SE501386C2 - Procedure for value transport - Google Patents

Abstract

A method for transporting valuable documents from a first location to a second location in a break-in protected case provided with means which, on triggering, acts on the valuables in the case, for instance by dye-disfiguration, triggering being controlled by a timing mechanism in the case. The process comprises that the despatcher at the first location, after putting the valuables in the case, locks it and activates the timing mechanism to induce triggering after a given transport time in the lack of any deactivation, that the case is transported from the first location to the second location, and that the recipient at the second location deactivates the timing mechanism in the case and afterwards opens it. The distinguishing features of the method are that an ID sigil is calculated at the first location, based upon a secret recipient key, an algorithm and open data which includes non-fixed data, such as time data, that the calculated sigil is electronically stored in the case in connection with the locking thereof, preferably together with the non-fixed data necessary for sigil calculation, that, in connection with receipt of the case at the second location, and ID sigil is calculated based upon a recipient sigil provided by the recipient, the algorithm and open data, including said non-fixed data, and that a comparison is conducted in the case between the stored sigil and the sigil thus calculated at the second location, correspondence between the sigils permitting deactivation of the time mechanism and allowing opening of the case without any abovementioned acts upon the valuables.

Description

501 386 10 15 20 25 30 35 2 The burglar-proof bag is equipped with various more of alarms and equipment to when activated by color color money or securities on a permanent ways so that these are not accepted as means of payment, however yet by the demonstrably rightful owner can be identified and in the best possible circumstances replaced.

The bag is further equipped with technical equipment so that it can decide for itself whether the conditions for activation, ie staining are met. Conditions for dyeing are e.g.

Attempted burglary in the bag Power supply problems Technical problems in the bag's computer Exceeded transport time from transmitter to receiver Exceeded transport time from customer to vehicle or conversely.

The bag is further equipped with technology, additional gill and seal key to identify so-called safe mil- yes A safe environment can be created in e.g. vehicle by means of a vehicle computer computer that regularly exchanges transport seals with can and thereby for the bag shows that it is in safe environment. Safe environment can also be created with computer in depot who in the same way regularly exchanges seals with the bag.

The seal keys, which may be the same for a district or individual for each bag or per vehicle, located here in the vehicle's computer and in the bag's computer.

For data maintenance and change of seal key lar, control information m.m. each bag in addition has one s.k. depàsigill. This means another seal key with the task of legitimizing change of essential information in the bag, when it is in the depot.

All seal keys can be quickly changed into a complete bag stock, e.g. if any bag is stolen. The bag's computer has a mechanism to protect against unauthorized reading of seal keys. Immediately before an staining, all seal keys in the bag's computer are deleted. The- the same applies to a car computer that is exposed to external can. 10 15 20 25 30 35 501 386 GENERALLY A system embodying the invention includes a number of components to be able to transport money by means of a bag from one place to another on an entire theft safe way. The bag must not be able to be opened by anyone else than it is intended for, i.e. not even by the one who packed put the money in the bag.

The system has the following parts.

A specially equipped bag is available to carry the money i. This bag contains a computer that can determine that it is a competent recipient who opens the bag. If the bag opens without authorization, the money is sprayed with paint such as makes the money unusable.

In order to determine if a recipient is eligible to open bag is used an "electronic seal", ID seal to calculate an opening code. The keys to the seal the algorithm is stored i.a. in "Smart Card" type cards.

At the place where the money is packed in the bag, there is one system for sending information to the bag, so that this should be able to determine whether someone who opens the bag is competent. The bag is packed on e.g. a depot. At the depot there is a PC-based system that has information about all customers who may need money from this depot. Depàdatorn connects to the bag and sends opening codes to the bag which is then activated.

The bag is then transported in a special value sports car that has a "car computer" to which the bag is connected.

This computer's task is to tell the bag computer that the bag is in a safe environment.

If the bag is not in such an environment and is activated, a clock (timer) goes in the bag. When this clock has counted down to zero, burst ink cartridges the bag and the money in it become unusable. This watch counts normally down only at the so-called sidewalk moment, i.e. when the bag is carried from the car into, for example, a bank or vice versa. 501 386 10 15 20 25 30 35 4 The bag is carried to the recipient of the money, eg one bank, by a guard carrying a sealer.

A sealer is a computer device with a card reader of type Smart Card. The recipient of the money has one card containing the key for calculating it electronic seal. Before the card is "opened", one must four-digit PIN code is entered into the card via the sealer by the recipient.

The bag computer and the sealer are connected by a cord whereby the communication takes place. The bag computer sends information mation to the sealator, which calculates a seal based then and the key and sends back this seal to computer.

When the money was packed, a seal was fed into the bag. computer. The bag computer compares the two seals with each other.

If these two seals match, check the fluid computer before opening the bag even though it is not the same card that closed (packed) the bag that was used. This ensures that the bag cannot be opened on the same place where it was packed. CONDITION OF THE BAG A bag can assume three different states. These three are secured (open), fitted (charged), and unsecured (closed).

Secured (open) A secured bag cannot blow up the ink cartridges. One secured bag can not be unsecured. It must first get data on next opening. This data consists of an ID seal, input data to the seal algorithm that has calculated the ID seal as well a customer number indicating the person who uploaded this information.

After this, the bag is in the condition fitted.

Fitted An fitted bag can be unsecured and it can also be charged with new opening information. Closure (unsecured) of a bag is made by pressing a button on the outside of the bag for a short time or the depot computer sends a message sharing which means this. 10 15 20 25 30 35 501 386 5 Fitted bag is indicated by a green LED on outside.

Unsecured The lid of an unsecured bag cannot be opened without one ink cartridge exploded. A timer in the bag runs all the time. When this timer has counted down to zero, burst color cartridge one. When the bag is placed in a car, the_car computer polls this and all other bags. The polls contain i.a. a transport seal. If this seal agrees the relevant seal calculated by the bag computer, the timer is reset.

If the seal does not match, the paint will be sprayed out over the money when the timer has counted down to zero.

An unsecured bag can be opened with the correct ID seal. This seal can come from the depot computer or a sealer. If the seal received by the bag computer is correct, checked even that the customer number is not the same as closing the bag.

If this check also gives the correct result, the bag is "opened".

A closed bag indicates this by flashing a red LED located on the outside. This LED flashes more intense the less time left before the timer is counted down to zero.

DEPÅSYSTEM The task of the depot system is to handle both bags and vehicles and customer information. The depot system is PC-based.

One is available at every depot.

The depot system charges the bag computers with the necessary parameters for the bag computers to work. Furthermore, depot system functions for transferring information to any bag that makes the bag can either feel "safe" or opened and closed.

Special procedures for administering follow-up, control and service of the bags are built into the depot the system.

Each depot has its "own customer range", i.e. has necessary information about their own customer base to be able to handle their money transfers. 501 10 15 20 25 30 35 386 INITIATION PROCEDURES For a bag computer or car computer to be able to operate in the desired manner, each bag or car computer must be initialized with some information. Computers have a certain number of thousand times. For each status entry, one must decide which action or measures the computer must take when change of the status in question.

A bag computer must contain some fundamental data to work in the system. Such information is bag number more, transport key and deposit key.

Via the bag number, the depot computer can communicate with the bag computer and with the help of the transport key, the also for communication with the car computer during port (transport seal function).

A brand new bag at a depot is assigned one bag number retrieved from a number series for this depàs bags. The number assignment is suitably sequential according to the "next vacancy" principle.

Furthermore, the transport key and depository key are transferred to the bag computer for storage therein, after which the depot system notes that the new bag is now in the system.

Additional things that happen with a new bag are that its log area is cleared, that its clock is set in accordance with the depositor and that the bag computer is equipped with standard values (from system parameter record) for transport time and pavement time.

PERIODIC ROUTINES Periodic routines refer to such actions that are regularly must do in order for the system to function properly peaceful. Such interventions are, for example, surveillance that the equipment is serviced properly within established time interval.

VÄSKUNDERHALLA The bag is the most vital component in the whole concept.

The function of the bag is the decisive factor for one safe money transfer. It is therefore of great importance that The various parts of the bag are regularly functionally tested and 10 15 20 25 30 35 501 386 7 vase. The bag computer must be inspected and possibly repaired, the paint spraying mechanism must be changed regularly, etc.

The depot system has the task of keeping track of a bag condition. This is done by storing for each bag information about the identity of the bag, latest computer function test and latest battery and color cartridge replacement. Daily or per week, you then produce "service data" for next week.

Each bag is presented with a picture containing the bag physical status. The illustration shows when a component was last replaced was tested / repaired and when the next change / review will take place. On this image marks the person performing the service each part as go through.

Every intervention in the bag computer as well as every check noted on the depot computer log.

BI LUNDERHÅLL Like the bag computer, the car computer must regularly enchanted for the system to work flawlessly.

The car computer must, through its function, ensure that the bags feel safe and store information about the movement of the bags looks.

The components that must be serviced regularly in the car is partly the car computer as such but also other equipment such as allows the car to deliver enough power to keep the bag battery charged.

The depot system stores data on each value transaction sports car that allows you to periodically produce serivceun- for the coming days.

When servicing each individual car computer, an image is displayed on the physical condition of the car computer. In this picture, the ser- the deputy in all measures taken and when the next vice shall be performed. All interventions and measures are noted in depot computer log.

PICTURE COMPUTER The car computer must also have some information in order to contribute to the safe transport of valuables. To be able to watch over "their" bags, the car computer must be able to 501 386 10 15 20 25 30 35 8 identify themselves for all connected bags. This takes place by so-called polling. A poll means that the car computer sends out a question if there is any bag connected. For that a bag should answer such a question, the bag must feel na again sig. This is done by "replacing" the transport seal.

The seal must be calculated on the basis of a common key and the depot system has the task of providing the computer with this key. For this purpose, the formation tower to the depot computer and exchange of information takes place according to communication protocol.

REPLACEMENT OF LIQUID KEY IN CAR This is done via communication between the depot computer and car computer according to communication protocol. To be able to to use the function, authorization is required according to the classification.

CHANGE OF TRANSPORT KEY IN BAG From time to time there may be reason to change the key for a bag. The depot system has a routine for that be able to change key in the bag. After the bag is connected to the custodian, the session begins with the custodian sends out a "depot question" to the bag, the bag responds this request by sending information to the seal calculation to the depot computer. The depot computer calculates one deposigill with management of received information and delivers this to the bag. If everything is OK, communication that the current transport is retrieved via bag number key in and the depository computer makes a seal calculation with it new seal key as a basis. It counted the seal sent together with their basic data (the new key) to the bag computer. The bag computer verifies the seal and stores it insert the new key into the bag computer.

"ONLINE" ROUTINES Online routines denote the events that occur with one bag during daily handling.

CLOSE BAG 10 15 20 25 30 35 501 386 9 Before it can leave the depot, a packed bag must be seen with both an electronic and a physical lock. The the electronic lock consists of a seal calculated on the the point of closure and an ID seal for identification celebration of the competent recipient. The physical lock can consist of a plastic seal that is applied to the bag when it electronic reading is complete.

The depot system has information that allows a bag to locked electronically and then can not be opened by anyone other than the one for which it is intended.

To be able to lock a bag in this way it is required that the user is authorized according to authorization rules.

The procedure for insuring a bag in a depot is to you first connect the bag to the depot computer. The depot computer senses that a bag is connected and sends out a status ask for the bag, which corresponds with its bag number as well other information about their physical condition. In the answer from the bag, the depot computer can read out what the bag computer thinks about nationality of its built-in equipment. About function status is not OK, the closing procedure shall be immediately tas.

The depot computer uses the obtained bag number to find out the current seal key for the bag and then calculate a depot seal for the bag.

Before the depot computer provides the bag with new opening information information, the bag is emptied of its log data and loaded with new data for time and timers.

The depot computer now asks the user for information about the customer who will have the bag. This can be the customer number or name of the person who is to have the bag. Select the option with name as identification, a list of the customer mail consistent with key data entered. Outgoing from this list you can then "point" to the customer you want reach. The entry is verified against the depot's customer register and then the seal key intended for the customer is collected. At this seal key is based on the calculation of an ID seal, a unique one identification of a specific recipient. The ID seal is calculated 501 10 15 20 25 30 35 386 10 based on TIME.

The calculated ID seal is sent to the bag computer, basic data for the ID seal and customer number for the person closes the bag. In the depot, the customer number is actually identity on the one who is to have the bag but with the category designation = depà. The bag computer verifies with its own deposit insurance account that the information comes from a competent party, after which the data is stored in the bag computer's memory.

If the bag computer memory is now loaded with the intended information The depot system requests that the operator "insecure" the bag. The entry of this command means that the The carrier approved the bag as "unsecured" and ready for delivery.

If the operator chooses to "secure" the bag, a mando sequence to disarm the bag computer is sent. Uteblir the operator's answer in full, or repeated incorrect answers, shall after a certain time a command sequence to disarm the bag computer, i.e. the "secure" bag is shipped.

The next initiative of the Deputy Director will now be to order computer to "insecure". This is done by outside the bag seal key and TIME calculate the deposit seal and send this together with seal data and command code to the bag. U The bag verifies with its own deposit seal calculation that the command comes from the competent party, after which a test takes over. Depending on the outcome of this function test the answer "closed" or "open" is returned to depàdatorn.

If the depot computer does not receive a response from the bag, this should be alerted on the depot computer monitor, so that as much attention as possible is achieved. OPEN BAG A bag has two locks, one physical and one when it is to be opened in the depot. The physical lock consists of a simple plastic seal, which has the task to make it difficult to open by mistake. To open plastic seals The touch requires a touch that makes the "opener" think after and perform the various operations of the opening routine in 10 15 20 25 30 35 501 386 ll right order.

The electronic lock consists of a deposit seal and an ID seal and keeps the bag unsecured. The depot seal is for the bag to recognize itself and the ID the seal identifies the authorized recipient. An unsecured bag is ready to be "exploded", as long as it is not information to his bag computer that it is safe environment or information sufficient to I identify a competent recipient.

A depot system has sufficient information to be able to open all bags carried to and from it depot customers.

In order to access the depot system's opening information mation requires that you are qualified according to the rules of eligibility.

The workflow when opening an unsecured bag in a depot is that you first connect the bag to the depot computer. Depot- the computer "feels" that there is a bag connected and transmits a status issue to the bag. The bag responds to this status question by giving to the depot computer information about his bag number, etc.

Based on the bag number obtained, the depot the computer a deposit key for calculating the deposit seal. Depot- the seal is calculated at TIME and sent together with basic data (TIME) to the bag in a "Give me open device" meters "transaction to the bag computer.

The bag computer calculates its own deposit seal with guidance of the data obtained from the depot computer. Depàsigillet compared with the received deposit seal and if these are equal the bag computer feels safe to communicate further with depàdatorn. This communication takes place in the form of a “here is my opening data ”message back to the custodian.

This message contains information for seal calculation (DATE) and information about the customer (customer number) who packed the bag.

Based on the opening data from the bag, the depot computer retrieves the ID seal key intended for the current customer. One ID seal is calculated and sent in an "open" transaction 501 386 10 l5 20 25 30 35 12 to the bag computer.

The bag computer compares the ID seal thus transferred with the seal identifying the authorized recipient and if these match, the bag computer "disarms" the destruction equipment and the detectors and notifies this to the depot computer, The depot computer notifies the "opener" on its screen (nöppenn) _ that it is now possible to remove the plastic seal and physically open4 and empty the bag.

During the dialogue between the depot computer and the bag computer goes the bag computer timer. To keep the timer in check below the opening procedure requires that the depot computer can recover the bag number and thus the transport key to calculate the transport seal.

All transactions from the custodian computer to the bag computer, which is a form of command, shall contain a repository valid for verification in the bag computer, before the bag computer takes over any action.

If the opening procedure fails in any way will the bag computer not to listen for approx. five seconds, before the next opening attempts can be made. This is to make it more difficult the ability to simulate a computer and try it out correct opening information.

DEPABILDATOR Many bags are handled at the depot. That is why it is not always make sure that a loaded bag is picked up when it is digpacked. Therefore, the bag is connected to a "car computer" in depot pending pick-up and loading. The car computer is polling always the connected bag (s) and hold that way the timers of the bags in check.

Logging takes place for each newly connected bag and then one bag no longer responds to polling.

LOGGING In principle, every event in the system is logged there and when it occurs. The depot system logs events that the depot the system is in control, the bag computer logs events which is closest to it and the car computer does the same 10 15 20 25 30 35. 501 386 13 its direction.

The custodian logs every event with the user ID , time and used (requested) function.

Each bag logs itself by storing information information on events during loading, transport and opening procedures.

The car computer logs events in its vicinity. Each time a bag registers as "nypàstigen", the car computer logs this. When the bag eventually no longer responds to pollen the car computer notes this in its log.

The logs of the bags are routinely emptied in connection with new packing, but this can also be done explicitly through a cial request from depàdator to bag computer.

To empty the car computer logs, connect the car computer to the depot computer, whereupon command sequences for emptying log was sent from depaddator to car computer.

COMPILATION OF LOGGED INFORMATION The depot system has the possibility to compile a "referral sub-log "for a specific bag / car / depot or customer. At closing a bag, certain information about the bag is stored, date, time, customer, transport information. This information can then be picked up and coordinated at any time. with corresponding information from the bag and car computer for any follow-up purposes.

DEPÅDATQR - LIQUID DATE The communication between depot computer and bag computer is two-way with the depot computer as the initiator.

Each "exchange of sentences" is verified by the bag computer with using depåsigill.

In order for the bag computer to receive information, it must the bag be able to determine that it is communicating with a depot.

This is done by the handshake between the computer and bag begins with the depot asking for information that count depåsigill on. The bag adds this to the depot computer after which the depot seal is calculated and transferred to the bag computer where the seal is compared with the depot calculated by the bag computer sealed. If the comparison turns out to be pleasure, feel 501 386 10 15 20 25 30 35 14 the bag computer is safe to continue the communication.

DEPÅDATOR - BILDATOR Depot computer and car computer keep bidirectional communication with the depositary computer as the initiator. The communication includes functions for charging transport keys and emptying of log.

Each "exchange of opinions" is verified by the car computer with using a depasigill according to a pattern from communication depot - bag.

DEPOSIT SYSTEM - SEALER The communication is two-way and includes mutual exchange of information for seal calculations. Initial tivtagare is always the depository computer.

TRANSPORT During the actual car transport, the bag is moored with one connection to a sealed car or seal computer that disconnects / deactivates the time mechanism regularly, so-called polling. The car computer contains a transport key that can be the same in an entire district and thus can disable all bags belonging to the district. The transport seal does not allow unlocking of the bag. It is also possible to limit the time spent in this mooring. The bag also contains the transport key that is used for verification.

The car computer must be kept activated by conscious document from the carriers. For example. may the following conditions set for the car computer to be alive and legitimate time the bags: l. Radio in the car turned on. 2. Position information is sent regularly (every 5, 10, This can be supplemented with e.g. signaling from 15 min). alarm center for the cash-in-transit car and "hot key" that provides silent alarm and shuts down the car computer. The signaling can be maintain a position seal, which shall be verified by the the computer in the car to maintain continued operation.

This can e.g. keyed in by the car staff when answering 10 15 20 25 30 35 501 386 15 received on position calls.

No matter what is broadcast, the regular radio traffic can provide good help to track the car if necessary.

In addition to the above, you can also have an absolute time -out of the car computer in the vehicle. When the driving license is over, must the computer is "refueled" to be able to legitimize again the bags.

For unlocking after transport, the recipient's is required ID seal. This is calculated by a seal computer or seal lator in combination with a smart card, which contains the personal ID seal key, also using open information about e.g. date and charge time for charging the number of the bag.

Where a large number of seal keys are to be handled, for example in a depot, is an administrative aid practical, such as a PC with seal software.

At, for example, bank branches that need one or two authorized persons / functions, these can be equipped with one personally s.k. Smart Card with ID seal key. Value- the carrier carries a sealer with communication-- possibility against the bag (setting possible only when the bag is open), with the help of which the secret seal is created and stored in the bag. The cash conveyor brings the open ones with it the information and someone with a seal key in the other place can thus give the correct code to the bag to open the lock the mechanism. To be able to handle opening and closing as well without the presence of the carrier, bank branches can be equipped with a own sealer.

Claims (9)

501 10 15 20 25 30 35 386 16 PATENT CLAIMS A method for transporting from a first place to a second place valuables in a burglar-proof bag provided with equipment for influencing, eg coloring, the valuations in the bag during release, which release is controlled by a time mechanism in the bag, which for method comprises that the sender in the first place after loading valuables in the bag locks it and activates the time mechanism for effecting triggering after a given transport time in the absence of any deactivation, that the bag is transported from the first place to the second place, and that the receiver in the second place deactivates the time mechanism in the bag and opens the latter, characterized in that in the first place an ID seal is calculated based on a secret recipient key, an algorithm and open data, which includes variable data, such as time information, that the calculated seal is electronically stored in the bag in connection with the reading thereof together with the variable information required for the seal calculation, the receipt and the fact that in connection with receipt of the bag elsewhere, an ID seal is calculated based on a recipient's given recipient key, the algorithm and open poisons including said variable information, that in the bag performs a comparison between the stored seal and the seal thus calculated in the second place, whereby a correspondence between the seal results in deactivation of the time mechanism and allows opening of the bag without any of the above-mentioned effect. A method according to claim 1, wherein the transport takes place by means of a vehicle, characterized in that a second, similarly activatable time mechanism is used to effect tripping after a given transmission time, in the absence of any deactivation, in connection 10 15 20 25 30 35 501 386 17 with transfer after locking the bag to the transport vehicle or transfer from the transport vehicle to the recipient, whereby the bag is placed in the transport vehicle under conditions which mean that as long as certain given conditions are met the said other time mechanism is deactivated and removal of the bag from the transport vehicle entails reactivation of the second time mechanism, and concordance between the seals in the previously mentioned seal comparison also entails deactivation of the second time mechanism. 3. A method according to claim 2, characterized in that the bag is provided with a bag computer, that the transport vehicle is provided with a vehicle computer, that a transport key is stored in both the bag computer and the vehicle computer, that during transport of the bag in the transport vehicle the computer and the vehicle computer are caused to communicate with each other at least intermittently and thereby perform seal verification, each computer calculating a transport seal based on the transport key, an algorithm and data transferred between the computers and whereby the bag computer in accordance with its calculated seal and the the seal obtained by the vehicle computer temporarily deactivates said second time mechanism. 4. A method according to claim 3, characterized in that the deactivation due to seal compliance means that the second time mechanism is reset to an initial position. S. A method according to claim 3 or 4, characterized in that at least the first transfer of data for transport seal calculation takes place from the bag computer to the vehicle computer which sends its subsequently calculated seal to the bag computer. Method according to one of Claims 3 to 5, characterized in that the vehicle computer is kept activated by regularly implemented, predetermined measures and / or by the fulfillment of predetermined conditions, eg radio communication switched on, position 501 386 10 15 20 25 30 35 18 information regularly submitted, etc. Method according to one of the preceding claims, characterized in that the calculation of the ID seal in the second place takes place outside the bag, that the recipient has his receiver key in a so-called active card, the calculation taking place in a calculation device or computer, which is provided with a reader for said active card and which is brought into communication with the bag for receiving data for the ID seal calculation and for sending the calculated ID seal, the receiver preferably initiating the handing over of the receiver key from said active card by giving a personal code, such as a so-called PIN code. Method according to one of the preceding claims, characterized in that in the first place the calculation of the ID seal is carried out on the basis of a receiver key which is stored in an active card assigned to a receiver, the reading of the active card in the The computing device or computer used, which is brought to communicate with the bag, is preferably initiated by the sender giving a personal code, for example a so-called PIN code. Method according to one of the preceding claims, characterized in that the bag is initially provided with a so-called depot key, which is preferably unique, and that the bag is first logged in connection with the provision of information prior to a transport assignment. on the depàs computer system through depàsigill verification.