WO2021099193A1

WO2021099193A1 - Method and system for demand-based and mobile destruction of data carriers in collection vehicles

Info

Publication number: WO2021099193A1
Application number: PCT/EP2020/081750
Authority: WO
Inventors: Michael Erich SCHUBERT
Original assignee: REISSWOLF Akten- und Datenvernichtung GmbH & Co. KG
Priority date: 2019-11-22
Filing date: 2020-11-11
Publication date: 2021-05-27
Also published as: EP4061549A1; DE102019131615B3

Abstract

The invention relates to a method for demand-based and mobile destruction of data carriers (14) in collection vehicles (10) using a system, comprising lockable individual containers (16) for throwing in and receiving data carriers (14) with confidential content and a mobile collection vehicle (10) having collection containers (12) for emptying the lockable individual containers (16) in the collection containers (12), wherein the emptied data carriers (14) from the individual containers (16) are destroyed in the collection container (12) according to a destruction method (32), wherein the destruction method (32) has at least one crushing step (36, 36a) and is executed according to a first process sequence and controlled by a control device (46), wherein, in said first process sequence, a destruction of the emptied data carriers (14) occurs according to a first security level (P4), characterised in that the destruction (32) occurs according to a second process sequence as required and controlled by the control device (46), wherein, in said second process sequence, a destruction of the emptied data carriers (14) occurs according to a second security level (P7) that is higher than the first security level.

Description

description

Process and system for the needs-based and mobile destruction of data carriers in collection vehicles

The invention relates to a method for the needs-based and mobile destruction of data carriers in collection vehicles according to the preamble of claim 1 and systems of lockable individual containers for throwing in and receiving data carriers with confidential content and a mobile collection vehicle with a collection container according to the preamble of claim 13.

Such methods and systems are used for the reliable and confidential destruction of data carriers and such methods and systems are regularly used in the provision of destruction services. Such destruction services are regularly used by clients who produce data on data carriers that are not destroyed by the client himself, but by a service company commissioned to do so.

Recyclable containers for glass, paper and plastic are decentralized in order to achieve a high usage rate. Since the reusable materials are recycled centrally, the contents of the container must be transported to a collection point. This is usually done with trucks that are equipped with collecting bins into which the contents of the individual recycling containers can be emptied.

When disposing of used glass, waste paper or other recyclable materials, it is irrelevant whether external access to the recyclable materials is possible. The recyclables are of practically no value to third parties. Even if recyclables are occasionally lost when a container is emptied into the collecting container, this is questionable from an environmental point of view, but not in terms of confidentiality.

The situation is different when disposing of confidential business papers or other data carriers with confidential content, which is the subject of the present invention. The term “data carrier” primarily refers to paper-based data carriers or, more generally, to fiber-based data carriers, but basically also includes other data carriers, especially since data is increasingly being stored, processed and sent digitally. In this respect, it is also about the destruction of data carriers which data is stored in digital form. Nevertheless, the invention is explained and described in more detail below and in the exemplary embodiments primarily with regard to paper-based data carriers, but this is not intended to restrict the invention. Paper-based data carriers are to be considered as an example of data carriers only, albeit as a preferred example. The specification of security levels (e.g. P4 or PI) is only to be regarded as an example, without excluding other material classes or other security levels.

Such data carriers, especially paper-based data carriers, occur in companies, medical practices, law offices, freelancers, etc. (hereinafter generally referred to as clients) e.g. at certain times in larger quantities, for example when the retention period for certain documents has expired. Such data carriers are also used in daily work. The data carriers must be reliably destroyed to prevent unauthorized third parties from looking at them and to protect the confidentiality of information. The client does not normally carry out the destruction themselves, but instead instructs specialized companies, hereinafter referred to as destruction service providers. The client expects his data carriers to be destroyed while maintaining the necessary confidentiality. The destruction service providers can guarantee confidentiality within their company.

The service relationship between the client and the destruction service provider of the data carrier destruction usually looks like that the client receives locked individual containers from the destruction service provider into which he can insert his data carriers. For logistical reasons, the contents of these individual containers are transferred to large collecting containers and then, according to the state of the art, brought to a central destruction site, for example. When emptying the individual containers into the collecting container, there is a risk that unauthorized third parties can inspect the papers to be destroyed, that papers are stolen or lost.

This is where WO 01/96215 A1 comes in. From this WO 01/96215 A1 a system consisting of lockable individual containers and a collecting container for emptying such individual containers is known. The lockable individual containers are usually part of a destruction service and are available from a client so that he can throw confidential papers or other data carriers into the individual containers, because disposal via other, general recycling systems with regard to confidentiality is out of the question. These lockable individual containers are emptied by the destruction service provider as part of the service relationship and for this purpose the destruction service provider operates collection vehicles with collection containers arranged on them. WO 01/962151 A1 describes such a system consisting of lockable individual containers and a mobile collecting container for emptying such individual containers. The mobile collection containers only have a collecting function and the collected goods with confidential data are then brought to a place where the collected goods are destroyed.

WO 01/96215 A1 deals with how the lockable individual containers can be emptied into the mobile collecting container without the possibility of external access, in particular by unauthorized third parties, to the contents of the lockable individual containers during emptying into the collecting container. To ensure uninterrupted access control and thus to grant a confidentiality guarantee, it suggests that each individual container can only be opened if it is completely enclosed by the collecting container. In short, the emptying takes place in a lock of the collecting container. This represents a significant improvement over systems in which filled, lockable individual containers are exchanged for empty, lockable individual containers and then the replaced filled individual containers are brought to the location where the collected goods with confidential data are reliably destroyed.

A mobile device for the destruction of data carriers is disclosed, for example, in DE 600 24 912 T2. The mobile device shown there consists of a cutting device in which, for example, the paper fed to the cutting device via a funnel is shredded. This shredded paper arrives in a screw arranged below the cutting device and is mixed there and pressed into a collecting compartment which is separated by a wall and at a distance from the cutting device and the funnel.

DE 30 25 631 A1 describes a stationary system and a stationary method for the destruction of data carriers. In a multi-stage sequence, the data carriers to be destroyed are to be fed to several processing stages of the system, namely one after the other to a mechanical coarse crushing stage, a magnetic separation stage, a fine crushing stage and a grinding stage. At the end In this multi-stage destruction, the data carriers should come out of the system in micro-granulated form.

No. 6,491,245 B1 shows a mobile shredding device for the mobile destruction of data carriers. The destruction takes place via a shredder, a sieve device and a screw compactor. The data carriers destroyed in this way are then placed in a collection compartment. In this collecting compartment, spray nozzles are arranged on the roof side in order to be able to spray dust-binding liquid down from the ceiling for the purpose of binding dust.

DE 22 14 786 B2 shows methods and devices for the stationary destruction of data carriers. The data carriers to be destroyed are first mechanically shredded and then pressed to reduce their volume. Before pressing, the scaled-down data carriers are moistened, for example by adding water in a liquid or vapor state. By moistening the material, a particularly good compression, an improved rendering of the data illegible and a stabilization of the resulting compacts should be achieved.

EP 0289 015 A1 discloses a screw press and method for converting waste paper into manageable compacts, this waste paper not being a data carrier with confidential content but, for example, conventional paper, i.e. a conventional material that is recycled. For this purpose, the screw press has a nozzle in the area of the screw for the supply of liquid. A good and uniform wetting of the waste paper with the liquid should be ensured so that the waste paper can be well bonded during the pressing process in the screw press when it is formed into compacts.

WO 2014/131593 A1 describes a mobile device by means of which a mobile data carrier destruction method can be carried out. The data carriers are to be destroyed on the collection vehicle used, whereby the data carriers are not shredded. Rather, these should be mixed in a hydromechanical pulper to form a suspension of fiberized data carriers and pulping fluid. This resulting suspension should then be fed to a paper recycling plant. WO 2016/070948 A1 describes a stationary system for the destruction of data carriers. The data carriers are crushed in a crushing step by a hammer mechanism and then water is added to the particles that are formed. A crumbly residue is no longer legible. It is proposed that the water be added before the comminution or during the comminution in the hammer mechanism, since this allows the friction values in the hammer mechanism to be reduced.

JP 2014/018715 A shows a mobile device and a mobile method for the destruction of data carriers. Packets are manually entered into the destruction device. The packets are subjected to a shredding step and then ground up. Liquid is added in the milling step.

The methods and devices explained above prove in various respects to be unsuitable or disadvantageous for reliably meeting the very different needs of the client. It is an object of the present invention to provide methods and devices which, on the one hand, meet the requirement of maintaining confidentiality, but which, on the other hand, can also be used flexibly with regard to changing requirements of the client.

This object is achieved according to the invention by a method with the features of claim 1 and by a device with the features of claim 13. Further advantageous embodiments and properties of the method and the devices are specified in the subclaims and will be explained later with reference to figures and using exemplary embodiments explained.

According to the invention it is provided that the destruction method which is applied to the collected data carriers is carried out in a controlled manner by a control device according to a first method sequence. In this first process sequence, the collected data carriers are to be destroyed in the collection vehicle after a first security level. According to the invention, it is now provided that the control device can switch from this first method sequence to a second method sequence. This is done as required and in this second process sequence, the collected data carriers are to be destroyed according to a second security level that is higher than the first security level. Insofar as the term security level is used in this application, this term refers to DIN 66399, which has replaced the previous DIN 32759. This DIN 66399 standard (always as of 10/2012 below) deals with various data carriers, for example those with information displayed in original size, for example paper, films, printing plates. This type of data carrier is abbreviated with the letter "P". Data carriers with reduced information display, for example microfilms, foil, are abbreviated with the letter "F". Optical data carriers, for example CDs / DVDs, are abbreviated with the letter "O". Magnetic data carriers, for example ID cards, floppy disks, are abbreviated with the letter "T", hard drives with magnetic data carriers are abbreviated with the letter "H" , Electronic data carriers, for example memory sticks, chip cards, are abbreviated with the letter "E". Protection classes are defined in this DIN 66399 and security levels 1-7 are assigned to these protection classes. The following table shows a comparison of the protection classes with the security levels. this table is taken from the said DIN.

The capital letters identified above represent a material classification according to this DIN 66399 mentioned above. DIN 66399 also defines seven security levels. DIN 66399 also specifies when which security level is reached after the destruction process carried out. The following table is also taken from the aforementioned DIN 66399:

This DIN 66399 also contains specific information on when and with respect to which material the security level shown above is reached. Several tables are given in Part 2 of this DIN, one for each of the material classes P, F, O, T, H, E. The table for material class P is shown below.

For example, security level P1 has been achieved, which is recommended for data carriers with general data that are to be made illegible if a material particle area of <2000 mm ² or a strip width of <12 mm is achieved in the context of the destruction of the data carrier. The security levels P2 to P7 are referred to as higher security levels and the requirements for the destruction process increase in order to achieve destruction according to these higher security levels. For example, DIN 66399 specifies for security level P4 that this is recommended for data carriers with particularly sensitive and confidential data and is achieved when the material ^{particle area is <160 mm 2} and for regular particles a strip width of <6 mm and for Example a particle size of <4 mm ^c 40 mm is achieved. The highest security level is P7, which is recommended, for example, for data carriers with data that are to be kept strictly confidential, i.e. when the highest security precautions must be observed. DIN 66399 also provides specifications for this. After this highest security level, the destruction of the data carriers takes place in such a way that the reproduction of the data reproduced on them is impossible according to the state of the art in science and technology.

As far as security levels are mentioned in the present application, this term corresponds to the concept of security levels defined in DIN 66399 and the nomenclature of these security levels also follows the mentioned DIN 66399. Reference is made to the content of this DIN 66399 in full.

The division into protection classes and the decision as to which security level should be used to destroy the data carrier is made regularly by the client. It is then the responsibility of the destruction service provider to ensure that the collected data carriers are destroyed according to the requested and commissioned security level. Previous mobile collection vehicles are intended either to simply collect the data carriers and then to unload the collected data carriers at a central destruction location, where the actual destruction process takes place. Or the collection vehicles are designed to carry out a destruction process in the collection vehicle, this destruction process always running consistently and according to a certain security level. This procedure cannot be adapted to the different security level requirements of different clients. So it is z. B. possible that in a collection vehicle destruction takes place according to security level P4. On such a vehicle, data carriers cannot be destroyed in accordance with security level P7 and in this respect, in the event of an order for destruction in accordance with security level P7, the collected data carriers would first have to be destroyed in accordance with security level P4 and then, for example, in a central, stationary destruction facility Destruction take place according to security level P7. Insofar, however, also data carriers from other clients in the collection vehicle were collected, these would also have to be subjected to a subsequent destruction according to security level P7 for security reasons.

As an alternative to this, the prior art would require that a destruction process according to security level P7 be carried out in the collection vehicle in order to use such collection vehicles to carry out both orders for destruction according to security level P4 and orders for destruction with security level P7 on the same vehicle to be able to. Such a procedure would be economically disadvantageous for customer orders that provide for destruction according to security level P4 and for which only a service fee for such a security level can be agreed.

Here, the present invention brings about an improvement, because with the method according to the invention and with the system according to the invention it is possible to change from a first method sequence of destruction to a second method sequence of destruction, for example from a first method sequence, which is controlled by a control device leads to destruction according to security level P4, to a second process sequence which, for example, leads to destruction according to security level P7. In this respect, with such a process and with a collection vehicle in which such processes can be carried out, orders for destruction can be carried out reliably and economically according to different security levels, without an additional post-destruction process, for example, as described above, and without any precautionary measures Orders for destruction with a lower security level must be carried out according to a procedure with a higher security level, without this being economically burdensome for the client.

According to the method according to the invention, the destruction method has at least one comminution step. Several comminution steps can also be provided, for example a first coarse comminution and a subsequent fine comminution. It is also possible that the destruction process includes further procedural steps. For example, a sieving step or several sieving steps could be provided with one or more sieves with a predefined sieve hole size. With regard to the system, the destruction device is activated by a control device to work in a first operating mode. In this first operating mode, the emptied data carriers are destroyed after one first destruction method and after a first security level, as explained above, for example using the destruction method according to the invention. If necessary, the control device can operate the destruction device in a second operating mode, namely when destruction is to take place according to a different security level than in the first operating mode. In addition, the above and the following explanations on the method apply analogously to the system according to the invention and the explanations on the system according to the invention apply analogously to the method according to the invention.

The method according to the invention and the system according to the invention can preferably be implemented in that the destruction method comprises at least one further treatment step in addition to the comminution step, this treatment step meaning a treatment of the collected data carriers. This further treatment step should preferably be carried out in the second method sequence or in the second operating mode and not be carried out in the first operating mode or in the first method sequence. As a result, this further treatment step means that destruction does not take place after the first security level, but rather after the second, higher security level.

This second treatment step could, for example, be a screening step and / or a mixing or swirling step and / or a further comminution step and / or a material compression step. Depending on the material present, for example according to one of the six material classifications of DIN 66399, this further treatment step can also be designed differently. For material of material class P, for example, the further treatment step could be a swirling step, for example in a fall section, while for material of material classification H this second treatment step could be a further comminution step or a grinding step.

Other treatment steps not mentioned so far are also possible in principle, for example a combustion step, with some conceivable treatment steps in practical terms only being realizable with great effort.

The application of a liquid to the emptied data carriers is regarded as a preferred further treatment step. This application should preferably take place after the disintegration of the data carrier. A corresponding charge device would be to be arranged behind the shredding device in the conveying direction of the data carrier. This application could preferably take place from suitably arranged nozzles and in atomized form. The application liquid used is preferably water, which is preferred over other liquids in terms of handling, health and environmental compatibility. A liquid tank is advantageously arranged in the collecting vehicle, from which the liquid is withdrawn in order to act on the emptied data carrier. Such a liquid tank can be arranged, for example, in a manner that is favorable for the vehicle's center of gravity. More preferably, for example, an indicator can be added to the liquid, for example a dye, so that the exposure of the data carrier to the liquid can be detected using the indicator. In this respect, for example, the indicator could easily be used to recognize that a destruction process is being carried out according to a higher security level, while if the indicator does not work, a destruction process according to the lower security level can be recognized. The amount of liquid to be discharged can be made dependent, for example, in a controlled manner on the amount of data carrier material being destroyed. The amount of liquid should be measured in such a way that the impacted data carriers are reliably made illegible, as required by the security level to be achieved.

With regard to the individual containers, it is advantageously proposed that they have electronically operated locks. These can be opened and closed in a simple manner and the closed state of these locks can be recorded, monitored and documented in a simple manner. It is also preferred that the individual containers can only be opened in the collecting container, e.g. in a corresponding lock of the collecting container. The advantages for this and possible configurations for this are given, for example, in WO 01/96215 A1 by the same applicant. The features listed there in claims 4-10 there can also be implemented in the present invention. Another example is shown in WO 2017/150972 A1

In this respect, explicit reference is made to claims 1-10 of this WO 01/96215 A1 and to the explanations and explanations given in this regard, beginning in line 23 on page 2 through to line 10 on page 5 of WO 01/96215 A1. For this reason, an explicit reproduction of the explanations given there is dispensed with at this point. An advantageous development of the methods and systems according to the invention results from the fact that the control device has a wireless communication device. The control device can exchange (send and / or receive) data via this wireless communication device, and on the basis of received data it is advantageously selected which destruction method is to be used on the emptied data carriers. In this way, the destruction method to be used can be selected automatically, without an operator having to make an entry, for example on the collection vehicle or on the collection container.

The above-mentioned wireless communication device opens up further advantageous method and system options. For example, the wireless communication device can communicate wirelessly with the electronically actuated lock and it could be stored in the electronically actuated lock, for example, according to which security level the data carriers inserted there should be destroyed. The wireless communication device could read out this stored information and then let the control device run the appropriate destruction process provided for this security level. It is also possible, as an alternative or in addition, for the wireless communication device to communicate wirelessly with a stationary central control device. In particular, this central control device can be used, for example, to control and manage the services provided and to be provided by the destruction service provider, e.g. contain information on the clients and their security level requirements, and, for example, control and manage the collection vehicles of the fleet. For example, it could be stored in a memory of this central control device or in a memory that the central control device can access, with which client and / or which individual container which destruction process is to be carried out according to which security level. The wireless communication device could therefore receive information from the central control device that a specific security level is stored for a specific and clearly identifiable electronic lock and thus a destruction process is to be carried out according to a specific security level. The advantage of such a central storage of this information would be that central data maintenance is possible.

As a further or alternative advantageous possibility, the wireless communication device can communicate wirelessly with a device that is operated by the Client is served. Such devices could be a mobile telecommunication device, for example a common smartphone. Such a device can also be a remote control device which, for example, can have been made available to the client by the service provider. Such a device can, however, also be a computer device of the usual type, for example a tablet, a laptop or a PC, via which the client can communicate with the wireless communication device.

As a further or alternative advantageous possibility, the wireless communication device of the control device is used to transmit information on the destruction process to the devices operated by the client. This can be, for example, status reports on the process sequence, for example that the process is starting, that certain intermediate steps have been completed and / or that the process has been ended. The transmitted information can also be, for example, images or video recordings, for example images or video recordings recorded by suitably positioned cameras, for example to record the emptying of the container in the image and / or the crushing of the emptied data carriers and / or images or video recordings further processing steps. If, for example, a liquid is applied to the emptied data carrier, a message could be issued about this, for example. If, for example, an indicator is used, a picture or video recording of the final state of the destroyed data carrier at the end of the destruction process could be transmitted. In this way, the client has the opportunity to observe and / or understand the destruction process. For example, a destruction certificate could also be transmitted and / or information about the security level after which destruction is to be carried out could be transmitted before the destruction process is started.

Another or alternative advantageous possibility is that, for example, the destruction process is only carried out when the client has previously given a release signal via the device operated by him. In this way, the client retains control over whether a destruction procedure or that a destruction procedure is carried out. The same advantages result with the further or alternative advantageous possibility that the destruction process is aborted or changed if the client gives an abort signal or a change signal via the device operated by him. This is how it is, for example It is possible that the client will first be notified that a destruction procedure should be carried out according to a certain security level. He can then, for example, enter the destruction according to a different security level and the control device would then carry out the destruction according to this changed security level by running a destruction process corresponding to this security level. It is also conceivable that the client cancels the destruction process by sending an interruption signal.

Finally, it turns out to be an additional or alternative advantageous possibility that the destruction process comprises a compaction step, this compaction being carried out, for example, by means of compaction screws. It is considered advantageous here that the liquid is added before and / or during the compression step. This opens up the possibility, on the one hand, of achieving particularly good compression and, on the other hand, of distributing the liquid well over the already reduced data carriers.

In the following, the invention is to be explained further with reference to exemplary embodiments and figures. Show it:

1 shows a basic representation of a system according to the invention and a method according to the invention;

2a shows a schematic flow diagram of various process steps in the collection and emptying of individual containers in a collection container of a collection vehicle;

2b shows a schematic flow diagram for a destruction method according to the invention according to a first method sequence and a second method sequence with additional method steps compared to the first method sequence;

3a, 3b, 3c different perspective representations of a collection vehicle with a collection container and with destruction devices for carrying out the method according to the invention according to an embodiment, and 4: a basic representation of possible control processes and possible information exchange between communication and control devices according to a method according to the invention and in a system according to the invention.

For a general explanation of the subject matter of the invention, FIG. 1 shows a customary sequence of a destruction service. The destruction service provider operates collection vehicles 10 which are equipped with a collection container 12. Furthermore, according to the invention, devices (not shown in FIG. 1) are to be provided in the collecting vehicle 10 which enable the collected data carriers 14 to be destroyed. Details of these destruction facilities and details of such destruction methods are explained in connection with later figures.

The collection vehicle 10 works together with individual containers 16 which are designed to be lockable, for example preferably with electronic locks. These individual containers 16 are, for example, with a client A, and with this client A these individual containers 16 are filled with data carriers 14, for example with paper or paper-based documents. A collection vehicle 10 is sent to client A at regular intervals or on request. The filled individual containers 16 located at the client A are brought to the collecting vehicle 10, emptied into the collecting container 12 on or in the collecting vehicle 10, subjected to destruction as will be explained and the emptied individual containers 16 then returned to the client A so that he can dispose of the individual containers 16 can be used again for the purpose of filling with data carriers 14 that arise at client A.

The collection vehicle 10 is equipped with a maximum storage capacity due to its space and design, ie the storage volume of emptied data carriers 12 and shredded or destroyed data carriers 14 is limited by the available loading volume. The collection vehicle 10 must therefore regularly drive to a central collection point 18, for example when the loading limit is reached or at the end of the planned collection route. This can be a recycling system, for example, in order to feed the destroyed data carriers 14 to a recycling process there. However, this can also be a central station of the destruction service provider in order to remove the collected and destroyed data carrier 14 initially to receive centrally, if necessary to be subjected to further processing, for example to enable a subsequent recycling of the collected data carrier material. The emptied collection vehicle 10 can then approach customer A again and pick up individual containers 16 for the purpose of emptying them.

FIG. 2a explains in a schematic flow diagram which method steps are generally carried out on the collecting vehicle 10 in order to empty an individual container 16 into the collecting vehicle 10 and into the collecting container 12 arranged in the collecting vehicle. The individual container 16 collected by a client A is first brought to the collection vehicle 10. As a rule, the collection vehicle 10 is equipped with a lifting and emptying device 22. First, the still closed individual container 16 is placed in this lifting device 22. The individual container 16 is regularly fixed there so that it is securely held when it is lifted and emptied. As soon as the individual container 16 is received in the lifting and emptying device 22, the access to the individual container 16 can be blocked 24 (lock 24), for example. The lifting device 22 then starts moving 26 and lifts the individual container 16 that has been picked up into an emptying position. At this point in time, possibly also during the lifting process 26, the closing device of the individual container 16 is opened 28. If this closing device is, for example, an electronically actuated lock, an opening actuation signal can be emitted at this point in time. In the case of mechanical locks as the locking device, mechanical unlocking can take place, for example.

As soon as the individual container 16 has reached its emptying position, the contents of the individual container 16 are emptied 28, for example into a funnel 34 of the collecting container 12. For this purpose, the cover of the individual container 16 can, for example, pivot open. However, it would also be conceivable that an opening container bottom is provided. Opening lids are more common. In any case, the collected contents of the individual container 16 are emptied into the opening provided for this purpose, for example a funnel 34 of a collecting container 12.

After complete emptying 28, the individual container 16 is moved back from the emptying position into a removal position or into its starting position 30. The locking device or the lock is closed again and the Closed and emptied individual containers 16 can then be removed from the collecting vehicle 10, if necessary after the blocking of the access 24 has been removed. Already during this lowering movement 30 of the individual container 16 from the emptying position into the removal position, for example, the first step of the destruction process 32 can be carried out in the collecting vehicle 10. However, it is also possible that this first method step of the destruction method 32 is only carried out when the individual container 16 has been removed from the lock 24, for example. However, it is also not ruled out that the destruction process starts during the emptying process in order to process the emptied data carrier material immediately.

FIG. 2b shows a schematic flow chart of a method 32 according to the invention for mobile destruction of data carriers 14 as required and which is carried out, for example, by the system according to the invention and with the system according to the invention. The actual destruction process 32 begins after an individual container 16 has been emptied 28 into the collecting container 12, for example into the funnel 34 of such a collecting container 12, i.e. the steps for emptying an individual container explained above for FIG. 2a are not regarded as part of the destruction process. The data carrier material recorded in this way is first subjected to a shredding step 36. This first shredding step 36 can be, for example, a pre-shredding step in order to first roughly shred the data carriers 14. This first reduction step 36 can be followed, for example, by a sieving step 38a, and depending on the data carrier material also a separation step, for example a step in which metallic fractions are removed. If a multi-stage comminution is provided, a further comminution can take place, for example a fine comminution 36a, and this fine comminution 36a can be followed, for example, by a further sieving step 38b. In this optionally provided first and second screening step 38a, 38b, screens with different hole diameters are used, for example.

A further method step of the example shown for a destruction method 32 consists of a so-called compression 40. This is to be understood as meaning that the data carrier material arriving at the compression step 40 is compressed under an external pressure. For this purpose, for example, one or more compression screws 42 can be used, which are also fundamentally known in the prior art. These compression screws 42 can, for example, at the same time Arrange for the transport of the data carrier material to a collecting compartment 44, where the destroyed data carrier material is stored in the collecting container 12, in order to then be emptied, for example, at a recycling plant 18 or on the premises of the destruction service provider.

The destruction process 32 described above could, for example, be the first destruction process performed in the collection container 12. However, this first destruction process does not have to include all of the process steps described above. It is only necessary that at least one comminution step 36 take place. This first destruction process leads to the destruction of the data carriers 14 after a first security level. Depending on the data carrier material, this first security level could be level P4 or other levels of security level 4 (04, H4, etc.).

However, the collection vehicle 10 can not only carry out a destruction process to achieve this first security level, but also, controlled by a control device 46, the destruction process 32 can be carried out in a modified form, namely by adding a further processing step. In the exemplary embodiment shown in FIG. 2b, this further processing step should consist in adding a liquid 48 to the data carrier material. It is possible, for example, for the liquid to be added to the data carrier material after the comminution step 36, in that, for example, a device for adding a suitable liquid 48 is arranged downstream of the outlet of the first comminution stage 36. This device can be, for example, one or more nozzles in order to spray the data carrier material with a liquid. It is additionally or alternatively possible for the liquid to be added following a further comminution step 36a or following a first or second sieving step 38a, 38b. Finally, it is additionally or alternatively also possible for the liquid 48 to be supplied during the compression step 40. For example, the corresponding compression screw 42 could be equipped with outlet openings for such a liquid 48 arranged in the screw housing.

The added liquid 48 could be, for example, water that is stored in a liquid tank 50 arranged in the collecting vehicle 10, for example. FIGS. 3a to 3c show different views of a collecting container 12 of a collecting vehicle 10. The tractor 52 of the collecting vehicle 10 is not shown. The collecting container 12 consists of a chassis with a running gear, and a substantially box-shaped structure is provided on this chassis. This box-shaped structure has a pivotable or openable flap 54 at the rear in order to provide rear access to the collecting container 12, namely to a lock 24. In the illustrated embodiment, the supply of the individual containers 16 is to take place at the rear. However, it is also known that access is from the side. The following description based on a rear access is not restrictive of the invention. In addition, and likewise without limiting the invention, the collecting container 12 has a pivotable roof area on the rear and roof side in order to provide additional height freedom in the area of the lock 24 for emptying an individual container. This makes it possible for the collecting container 12 to maintain a normal overall height and no problems arise due to a particularly high construction, for example when crossing under bridges etc.

In a manner not shown, the collecting container 12 can have a lifting and emptying device 22, as it is also already fundamentally known in the prior art. As in the prior art, this lifting device 22 is equipped with an individual container 16, lifts this individual container 16 in a secured and fixed manner into an emptying position and empties the contents of the container into the collecting container 12 after opening the emptying opening, for example the closed lid of the individual container 16 into it. The individual container 16 can also be opened and closed as in the prior art, so that no detailed description is required for this either.

The emptied data carriers 14 fall, for example, into a funnel 34 and pass from there into a first shredding device 36. Both the funnel 34 and the shredding device 36 are part of the destruction device, which are arranged in the collecting vehicle 10 or in the collecting container 10, in order to remove empty data carriers 14 immediately to be subjected to a destruction procedure 32.

For the operation of the destruction devices 34, 36 and also for the operation of the lifting and emptying device 22, the collecting vehicle 10 has supply devices 56 in order to be able to operate these mentioned devices. These supply facilities represent electrical, hydraulic and / or pneumatic energy available. It can be a power generator, for example. However, it is also possible to take the required energy from the drive motor of the collecting vehicle 10. This, too, is basically already known in the prior art and therefore does not require a detailed description.

In the top view of FIG. 3b it can be seen that the collecting compartment 44 is arranged at a distance from the destruction device 34, 36, in which the data carriers 14 destroyed according to a destruction process 32 are brought and stored until this compartment 44 is emptied. The connection between this collecting compartment 44 and the destruction device 34, 36 takes place via compression screws 42, which can be seen better in FIG. 3b, which compress the data carrier material processed according to a destruction process 32 and convey it into the collecting compartment 44.

In a manner not shown, the destruction device also has devices for adding a liquid 48 carried along in the collecting container 12 to the data carrier material. The liquid tank 50 provided for carrying along the liquid 48 is shown in FIG. 3b.

FIG. 4 shows in a fundamental and schematic manner the control device 46 which ensures that the destruction process 32 is carried out in the collecting vehicle 10 or in the collecting container 12. This control device 46 can, for example, also control the lifting and emptying device 22, the control device 46 can also take on further control functions.

To control the sequence of the destruction method 32 or to control the destruction device 34, 36, the control device 46 is in connection with the destruction device 34, 36 in order to be able to send control signals to the destruction device 34, 36, for example. These control signals are selected in such a way that the destruction device 34, 36 carries out the destruction of the data carriers 14 according to the desired destruction method 32. In particular, it emerges from these control signals whether destruction is carried out according to a first destruction process or according to a second destruction process. The destruction device 34, 36 is controlled by these control signals in such a way that, for example, the addition of liquid 48 explained in relation to FIG. 2b takes place or does not occur. When adding the liquid 48, a higher security level is achieved than with The addition of the liquid 48 is omitted. In general, the control device 46 thus controls which destruction process is carried out by the destruction device 34, 36, and thus which security level is achieved when the selected destruction process is carried out.

The control device 46 is connected on the input side to different devices which, for example, record information relevant to the destruction process and pass it on to the control device 46. In relation to the addition of a liquid 48, for example, it can be a flow meter 58 which, for example, supplies information to the control device 46 as to what amount of liquid 48 is added per unit of time. The control device 46 can, for example, also be supplied with information from a weighing device 60 which, for example, records the amount of data carrier material that has been emptied from the individual container 14. This weighing device 60 can, for example, weigh the individual container 14 before emptying and after emptying and deduce the emptied amount from the difference.

The control device 46 can also be connected to further sensors 62 which, for example, detect the speed of a shredding device or the power consumption of a shredding device or which in some other way detect features or performance features of devices that are used for the destruction.

The control device 46 can, however, also be connected to image-recording and / or video-recording devices 64. For example, image monitoring and / or video monitoring can be provided at several destruction-relevant locations, for example in the area of emptying the individual containers 14, for example in the area of shredding 36, 36a and / or for example also in the area of the collecting compartment 44.

The devices 58, 60, 62, 64 mentioned supply information to the control device 46, namely to the input 66 of the control device 46. The control device 46 can, for example, control the destruction device 34, 36 on the basis of information received.

The control device 46 also has a wireless communication device 68 in order to wirelessly communicate with external communication devices 70, 71, 72, 74. These external communication devices 70, 71, 72, 74 should be those that are available at client A. The communication device 68 can of course also communicate with other devices that are provided, for example, by the destruction service provider, for example with a central control device in which information relevant to the order and destruction is stored. Finally, there is the possibility that the communication device 68 also communicates with the electronic lock 17 of the individual containers 16, for example in order to read out information stored there, for example on the security level after which the individual container contents are to be destroyed.

The possibility of communication between the control device 68 and external devices 70, 71, 72, 74 arranged at the client A enables the client A to intervene in a controlling manner. It is shown by way of example that, for example, the corresponding device at client A consists of a smartphone 70 and / or tablet 72 and / or notebook or PC 74 and / or a special remote control unit 71. Several of these devices could also be available to the client A in order to communicate with the control device 46 and thus with the collection vehicle 10.

In this way, it is conceivable, for example, for these devices 70, 71, 72, 74 present at client A to transmit commands to the control device 46, for example the command to carry out the destruction process 32. Upon receipt of such a command, the control device 46 would then trigger the destruction process 32.

It is also conceivable that further information is transmitted to the control device 46 via the devices 70, 71, 72, 74 of the client A, for example on the security level according to which the destruction 32 of the collected data carriers 14 is to take place. It is also possible for an already started destruction process 32 to be aborted as soon as the client A sends a corresponding command to the control device 46 via the device 70, 71, 72, 74 available to him. It is also conceivable that the client A instructs the control device 46 via the devices 70, 71, 72, 74 available to him to change the security level according to which the destruction process 32 is carried out. In principle, the wireless communication device 68 of the control device 46 also allows information to be transmitted to the devices 70, 71, 72, 74 present at the client A. For example, after the destruction process 32 has been completed, this can be a message that the destruction has been completed. However, this can also be a customary destruction certificate, as is already customary in the prior art given to a client A to prove that the data carrier has been destroyed. However, it is also possible that status messages are output to the devices 70, 71, 72, 74 at client A or recorded image and / or video material is transmitted so that client A can, for example, observe or monitor the destruction process 32. It is also conceivable that the execution of the destruction process 32 is only started when a positive confirmation from the client A is available.

Claims

1. A method for the needs-based and mobile destruction of data carriers (14) in collection vehicles (10) using a system that includes lockable individual containers (16) for throwing in and receiving data carriers (14) with confidential content and a mobile collection vehicle (10) Collecting container (12) for emptying the lockable individual containers (16) into the collecting container (12), the emptied data carriers (14) from the individual containers (16) being destroyed in the collecting container (12) according to a destruction process (32), wherein the destruction process (32) has at least one shredding step (36, 36a) and is carried out controlled by a control device (46) according to a first process sequence, the emptied data carriers (14) being destroyed according to a first security level (P4) in this first process sequence , characterized in that the destruction (32) controlled by the control device (46) as required takes place according to a second process sequence, in this second process sequence the emptied data carriers (14) are destroyed according to a second security level (P7) which is higher than the first security level.

2. The method according to claim 1, wherein the destruction method (32) in addition to the shredding step (36) has at least one further treatment step (36a, 38a, 38b, 40, 48) for the emptied data carrier (14), characterized in that this further treatment step (36a, 38a, 38b, 40, 48) is carried out in the second process sequence and is not carried out in the first process sequence.

3. The method according to claim 2, characterized in that the further treatment step is an application of the emptied data carrier (14) with a liquid (48), the application of the data carriers (14) preferably takes place after their comminution (36), preferably from nozzles and in atomized form, the application preferably being with water, the liquid (48) is preferably stored in a liquid tank (50) arranged in the collecting container (12), the liquid (48) preferably being provided with an indicator.

4. The method according to any one of the preceding claims, characterized in that each individual container (16) has an electronically actuated lock (17) and the locks (17) of the individual container (16) so with the collecting container (12) Together, the individual containers (16) can only be opened in the collecting container (12).

5. The method according to any one of the preceding claims, characterized in that the control device (46) has a wireless communication device (68) and sets the destruction method (32) to be applied to the emptied data carriers (14) according to the first or second process sequence from via the communication device (68) received data.

6. The method according to claim 5, characterized in that the wireless communication device (68) communicates wirelessly with the electronically actuatable lock (17) and / or wirelessly with a stationary central control device.

7. The method according to claim 5 or 6, wherein the destruction is carried out as a service and after being commissioned by a client (A), characterized in that the wireless communication device (68) wirelessly with a mobile telecommunication device (70) or with a remote control device (71 ) or communicates with a computer device (72, 74), these devices (70, 71, 72, 74) being operated by the client (A) of the destruction.

8. The method according to claim 7, characterized in that the wireless communication device (68) transmits information on the destruction method (32) to the device (70, 71, 72, 74) operated by the client (A).

9. The method according to claim 7 or 8, characterized in that the method (32) controlled by the control device (46) is only carried out when the client (A) via the device (70, 71, 72, 74) operated by him gives a release signal.

10. The method according to any one of claims 7 to 9, characterized in that the destruction process (32) is aborted or changed if the client (A) via the device (70, 71, 72, 74) operated by him or an abort signal Change signal gives.

11. The method according to any one of the preceding claims, characterized in that the process sequence of the destruction method (32) recorded by measuring devices (58, 60, 62, 64) and recorded the recorded measurement data and / or to the client (A) of the destruction to the device (70, 71, 72, 74) served by him are transferred.

12. The method according to any one of the preceding claims, characterized in that the destruction process (32) comprises a compression step (40), for example a compression (40) with compression screws (42), wherein the addition of liquid (48) before and / or during the compression step (40) takes place.

13. System of lockable individual containers (16) for throwing in and receiving data carriers (14) with confidential content and a mobile collection vehicle (10) with collecting container (12) for emptying the lockable individual containers (16) into the collecting container (12), wherein a destruction device (34, 36) for destroying the emptied data carriers (14) from the individual containers (16) is arranged in the collecting container (12), the at least one

Crushing device (36, 36a), the destruction device (34, 36) being controlled by a control device (46) and being operable in a first operating mode, with the emptied data carriers (14) being destroyed according to a first security level (P4) in this first operating mode. takes place, characterized in that the destruction device (34, 36) of the

The control device (46) can be operated in a second operating mode if required, the emptied data carriers (14) being destroyed in this second operating mode according to a second, higher security level than the first, the system and the control device (46) being designed and set up for carrying out a method according to one of Claims 1 to 12.