WO2000051933A1

WO2000051933A1 - Method and apparatus for secure dispensing from a delivery duct of fluid with and without an additive

Info

Publication number: WO2000051933A1
Application number: PCT/IE2000/000027
Authority: WO
Inventors: Brian Francis Mooney
Original assignee: Cassiano Limited
Priority date: 1999-03-03
Filing date: 2000-03-03
Publication date: 2000-09-08
Also published as: AU2936500A; IES990169A2

Abstract

A method of and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct (1) on a delivery truck without cross contamination between the two types of fluid is disclosed. The delivery end of the delivery duct (1) is divided into two dedicated delivery ducts, a duct (2) dedicated to fluid with the additive and a duct (3) dedicated to fluid without the additive. The additive is added to the fluid in the dedicated delivery duct (2). Valve 4 is used for switching flow from the main delivery duct (1) to one or other of the dedicated ducts (2 and 3). Valve 4 includes sealing devices (12, 13, 14) which are adapted to prevent tampering or which indicate when tampering has occured.

Description

METHOD AND APPARATUS FOR SECURE DISPENSING FROM A DELIVERY DUCT OF FLUID WITH AND WITHOUT AN ADDITIVE

The present invention relates to a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid.

Secure dispensing refers to the prevention or detection of deliberate or accidental unauthorised interference or of malfunction which might give rise to errors in the type of fluid dispensed.

The present invention relates more particularly to a method and apparatus for secure dispensing of marked and unmarked oil from a tanker truck where the oil is marked with a dye marker additive by apparatus on the truck.

CA 2,168,149 discloses a method and apparatus intended for secure dispensing of marked and unmarked oil from a tanker truck where the oil is marked with a dye marker additive by apparatus on the truck. Dye marker additive is added at the end of the delivery hose through an inner hose within the delivery pipe and hose. The inner hose is fitted with a check valve at its end. This allows the system to deliver marked or clear oil without introducing marked oil into the delivery pipe or hose and thereby overcomes the problem of cross contamination when the delivery is changed from marked to unmarked oil or vice versa. The method has the disadvantage that the inner hose reduces the potential maximum flow in the delivery hose and also gives rise to the several security weaknesses. Dye additive may leak from the check valve at the end of the inner hose and contaminate an unmarked delivery. There is no means provided to detect any rupture or blockage of the inner hose. The possibility of unauthorised access and interference with the inner hose exists through unauthorised access through the various connection joints and swivel joints on the delivery hose, its reel and its delivery nozzle.

The present invention provides apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive being added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive.

Preferably, the apparatus includes means for switching flow from the main delivery duct to one or other of the dedicated ducts.

Advantageously, the switching means includes sealing means which are adapted to prevent tampering or which indicate when tampering has occurred.

The present invention also provides a method for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised by dividing the delivery end of the delivery duct into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive being added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive.

Preferably, the method includes switching flow from the main delivery duct to one or other of the dedicated ducts.

The switching means may be sealed in a manner to prevent tampering or to indicate when tampering has occurred.

The present invention provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve comprising a housing with openings to the ducts and a member with an internal pathway which is operable to sealably connect the opening from the main delivery duct to one or other of the openings to the dedicated ducts but where the parts are geometrically arranged such that they cannot fully or partly connect the main delivery duct to both dedicated ducts at the same time.

The present invention further provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve comprising a housing with openings to the ducts and a member with an internal pathway which is operable to sealably connect the opening from the main delivery duct to one or other of the openings to the dedicated ducts and where the member is moved or rotated by an actuator which is operated by compressed air and includes means by which access to the air connections is shielded by a member secured in position by a wire seal or where the connections cannot be removed without breaking a wire seal, for example using screwed connections with rotation prevented by a wire seal threaded through holes in the relevant parts.

The present invention also provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve comprising a housing with openings to the ducts and a member with an internal pathway which is operable to sealably connect the opening from the main delivery duct to one or other of the openings to the dedicated ducts and where the member is moved or rotated by an actuator which is operated by compressed air and includes a driving member, such as a spindle, between the valve and actuator, and where the driving member is enclosed by an enclosure which may also serve to hold the actuator and valve in position relative to one another. The enclosure also provides access to some or all of the fasteners which secure the actuator and valve. The enclosure is provided with one or more access covers which are secured with one or more wire seals which must be broken to gain access to the enclosure.

The present invention additionally provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve which is operated by an actuator and includes a driving member, such as a spindle, between the valve and actuator, and where the driving member is enclosed by an enclosure which may also serve to hold the actuator and valve in position relative to one another. The enclosure also provides access to some or all of the fasteners which secure the actuator and valve. The enclosure is provided with one or more access covers which are secured with one or more wire seals which must be broken to gain access to the enclosure, the enclosure comprises an open tube, two end caps and two or four sets of screws and nuts. The tube is a four sided rectangular profiled type positioned between the actuator and valve with the valve fastened to one of its sides, the actuator fastened to the opposite side and the spindle passing through the centre of the tube through holes in these sides. The two open ends of the rectangular tube are each provided with rectangular end caps with four holes adjacent each corner or two holes adjacent opposite corners. The end caps are secured to the opposite ends of the rectangular tube by means of the screws which pass through the holes in the end caps and run along the inside comers of the rectangular tube. When the nuts are fastened on the screws the end caps are firmly held in position. A small hole is provided through the edge of each nut or through the threaded portions of the screws which extend beyond the assembled nuts. A wire seal is looped through these holes and prevents the end caps being removed without breaking the seal. The present invention further provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve which is operated by an actuator and includes a driving member, such as a spindle, between the valve and actuator, and where the driving member is enclosed by an enclosure which also serves to hold the actuator and valve in position relative to one another and where the enclose is provided with sealed ends which prevent unauthorised access to some or all of the fasteners which hold the actuator and valve in position and therefore prevents the possibility of unauthorised manual rotation of the actuator relative to the valve.

The present invention also provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve and where the mounting or connections include a seal, such as a wire seal, which must be broken to disconnect the connection or dismount the valve.

The present invention additionally provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve which is operated by an actuator and includes a driving member, such as a spindle, between the valve and actuator, or is operated by a manual member such as a lever, and where the valve is provided with a detection means to detect which of the two positions the valve is in. The detection means comprises a detection target on the driving member, such as a magnet or metal part, and a stationary sensor, such as an electronic reed switch or inductive sensor, which detects when the detection target moves into the range of the sensor. The detection target and sensor are positioned such the target is in range for one valve position and out of range for the other valve position.

The present invention further provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve which includes a detection means which comprises a sensing means in a sealed enclosure which prevents unauthorised access to the sensing means including access to the connections from external wires to the sensing means.

The present invention also provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and one of the dedicated delivery ducts, preferably the one dedicated to fluid with the additive, is provided with a flow detection means and a checking means, such as an electronic controller, and the checking means checks that flow is taking place in the dedicated duct with the flow means when a delivery of the type intended for that dedicated duct is being made. The present invention additionally provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and one of the dedicated delivery ducts, preferably the one dedicated to fluid with the additive, is provided with a flow detection means and a checking means, such as an electronic controller, and the checking means checks that flow is not taking place in the dedicated duct with the flow means when a delivery of the type intended for the other dedicated duct is being made,

The present invention further provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and one of the dedicated delivery ducts, is provided with a flow detection means and the flow detection means comprises a branch line, with an inlet from the main delivery duct or the dedicated duct and an outlet to the dedicated duct at a point downstream of the inlet, such that when flow occurs in the main delivery duct and dedicated duct, the pressure drop between the inlet and outlet to the branch line causes flow to occur in the branch line. A flow sensing means is positioned on the branch line and detects when flow is occurring in the branch line.

The present invention also provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and one of the dedicated delivery ducts, is provided with a flow detection means and comprises a flow sensor with flow in the branch line passes vertically up through it. The flow sensor comprises a vertical stepped chamber with an upper region of greater internal diameter than the lower region and a magnetic or otherwise detectable weight, of upper diameter approximately equal to the diameter of the lower region of the chamber. Flow through the chamber lifts and holds the weight in a raised position. A sensor, mounted externally on the outside of the chamber, detects whether or not flow is taking place in the branch line by detecting if the weight is in the raised position.

The present invention additionally provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and one of the dedicated delivery ducts, is provided with a flow detection means which is located in a secure cabinet, for example, a cabinet with an access door or panel sealed with one or more wire seals.

The present invention further provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and one of the dedicated delivery ducts, is provided with a flow detection means which comprises a branch line with a flow detection sensor and the pipes comprising the branch line are made in continuous runs or have joints which are secured by being positioned with a sealed enclosure, such as a secure cabinet, or the joints are secured by wire seals, which prevent the pipe joint nuts being turned without breaking the wire seals, or are made as permanent joints. The present invention also provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and one of the dedicated delivery ducts, is provided with a flow detection means, a checking means, such as an electronic controller, and an isolating valve which is operable to stop flow in the branch line. The checking means is operable to check, on a routine or random basis, that closure and opening of the isolation valve is matched by signals from the flow detection means indicating that flow is stopped or is taking place, respectively.

The present invention additionally provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve comprising an actuator which is operated by compressed air and where one or more of the controlled compressed air supplies to the actuator is shared for use in the operation of another component of the delivery system which is either required for the continued operation of the delivery system or which operates with a detection system which checks its operation, whereby failure or interruption of the air supply to the actuator is safeguarded or detected by the failure of the other component to operate.

The present invention further provides a method and apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive is added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive and flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve comprising electrically operated members and where one or more of the electrical supplies or connections to the valve is shared for use in the operation of another component of the delivery system which is either required for the continued operation of the delivery system or which operates with a detection system which checks its operation, whereby failure or interruption of the electrical supply or connection to the valve is safeguarded or detected by the failure of the other component to operate.

The invention will now be described more particularly with reference to the accompanying drawing, which shows by way of example only, an embodiment of a delivery apparatus according to the invention which securely prevents cross contamination between oil delivered with a dye additive and oil delivered without a dye additive, where the delivery apparatus comprises apparatus which is operable to add dye additive to the oil when required.

Figure 1 shows a sectional view of the delivery apparatus in diagrammatic form. The dashed lines represent electronic, electrical or pneumatic connections.

The following is an index of the reference numerals used in the figure:

1. Common delivery duct or pipe.

2. Delivery duct or pipe for oil with dye additive (dyed oil pipe).

3 Delivery duct or pipe for oil without dye additive (clear oil pipe). 4 Three-way valve.

5 Three-way valve ball.

6 Internal pathway in valve ball

7 Three-way valve spindle.

8 Three-way valve body 6 Three-way valve actuator.

10 Three-way valve sensor.

11 Three-way valve sensor target. 12 Three-way valve and actuator securing fasteners.

13 Valve to actuator enclosure.

14 Enclosure cover.

15 Cabinet. 16 Controller.

17 Branch line out.

18 Branch line return.

19 Sealed connections.

20 Flow sensor. 21 Flow sensor chamber.

22 Flow sensor weight.

23 Flow sensor switch.

24 Branch line isolating valve.

25 Additive dispensing apparatus. 26 Solenoid operated air supply valve to actuator.

Cross contamination from the contents of the delivery duct when a delivery type is changed from marked to unmarked oil or vice versa is eliminated by dividing the delivery duct into two separate delivery ducts dedicated to marked and unmarked oil. The division of the common duct into the two separate ducts is arranged upstream of the point where the dye additive is added to the delivery and the dye additive is added into the duct for marked oil. The method is carried out in a secure manner which ensures prevention or detection of deliberate or accidental unauthorised interference or malfunction which might give rise to errors in the type of oil dispensed.

Referring to Figure 1, there is shown an oil delivery pipe 1 which is routed to two separate delivery pipes through a three-way valve 4, one of these pipes 2 is used to deliver oil with dye additive and the other pipe 3 is used to deliver oil without dye additive. The pipes are referred to as the dyed oil pipe 2 and clear oil pipe 3, respectively. The pipes are connected to delivery hoses and nozzles, which are not shown in the figure. The three-way valve 4 comprises a ball 5 with an internal pathway 6 which can rotated through a half rum to two different positions by an actuator 9 such that the pathway connects the common pipe 1 to the dyed oil pipe 2 in one position and to the clear oil pipe 3 in the other position. The arrangement and sizes of the pathway 6 and openings in the ball 5 and the valve housing 8 is made such that the common pipe 1 is never connected to both the dyed oil pipe 2 and clear oil pipe 3 at the same time when the ball 5 is being rotated from one position to the other. This has the advantage that it prevents the possibility of flow being delivered through both pipes if the valve ball 5 remained in a position between the two set positions.

If flow were possible through both pipes simultaneously, this would present the possibility that some oil without dye additive could be delivered through the clear oil pipe when the system intended a delivery of oil with dye additive. Furthermore, the error might not be detected by flow detection means in the dyed oil pipe because some flow would also be taking place in this pipe,

The ball 5 is rotated by an actuator 9 which is operated by compressed air in one direction and is returned either by compressed air or by a spring in the other direction. Pneumatic rotary actuators which move through a half turn are known in the prior art and are available with pneumatic drive in both directions or with pneumatic drive in one direction and spring return in the other. The spring returned type has the relative advantage that it prevents the possibility of the direction of operation of the valve being reversed by reversing the air connections into the actuator but has the disadvantage that it is usually much larger and more expensive than the type with pneumatic return.

Where a pneumatically returned actuator is used, precautions are taken to prevent reversal of the air connections. These precautions include means by which access to the air connections is shielded by a member secured in position by a wire seal or where the connections cannot be removed without breaking a wire seal, for example using screwed connections with rotation prevented by a wire seal threaded through holes in the relevant parts. Wire seals are known in the prior art and comprise a wire and impressed lead bead. Sealing is achieved by looping the wire through one or more holes in the component and joining the wire ends by passing them through a hole in the lead bead and crimping the bead closed with a tool which impresses an official imprint on it. The wire seal must be broken to rotate the connection and can only be replaced by authorised personnel who have access to lead beads and crimping tools with the appropriate imprint.

If the direction of the three-way valve were reversed without being detected by the system, then a delivery intended as a delivery of oil with dye additive, henceforth referred to as a dyed delivery, could result in a delivery without additive, henceforth referred to as a clear delivery, being delivered through the pipe without additive while the additive was delivered elsewhere in the system.

The actuator 9 rotates the ball 5 by means of a spindle 7 which connects to the ball through a fluid seal which is not shown in the figure. The spindle is enclosed by an enclosure 13 which also serves to hold the actuator and valve 4 in position relative to one another. The enclosure 13 also provides access to some or all of the fasteners 12 which secure the actuator 9 and valve 4. The enclosure 13 is provided with one or more access covers 14 which are secured with one or more wire seals. The wire seals must be broken to gain access to the enclosure 13 and can only be replaced by authorised personnel.

In the preferred embodiment, the enclosure 13 comprises an open tube, two end covers 14 and two or four sets of screws and nuts. The tube is a four sided rectangular profiled type positioned between the actuator 9 and valve 4 with the valve fastened to one of its sides, the actuator fastened to the opposite side and the spindle 7 passing through the centre of the tube through holes in these sides. The two open ends of the rectangular tube are each provided with rectangular end covers 14 with four holes adjacent each comer or two holes adjacent opposite corners. The end caps are secured to the opposite ends of the rectangular tube by means of the screws which pass through the holes in the end covers 14 and run along the inside corners of the rectangular tube. When the nuts are fastened on the screws the end caps are firmly held in position. A small hole is provided through the edge of each nut or through the threaded portions of the screws which extend beyond the assembled nuts. A wire seal is looped through these holes and prevents the end covers 14 being removed without breaking the seal. The sealed enclosure 13 prevents unauthorised access to some or all of the fasteners 12 which hold the actuator 9 and valve 4 in position and therefore prevents the possibility of unauthorised manual rotation of the actuator relative to the valve. For example, it prevents the possibility of the actuator being unfastened from the valve by unauthorised personnel and refastened in a position at 180° to the original position and thereby reversing the normal operation of the valve. It also prevents the possibility of the actuator being unfastened and manually rotated to rotate the valve.

Similarly, precautions are taken against the possibility of the entire valve 4 and actuator 9 being disconnected from the dyed oil pipe 2 and clear oil pipe 3 and being reconnected in reverse. If this possibility exists, then a wire seal is used to prevent dismounting of the valve 4 or disconnection of the pipes 2,3.

The valve 4 and actuator 9 are provided with a detection means to detect which of the two positions the valve is in. The detection means comprises a detection target 11 on the spindle 9, such as a metal protuberance or magnet, and a stationary sensor 10, such as an electronic proximity switch, which detects when the detection target 11 moves into the range of the sensor 10. The detection target and sensor are positioned such the target is in range for one valve position and out of range for the other valve position.

The sealed enclosure 13 prevents unauthorised access to the sensing means including access to the connections from external wires to the sensor 1 0.

With some types of rotary actuator, the shaft which connects to the spindle, or a component attached to the shaft, is accessible from the side of the actuator opposite the spindle and valve and can be manually held or turned to influence the position of the valve. In such cases, the shaft extension or component is either removed or modified to prevent it being manually held or turned or is securely shielded from manual access. Secure shielding can be achieved by covering the shaft end with an appropriate cover in an arrangement which cannot be removed without breaking a wire seal. The system is also provided with a flow detection means on the dyed oil pipe 2 and a checking means is used to check that flow is taking place in the dyed oil pipe during a dyed delivery and that flow is not taking place during a clear delivery.

In a preferred embodiment the flow detection means comprises a branch line 17,18 with a flow sensor 20. The branch line comprises a parallel circuit with the dyed oil pipe such that when oil flows in the dyed oil pipe, the pressure drop along the pipe between the inlet and outlet to the branch line causes flow to occur in the branch line. The flow in the branch line is approximately proportional to the flow in the pipe but is very much smaller.

Several advantages arise from positioning the flow sensor in such a branch line. It allows the flow sensor to be located remotely from the pipe, such as in a sealed cabinet containing other security components, including those to which it is connected. It avoids placing detection equipment in the pipe itself where they could either be damaged by the force of the main flow or where they might impede the rate of the main flow. The relatively low rate of flow and the freedom to partly impede the flow allow the use of simpler and more reliable types of flow sensors. The branch line itself may also provide a second use in allowing remote and secure addition of the dye additive to the pipe.

Flow in the branch line 17,18 passes vertically through the flow sensor 20. The flow sensor 20 comprises a vertical stepped chamber 21 with an upper region of greater internal diameter than the lower region. A target weight 22, such as a magnetic weight, of upper diameter approximately equal to the diameter of the lower region of the chamber 21 and tapered at the bottom, is located in the chamber and sinks to the lower region under the force of gravity when there is no flow through the chamber. Flow through the chamber lifts and holds the weight in a raised position. An electronic proximity switch 23, such as a reed switch, mounted externally on the outside of the chamber 2 1, detects whether the target weight 22 is in the raised or fallen position and accordingly detects whether or not flow is taking place in the branch line 17,18. This type of flow sensor 20 has the advantages that it is simple, reliable and inexpensive. The flow sensor 20 is located in a secure cabinet 15. In the preferred embodiment, access to the cabinet 15 is secured by sealing the access door or panel with one or more wire seals.

The branch line out pipe 17 and return pipe 18 are secured in the following ways. Where possible, continuous pipe runs are used from the dyed oil pipe 2 to the secure cabinet 15. The pipe joints at the cabinet end are located within the cabinet 15. The pipe joints at the dyed oil pipe are secured by wire seals which prevent the pipe joint nuts being turned without breaking the wire seals. Where continuous pipe runs are not possible between the dyed oil pipe and the cabinet, joints are sealed with wire seals or are joined with permanent joints, for example by welding.

The branch line 17,18 is provided with an isolating valve 24 which is also mounted in the secure cabinet 15 and is operable to stop flow in the branch line. The isolating valve 24 checks that the flow sensor 20 is operating correctly by occasional or random checking that closure of the isolating valve causes an appropriate signal in the flow sensor when flow is taking place in the branch line. The purpose of this check is to guard against unauthorised manipulation of the flow sensor signals. The isolating valve may also have other uses related to the addition of the dye additive. In the preferred embodiment, the isolating valve is an air actuated two-way valve and is opened when air is supplied to it and closed by a spring when air is exhausted.

In an alternative arrangement, the inlet to the branch line out pipe 17 may be connected to the common delivery pipe. This will provide a greater pressure drop across the branch line circuit. The branch line return pipe 18 must, however, be connected to the dedicated delivery pipe.

In the preferred embodiment, the flow detection means detects flow in the dyed oil pipe 2 rather than in the clear oil pipe 3. This provides a positive confirmation of flow when a dyed delivery is being made and is advantageous because unauthorised interference is more likely during a dyed delivery because marked oil is either not taxed or taxed at a lower rate than unmarked oil. The system is provided with a controller 16 such as an electronic programmable logic unit. The output signals to the actuator 9 and the isolating valve 24 and the input signals from the flow sensor 20 and the sensor 10 detecting the valve position are controlled and monitored by the controller 16. Ideally, the controller 16 is mounted in the secure cabinet 15 to guard against unauthorised manipulation of connections made to it. Where the controller 16 is mounted remotely from the secure cabinet 15, its connections are sealed against unauthorised manipulation and interconnecting wires or lines are installed in continuous lengths or are provided with sealed joints.

In the preferred embodiment, the outputs from the controller to the actuator and to the isolating valve are via solenoid operated pneumatic valves. Electrical signals from the controller open these valves to allow air to be delivered to the actuator or isolating valve as appropriate.

The system is also provided with pneumatic and electrical security interlocks between the output to the actuator 9 and other functions including apparatus for adding the dye additive 25 and other components of the delivery system, such as the isolating valve 24. A pneumatic interlock can be provided by arranging the solenoid valves controlling the dye additive apparatus 25 or other components of the delivery apparatus, to have their air supplies taken from the downstream side of the solenoid valve 26 supplying air to the actuator 9. This adds further safeguards to prevent a dyed oil delivery taking place if air is not supplied to the actuator 9 because the security checks on the additive apparatus 25 and other components will additionally be activated. Similarly, an electrical interlock can be provided by arranging the electrical output from the controller to the actuator to additionally provide electrical power to the isolating valve and components of the dye additive apparatus.

It will of course be understood that the invention is not limited to the specific details described herein, which are given by way of example only, and that various modifications and alterations are possible within the scope of the invention.

Claims

CLALMS:

1. Apparatus for secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised in that the delivery end of the delivery duct is divided into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive being added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive.

2. Apparatus as claimed in Claim 1, including means for switching flow from the main delivery duct to one or other of the dedicated ducts.

3. Apparatus as claimed in Claim 2, in which the switching means includes sealing means which are adapted to prevent tampering or which indicate when tampering has occurred.

4. Apparatus as claimed in Claim 1, in which flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve comprising a housing with openings to the ducts and a member with an internal pathway which is operable to sealably connect the opening from the main delivery duct to one or other of the openings to the dedicated ducts but where the parts are geometrically arranged such that they cannot fully or partly connect the main delivery duct to both dedicated ducts at the same time.

5. Apparatus as claimed in Claim 4, in which flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve comprising a housing with openings to the ducts and a member with an internal pathway which is operable to sealably connect the opening from the main delivery duct to one or other of the openings to the dedicated ducts and in which the member with the internal pathway is movable or rotatable by an actuator which is operable by compressed air and includes means by which access to the air connections is shielded by a member secured in position by a wire seal or where the connections cannot be removed without breaking a wire seal, for example using screwed connections with rotation prevented by a wire seal threaded through holes in the relevant parts.

6. Apparatus as claimed in Claim 5, which includes a driving member, such as a spindle, between the valve and actuator, in which the driving member is enclosed by an enclosure which retains the actuator and valve in position relative to one another.

7. Apparatus as claimed in Claim 6, in which the enclosure provides access to some or all of the fasteners which secure the actuator and valve.

8. Apparatus as claimed in Claim 7, in which the enclosure is provided with one or more access covers which are secured with one or more wire seals which must be broken to gain access to the enclosure.

9. Apparatus as claimed in any one of Claim 6 to 8, in which the enclosure comprises an open tube, two end caps and two or four sets of screws and nuts.

10. Apparatus as claimed in Claim 9, in which the tube is a four sided rectangular profiled type positioned between the actuator and valve with the valve fastened to one of its sides, the actuator fastened to the opposite side and the spindle passing through the centre of the tube through holes in these sides.

11. Apparatus as claimed in Claim 10, in which the two open ends of the rectangular tube are each provided with rectangular end caps with four holes adjacent each corner or two holes adjacent opposite comers.

12. Apparatus as claimed in Claim 11, in which the end caps are secured to the opposite ends of the rectangular tube by means of the screws which pass through the holes in the end caps and extend along the inside comers of the rectangular tube.

13. Apparatus as claimed in Claim 12, including nuts which are fastenable on the screws to secure the end caps in position with a small hole being provided through the edge of each nut or through the threaded portions of the screws which extend beyond the assembled nuts with a wire seal being looped through these holes so as to prevent the end caps being removed without breaking the seal.

14. Apparatus as claimed in Claim 6, in which the enclosure is provided with sealed ends which prevent unauthorised access to some or all of the fasteners which hold the actuator and valve in position and thereby prevents the possibility of unauthorised manual rotation of the actuator relative to the valve.

15. Apparatus as claimed in Claim 1, in which flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve and where the valve mounting or valve connections include a seal, such as a wire seal, which must be broken to disconnect the connection or dismount the valve.

16. Apparatus as claimed in Claim 1, in which flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve which is operated by an actuator and includes a driving member, such as a spindle, between the valve and actuator, or is operated by a manual member such as a lever, and in which the valve is provided with a detection means to detect which of the two positions the valve is in.

17. Apparatus as claimed in Claim 16, in which the detection means comprises a detection target on the driving member, such as a magnet or metal part, and a stationary sensor, such as an electronic reed switch or inductive sensor, which detects when the detection target moves into the range of the sensor.

18. Apparatus as claimed in Claim 16 or Claim 17, in which the detection target and sensor are positioned so that the target is in range for one valve position and out of range for the other valve position.

19. Apparatus as claimed in Claim 1, in which flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve which includes a detection means which comprises a sensing means in a sealed enclosure which prevents unauthorised access to the sensing means including access to the connections from external wires to the sensing means.

20. Apparatus as claimed in Claim 1, in which one of the dedicated delivery ducts, preferably the one dedicated to fluid with the additive, is provided with a flow detection means and a checking means, such as an electronic controller, and the checking means checks that flow is taking place in the dedicated duct with the flow means when a delivery of the type intended for that dedicated duct is being made, and alternatively or optionally the checking means checks that flow is not taking place in the dedicated duct with the flow means when a delivery of the type intended for the other dedicated duct is being made,

21. Apparatus as claimed in Claim 20, in which the flow detection means comprises a branch line, with an inlet from the main delivery duct or the dedicated duct and an outlet to the dedicated duct at a point downstream of the inlet, such that when flow occurs in the main delivery duct and dedicated duct, the pressure drop between the inlet and outlet to the branch line causes flow to occur in the branch line.

22. Apparatus as claimed in Claim 21, in which a flow sensing means is positioned on the branch line and detects when flow is occurring in the branch line.

23. Apparatus as claimed in Claim 21 or Claim 22, in which one of the dedicated delivery ducts is provided with a flow detection means which comprises a flow sensor with flow in the branch line passing vertically up through it.

24. Apparatus as claimed in Claim 23, in which the flow sensor comprises a vertical stepped chamber with an upper region of greater internal diameter than the lower region and a magnetic or otherwise detectable weight, of upper diameter approximately equal to the diameter of the lower region of the chamber.

25. Apparatus as claimed in Claim 24, in which flow through the chamber lifts and holds the weight in a raised position and a sensor, mounted externally on the outside of the chamber, detects whether or not flow is taking place in the branch line by detecting if the weight is in the raised position.

26. Apparatus as claimed in Claim 1, in which one of the dedicated delivery ducts, is provided with a flow detection means which is located in a secure cabinet, for example, a cabinet with an access door or panel sealed with one or more wire seals.

27. Apparatus as claimed in Claim 26, in which one of the dedicated delivery ducts, is provided with a flow detection means which comprises a branch line with a flow detection sensor and the pipes comprising the branch line are made in continuous runs or have joints which are secured by being positioned with a sealed enclosure, such as a secure cabinet, or the joints are secured by wire seals, which prevent the pipe joint nuts being turned without breaking the wire seals, or are made as permanent joints.

28. Apparatus as claimed in any one of Claims 21 to 27, in which one of the dedicated delivery ducts, is provided with a flow detection means, a checking means such as an electronic controller, and an isolating valve which is operable to stop flow in the branch line.

29. Apparatus as claimed in Claim 28, in which the checking means is operable to check, on a routine or random basis, that closure and opening of the isolation valve is matched by signals from the flow detection means indicating that flow is stopped or is taking place, respectively.

30. Apparatus as claimed in Claim 1, in which flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve comprising an actuator which is operated by compressed air and where one or more of the controlled compressed air supplies to the actuator is shared for use in the operation of another component of the delivery system which is either required for the continued operation of the delivery system or which operates with a detection system which checks its operation, whereby failure or interruption of the air supply to the actuator is safeguarded or detected by the failure of the other component to operate.

31. Apparatus as claimed in Claim 1 , in which flow is switched from the main delivery duct to one or other of the dedicated ducts by a valve comprising electrically operated members and where one or more of the electrical supplies or connections to the valve is shared for use in the operation of another component of the delivery system which is either required for the continued operation of the delivery system or which operates with a detection system which checks its operation, whereby failure or interruption of the electrical supply or connection to the valve is safeguarded or detected by the failure of the other component to operate.

32. A method of secure dispensing of fluid with an additive and without an additive from a delivery duct on a delivery means without cross contamination between the two types of fluid characterised by dividing the delivery end of the delivery duct into two dedicated delivery ducts, one dedicated to fluid with the additive and one dedicated to fluid without the additive, the additive being added to the fluid in one of the dedicated delivery ducts which is dedicated to fluid with the additive.

33. A method as claimed in Claim 32, including switching flow from the main delivery duct to one or other of the dedicated ducts.

34. A method as claimed in Claim 33, including sealing the switching means in a manner to prevent tampering or to indicate when tampering has occurred.

35. A method as claimed in Claim 32, including switching flow from the main delivery duct to one or other of the dedicated ducts by a valve comprising a housing with openings to the ducts and a member with an internal pathway which is operable to sealably connect the opening from the main delivery duct to one or other of the openings to the dedicated ducts but where the parts are geometrically arranged such that they cannot fully or partly connect the main delivery duct to both dedicated ducts at the same time.

36. A method as claimed in Claim 35, including moving or rotating the member with the internal pathway by an actuator by compressed air and shielding access to the air connections by a member secured in position by a wire seal or where the connections cannot be removed without breaking a wire seal, for example using screwed connections with rotation prevented by a wire seal threaded through holes in the relevant parts.

37. A method as claimed in Claim 36, including providing a driving member, such as a spindle, between the valve and actuator, and enclosing the driving member by an enclosure which may also serve to hold the actuator and valve in position relative to one another, optionally the enclosure also providing access to some or all of the fasteners which secure the actuator and valve, optionally the enclosure being provided with one or more access covers which are secured with one or more wire seals which must be broken to gain access to the enclosure.

38. A method as claimed in Claim 32, including switching flow from the main delivery duct to one or other of the dedicated ducts by a valve and where the valve mounting or valve connections include a seal, such as a wire seal, which must be broken to disconnect the connection or dismount the valve.

39. A method as claimed in Claim 32, including switching flow from the main delivery duct to one or other of the dedicated ducts by a valve which is operable by an actuator and including a driving member, such as a spindle, between the valve and actuator, or is operable by a manual member such as a lever, and in which the valve is provided with a detection means to detect which of the two positions the valve is in.

40. A method as claimed in Claim 39, in which the detection means comprises a detection target on the driving member, such as a magnet or metal part, and a stationary sensor, such as an electronic reed switch or inductive sensor, which detects when the detection target moves into the range of the sensor.

41. A method as claimed in Claim 39 or Claim 40, including positioning the detection target and sensor so that the target is in range for one valve position and out of range for the other valve position.

42. A method as claimed in Claim 32, including flow from the main delivery duct to one or other of the dedicated ducts by a valve which includes a detection means which comprises a sensing means in a sealed enclosure which prevents unauthorised access to the sensing means including access to the connections from external wires to the sensing means.

43. A method as claimed in Claim 32, in which one of the dedicated delivery ducts, preferably the one dedicated to fluid with the additive, is provided with a flow detection means and a checking means, such as an electronic controller, and the checking means checks that flow is taking place in the dedicated duct with the flow means when a delivery of the type intended for that dedicated duct is being made, and alternatively or optionally the checking means checks that flow is not taking place in the dedicated duct with the flow means when a delivery of the type intended for the other dedicated duct is being made,

44. A method as claimed in Claim 43, in which the flow detection means comprises a branch line, with an inlet from the main delivery duct or the dedicated duct and an outlet to the dedicated duct at a point downstream of the inlet, such that when flow occurs in the main delivery duct and dedicated duct, the pressure drop between the inlet and outlet to the branch line causes flow to occur in the branch line.

45. A method as claimed in Claim 44, including positioning a flow sensing means on the branch line and detecting when flow is occurring in the branch line.

46. A method as claimed in Claim 44 or Claim 45 or Claim 22, in which one of the dedicated delivery ducts is provided with a flow detection means which comprises a flow sensor with flow in the branch line passing vertically up through it.

47. A method as claimed in Claim 46, in which the flow sensor comprises a vertical stepped chamber with an upper region of greater internal diameter than the lower region and a magnetic or otherwise detectable weight, of upper diameter approximately equal to the diameter of the lower region of the chamber.

48. A method as claimed in Claim 47, in which flow through the chamber lifts and holds the weight in a raised position and a sensor, mounted externally on the outside of the chamber, detects whether or not flow is taking place in the branch line by detecting if the weight is in the raised position.

49. A method as claimed in Claim 32, in which one of the dedicated delivery ducts, is provided with a flow detection means which is located in a secure cabinet, for example, a cabinet with an access door or panel sealed with one or more wire seals.

50. A method as claimed in Claim 49, in which one of the dedicated delivery ducts is provided with a flow detection means which comprises a branch line with a flow detection sensor and the pipes comprising the branch line are made in continuous runs or have joints which are secured by being positioned with a sealed enclosure, such as a secure cabinet, or the joints are secured by wire seals, which prevent the pipe joint nuts being turned without breaking the wire seals, or are made as permanent joints.

51. A method as claimed in any one of Claims 44 to 50, in which one of the dedicated delivery ducts, is provided with a flow detection means, a checking means such as an electronic controller, and an isolating valve which is operable to stop flow in the branch line.

52. A method as claimed in Claim 51, in which the checking means is operable to check, on a routine or random basis, that closure and opening of the isolation valve is matched by signals from the flow detection means indicating that flow is stopped or is taking place, respectively.

53. A method as claimed in Claim 32, including switching flow from the main delivery duct to one or other of the dedicated ducts by a valve comprising an actuator which is operable by compressed air and where one or more of the controlled compressed air supplies to the actuator is shared for use in the operation of another component of the delivery system which is either required for the continued operation of the delivery system or which operates with a detection system which checks its operation, whereby failure or interruption of the air supply to the actuator is safeguarded or detected by the failure of the other component to operate.

54. A method as claimed in Claim 32, including switching flow from the main delivery duct to one or other of the dedicated ducts by a valve comprising electrically operated members and where one or more of the electrical supplies or connections to the valve is shared for use in the operation of another component of the delivery system which is either required for the continued operation of the delivery system or which operates with a detection system which checks its operation, whereby failure or interruption of the electrical supply or connection to the valve is safeguarded or detected by the failure of the other component to operate.