as: GB2458967B; GB0809048D0

Abstract

There is provided a lockable container (1) for receiving items. The container comprises means for generating a random code when the container is locked, and means for transferring the code to a person locking the container. A memory is provided for storing the code. The container further comprises means (2) for unlocking the container to a first stage, in which the contents of the container can be viewed by a user but not removed from the container, and means for transferring the code to the user when the container is unlocked at the first stage. The container can then be unlocked to a second stage (3), in which the user can remove the contents of the container. The first stage preferably equates to unlocking an opaque outer door, the second stage preferably unlocking a transparent inner door such as a mesh grill. Alternatively, the container may comprise a flexible drawstring bag, wherein the drawstring is operable to partially open the bag to reveal the contents, then fully open it to remove the contents. The code may be proof of delivery such as a barcode, it may be encrypted and retransferred, it preferably comprises the container's unique serial number and date and time stamps. Upon opening the first door the delivery is viewed and the code may be displayed, if the delivery is accepted, the second door is opened. The code is then stored in memory associated with the box. The code may be flagged as delivery accepted.

Description

An Improved Delivery Container

TECHNICAL FIELD

The present invention relates to delivery containers and to techniques for authenticating deliveries.

BACKGROUND

With the increasing use of internet and mail order shopping and the reduction of people who are at home during the working day, the problem of not being able to deliver a parcel or letter first time is increasing. This has a negative impact on the environment, as re-arranging delivery requires more transport of parcels.

Also increasing is the number of people buying items directly from other individuals or traders in other countries, where proof of delivery can be very important.

Where a recipient of a delivery is present when a delivery is made, the recipient can check the goods delivered and provide a signature to confirm receipt of the correct goods in a satisfactory condition.

Containers are available which allow a recipient to accept a delivery without being present. GB 2394509 discloses a secure delivery box that has a keypad that requires a security code to be entered before it can be opened. The box can provide proof of delivery in the form of a printed slip or a signal sent from the box. [P1138232 discloses a similar arrangement in which a lockable box displays a delivery code when the box is opened. GB 2358428 discloses a key for opening a secure container that can only be used once to deliver an item.

GB 2365606 discloses a storage system that transmits a code to a carrier for gaining access to a delivery box. The code is variable and is generated for each delivery. The carrier uses the code to open the delivery box. GB 2375137 discloses a delivery box having a printer. When a delivery is made and the box closed, the printer generates a code that is used as a proof of delivery notice.

GB 1234948 discloses a delivery box that has a window allowing a recipient to view the contents of the box.

A problem with these known devices is that, even though they provide a code or slip that purports to prove delivery, this can be abused by an unscrupulous delivery person. Such a person could deliver incomplete goods, damaged goods, the wrong goods, or no goods at all. The delivery box will still generate a code that shows a delivery was made, and if the recipient does not receive the correct delivery then they would need to show that the delivery company was at fault. Even where there has been a genuine error in the delivery, the recipient must go through time consuming negotiations with the delivery company to ensure that they have received the correct goods. Furthermore, the known devices are susceptible to abuse by an unscrupulous recipient. An unscrupulous recipient could claim that delivery had not been made when, in fact, it had, or report the item as damaged. These solutions trust both the carrier and the recipient, and in some cases require additional infrastructure to implement.

There is a need for a secure device that can provide proof of delivery without the recipient of the delivery being present, yet leave the recipient with the advantages of effectively signing for the delivery in person, for example ensuring the package has been delivered and is not damaged before accepting the delivery. Furthermore, the design of the device must be such that the cost to the recipient of installing or fitting the device outweighs the accumulative costs of having multiple parcels or letters re-delivered or the inconvenience of collecting undelivered items from a carrier. Ideally, the device would not require any additional infrastructure on the part of the carrier, as this would increase the cost of delivery. For privacy and security, the solution should also provide a mechanism by which the contents of a delivery container are not privy to inspection by third parties (e.g. neighbours, potential thieves etc.), but which also allows the recipient to view and visually inspect the contents before accepting delivery. Moreover, in the interest of security for the carrier, the device should also provide a mechanism by which a delivery container can be verified as belonging to a particular recipient, property or premises.

SUMMARY

The inventor has devised a delivery container that, once locked, generates a unique code as proof of locking. The container unlocks or opens in two stages; the first stage allows the recipient to view and visually inspect the contents of the container but not to remove them. If the recipient is not satisfied with the delivery, the container can be closed and re-locked at this stage and the generated code can be used to authenticate that the user has not accepted the delivery. The second stage involves a further unlocking or opening action that permits the recipient to accept and remove the contents of the container, whereupon in response to accepting the delivery, the generated code is then retained and optionally flagged to indicate that the delivery has been accepted.

According to a first aspect of the present invention, there is provided a lockable container for receiving items, such as parcels and letters etc. The container comprises means for generating a random or pseudo-random code when an item is placed in the container, and means for transferring the code to a person placing the item in the container. The container further comprises a memory for storing the generated codes, together with an optional timestamp recording the date and time at which each particular delivery was made. The container comprises means for opening the container to a first stage, in which the contents of the container can be viewed and visually inspected by a user but not removed from the container, and means for transferring the code to the user when the container is opened to the first stage. If the recipient is satisfied with the contents, the container can then be opened to a second stage, in which the user can physically remove the contents of the container. In the event that the container is opened to the second stage, the code is then stored in the memory and optionally flagged in the memory to indicate that the delivery has been accepted. In this way, if the user opens the container to the first stage and is dissatisfied with the delivery (for example, it is missing, incorrect or damaged etc.) the user can obtain the code to use when contacting the deliverer to prove receipt. In this case, the user would not open the container to the second stage to remove the item, and consequently the existing code would be retained, without being flagged as accepted, thus proving to the deliverer that the user had not opened the container to the second stage. This prevents a dishonest user from removing the item and subsequently claiming that it was not delivered at all. If, on the other hand, the user is satisfied with the delivery, he/she can open the container to the second stage, in which the item can be removed from the container, whereupon the code is then stored in the container memory, and is optionally flagged to indicate that the delivery has been accepted. Because the code has been retained in the memory, and optionally flagged, the deliverer can verify that the container has been opened to the second stage, indicating the user's acceptance of the delivery.

Any references herein to opening' are intended to include any unlocking, unlatching or unfastening action, whereupon the container may be unlocked, unlatched or unfastened by a suitable mechanism to either the first stage and/or second stage.

In one preferred embodiment, the container comprises an opaque outer door which can be closed and locked, and a substantially transparent inner door or mesh grill. By opening the outer door, the recipient unlocks the container to the first stage, and they can then see the contents of the container through the inner door. The second stage of opening allows the user to open the inner door to thereby gain access to the contents of the container.

In an alternative embodiment, the container comprises a flexible bag having a drawstring around an opening to the flexible bag. The first stage of unlocking loosens the drawstring sufficiently to allow the user to view the contents of the flexible bag, and the second stage of unlocking further loosens the drawstring to allow the user to remove any contents of the flexible bag.

The random code may be a proof-of-delivery code or some other form of electronic authentication code. In preferred embodiments, the code corresponds to an advanced electronic signature' and is most preferably in the form of a digital signature'. In all cases, the purpose of the code is to provide the carrier with an intention to sign' on behalf of the recipient of the delivery. Electronic signatures are known to have legal significance in certain territories, such as the UK and certain parts of Europe, but it is a requirement that signatures are based on a qualified certificate created by a secure signature creation device.

In accordance with particularly preferred embodiments of the present invention, the container will generate an advanced electronic signature in the form of an encrypted delivery code comprising a private key, a time and date stamp and a random number. The provision of this signature indicates to the carrier that the recipient intends to take delivery of the item and provides a unique and secure verification for both the recipient and carrier that the delivery is authentic.

Although the use of advanced electronic signatures is preferred, it is to be understood that any other form of electronic authentication may be used, provided that it is regarded by the law of the territory in which the container is operated as having the same legal significance as the recipient's transcribed signature.

The means for transferring the code to a person or deliverer locking the container may be selected from any of a visual display readable by the user, the visual display arranged to display an alpha-numeric code or a bar code; a radio frequency signal; an infra-red signal; a sound signal or any other suitable electrical or electronic signal, and the transferring means may be active for a predetermined period of time to ensure that the code is not constantly being transferred. The container may also comprise means to re-transfer the code.

It is to be understood that the means for transferring the code may provide the code directly to the user and/or to any suitable form of electronic inspection device for use by the user and/or carrier, in accordance with, but not limited to, any of the display and/or signal means described above.

The generated code may comprise values selected from one or more of a manufacturer's identifier (e.g. ID number), a container model number, a serial number unique to the container; a date stamp; and a time stamp, to ensure that the code is unique to the container and to the time/date of delivery. All or part of the code may also be encrypted to ensure that a malicious third party, or unscrupulous carrier or recipient cannot replicate a code. In the case of an advanced electronic signature, the code will further comprise a private key component, such that the code is suitably encrypted to satisfy legislative requirements for electronic signing.

The container may further comprise means that permit the owner of the container to review and inspect previously generated codes which have been retained in memory and have been optionally flagged to indicate that the delivery has been accepted, together with a corresponding date and time stamp of when the container was used and opened to the second stage. The functionality to review previous deliveries is particularly advantageous; as it provides further verification for both the recipient and carrier should a later dispute arise with respect to a particular delivery.

To further improve the security of the delivery and to ensure that a carrier is delivering only to an authenticated container, the container may further comprise means to display an identifier, such as the container's unique serial number, prior to and/or during a delivery event. The same serial number could appear on the carrier's delivery documents and/or be printed on the address label on the item being delivered. In this way, the deliverer is able to better verify that he/she is delivering to the correct container. The serial number may be printed, etched or stamped etc. on the container and additionally, or alternatively, be stored within the container's memory, such that the user can access the number by means selected from any of a visual display readable by the user and/or by an electronic inspection device, the visual display arranged to display an alpha-numeric code or a bar code; a radio frequency signal; an infra-red signal; an electrical signal and a sound signal.

The electronic inspection device may be a specially designed reader/scanner, a modified laptop or a PDA type device etc. and can be in the form of a handheld unit or alternatively could be fixed within/attached to the carrier's delivery vehicle, such that the serial number may be inspected directly and/or remotely.

In other arrangements, the container may be modified so that the code and/or serial number can be inspected remotely via a wired or wireless network connection, by an operator at the carrier's depot etc. Of course, any one or more of these inspection techniques may be used in conjunction with any other technique, depending on the particular configuration and implementation of the container.

To further enhance the authentication of the container, the container may also comprise means which permit a user to activate the container on first use, such that the internal firmware and/or software undergo an initialisation procedure on receipt of a unique activation code. The activation code may correspond to a predetermined manual sequence of key/button depressions or alternatively could be a separate code stored on removable media, such as a memory card that could be inserted into the container's electronics, via a suitable interface, or else be accessed via a card reader connected to the user's personal computer.

Alternatively, other means such as a magnetic card, an infrared signal, a radio frequency signal, an audio signal or some other form of electrical signal may optionally be used to initialise the container.

In other arrangements, the container could be modified so that it could directly interface with the user's personal computer (e.g. laptop) via a standard interface, such as a USB or Bluetooth etc., in order to initialise the container on first use and/or to perform other caretaking operations.

It is envisaged that the user would only receive the activation code after they had registered at least their delivery details with the manufacturer of the container. In this way, the manufacturer would be able to compile and maintain a database of registered, and authenticated, container owners. Such a database would provide a mechanism by which only validly registered containers could be used. With the owner's permission, the registration information could then be shared with one or more carriers as additional verification of the container's ownership and location.

In accordance with the invention, the locking means may be selected from one of a lock and key; an electronic keypad; an infrared receiver; a radio frequency receiver; a magnetic card reader; a sound receiver and any other form of electrical or electronic signal receiving means. The container may further comprise means to activate the locking means.

The container may comprise further means to open the container when it is left waiting for a delivery, for example a lock or button that can be activated by the carrier to open the container. It is preferred that the further means of opening the container when waiting for a delivery cannot be used to unlock the container when a delivery has been made. It is preferred that if the container has not been opened then it can not be locked and a code generated. The additional function is to prevent people other than a carrier from opening the container and closing it maliciously.

The container may comprise further means for the owner of the container to manually set the time and date in the container's electronics, and for the time and date of the container to be displayed to the user and/or carrier upon inspection. In other arrangements, the container electronics may include a built-in clock circuit that is able to automatically adjust and set the time and date as necessary, to account for periods of daylight saving time or following interruptions in electrical power to the container etc. The container can be easily adapted for other applications such as the collection of parcels, secure ballot boxes, storage of valuable or dangerous items such as drugs or chemicals, where the contents must be verified before they can be removed.

BRIEF DESCRIPTION OF THE DRAWINGS

For a better understanding of the present invention and in order to show how the same may be carried into effect reference will now be made by way of example to the accompanying drawings in which: Figure 1 shows an isometric view of a delivery box according to an embodiment of the invention; Figure 2 illustrates schematically a proof-of-delivery code; Figure 3 illustrates schematically a two-stage locking system for the container of Figures 1; Figure 4 shows an isometric view of a delivery bag according to a further embodiment of the invention; Figure 5 illustrates possible delivery scenarios; Figure 6 is a flow diagram showing the steps of a typical delivery; and Figure 7 is a flow diagram showing the steps of a typical container registration & verification process.

DETAILED DESCRIPTION

In the following description the person who is receiving the parcel or letter will be named the recipient. The person or company delivering the parcel or letter will be named the carrier.

Referring to Figure 1, there is provided a container 1 having a hinged door 2 that protects and obscures the contents of the container and allows access to an inner door 3. The container I has attachment points for attaching and/or anchoring the container to a surface such as a wall, a floor or a ground surface proximate to the recipient's property or premises. The door 2 and the container I are arranged to prevent ingress of moisture or dust and to minimise the effects of any heating due to the sun etc., thereby protecting a delivery that is placed into the container.

It is to be understood that although the container 1 is ideally suited for attachment to a fixed surface, the container may alternatively be partially embedded into the structure of the recipient's property, to provide protection against environmental wear and tear and to further mitigate against the possibility of theft of the container.

The inner door 3 of the container is fully or semi-transparent and is made from toughened glass or plastic. Alternatively, the inner door 3 can be a wire mesh grill. This allows the recipient to view the contents without being able to gain access to them.

The container I further comprises a display 4 for displaying an alphanumeric code. The code is generated by electronics (not shown) that are powered by an internal battery. A solar collector 5 may be provided to maintain a battery charge and/or to power the unit. Of course, this may not be necessary if the owner of the container is willing to change batteries or if the electronics is powered by an external electricity supply, such as derived from the domestic mains supply. The container electronics may monitor the supply voltage and display a low voltage warning on display 4, whereupon in response to a low power warning, the container may be configured to automatically limit the functionality of the container and to inhibit a new code from being generated. In this way, the container cannot be operated if it suffers a power outage and therefore this ensures that no unauthenticated deliveries can be made.

A lock 6 and a corresponding key 8 are provided to allow the door 2 to be locked thereby closing the container. An opening lock or button 7a may also be provided that can be used to open the container when it is waiting for a delivery, but not to unlock the container once the delivery has been made. Whilst the lock 6 and key 8 may be used to unlock the inner door 3 it may be desirable for the inner door 3 to be unlocked and/or unlatched by a separate mechanism (not shown). Alternatively, it may not be necessary for the inner door 3 to be actually locked or latched itself, such that the single action of opening it to the second stage is sufficient to store the code and optionally flag it as accepted.

In some embodiments, the action of simply retaining the code in the memory of the container is sufficient proof that the delivery has been accepted. However, in other preferred embodiments, the container electronics and/or software may additionally be configured to flag' the retained code to further verify that the recipient has opened the container to the second stage and has removed the contents of the container.

By flagging' we mean any suitable technique or mechanism by which a particular code can be marked or identified in memory to denote that the code corresponds to a valid delivery acceptance. For example, a code may be flagged by appending one or more alphanumeric characters to the code in memory, or by applying a mask or filter to the code. Alternatively, the action of flagging may be accomplished by storing the code in a particular allocated memory store or buffer, such that any code residing within that store or buffer is known to correspond to an earlier accepted delivery. In preferred embodiments, a flagged code may be accompanied by a predetermined symbol or code prefix or suffix when displayed to a user via display 4, such that the user knows that the code corresponds to an accepted delivery. For example, an asterisk * or a character prefix of DA' (Delivery Accepted) may be shown at the time a code is displayed.

In accordance with the invention, the container's memory is a non-volatile memory, such as flash memory, so that even in the event of a power outage to the container, each of the previous delivery codes is retained. Any suitable non-volatile memory may be used in conjunction with any of the embodiments of the invention.

In some preferred embodiments, when a recipient purchases a container, it may be necessary to activate the container in order for the electronics to operate and to begin to generate delivery codes. The container must therefore be activated by way of an activation code, which the recipient obtains by registering their container serial number and at least their delivery details with the container manufacture. On completing the registration process the recipient will be provided with an activation code which they enter into the container using a lock and push button sequence (e.g. by way of lock 6 and button 7b). On entering a valid activation code the container electronics will perform an initialisation procedure (e.g. internal checks, memory test and battery check etc.) in order to commence operation of the container.

Upon activation, the time and date within the container's electronics can be manually set using a different lock and push button sequence. It is preferred that the time can only be set by the owner of the container and therefore the procedure preferably requires the lock 6 to be turned in order to set the time.

When a recipient is not present at a delivery address, the container I is left so that the door 2 is closed but not locked. When the carrier arrives with the delivery they can visually check and verify the container's serial number (either displayed on the container I or display 4, or both) against their own delivery documents and/or the address label of the parcel. Thereafter, the carrier can then check that the container is operating normally and can infer that it has therefore been activated and validly registered. If necessary, and/or if in doubt, the carrier can cross-examine the manufacturer's database to ensure that the container is validly registered to the delivery address, by verifying the container's serial number against the database entry.

Once satisfied, the carrier is then able to check and confirm the time and date of the delivery on the display 4. When a delivery is made, the carrier opens both the outer door 2 and the inner door 3, places the package or letter inside the container 1 and closes the doors 2, 3. The door 2 may automatically lock when it is closed. The use of an opening lock or button 7a makes it less likely that someone other than the carrier could open the door 2 and damage the contents of the container. Once locked closed, the container I can be opened by using a key 8 in the lock 6. Only the recipient possesses the key 8.

When locked closed, the electronics in the container 1 generates an alphanumeric code that is shown on the display 4 to the carrier for a period of time long enough for the code to be recorded as proof of delivery. A switch, either in the locking mechanism, the hinge, or a lid stay of the door 2, or any combination thereof, signals the electronics to randomly generate the code. An example of a generated code is illustrated in Figure 2, the code is a five part encrypted alpha-numeric sequence. The first part 9a is a manufacturer's identifier, the second part 9b is a model number, the third part 9c is a component of or all of a serial number, which is unique to each container 1, the fourth part 9d is generated on the basis of one or all of a time and date, and the fifth part 10 is a randomly generated alpha-numeric code. By randomly generated, it is meant that the fifth part 10 is random or pseudo-random. Whilst the example code described for Figure 2 comprises 20 characters, it will be appreciated that the code may be of any required length and form.

Once the carrier has recorded the unique delivery code, the carrier provides the generated code along with a description of the delivery, to the recipient. This information may be provided in the form of a delivery slip put through the letter box of the recipient. On being aware that a delivery has been made, the recipient can check the description of the delivery provided by the carrier with the contents of the container and delivery code provided by the carrier with the code recorded by the container I by putting the key 8 into the lock 6 and turning it to an unlock stage 1 position 11, as shown in Figure 3. With the lock in position 11, the code is displayed to the recipient and they are able to open the door 2 and view the contents through the transparent inner door 3. The electronic circuit inside the container I is signalled that the lock has been turned to position Ii by a switch securely inside the locking mechanism and/or by a switch in the hinge and/or lid stay of door 2.

At position lithe container 1 is still closed and the recipient cannot gain access to the inside of the container 1 or its contents. If there is a discrepancy with the description, the code, the contents, visible damage to the contents, or other problems, the carrier can be contacted before the recipient is deemed by the carrier to have accepted the delivery. On turning the key 8 in lock 6 to unlock stage 2 position 12 the container I is unlocked, and the recipient can gain access to the contents of the container and will be deemed by the carrier to have accepted the delivery. The code generated is then stored in the memory of the container and in preferred embodiments is flagged in memory as delivery accepted. When the container I is subsequently locked closed a new code is automatically generated as described above.

In embodiments in which the code is provided in the form of an advanced electronic signature, disputes between the recipient and carrier may be resolved by accessing a dedicated delivery database (which may be the same as, or an extension of, the manufacturer's registration database). The database would ideally be interrogated via a website or portal, which possesses the private key to decrypt the signature and generates a reporting page detailing the container's serial number, the time and date of the delivery and whether or not the signature is valid.

If multiple deliveries are normally attempted before the recipient could accept them, then the recipient may decide to have more than I of the containers described above, or a container that has multiple code generator and compartments for each delivery.

In an alternative embodiment of the invention the container may have a chute into which parcels are placed (similar to a bank night safe). Each time the chute is closed a new delivery code is generated. To remove all the items from the container the same two stage unlocking or opening procedure is used. The first stage comprises opening an opaque door and displaying all the delivery codes.

In the second stage the contents could be viewed through a clear door or mesh grill, and if all the deliveries are acceptable, the door can then be opened, storing, and optionally flagging, all the delivery codes. Whilst multiple deliveries could be made before the recipient accepts them, all of the deliveries can be accepted at once, and so all of the deliveries would need to be acceptable before the second stage transparent door is opened.

Where the code is encrypted, then the manufacturer of the container I holds a copy of the container serial number and the encryption method used for that container. In the event of a dispute as to whether a particular code was generated by a particular container, the manufacturer of the container can verify from the details they hold on their registration database whether the code was generated by that container.

In an alternative embodiment of the invention, and referring to Figure 4, there is provided a flexible container 13. The flexible container 13 is provided with a drawstring' 14, which is made from a suitable strong material such as steel rope that protects and obscures the contents of the container 13. When the drawstring 14 is loosened, it allows the contents of the container 13 to be viewed but not removed through opening 15. The drawstring 14 has attachment points for attaching the container to an immovable object such as a wall, a floor, a ground surface or a large object inside a door and/or letterbox.

The opening 15 and the container 13 are arranged to prevent ingress of moisture or dust (by hanging the container upside down), thereby protecting a delivery that is placed into the container 13.

The flexible container 13 further comprises a display 16 for displaying a code, a solar collector 17 for charging a battery (not shown), a lock 18, an opening lock or button 19a, and a key 20. One or more additional buttons, shown as 19b, may also be included to facilitate activation of the container and to allow container caretaking' operations to be carried out e.g. setting the time/date and/or reviewing historical delivery codes etc. The lock 18 allows the drawstring 14 to be opened in two stages; the first stage only opens the drawstring 14 by an amount sufficient to allow the recipient of the delivery to see the contents of the container 13. The second stage fully loosens the drawstring 14, allowing the recipient to remove the contents of the container 13 if they are satisfied with the delivery.

The two-stage opening of the drawstring 14 can be thought of as equivalent of the two stage opening of the box 1. In the first stage of opening the flexible container, the recipient cannot remove the contents of the container 13.

Similarly, when a recipient opens the outer door 2 of the box, they cannot remove the contents of the box 1. In the second stage of opening the flexible container 13 the recipient may remove the goods from the container 13.

Similarly, in the second stage of opening the box (opening the transparent inner door 3 or mesh grill), the recipient can remove the contents of the box 1.

Referring to Figure 5, there are illustrated possible delivery scenarios for embodiments of the invention. If the container is not left on the latch or a delivery has already been made, then the parcel cannot be delivered. If this is a regular occurrence, then the recipient may consider obtaining a further container or a multi-compartment container. Other delivery scenarios are described below: Where the container is left closed but not locked by the recipient, the carrier places the parcel in the container. The container is locked and a code is issued. The carrier puts a slip containing the delivery details and the code through the recipient's letterbox. The recipient, on returning, checks the code on the slip against the code on the container, and checks the contents of the delivery through the window 3/opening 11. If the recipient is satisfied with the delivery, they open the container to the second stage to accept the delivery.

Where the container is left closed but not locked by the recipient, the carrier places the parcel in the container. A delivery code is generated which the carrier keeps, but the carrier does not provide this code to the recipient.

However, the recipient can obtain the code from the container, and if, on inspecting the contents of the container through the window 3/opening 11, prior to opening the container to the second stage, the recipient is not prepared to accept the delivery, the codes held by the recipient and the carrier can be matched to prove delivery.

Where the container is left closed but not locked by the recipient, the parcel is placed in the container. The container is locked and a code is issued. The carrier puts a slip containing the delivery details and the code through the recipient's letterbox. The recipient, on returning, checks the code on the slip against the code on the container, and checks the contents of the delivery through the window 3/opening 11. If, on inspecting the delivery, the recipient is not satisfied, then they contact the carrier. By not opening the container to the second stage, the recipient has not accepted delivery, and by checking the codes held by the recipient and the carrier, the carrier can beyond doubt establish that the parcel was delivered by them.

If the carrier merely attempts to record the code without making a delivery, the recipient does not open the container to the second stage and contacts the carrier to inform them that a delivery was registered but not made. If the carrier doubts the recipients word, the carrier can check the contents of the container themselves before the container is opened to the second stage, and also check the matching codes held by the recipient and the carrier.

If a carrier attempts to falsify a code, the codes held by the carrier can be checked against a registration database of codes held by the container manufacturer for a particular container serial number.

If a recipient accepts a delivery from the carrier, they will need to open the container to remove the parcel. This resets the random number generator. If the recipient then attempts to claim that the parcel was not delivered, the carrier can check the code on the container against the code they received when the delivery was made. If the two codes differ, then the carrier knows that the container has been unlocked since the delivery was made, and so the parcel has been removed.

If in trying to resolve a dispute between the carrier and the recipient there is some doubt as to whether the container is functioning correctly, the recipient may then interrogate the container for previous delivery codes and times. In this way, the recipient is able to review a time and date stamped historical record of past and previous deliveries.

Referring to Figure 6, the steps of a typical delivery are shown. These are illustrated as though the recipient was using the delivery box I of the first-described embodiment, but also apply to the flexible container 13 of the second embodiment.

When a carrier arrives with a delivery 21, the carrier opens the inner and outer doors of the container, and places the delivery in the container 23. The inner door is closed, and the outer door is closed and locked 23, triggering the box to generate a delivery code 24. The delivery code is displayed for a short time and recorded 25 by the carrier. When the recipient returns to the box, he sees that a delivery has been made (for example, by the carrier posting a delivery advice note) and opens the outer door 26. This causes the delivery code to be displayed 27 once more. The recipient inspects 28 the contents of the box through the transparent inner door without opening the inner door. If there is a problem with the delivery, the recipient records the delivery code and contacts the carrier. If there is no problem, the recipient opens the inner door to accept 29 delivery.

In an alternative embodiment, the lock 6 and key 8 are replaced by a keypad operated lock with an unlock code that is known only to the recipient.

Alternatively, the lock could be activated by a magnetic card held by the recipient, or by an infrared or electrical or radio frequency signal. The opening sequence is still a two part process, one action to view the delivery code' and contents and another to open the container 1 to a second stage. The mechanical lock may be favoured to minimise cost and power consumption, although other types of lock may be suited to particular applications.

The signalling that the container I is locked closed and that the code should be displayed could be carried out in a number of different ways; mechanical locks, mechanical switches, magnetic switches, light dependent switches, key code switches, capacitance dependant switches, inductance dependant switches, resistance dependant switches, and sound dependant switches could all be used to activate the code generation. The mechanical switch may be favoured to minimise cost and power consumption, but other methods may be more secure.

Referring to Figure 7, the steps of a typical container registration and carrier verification procedure are shown. These are illustrated as though the recipient was using the delivery box I of the first-described embodiment, but also apply to the flexible container 13 of the second embodiment.

The recipient purchases and secures the container outside their property 30; whereupon the recipient proceeds to register 31 the container serial number and at least their delivery details with the manufacturer, who then sends 32 the recipient a unique activation code. On receipt of the code, the recipient enters the code 33 into the container's electronics, along with the correct time and date 34. Thereafter, the container is now validly registered and ready for use 35.

Some time later, a carrier arrives with a delivery and checks 36 the container serial number against his/her delivery documents and/or the number on the address label of the delivery. To ensure that the delivery is secure and authenticated, the carrier can check 37 that the container is activated and registered with the manufacturer's database. If the carrier is satisfied that the delivery can proceed, he/she can then check 38 that the time and date are correct and deposit the item within the container.

In alternative embodiments, the generated and/or stored codes could be displayed in a number of ways; LCD or LED display, electronically displayed bar code. Alternatively, instead of displaying the code, the code may be printed on a slip or transmitted in a signal, for example infrared, Bluetooth, wireless LAN, sound, , SMS message or via an electrical signal through a hardwire connection. The simple LED or LCD display may be favoured to minimise power consumption and cost.

The delivery details may be provided to the recipient in a number of different ways; delivery slip, e-mail, text message, secure website database or phone message. A method other than delivery slip may be favoured when the letter box is not easily accessible or secure.

It is also possible to use the container 1 for collections instead of deliveries. In this case, the lock 6 and key 8 could be replaced by a keypad operated lock as described above. The code for the keypad that may be changed for each delivery could be given to the carrier when collection was arranged, along with the unique code that was generated when the container 1 was locked closed with the parcel or letter inside. On arriving to collect the parcel, the carrier could check the description, the code, the contents, no visible damage to the contents or no other problems, before deciding to collect the delivery.

It will be appreciated by the person of skill in the art that various modifications may be made to the above described embodiments without departing from the scope of the present invention. For example, the above embodiments have been described with reference to delivery and collection containers. However, the invention can be employed to other secure containers, for example ballot boxes and storage containers.

Claims

CLAIMS: 1. A lockable container for receiving items, comprising: means for generating a random code when an item is placed in the container, and means for transferring the code to a person placing the item in the container; a memory for storing the code; means for opening the container to a first stage, in which the contents of the container can be viewed by a user but not removed from the container; means for transferring the code to the user when the container is opened to the first stage; means for opening the container to a second stage, in which the user can remove the contents of the container, whereupon the code is stored in the memory and optionally flagged to indicate that the delivery has been accepted.
2. A container as claimed in Claim 1, wherein the container comprises: an outer door; an inner door; wherein the first stage of opening allows the user to open the outer door; and the second stage of opening allows the user to open the inner door.
3. A container as claimed in Claim 1, wherein the container comprises: a flexible bag; a drawstring around an opening to the flexible bag; wherein the first stage of opening loosens the drawstring sufficiently to allow the user to view the contents of the flexible bag; and the second stage of opening further loosens the drawstring to allow the user to remove any contents of the flexible bag.
4. A container as claimed in Claim 1, 2 or 3, where the random code is a proof-of-delivery code.
5. A container as claimed in any one of the preceding claims, wherein the means for transferring the code to a person locking the container is selected from any of: a visual display readable by the user or an electronic inspection device, the visual display arranged to display an alpha-numeric code or a bar code; a radio frequency signal; an infra-red signal; an electrical signal; and a sound signal.
6. A container as claimed in Claim 5, wherein the transferring means is active for a predetermined period of time.
7. A container as claimed in Claim 5 or Claim 6, further comprising means to re-transfer the code.
8. A container as claimed in any one of the preceding claims, wherein the generated code further comprises values selected from a manufacturer's identifier; a container model number; a serial number unique to the container; a date stamp; and a time stamp
9. A container as claimed in any one of the preceding claims, wherein at least a portion of the code is encrypted.
10. A container as claimed in any one of the preceding claims, wherein the locking means is selected from one of a lock and key; an electronic keypad; an infrared receiver; a radio frequency receiver; an electrical signal receiver, a magnetic card reader; and a sound receiver.
Ii. A container as claimed in any one of the preceding claims, wherein the container is configured to require an activation code to initialise the operation of the container.
12. A container as claimed in any one of the preceding claims, wherein the container is configured to provide the container's serial number to the recipient and/or carrier.
13. A container as claimed in any one of the preceding claims, wherein the container is configured to provide the time and date to the recipient and/or carrier.
14. A container as claimed in any one of the preceding claims, wherein the container is configured to permit the time and date to be set by the holder of the container key.
15. A container as claimed in any one of the preceding claims, further comprising means to enable previous codes to be reviewed and inspected following a delivery.
16. A container as claimed in any one of the preceding claims, further comprising means to monitor the supply voltage and/or battery power and to notify the recipient.
17. A container as claimed in Claim 16, wherein the monitoring means is configured to limit the functionality of the container in response to detecting a low supply voltage and/or battery power.
18. A container as claimed in Claim 2, wherein the inner door is transparent.
19. A container as claimed in Claim 2, wherein the inner door is a mesh grill.Amendments to the Claims have been filed as follows * CLAIMS: 1. A lockable container for receiving items, comprising: random code generating means arranged to generate a random code when an item is placed in the container, and means for transferring the code to a person placing the item in the container; a memory for storing the code; first opening means arranged to allow a user to open the container to a first stage, in which the contents of the container can be viewed by a user but not removed from the container; means for transferring the code to the user when the container is opened to the first stage; second opening means arranged to allow a user to open the container to a second stage, in which the user can remove the contents of the container, whereupon the code is stored in the memory and optionally flagged to indicate that the delivery has been accepted.2. A container as claimed in Claim 1, wherein the container comprises: an outer door; an inner door; * I I wherein the first stage of opening allows the user to open the outer door; *S.. andthe second stage of opening allows the user to open the inner door.I I..I*.e. : 3. A container as claimed in Claim 1, wherein the container comprises: * a flexible bag; I. * * a drawstring around an opening to the flexible bag; wherein the first stage of opening loosens the drawstring sufficiently to allow the user to view the contents of the flexible bag; and the second stage of opening further loosens the drawstring to allow the user to remove any contents of the flexible bag.-4. A container as claimed in Claim 1, 2 or 3, where the random code is a proof-of-delivery code.5. A container as claimed in any one of the preceding claims, wherein the means for transferring the code to a person locking the container is selected from any of: a visual display readable by the user or an electronic inspection device, the visual display arranged to display an alpha-numeric code or a bar code; a radio frequency signal; an infra-red signal; an electrical signal; and a sound signal.6. A container as claimed in Claim 5, wherein the transferring means is active for a predetermined period of time.7. A container as claimed in Claim 5 or Claim 6, further comprising transferring means arranged to re-transfer the code.8. A container as claimed in any one of the preceding claims, wherein the generated code further comprises values selected from a manufacturer's * S... . . . identifier; a container model number; a serial number unique to the container; a date stamp; and a time stamp S... : 9. A container as claimed in any one of the preceding claims, wherein at * least a portion of the code is encrypted. ** * * * . * I.10. A container as claimed in any one of the preceding claims, wherein the opening means comprises locking means selected from one of a lock and key; an electronic keypad: an infrared receiver: a radio frequency receiver: an electrical signal receiver, a magnetic card reader; and a sound receiver.11. A container as claimed in any one of the preceding daims, wherein the container is configured to require an activation code to initialise the operation of the container.12. A container as claimed in any one of the preceding claims, wherein the container is configured to provide the container's serial number to the recipient and/or carrier.13. A container as claimed in any one of the preceding claims, wherein the container is configured to provide the time and date to the recipient and/or carrier.14. A container as claimed in any one of the preceding claims, wherein the container is configured to permit the time and date to be set by the holder of the container key.15. A container as claimed in any one of the preceding claims, further comprising inspection means arranged to enable previous codes to be reviewed and inspected following a delivery. * * S16. A container as claimed in any one of the preceding claims, further *S..comprising monitoring means arranged to monitor the supply voltage and/or L: battery power and to notify the recipient. * S..S17. A container as claimed in Claim 16, wherein the monitoring means is configured to limit the functionality of the container in response to detecting a * low supply voltage and/or battery power.18. A container as claimed in Claim 2, wherein the inner door is transparent.19. A container as claimed in Claim 2, wherein the inner door is a mesh grill.