EP0463294A1 - Electronic seal - Google Patents

Abstract

Transportation containers are locked with a seal to provide a means of checking whether or not the loading door has been opened during transportation. Conventional seals, if they are damaged or displaced, merely indicate that the lock has in fact been opened at some time. <??>The electronic seal described here also enables the times and duration of a plurality of successive opening operations to be recorded. The electronic seal comprises a seal band which can be anchored in a casing and a monitoring device with an opening sensor disposed in the casing, a clock generator, a counter, a memory and an operating voltage source. <??>Along with the time data relating to changes in the condition of the seal, further logistical data such as the starting time, time zone, place of origin, destination, country, owner, carrier, means of transportation etc. can be stored in the memory. The seal band is furthermore incorporated in the security loop which monitors the condition of the seal, for example by designing the seal band as an electric conductor via which electric monitoring signals are transmitted. <IMAGE>

Description

The invention relates to an electronic seal according to the preamble of claim 1.

Such seals, attached to locks in cargo holds, cargo boxes, holds or containers, enable a check to be made as to whether or not a lock which has been secured in this way has been opened during the transport route. Seals which have hitherto been customary and which consist of a sealing wire and a seal connecting the ends of the sealing wire have the disadvantage that tampering with falsified products is easily possible which simulates an intact seal even though the lock has been opened. Another disadvantage is that if the seal is opened justifiably, a new seal is required and that these seals can only be used once.

An electronic seal is known from US Pat. No. 4,766,419 which avoids these two disadvantages of a seal protected with a seal. There, a random generator generates a new combination of numbers from a clock generator and a counter, which is activated when the seal is opened, and is displayed on a display device. In order to generate the previous combination of numbers again, the seal would have to be opened and closed countless times, which largely prevents manipulation. Since the new combination of numbers is noted in the freight documents if the opening is authorized, there is no need to renew the seal after each opening.

However, this seal also only provides information as to whether the secured lock may have been opened or not. However, the time and frequency of breaking the seal cannot be determined. However, such a statement could help clarify the question of whether the seal was intentionally broken, improperly used or accidental damage.

The invention is therefore based on the object of improving an electronic seal so that information about the times of the seal openings and closings are available and all seal data are better protected against improper manipulation.

This object is achieved in an electronic seal according to the preamble of claim 1 by the features specified in the characterizing part.

According to the invention, in addition to the actual time data about changes in the sealing state, further logistic data can be stored in the memory in a novel manner. Such data can e.g. B. be: start time, i.e. the time of sealing, details of the relevant time zone, place of delivery, destination, country, owner, transporter of the sealed goods, means of transport, etc. With the help of this data, both the recipient and customs receive reliable information that was previously available were not accessible or were very difficult to access.

Furthermore, in the case of the invention, the sealing tape is surprisingly included in the security loop monitoring the sealing condition. Therefore, if the sealing tape is violently broken open and severed, this is recorded by the electronic seal stating the time.

The current count of the counter clocked by the clock generator is advantageously written into the memory each time the safety loop is interrupted. The memory content thus allows the allocation of a relative time to the respective seal breaks. The specification of a relative time offers the advantage over an absolute tent specification that errors due to different time zones in which the seal was closed or checked or broken open are excluded.

The sealing tape is advantageously designed as an electrical conductor or as a light guide, the corresponding signal path comprising a signal generator at the input and a signal receiver at the output. The signals passed over the sealing tape can be coded and / or modulated.

The design of the sealing tape as a light guide creates increased security against manipulation by a possible bridging of the sealing tape. Interruptions due to corrosion are also excluded. The training as an electrical conductor simply includes the entire sealing wire in the safety loop. Possible faults due to corrosion damage can, however, be selected through a suitable choice of materials, e.g. B. by using stainless steel. The arrangement of a signal transmitter at the input of the signal wire and the signal receiver at its output also enable the aforementioned coding or modulation of the signal sent via the sealing tape.

The counter reading of the counter clocked by the clock generator is constantly changed, which means that when the current counter reading is accepted into the memory, a relative time is saved. Since the stored data is not overwritten, but rather linked together, all information is retained. The number of seal breaks can thus be deduced from the number of memory entries.

The data transmission device allows much more information to be evaluated than can be displayed simultaneously on the limited area of an integrated display device. There is also the possibility of direct display to prevent relevant data on an integrated display device and to allow the evaluation only to those who have appropriate external supplementary devices of the data transmission device.

A further development provides that the memory is designed as a writable, non-volatile memory. Below this, one area is preferably rewritable and another area can be written once.

This allows the data to be saved permanently. A data loss due to a drop in the operating voltage cannot occur. It is thus ensured that the data originally written at the place of delivery and also the data of the meter stored even during sufficient operating voltage remain available even if the transport to the destination is delayed considerably.

In a preferred embodiment, the memory contains storage spaces for unchangeable characteristic data in the area that can be written to once. In the rewritable area, unchangeable characteristic data and in the rewritable area, in addition to storage locations for the current counter reading of the counter clocked by the clock generator, storage locations for logistic data such as start time, time zone, task location, destination, country, owner, carrier and means of transport are provided.

Thanks to the area that can be written on once, it is possible to save suitable data for identification, which cannot be changed later. Even if all rewritable memory locations have been deliberately or accidentally deleted or overwritten, z. B. still determine the owner of the seal.

The rewritable storage spaces offer storage capacity for a large amount of information, which practically enables seamless tracking of the transport route with opening and closing processes. Due to the redundancy with the information in the transport documents, errors can be eliminated and manipulations can be identified.

According to a practical embodiment, the opening sensor comprises a comparator, the signals coming from one input of the counter and the other input of signals coming from the counter are fed via a signal path through the closed sealing wire. The output of the comparator is connected to the control logic.

As a result, a change in state is generated each time the signal path leading through the sealing wire is opened or closed. It is irrelevant whether the sealing wire is removed from its anchorage or cut at any point. An opening of the seal is thus clearly and reliably recognizable and is saved each time with a time relative to the start time.

In addition, the output of the comparator can be connected to a switch which applies operating voltage to the control logic and the memory when the comparator changes state.

This feature relieves the built-in operating voltage source by switching off the memory and control logic in periods in which there is no change in state.

A voltage monitoring circuit is preferably provided, by means of which a "low battery value" can be written into one of the memory locations of the memory when the operating voltage drops below a threshold value.

In the case of an operating voltage which is no longer sufficient for operation, this information can be used to indicate the relative point in time from which the storage of data could be unreliable or up to which it can be assumed that the opening and closing processes of the seal will be recorded correctly.

In one possible embodiment variant, a display device, which is connected to the memory directly or via the control logic, for displaying the memory content and / or a "seal open" signal is integrated in the housing.

This display device can be a numerical or alphanumeric display that shows the stored data in whole or in part, or even just a function or error control that z. B. responds when the seal is opened.

A practical embodiment provides that the data transmission device comprises a unit integrated in the housing and an external unit, which each contain transmitters and receivers for a bidirectional data flow.

Such a design of the data transmission device enables a much more extensive evaluation of the stored data than would be possible with a display device integrated in the housing. In addition, the data can then be automatically recorded and processed centrally, avoiding the possibility of errors due to reading errors and manual transmission errors in the data read. From a security perspective, it is also advantageous to keep the recorded data secret and to make it accessible only to authorized personnel who have additional devices for displaying the data.

The bidirectionality also enables external data to be entered into the memory without mechanical intervention, as is the case with Trans port start is required.

It is further provided that the transmitter and receiver of the two units can be connected in a contactless, preferably electromagnetic, manner.

As a result, the circuit elements integrated in the housing can be hermetically separated from the outside. Electrical damage to the modules through manipulation is largely ruled out in this way. Transmission errors caused by dirty or damaged contacts are also avoided.

The unit integrated in the housing preferably comprises an energy receiver with an energy store and the external unit comprises an energy transmitter.

The electrical energy required for reading and writing data from or into the memory can thus be completely transmitted from the outside. On the one hand, this protects the built-in energy source necessary for operating the clock generator and counter, on the other hand it also allows the data to be read out even if the built-in energy source is defective or exhausted.

A development is particularly advantageous in which both the transmitter, the receiver and the energy receiver of the unit integrated in the housing as well as the transmitter, the receiver and the energy transmitter of the external unit each have a common resonance circuit.

This solution offers design advantages which are of great importance with regard to the smallest possible size of the housing and low manufacturing costs. It also ensures that energy transmission and data transmission in both directions are always possible together.

The external unit expediently comprises a further memory, a display device and an input device.

The data read from the memory can then be temporarily stored and saved for further evaluation. The data intended for writing can be prepared and then transferred to the memory without great expenditure of time and possible transmission errors.

In mechanical terms, a variant provides that the sealing tape is firmly anchored in the housing on one side and its other side can be fixed in a locking device.

As a result, the sealing tape always remains connected to the housing and cannot be lost when the seal is opened.

In another variant, the sealing tape can be fixed with both sides in a common locking device.

This configuration has the advantage that the sealing tape can be easily replaced in the event of breakage or corrosion.

The locking device expediently comprises a pivotable eccentric cam and a catch which engages in the eccentric cam in the locking position.

The eccentric cam then performs two tasks. One is to mechanically fix the sealing tape so that it does not slip out. The other creates a pressure against a contact, via which the closed signal path can be established. The eccentric cam is only released for actuation if the catch has been pressed in beforehand. This creates security against unintentional actuation of the eccentric cam.

Further developments and advantageous refinements of the invention result from the claims, the further description and the drawing which illustrates an exemplary embodiment of the invention.

• Fig. 1 ein Blockschaltbild eines elektronischen Siegels,
• Fig. 2 ein Blockschaltbild einer geeigneten Übertragungsvorrichtung des elektronischen Siegels,
• Fig. 3 eine Ansicht des Gehäuses des elektronischen Siegels mit einer Anzeigevorrichtung,
• Fig. 4 eine Ansicht des Gehäuses eines elektronischen Siegels mit einem einseitig fest verankerten Siegelband,
• Fig. 5 eine Ansicht des Gehäuses eines elektronischen Siegels mit einem zweiseitig arretierbaren Siegelband,
• Fig. 6 eine Ansicht des Gehäuses eines elektronischen Siegels in Verbindung mit einer externen Einheit,
• Fig. 7 eine Ansicht des Gehäuses eines elektronischen Siegels in Verbindung mit einer externen Einheit, die eine abgesetzte Eingabe- und Ausgabevorrichtung besitzt und
• Fig. 8 einen Längsschnitt durch eine Arretierungsvorrichtung.

The drawing shows:

• 1 is a block diagram of an electronic seal,
• 2 is a block diagram of a suitable transmission device of the electronic seal,
• 3 is a view of the housing of the electronic seal with a display device.
• 4 is a view of the housing of an electronic seal with a sealing tape firmly anchored on one side,
• 5 is a view of the housing of an electronic seal with a double-sided lockable sealing tape,
• 6 is a view of the housing of an electronic seal in connection with an external unit,
• Fig. 7 is a view of the housing of an electronic seal in connection with an external unit, which has a remote input and output device and
• Fig. 8 shows a longitudinal section through a locking device.

1 shows a block diagram of an electronic seal. The seal consists of a sealing tape 12 which is anchored in a housing (not shown here) and a monitoring device arranged in the same housing, here designated as a whole by 14.

The monitoring device 14 comprises an opening sensor 16, a clock generator 18, a counter 20, a memory 22 and an operating voltage source 24. The opening sensor 16 includes a comparator 34, the signals from one input of the counter 20 coming directly and the other input of signals coming from the counter 20 about a signal path 36 leading through the closed sealing band 12 are fed.

The memory 22 contains a plurality of memory locations, into which the current counter reading of the counter 20 clocked by the clock generator 18 can be written in succession by means of a control logic 26 each time the opening sensor 16 responds. The stored data can be read out later via a data transmission device 28 which is connected to the memory 22.

The memory 22 is designed as a non-volatile memory and has a rewritable area 30 and a write-once area 32. In the rewritable area 30, in addition to storage spaces for the current counter reading of the counter 20, storage spaces for logistic data are also provided. Such logistic data can e.g. B. the start time, the time zone, the place of destination, the destination, the country, the owner, the carrier or the means of transport. The write-once area 32 is for the storage of unchangeable characteristic data, such as. B. Factory number and first owner provided.

Another output of the comparator 34 is connected to a switch 38 which, when the comparator 34 changes state, applies operating voltage to the control logic 26 and the memory 22. During the other times when there are no write processes in the memory 22, the memory 22 and the control logic 26 are de-energized and in this way relieve the operating voltage source 24.

A voltage monitoring circuit 44 ensures that when the operating voltage drops below a threshold value, a "low battery value" is written into one of the memory locations of the memory 22.

The sealing tape 12 can be designed as an electrical conductor or as a light guide. The signal path 36, of which the sealing wire 12 is part, also includes a signal generator 40 and a signal receiver 42.

The sealing tape can be clamped at one end in a locking device 76 by means of an eccentric cam 78 and then comes into contact with an output terminal of the signal transmitter 40. If the sealing tape 12 is an electrical conductor, this can be a simple metallic contact. In the case of a light guide, a corresponding light source is required instead.

With the memory 22 directly or the control logic 26, a display device 46 is also connected, which as a simple indicator z. B. can be executed for a "seal open" signal or in the case of a numerical or alphanumeric display option also allows the display of the memory content.

The data 22 in the memory can be called up from the outside by means of a data transmission device 28 and later evaluated centrally. The data transmission device 28 also enables a registration z. B. the logistic data in the memory 22. Part of the transmission device 28 is a unit 48 integrated in the housing, which produces a data transmission path with an external unit, not shown here.

The circuit described so far works as follows. After the sealing tape 12 of the electronic seal has been passed through the eyes of the lock of a container to be sealed, it is locked in the locking device 76 by means of the eccentric cam 78. The signal path 36 is thereby closed.

Corresponding logistic data are now written into the memory 22 by means of an external unit and the seal is armed.

Now the clock generator 18 starts to increment the counter 20 from an initial value and the respective counter reading of the counter 20 is evaluated by the comparator 34. As long as the signal path 36 is closed, the comparator 34 receives this value in addition to the direct value of the counter 20 via the signal generator 40, the sealing tape 12 and the signal receiver 42. As long as the values at the two inputs of the comparator match, there is no change in the state at the exit. No data is therefore written into the memory 22.

If signal path 36 is now interrupted, be it that locking device 76 has been opened or sealing tape 12 has been damaged, comparator 34 recognizes this from the fact that different input values occur. A change in state at the output causes, via control logic 26, that the current state of counter 20 is written into memory 22. This is a relative time specification, which, however, can later be easily converted into an absolute time specification due to the further logistic data in the memory 22.

Before the actual writing process, the switch 38 was activated, which applied the memory 22 and the control logic 26 to the operating voltage.

If the sealing tape 12 is locked again after a certain time and the signal path 36 is thus closed, this change of state can also be written into the memory 22. It would then be possible to register both the times the seal was opened and the duration of the seal opening.

If the transportation of the container is significantly delayed due to special circumstances, it can happen that the operating voltage source 24, which must constantly feed the clock 18, the counter 20 and the comparator 34, is exhausted. In order to rule out any uncertainty as to which of the data written into the memory is still valid and which may possibly be incorrect, a battery low value is written into the memory 22 by means of the voltage monitoring circuit 44 when the operating voltage drops below a threshold value. It can then be seen from which point in time the battery is exhausted. The previously saved data can then still be regarded as valid, while any data saved later may be faulty.

Now that the container with the electronic seal has reached its destination, a log can be created by reading out the stored data, which contains precise information about the time and duration of the opening of the electronic seal.

After calling up this data, the electronic seal can be used again and the previously saved data can be overwritten by others.

A suitable data transmission device of the electronic seal is shown in the block diagram of FIG. 2.

The data transmission device 28 comprises a unit 48 integrated in the housing of the electronic seal, as is also shown in FIG. 1, and an external unit 50. In order to enable bidirectional data flow, both transmitters and receivers are located in both units 48 and 50. The unit 48 is a transmitter 52 and a receiver 56 for data and commands. Accordingly, a transmitter 54 and a receiver 58 are located in the external unit 50.

The relevant transmitters 52 and 54 and receivers 56 and 58 of the two units 48 and 50 are contactless and can be connected electromagnetically in the present case.

In addition to the transmission of data and commands, an energy receiver 60 with an energy store 62 is provided in the unit 48, which required the external unit 50 via an energy transmitter 64 to read data from the memory or to write data into the memory 22 Relates to energy.

A common resonance circuit 66 in the unit 48 or 68 in the unit 50 is used for transmission, to which the relevant transmitter and receiver for data as well as the energy transmitter 64 on the side of the external unit 50 and the energy receiver 60 on the side of the unit 48 are connected . An energy store 62 is connected downstream of the energy receiver 60, which causes a certain voltage stabilization and which in principle could also serve to charge the operating voltage source 24 in FIG. 1.

The external unit 50 comprises a further memory 70, a display device 72 and an input device 74. All the data transferred from the memory 22 to the further memory 70 can now be displayed and evaluated on the display device 72. Furthermore, data to be entered can be prepared by means of the input device 74 and stored in the memory 70 so that they are immediately available when a seal that has just been closed is activated. Due to the transmission device 28, a display device 46 in the housing of the electronic seal can be largely dispensed with, or the display can display a few values, such as, for. B. an opening indicator of the sealing wire can be limited. The stored data is then practically secret and can only be evaluated by persons who have a corresponding external unit 50 of the data transmission device 28.

The data transmission between the units 48 and 50 takes place when the resonance circuits 66 and 68 are sufficiently coupled to one another.

3 to 5 show different design options of the electronic seal.

The circuit of the electronic seal shown in FIG. 1 is located in a housing 10 which has openings for the sealing tape 12. The sealing tape can be fixed within the housing by means of the locking device 76. If the actuating lever of the locking device 76 is turned into a closed position, a catch 80 engages, which prevents it from being accidentally turned back into the open position. The locking device 76 can only be opened again after the catch 80 has been actuated.

Due to the illustrated size of the housing 10, the electronic seal can be easily attached to the lock of a container in question like a seal. A separate attachment is therefore not necessary.

If, however, an attachment is to be made, an attachment hole 82 is provided for this purpose, through which a bolt can be inserted, which can then be inserted e.g. B. is screwed on the other side of the door of a container.

The embodiment of the electronic seal shown in FIG. 3 has a display device 46 which is integrated in the housing 10. This display device 46 can display numerical and alphanumeric data about the memory content and also present a function and status display.

In the embodiment shown in FIGS. 4 and 5 a detailed display device is dispensed with. Rather, there is only one display device 46 z. B. provided in the form of a light-emitting diode, which only allows an indication of whether the seal was opened after arming or not. With regard to the fastening of the sealing tape 12 to the housing 10, different designs are shown in FIGS. 4 and 5. 4, one end of the sealing tape 12 is firmly anchored in the housing and only the other end can be locked by means of the locking device 76. The advantage here is that the sealing tape 12 always remains connected to the housing 10 so that it cannot be lost.

In the other embodiment according to FIG. 5, the sealing tape 12 can be fixed in the housing 10 on both sides by means of the locking device 76. This design has the advantage that the sealing tape 12 can be easily replaced in the event of damage.

6 shows a view of an electronic seal in connection with an external unit. The external unit 50 is here provided with a display device 72 which makes it possible to display the data stored in the memory 22 of the electronic seal. The arrow emanating from the housing 10 of the electronic seal points to a groove inside the housing of the external unit 50, into which the electronic seal can be inserted for better coupling of the resonance circuits.

6, only a limited data exchange is provided. This restriction relates in particular to the possibility of entering data.

In contrast, the representation according to FIG. 7 shows the view of the housing of an electronic seal in connection with an external unit which has a remote input and output device. The housing with the slot into which the housing 10 of the electronic seal is inserted for data transmission serves practically only as a read / write head. In contrast, the storage, display, evaluation and input of data takes place via a remote computer, of which the display device 72 and input device 74 are shown here.

Finally, FIG. 8 shows a longitudinal section through a locking device 76. This has a pivotable eccentric cam 78 which, in the locking position, presses the inserted sealing tape 12 against a contact spring 84 and, in the case of an electrical line, an electrical contact between the sealing tape 12 and the contact spring 84 manufactures. In a position pivoted by 90 °, the eccentric cam 78 releases the insertion channel, as a result of which the sealing tape 12 can be pulled out of the slot.

Claims (19)

1. Electronic seal, which has a sealing tape (12) that can be anchored in a housing (10) and a monitoring device (14) arranged in the housing (10) with an opening sensor (16), a clock generator (18), a counter (20), one Memory (22) and an operating voltage source (24), characterized in that in the memory (22) in addition to the time data on changes in the sealing state, further logistic data such as start time, time zone, task location, destination, country, owner, transporter and means of transport, etc ., Can be stored, and that the sealing tape (12) is included in the security loop monitoring the sealing condition. 2. Electronic seal according to claim 1, characterized in that the current counter reading of the clock (18) clocked counter (20) is writable in the memory at each interruption of the security loop. 3. Electronic seal according to claim 1 or 2, characterized in that the sealing tape (12) is designed as an electrical conductor or as a light guide and that the signal path (36) comprises a signal generator (40) at the input and a signal receiver (42) at the output . 4. Electronic seal according to one of the preceding claims 1-3, characterized in that the signals passed over the sealing tape are encoded and / or modulated. 5. Electronic seal according to one of claims 1-4, characterized in that the memory (22) contains a plurality of memory locations, in which, by means of a control logic (26), each time the opening sensor (16) monitoring the security loop responds, the current counter reading from Clock (18) clocked counter (20) is writable and that a data transmission device (28) is connected to the memory (22). 6. Electronic seal according to claim 5, characterized in that the memory (22) is designed as a writable, non-volatile memory, preferably one area (30) is rewritable and another area (32) is designed to be writable once. 7. Electronic seal according to claim 6, there characterized in that the memory (22) in the uniquely writable area (32) has storage spaces for unchangeable characteristic data and in the rewritable area (30) in addition to storage spaces for the current counter reading of the counter (20) clocked by the clock generator (18) and also storage spaces for the logistic data , such as start time, time zone, task location, destination, country, owner, carrier and means of transport. 8. Electronic seal according to one or more of claims 1 to 7, characterized in that the opening sensor (16) comprises a comparator (34) whose one input from the counter (20) signals directly and the other input from the counter (20) originating signals are fed via a signal path (36) leading through the closed sealing band (12), and that the output of the comparator (34) is connected to the control logic (26). 9. Electronic seal according to claim 8, characterized in that the output of the comparator (34) is also connected to a switch (38) which, when the comparator (34) changes state, to the control logic (26) and the memory (22) operating voltage creates. 10. Electronic seal according to one or more of claims 1 to 9, characterized in that a voltage monitoring circuit (44) is provided, by means of which, when the operating voltage drops below a threshold, a "low battery value" in one of the memory locations of the memory ( 22) can be registered. 11. Electronic seal according to one or more of claims 1 to 10, characterized in that in the housing (10) with the memory (22) directly or via the control logic (26) connected display device (46) for displaying the memory content and / or a "seal open" signal is integrated. 12. Electronic seal according to one or more of claims 1 to 11, characterized in that the data transmission device (28) in the housing (10) integrated unit (48) and an external unit (50), each transmitter (52; 54th ) and receiver (56; 58) for a bidirectional data flow. 13. Electronic seal according to claim 12, characterized in that the transmitter (52; 54) and receiver (56; 58) of the two units (48, 50) are contactless, preferably electromagnetic, connectable. 14. Electronic seal according to claim 13, characterized in that the unit (48) integrated in the housing (10) comprises an energy receiver (60) with an energy store (62) and the external unit (50) comprises an energy transmitter (64). 15. Electronic seal according to claim 14, characterized in that both the transmitter (52), the receiver (56) and the energy receiver (60) of the housing (10) integrated unit (48) and the transmitter (54), the The receiver (58) and the energy transmitter (64) of the external unit (50) each have a common resonant circuit (66; 68). 16. Electronic seal according to one or more of claims 12 to 15, characterized in that the external unit (50) comprises a further memory (70), a display device (72) and an input device (74). 17. Electronic seal according to one or more of claims 1 to 16, characterized in that the sealing tape (12) is firmly anchored on one side in the housing (10) and its other side can be fixed in a locking device (76). 18. Electronic seal according to one or more of claims 1 to 16, characterized in that the sealing tape (12) can be fixed with both sides in a common locking device (76). 19. Electronic seal according to claim 17 or 18, characterized in that the locking device (76) comprises a pivotable eccentric cam (78) and a catch (80) engaging in the locking position in the eccentric cam (78), the eccentric cam (78) only is released when the catch (80) is actuated.

Images