US20070096867A1 - Vending machines with field-programmable electronic locks - Google Patents

Vending machines with field-programmable electronic locks Download PDF

Info

Publication number
US20070096867A1
US20070096867A1 US11/583,670 US58367006A US2007096867A1 US 20070096867 A1 US20070096867 A1 US 20070096867A1 US 58367006 A US58367006 A US 58367006A US 2007096867 A1 US2007096867 A1 US 2007096867A1
Authority
US
United States
Prior art keywords
key
lock
electronic
vending machine
access
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US11/583,670
Inventor
William Denison
Bradley Silvers
Lawrence Brownfield
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US10/329,626 external-priority patent/US6900720B2/en
Application filed by Individual filed Critical Individual
Priority to US11/583,670 priority Critical patent/US20070096867A1/en
Publication of US20070096867A1 publication Critical patent/US20070096867A1/en
Abandoned legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46Multiprogramming arrangements
    • G06F9/50Allocation of resources, e.g. of the central processing unit [CPU]
    • G06F9/5061Partitioning or combining of resources
    • G06F9/5066Algorithms for mapping a plurality of inter-dependent sub-tasks onto a plurality of physical CPUs
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/76Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in application-specific integrated circuits [ASIC] or field-programmable devices, e.g. field-programmable gate arrays [FPGA] or programmable logic devices [PLD]
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/81Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00Individual registration on entry or exit
    • G07C9/00174Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00571Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by interacting with a central unit
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2101Auditing as a secondary aspect
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2103Challenge-response
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2107File encryption
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2137Time limited access, e.g. to a computer or data
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2151Time stamp

Definitions

  • This invention relates generally to vending machines, and more particularly to vending machines equipped with electronic locks.
  • Vending machines are widely used in various locations as automated means for selling items such as soft drinks, snacks, etc.
  • Traditional vending machines are equipped with mechanical locks, which can be unlocked with a corresponding mechanical key to open the door of the machine to allow reloading of goods and collection of money.
  • the mechanical keys and lock cores of vending machines are a point of attack for vandals.
  • the keys can be lost or copied easily, and the stolen or copied keys may then be used by an unauthorized person to access the machines, and it is difficult to discover such misuses and security breaches.
  • a skilled vandal can easily pick or drill-out the lock core tumblers and measure the key cuts of the lock core tumblers to re-produce a like key and compromise the security.
  • the mechanical lock cores of the affected vending machines typically have to be manually replaced, which is a time-consuming and very costly process.
  • mechanical keys and locks are devices that cannot be partially limited in operation they operate indefinitely if in use. Also, they do not have the ability to record access operation attempts of their operation.
  • the present invention provides a vending machine with a field-programmable electronic lock.
  • the electronic lock can learn a key code from a corresponding electronic key.
  • the electronic lock can learn that it should be accessed by an electronic switch controlled by a mechanical lock that can be opened with an associated mechanical key.
  • the electronic lock has a learning process activation device that is accessible only when the door of the vending machine is in the open position. Using the learning process activation device, a service person sets the electronic lock in a learning mode, in which the electronic lock receives a key code transmitted from an electronic key, and stores the key code in a non-volatile memory for future access control of the vending machine.
  • the electronic lock controller receives an electronic closure signal from the switch.
  • the lock thus learns that it is to open the door of the vending machine in response of the switch signal in lieu of reception of key codes from electronic keys.
  • the key-learning process in accordance with the invention allows electronic locks in vending machines to be easily and inexpensively programmed in the field.
  • the electronic locks do not have to be manufactured with pre-defined permanent key codes and are not tied to any specific electronic keys for field use. There is no need to replace any physical part of the electronic lock in this key-learning process to learn a new key code and/or replacing an old key code.
  • mechanical locks conventionally used on vending machines have lock cores that have to be manufactured for specific keys, and once manufactured the lock cores cannot be changed. If the mechanical key is lost, the entire lock cores have to be replaced. More than one electronic key can possess a given keycode.
  • the electronic lock on a vending machine can allow more than one keycode to be learned into the lock and used to access the lock.
  • the use of the field-programmable electronic locks for vending machines provides an effective way to reduce theft and fraud in terms of unauthorized access to the machines.
  • the electronic keys provide a greater level of key security compared to mechanical keys, as they cannot be copied as easily as conventional mechanical keys.
  • the use of non-contact wireless data communication between the key and the lock prevents breeches of security associated with vandals measuring key cuts, copying keys and picking locks.
  • the use of data encryption in the wireless communications between the key and the lock prevents the key code from being copied by electronic monitoring and eavesdropping.
  • the data transmission between the key and lock may be implemented in the infrared range to provide close-proximity highly directional communication of secure codes to further prevent eavesdropping of the security codes and to prevent accidental unlocking of locks.
  • programmable electronic locks on vending machines and the associated electronic keys also provides advantages in terms of significant reduction in the costs associated with managing the distribution of the keys for unlocking the machines and the monitoring of the usage of the keys.
  • Key IDs in addition to the key codes used in accessing the lock may be used to distinguish keys having the same key codes.
  • Customized access limitations may be programmed by a supervisor into the electronic keys to restrict when and how they can be used to access the vending machines.
  • Each key may also be programmed with a specific list of lock IDs identifying the electronic locks oh vending machines that the key is allowed to unlock.
  • a history of access attempts may be stored in each of the electronic key and the electronic lock for audit purposes.
  • the key may store the access history each time it is used to access an electronic lock on a vending machine.
  • each electronic lock on a vending machine may store audit data regarding the access attempts directed to it.
  • the audit data may be transferred from the electronic lock to the electronic key during an unlocking operation, and the audit data of different vending machines collected by an electronic key can be later downloaded to a computer for analysis.
  • the electronic lock may accept more than one type of keys and corresponding key codes.
  • the different key types may be associated with different levels of security of the unlocking operations and the type of data transmitted between the key and lock during the unlocking operations.
  • the electronic lock in a vending machine can work in conjunction with an electronic communication device in the vending machine that is in wireless communication with a home base to accomplish many of the same access control, auditing, and additionally some inventory and money settlement processes.
  • FIG. 1 is a schematic view of a vending machine and an electronic key for opening an electronic lock inside the vending machine;
  • FIG. 2 is a perspective view of an electronic lock assembly mounted on a door of a vending machine
  • FIG. 3 is a block diagram showing electronic circuit components of an electronic lock used in a vending machine
  • FIG. 4 is a block diagram showing electronic circuit components of an electronic key
  • FIGS. 5A and 5B are schematic diagrams showing key codes stored in the memories of an electronic key and an electronic lock, respectively;
  • FIG. 6 is a schematic diagram showing the transmission of data between an electronic lock on a vending machine and an electronic key during a simplified unlocking process
  • FIG. 7 is a schematic diagram showing communications between an electronic lock on a vending machine and an electronic key during an unlocking process that has higher security than the process in FIG. 6 ;
  • FIG. 8 is a schematic diagram showing communications between an electronic lock on a vending machine and an electronic key during an unlocking process similar to that FIG. 7 but with a step of checking the lock ID for access control;
  • FIG. 9 is a schematic diagram showing a computer used to program operational limitations into an electronic key
  • FIG. 10 is a schematic diagram showing the downloading of audit data from vending machines to an electronic key.
  • FIG. 11 is a schematic diagram showing an example of audit data uploaded from a vending machine to an electronic key.
  • FIG. 12 is a flowchart showing the key code learning process of an embodiment of the electronic lock
  • FIG. 13 is a flowchart showing an operation by an embodiment of the electronic key to back up the time and date for restoring the clock of the key in case of a faulty or removed battery;
  • FIG. 14 is a flow chart showing an operation by the electronic key to record the number of power-up of the key to prevent tampering by battery removal;
  • FIG. 15 is a schematic block diagram showing an embodiment of a vending machine that has a communication device that is interfaced to the electronic lock and in wireless communications with a home base for access control and auditing purposes;
  • FIG. 16 is a schematic diagram showing vending machines accessible by an electronic key that has a narrow wireless signal transmission pattern to avoid accidental opening of the vending machines.
  • vending machine means a device that performs a money transaction, which may involve the insertion of cash or commercial paper, or the swiping of a credit and/or debit card, and may (but not required to) dispense an item or items or provide functions in response to the money transaction.
  • this term is meant to cover broadly machines commonly used for vending drinks and snacks, ATM stations, change machines, toll machines, coin-operated laundry machines, video arcades, etc.
  • FIG. 1 shows, as an example, a vending machine 20 with an embodiment of an electronic lock of the invention mounted therein.
  • the vending machine 20 has a front panel 22 or door that can be opened when the electronic lock is unlocked with a properly programmed electronic key 26 . It will be appreciated that the vending machine and the electronic key are not shown to scale in FIG. 1 , and the view of the electronic key is significantly enlarged with respect to the vending machine to show its features.
  • the key 26 and the lock preferably communicate with each other wirelessly, which may be via an infrared or radio frequency (RF) channel.
  • the wireless communications between the key and the lock is via infrared transmissions.
  • the infrared medium is preferred because it is directional and short range, and the infrared circuitry in the lock is not sensitive to the metal cabinet enclosure of the vending machine. Thus the vending machine will less likely be opened accidentally if the key is accidentally operated of if the key is operated to unlock another vending machine nearby.
  • the infrared light can travel through the selection buttons on the vending machine. This allows the infrared transceiver of the electronic lock to be positioned behind a selection button 30 of the vending machine, as illustrated in FIG. 1 .
  • the vending machine 20 has an infrared transceiver disposed to receive infrared transmission through its front panel 22
  • the electronic key 26 has an infrared transceiver at one end 32 .
  • the electronic key 26 has a very simple profile, having only a “START” button 36 that can be activated by a user for lock opening and key code learning operations.
  • the “START” button 36 need not be continuously pressed in order for the key to transmit the encrypted code to the lock.
  • the electronic key 26 also has a light-emitting diode (LED) 38 exposed through a hole in the housing of the key for indication the operation status of the key.
  • LED light-emitting diode
  • the electronic lock assembly is mounted inside the vending machine 20 to prevent unauthorized access and tampering. It can be physically accessed only when it is properly unlocked and the door 22 or front panel of the vending machine is opened.
  • the electronic lock assembly 48 is mounted on the inside of the door 22 , and opening the door of the vending machine exposes the lock assembly housing 40 .
  • the electronic lock 48 includes a lock shaft 42 that engages into a corresponding receptacle in the body of the vending machine to prevent the door from being opened when it is in a locked position.
  • the electronic circuit of the lock resides in the housing 40 of the lock assembly.
  • the housing 40 has two holes.
  • Behind one hole 44 is a “LEARN” switch connected to the electronic lock circuit. This switch can be accessed and pressed down with a thin object, such as a screwdriver or a car key.
  • Behind the other hole 46 is a light-emitting diode (LED), which servers as a means for providing an indication of the operational state of the electronic lock during a key code learning operation or a lock opening operation, as will be described in greater detail below.
  • LED light-emitting diode
  • the circuit of the electronic lock 48 comprises a microcomputer 50 , a non-volatile memory 52 , a half-duplex IRDA infrared communication interface 54 for communicating with an electronic key, a power supply voltage regulator 56 , a lock motor or solenoid control circuit 58 , position feedback switches 60 , a learn switch 62 as mentioned above, and the LED 64 for state indication.
  • the non-volatile memory is for storing key codes 68 , encryption codes 70 , and audit data 72 , as will be described in greater detail below.
  • the vending machine with the electronic lock is to be accessed using a mechanical key rather than an electronic key.
  • the electronic lock includes an interface to a combination (the “switch-lock” combination) of an electrical switch 74 and a mechanical lock 76 that has a cam for moving the switch into a closed or open position.
  • the electrical switch 74 is normally in an open state and is closed when the mechanical lock 76 is opened using an associated mechanical key 78 .
  • the open/close state of the switch 76 is detected by the microcomputer 50 and is used to determine whether the mechanical lock 76 is opened or closed.
  • the microcomputer 50 is programmed to unlock the door 22 of the vending machine 20 in response to the closing of the switch contact caused by unlocking of the mechanical lock 76 using the mechanical key 78 .
  • the unlocking process does not involve the passing of a key code between the electronic lock and an electronic key. Accordingly, as described in greater detail below, during a learning process, the electronic lock learns that it is to be accessed using a mechanical key instead of an electronic key with a key code.
  • the electronic key 26 includes a microcomputer 80 , a non-volatile memory 82 , a half-duplex IRDA infrared communication interface 84 for communicating with the electronic lock of a vending machine or with a computer for programming the key, a power source (e.g., a battery) 86 , a real-time clock integrated circuit (IC) 94 for generating data indicating the date and time, and the “START” switch 36 and the LED light 38 as mentioned above.
  • the non-volatile memory 82 is for storing a key code 88 , encryption codes 90 , and audit data 92 generated by the key and/or downloaded from vending machines operated using the key, as will be described below.
  • the key codes in the keys and the locks of the vending machines are used to define the security and access control strategy of the electronic lock system.
  • Each electronic key 26 has a key code 88 stored therein, and the same key code is stored in the memory 52 of the electronic lock in each vending machine to be operated with the electronic key.
  • the key code in the electronic key is transferred from the key to the electronic lock using a secured communication method.
  • the electronic lock can be unlocked if the key code it receives from the electronic key matches the key code stored in the memory of the lock.
  • a key code 68 stored in an electronic key includes seven (7) digits.
  • the first digit of the key code is used to indicate the type of the key. As the value of the key-type digit may go from 0 to 9, there may be up to 10 total key types.
  • the next 6 digits in the key code are the access code ( 000 , 000 to 999 , 999 ).
  • a key code stored in the electronic key additionally includes two lower digits, which may be used as the identification (ID) code of that key.
  • ID may vary from 0 to 99. Thus, there may be up to 100 keys that have the same key type and access code but different key ID numbers.
  • a key code 68 stored in the electronic lock has seven (7) digits.
  • the first digit indicates the key type, and the remaining 6 digits are the access code.
  • the electronic lock 48 of the vending machine 20 is field-programmable.
  • the key code or key codes of the electronic lock 48 can be programmed (or “learned”) into the non-volatile memory 52 of the lock after the vending machine has been installed in a given location.
  • the electronic keys to be used to operate the vending machines are programmed with a permanent key code at the factory and ordered by the users of the electronic locks. In the example given above, the users may order up to 100 keys with the same access code.
  • the electronic locks to be used in the vending machines are not programmed with any customer-specific key code. Instead, the electronic locks are programmed with a universal code at the factory.
  • the “universal code” is the code put in the lock by the manufacturer of the lock or the vending machine, and is used by the customers to unpack and open the machines after they receive the machines. Thereafter, the electronic locks are installed in the vending machines, which are then shipped to and set up at their respective operating places.
  • the access control strategy is established by “learning” or transferring the access code of the electronic key to be used to operate the machine into the electronic lock via a secured transfer process.
  • the service person has to gain access to the LEARN switch 62 of the lock.
  • the lock microcomputer senses, using the position switches 60 , that the lock is in the unlocked position to allow entering into the “learn” mode (step 260 in FIG. 12 ).
  • the service person uses a key containing the universal key code to unlock the vending machine and open the door to gain access to the LEARN button of the lock.
  • the LEARN switch 62 should be at a secured location such that it can be accessed only when the lock is properly unlocked (as opposed to a forced entry) and when the door is open.
  • An assumption in the access control strategy is that an authorized person is servicing and/or reprogramming the lock if the door is properly unlocked and opened.
  • the microcomputer 50 detects (step 262 ) that the LEARN switch 62 is pressed (e.g., held for longer than three seconds), it waits (step 266 ) for the switch to be held in that position for a pre-selected time period (e.g., 3 seconds) and then enters a LEARN process (step 268 ).
  • the LED 64 is turn on (step 270 ).
  • the LEARN switch 62 can be substituted by another activation means that provides a greater level of security, such as a keypad for entering a service authorization code or an electromechanical switch lock that requires a mechanical or another electronic key.
  • the service person operates the electronic key 22 containing the desired key code by pressing the button 36 on the key. This causes the key 22 to transmit the key code stored in its memory to the electronic lock. If the electronic key and the lock employ encryption techniques in their communications, the electronic key 22 first encrypts the key code 88 with the encryption codes 90 in its non-volatile memory and then transmits the encrypted code.
  • the service person is given a pre-selected timeout period (e.g., 15 seconds) to press the key to transmit the key code.
  • the lock 48 determines whether it has received the transmitted key code (step 272 ). If it determines (step 274 ) that a key code transmission is not received within the timeout period, the learning process is terminated. If a key code has been transmitted within the timeout period, the electronic lock 48 receives the transmitted key code via its receiver port 30 . If the transmitted code is encrypted, the electronic lock decrypts the received data with the encryption codes 72 in its memory 52 .
  • the encryption codes in the electronic key and the electronic lock are inserted during manufacturing at the factory, and different encryption codes may be used for different vending machine owners (e.g., different soft drink bottlers) so the keys given to one owner may not be learned into and used to access the vending machines of another owner.
  • the electronic lock will not be able to successfully decrypt the received key code. In that case, the process will end and the lock will not learn the new key code. If, however, the decryption was successful, the lock stores the key code at a proper location in its non-volatile memory 52 according to its key type (step 276 ). After verifying that the key code is stored correctly in the proper key type location, the lock 48 provides a signal to the service person by flashing the LED 64 to indicate that the LEARN process is successfully completed (step 278 ). From this point forward, the electronic lock will use the newly learned key code for access control. In other words, it will compare this key code with the key code transmitted from an electronic key to determine whether the door should be unlocked. If there was a key code of the same key type previously stored in the memory 52 prior to the LEARN operation, that old key code will be erased and can no longer be used to access the vending machine.
  • the vending machine equipped with the electronic lock may be accessed with a mechanical key rather than an electronic key.
  • the electronic lock learns that it is to be controlled by the combination of the electrical switch 74 and the mechanical lock in a learning process similar to the one for learning a key code as described above.
  • the service person puts the electronic lock into the learn mode by pressing the LEARN switch 62 as described above.
  • the service person uses the mechanical key 76 to unlock the mechanical lock 76 .
  • the mechanical lock 76 is moved to its unlocked position, its cam closes the contact of the electrical switch 74 .
  • the microcomputer 50 of the electronic lock receives the contact-closure signal (i.e., detecting that the electrical switch is closed) and treats the signal as indication that the vending machine is to be accessed using a mechanical key.
  • the microcomputer set its operation mode such that in the future it will unlock the door of the vending machine in response to detecting the closure of the contact of the electrical switch 74 .
  • the vending machine is accessed using the mechanical key 78 , which replaces one or more types of electronic keys.
  • the key learning process described above does not require changing or replacing any physical components of the lock. If the electronic key for operating the lock on the vending machine is stolen or lost, the service person will first use a back-up key that has the key code of the key that is lost, or a key that has a different key code that has been previously learned into the lock, to open the door. The service person then uses the key learning process described above to change the key code in the memory of the lock to a new value.
  • This field-programmability of the electronic lock makes key management significantly easier and cost-effective, and provides a greater level of key security compared to mechanical keys. In contrast, with conventional vending machines using mechanical locks, the mechanical keys may be copied or stolen easily, and the entire lock core of each of the vending machines affected has to be replaced in order to change to a different key.
  • each key code stored in the lock indicates the type of the key, and there may be up to ten different key types.
  • a lock is able to learn one key code for each allowed key type.
  • a key code of a first type may be that learned from a “primary” electronic key for the vending machine, while a key code of a second type may correspond to a different electronic key, such as a “master” key that can be used as a back-up in case the primary key is lost, stolen, broken, or otherwise unavailable.
  • different types of electronic keys are provided that correspond to different levels of security (and the associated complexity of communication) and audit data collection function.
  • the three types of electronic keys are economy key, standard key, switch-lock, and auto-tracking key. The operation of each of these three types of keys is described below.
  • the economy key employs a simple one-way communication process for interacting with a corresponding electronic lock on a vending machine. Since the communication process is simpler and the one-way communication does not require a receiver in the key, the key can be build at a lower cost.
  • the memory 102 of the economy key contains a key code 104 , an encryption code 106 , and a random number 108 .
  • the key starts with a given value of the random number, and the random number changes every time the key cycles through a key code transmission.
  • the key uses the encryption code to encrypt (step 110 ) the key code 104 together with the random number 108 , and transmits the encrypted number 112 to the electronic lock.
  • the electronic lock receives the transmitted encrypted data, it decrypts (step 116 ) the data with the encryption code 118 in its memory 52 .
  • the lock retrieves the key code 122 from the decrypted data and compares it with the key code 120 of the same type in its memory. If the two key codes do not match, the process ends. If they match, the electronic lock proceeds to unlock the door of the vending machine.
  • the standard key provides a more secure unlocking process that requires 2-way encrypted communications between the key and the electronic lock.
  • the 2-way communications is in the form of a bi-directional challenge-response process.
  • the memory 130 of the key contains the key code 132 , the encryption code 134 , a real-time clock timestamp 136 , and a random number 138 .
  • the memory 52 of the electronic lock of the vending machine contains a learned key code 140 , the encryption code 142 , and an ID 146 of the electronic lock.
  • the electronic key When the service person presses the transmission button on the electronic key, the electronic key encrypts (step 150 ) the key code 132 in its memory together with the time stamp 136 and the random number 138 , and transmits the encrypted key code and timestamp to the electronic lock of the vending machine.
  • the electronic lock receives the transmitted data 152 through its infrared communication interface and decrypts (step 156 ) the received data with the encryption code 142 in its memory.
  • the electronic lock compares (step 162 ) the decrypted key code 160 with the key code 140 of the same type in its memory. If the two key codes don't match, the process ends, and the door will not be unlocked. In that case, the electronic lock sends a code to the key to indicate that the key has tried an incorrect key code.
  • the process continues and enters a second phase in which the electronic lock transmits data to the electronic key.
  • the lock encrypts (step 164 ) the key code, the lock ID 146 , and the random number. It then transmits the encrypted key code, lock ID, and the random number (originally sent by the key) to the electronic key.
  • the electronic key receives the encrypted data 166 and decrypts (step 168 ) the data to retrieve the key code and the lock ID. If the key determines (step 172 ) that the key code 170 returned by the lock matches the key code 132 in the memory of the key, it stores data regarding the access event, including the lock ID, in an audit trail data portion of the key's memory for audit purposes.
  • the key then proceeds to the third phase of the unlocking process, in which the key communicates to the lock to allow access.
  • the key encrypts (step 176 ) the received lock ID and transmits the encrypted lock ID and random number to the lock.
  • the lock receives the transmitted data 180 and decrypts (step 182 ) the data to retrieve the lock ID. If the received lock ID 186 matches the lock ID 146 stored in the memory of the lock, the microcomputer of the lock proceeds to unlock the door of the vending machine.
  • the unlocking operation described above has several advantages. It allows the transfer of the lock ID and the key codes between the electronic key and the lock on the vending machine without repeating numbers or a distinguishable pattern of numbers in case of eavesdropping of repeated access attempts. It also prevents a transfer of data between the key and the lock with different encryption codes. Further, it provides a consistent and secure means of data transfer between the key and the lock for a condition where many keys with the same key code will be expected to communicate with many locks on different vending machines containing that key code. This bi-directional challenge-response encryption scheme provides no risk of the keys and the locks going out of sequence, which is a common problem with unidirectional rolling-code encryption systems.
  • the lock ID code is used in the unlocking operation described above for generating audit data for audit trail identification purposes and also for data transfer encryption purposes. In an alternative embodiment, however, it is also be used to provide a method for controlling which vending machines a key is allowed to access. In this method, there may be many keys containing the same key code, and there may be many vending machines that have “learned” the same key code. It is possible, however, to specify which vending machines a given key is allowed to access so that a single key cannot open all the vending machines. Referring to FIG. 8 , this is accomplished by loading a list of lock ID codes 192 into the memory 130 of that key prior to operation.
  • the key receives a lock ID 174 from the electronic lock on the vending machine and compares the received lock ID with the list of lock IDs 192 in its memory. Only if it is determined (step 198 ) that the received lock ID 174 matches one of the lock IDs in the list will the key proceed to send the unlock command signal (e.g., the transmission 180 in the third phase) to the electronic lock. As shown in FIG. 8 , the unlocking process is otherwise similar to that shown in FIG. 7 . This method of access control provides supervisors of the operation the flexibility of allowing or disallowing a given key to access selected vending machines.
  • an electronic key may also be programmed with other types of limits of operation of the key.
  • the key may be programmed with limit registers that contain values chosen by a supervisor to limit the operation of that particular key.
  • the limit registers 200 ( FIG. 4 ) are part of the non-volatile memory 52 .
  • the operation limits include, for example, time of data, date, number of days, number of accesses, number of accesses per day, etc.
  • the key operation limits may be set by the supervisor 208 of the employee that uses the electronic key 212 to access vending machines in the field.
  • the limits can be selected by using a personal computer (PC) 210 with the appropriate software program.
  • the limits for each key may be customized depending on, for instance, the work schedule or habits of the employee to whom the key is given.
  • FIG. 9 shows an exemplary user interface screen 216 for prompting the user 208 to enter the limits. After the limits are selected on the PC 210 , they are loaded from the PC into the operation limit registers in the electronic key 212 in a communication process between a key read/write device 218 and the key.
  • the communication process may be used to transfer data, such as the audit trail data collected from vending machines by the key during previous field operations, from the electronic key 212 to the PC 210 .
  • an advantage of electronic keys is that they can be used to record and collect and track the attempted accesses of locks on vending machines in the field. Keys that provide this function are of the “auto-tracking” type mentioned above.
  • each access attempt triggers an audit data event in both the electronic key and the electronic lock in the vending machine 20 .
  • a space for audit data is reserved in each of the non-volatile memories of the key 212 and the lock 48 .
  • the key 212 transfers the key code 220 and a timestamp 222 to the lock.
  • the lock stores the key code and timestamp in its audit data memory.
  • the lock will filter the number of accesses from a given key in a given period (e.g., one attempt per key for every 20 minutes) so that it does not create a separate record for each access attempt. It may, however, include data in the record counting the number of access attempts from the key in the time period. This minimizes the chances that when a key is used to make many access attempts in a row it will fill the audit trail memory and erase existing records of previous access attempts.
  • One way to set this time period in the lock is to transfer the value of the period from a key (which is in turn set by a supervisor using a PC) to the lock.
  • the access process is terminates. In either case, the lock transfers its lock ID 228 to the key 212 .
  • the key is expected to store the lock ID and the timestamp in its audit data memory as an invalid access attempt.
  • the lock still transfers its lock ID to the key 212 .
  • the key 212 then stores the lock ID and timestamp in the audit data memory as a record of a proper access.
  • the lock transfers all the audit data 228 entries in its audit data memory to the key.
  • the data in the audit data memory includes the lock ID, a record for each access attempt that includes the entire key code (including the key ID digits) received from the key that made the access attempt, and the timestamp for that access attempt.
  • the auto-tracking key 212 then stores the audit data 228 of the lock in its own non-volatile memory.
  • each key preferably is capable of uploading the audit data memories of 200-300 vending machines. This eliminates the need for a separate process or equipment in the field for performing the same data retrieving function.
  • the audit data they generated themselves and the audit data they collected from the vending machines 20 can be transferred to a central control computer 210 .
  • the audit data can be downloaded to the PC 210 by the supervisor using the key read/write device 218 that is also used for programming the electronic key.
  • FIG. 11 shows exemplary audit data collected by an auto-tracking key from a vending machine.
  • the key code stored in the lock on the vending machine is “A 100 ”.
  • the vending machine was accessed using the auto-tracking key on Dec. 8, 2001. Since the key contains the correct key code, the access operation is successful. Thereafter, there were two unauthorized access attempts. The first unauthorized access attempt on Dec. 19, 2001 failed, because the key code (“A 500 ”) in the electronic key did not match the key code in the lock. The second unauthorized attempt on December 20 used a stolen key with the right key code and was successful.
  • the auto-tracking key is used on Dec.
  • the audit data 232 stored in the memory of the electronic lock on that vending machine are transferred to the auto-tracking key, which stores the transferred audit data in its own memory.
  • the audit data 236 identifies the vending machine from which the audit data are uploaded.
  • the audit data 236 stored in the key are later downloading to the home base PC.
  • the electronic key uses its LED light to provides several diagnostic signals to the user when its START button is pressed and when it is communicating with the electronic lock. If the key correctly communicates with the lock and the key codes match, the LED light is on continuously for about five seconds. If the key correctly communicates with the lock but the key codes do not match, the LED light flashes around five times a second for about five seconds. If the key cannot establish correct communication with the lock, the LED light is set to flash faster, such as 25 times a second, for about five seconds. If the key correctly communicates with the lock and the key codes match, but the operation limits set in the limit registers are exceeded, the LED flashes at a lower frequency, such as three times per second for about 3 seconds. If the START switch of the key is pressed and the key does not communicate with the lock and its operation limits are exceeded, the LED first flash quickly, such as 25 times per second, for up to 5 seconds, and then flash three time per second for up to three seconds.
  • a diagnostic tool 240 is used in the field to communicate with electronic locks on vending machines, which provide diagnostic information in the event of problems with the operation of the lock or the door.
  • the diagnostic tool 240 includes a display 242 that displays information read from the electronic lock.
  • the display may show each of the access control key codes stored in the non-volatile memory of the lock, the lock ID of that lock, and any other information pertaining to the state of the electronic lock, such as an indication of whether the lock expects the door to be in a locked or unlocked state based on a position-control feedback measured by the lock circuit.
  • security measures are implemented in the electronic key concerning key tampering by replacing the battery in the key. It is possible that the employees or thieves that gain access to the electronic keys will attempt to trick the security of the system by tampering with the key. Since the key contains the clock that provides the time and date of access limiting, it is likely the users will attempt to disable or trick the clock to override the access limits. For example, if the key operation limits are set to only allow accesses between 7 AM and 6 PM, the user may attempt to disconnect the battery of the key in-between lock accesses to stop the clock in the key from counting down the time and disabling the key.
  • the key is programmed such that it will reset its clock back to approximately the correct time and date after the battery is reconnected. This feature is provided for both cases of the battery going low naturally or if it is tampered with by the user.
  • the microcomputer 80 of the key reads the time and date from the clock 94 (step 292 ), and stores the time and date data 298 in the non-volatile memory 82 of the key (step 296 ).
  • the key may store the time and date periodically, such as every 1-2 minutes.
  • the key starts a power-up process (step 300 ).
  • the microprocessor is programmed to read the back-up time and date 298 stored in the non-volatile memory 82 (step 302 ) and writes that time and date into the clock 94 (step 306 ).
  • the clock will then run based on the restored time and date as a substitute until the electronic key is re-docked into the cradle and the home base computer 210 stores a new accurate time and date in the clock of the key.
  • the key can still be used to access locks on the vending machines as long as the operation limits of the key are not exceeded.
  • the microcomputer 80 in the key employs logic that counts the number of times the battery is removed and will immediately disable the key indefinitely if the battery is disconnected and re-connected more than a pre-selected number of times, such as three times.
  • the microprocessor maintains in the non-volatile memory 82 a counter 312 that counts the number of times the key has been powered up since the last docking of the key. This counter 312 is cleared each time the key is docked.
  • the microcomputer 80 reads the counter 302 (step 316 ).
  • the microcomputer determines (step 318 ) that the counter reading has reached the allowed number of power-up, such as 3 times, it disables the key from any access operation. If the allowed number of power-up is not reached, the microcomputer increments the counter (step 320 ). Thereafter, the key continues with regular key operation, but with each access attempt the key will store a “battery removed” bit with the audit data for that access event in the memories of the lock and the key. This “battery removed” bit indicates that the time and date stamp of the access event is recorded after the key battery was disconnected, and that the accuracy of the time and date is questionable.
  • the vending machine 20 is equipped with an electronic device for communicating with the home base.
  • the communication device 360 preferably communicates wirelessly, such as over a RF channel, to the computer 210 at the home base of the owner of the vending machine.
  • the vending machine also includes a vendor controller electronic circuit 362 for controlling the operation of the lock 48 .
  • the vendor controller 362 is connected to the lock 48 and the communication device 360 .
  • the electronic lock 48 working together with the vendor controller 362 and the communication electronic device 360 in communication with the home base can accomplish many of the same access control and auditing functions described above and additionally some inventory and money settlement processes.
  • the communication device 360 can receive a command from the home base to disable operation of the lock 360 regardless if an electronic key with the correct key code attempts to access the vending machine.
  • the lock 48 can indicate to home base computer 210 through the communication device 360 which keys have attempted to access of the vending machine. This arrangement eliminates the need to use an electronic key to collect, store, and transfer the audit events to the home base via the memory and communication medium of the key.
  • the communication device 360 may be used with the vendor control 362 to keep track of the inventory and the cash transactions of the machine.
  • the vendor control 362 is involved in interfacing with the service person to ensure the proper resetting and settlement processes take place, and that the service person closes the door of the vending machine.
  • the vendor controller 362 can inform the home base computer of the open/close state of the vending machine door.
  • the Route Driver does not satisfy the conditions of the vendor controller 362 by way of inventory or monetary or debit card processing
  • the vendor controller can send a disable signal to the electronic lock 48 so the door of the vending machine cannot be closed and locked.
  • the vendor controller can allow the vendor door to be locked before the service person leaves the vending machine.
  • the wireless transceiver of the electronic key 26 is designed to have limited transmission range and angle to prevent a vending machine 380 from being accidentally opened due to receiving stray transmission from the key when the key is used to open another vending machine 20 in its vicinity.
  • the transmitter 382 of the key 20 has a pre-defined transmission angle 386 .
  • the transmission from the key 26 has a limited transmission power range 388 , beyond which the signal strength is generally too weak for the transceiver 390 of the electronic lock of the vending machine 20 to reliably detect.
  • the transmission power and the transmission angle 386 of the key 26 is selected such that the width 392 of the transmission pattern at the effective transmission range 388 is about the same or smaller than the width of the vending machine 20 .
  • the transceivers in the keys and the electronic locks on vending machines are infrared transmitters for transmitting and receiving infrared signals.

Abstract

A vending machine uses a field-programmable electronic lock that learns a key code from a corresponding electronic key. The electronic lock has a learning process activation device that is accessible when the door of the vending machine is in the open position. Using the learning process activation device, a service person activates the electronic lock to perform a key code learning operation, in which the electronic lock receives a key code transmitted from an electronic key and stores the key code in a non-volatile memory for future access control of the vending machine. Data encryption is employed in the communications between the key and the lock to ensure the security of the communications. A communication device installed in the vending machine for communicating with a home base computer allows the operation of the electronic lock to be remotely controlled for access control and auditing purposes.

Description

    RELATED APPLICATIONS
  • This application is a continuation of co-pending U.S. patent application Ser. No. 10/997,500, filed Nov. 24, 2004, which is a continuation of U.S. patent application Ser. No. 10/329,626, now U.S. Pat. No. 6,900,720, which claims priority of U.S. Provisional Application Ser. No. 60/344,221, filed Dec. 27, 2001.
  • This application is also related to a co-filed U.S. patent application Serial No. ______, filed on Oct. 19, 2006, having attorney docket number MET-061210, and entitled VENDING MACHINES WITH FIELD-PROGRAMMABLE ELECTRONIC LOCKS.
  • FIELD OF THE INVENTION
  • This invention relates generally to vending machines, and more particularly to vending machines equipped with electronic locks.
  • BACKGROUND OF THE INVENTION
  • Vending machines are widely used in various locations as automated means for selling items such as soft drinks, snacks, etc. Traditional vending machines are equipped with mechanical locks, which can be unlocked with a corresponding mechanical key to open the door of the machine to allow reloading of goods and collection of money.
  • One significant problem with conventional vending machines is the difficulties in managing the distribution and usage of the keys to ensure the security of the locks on the vending machines. The process of collecting money from the vending machines scattered at different places is a very manpower-intensive operation that requires many employees to go into the field with numerous mechanical keys for operating the locks on the vending machines. It requires a considerable amount of attention and efforts to manage and track the distribution of the keys to the field workers to keep the keys secure.
  • Moreover, the mechanical keys and lock cores of vending machines are a point of attack for vandals. The keys can be lost or copied easily, and the stolen or copied keys may then be used by an unauthorized person to access the machines, and it is difficult to discover such misuses and security breaches. Also, a skilled vandal can easily pick or drill-out the lock core tumblers and measure the key cuts of the lock core tumblers to re-produce a like key and compromise the security. In the event a security breach is identified, the mechanical lock cores of the affected vending machines typically have to be manually replaced, which is a time-consuming and very costly process. Furthermore, mechanical keys and locks are devices that cannot be partially limited in operation they operate indefinitely if in use. Also, they do not have the ability to record access operation attempts of their operation.
  • SUMMARY OF THE INVENTION
  • In view of the foregoing, the present invention provides a vending machine with a field-programmable electronic lock. The electronic lock can learn a key code from a corresponding electronic key. Alternatively, the electronic lock can learn that it should be accessed by an electronic switch controlled by a mechanical lock that can be opened with an associated mechanical key. The electronic lock has a learning process activation device that is accessible only when the door of the vending machine is in the open position. Using the learning process activation device, a service person sets the electronic lock in a learning mode, in which the electronic lock receives a key code transmitted from an electronic key, and stores the key code in a non-volatile memory for future access control of the vending machine. In the case where the lock access is to be controlled by the switch-lock combination, during the learning process the electronic lock controller receives an electronic closure signal from the switch. The lock thus learns that it is to open the door of the vending machine in response of the switch signal in lieu of reception of key codes from electronic keys.
  • The key-learning process in accordance with the invention allows electronic locks in vending machines to be easily and inexpensively programmed in the field. Thus, the electronic locks do not have to be manufactured with pre-defined permanent key codes and are not tied to any specific electronic keys for field use. There is no need to replace any physical part of the electronic lock in this key-learning process to learn a new key code and/or replacing an old key code. In contrast, mechanical locks conventionally used on vending machines have lock cores that have to be manufactured for specific keys, and once manufactured the lock cores cannot be changed. If the mechanical key is lost, the entire lock cores have to be replaced. More than one electronic key can possess a given keycode. The electronic lock on a vending machine can allow more than one keycode to be learned into the lock and used to access the lock.
  • The use of the field-programmable electronic locks for vending machines provides an effective way to reduce theft and fraud in terms of unauthorized access to the machines. The electronic keys provide a greater level of key security compared to mechanical keys, as they cannot be copied as easily as conventional mechanical keys. The use of non-contact wireless data communication between the key and the lock prevents breeches of security associated with vandals measuring key cuts, copying keys and picking locks. The use of data encryption in the wireless communications between the key and the lock prevents the key code from being copied by electronic monitoring and eavesdropping. The data transmission between the key and lock may be implemented in the infrared range to provide close-proximity highly directional communication of secure codes to further prevent eavesdropping of the security codes and to prevent accidental unlocking of locks.
  • The use of programmable electronic locks on vending machines and the associated electronic keys also provides advantages in terms of significant reduction in the costs associated with managing the distribution of the keys for unlocking the machines and the monitoring of the usage of the keys. Key IDs in addition to the key codes used in accessing the lock may be used to distinguish keys having the same key codes. Customized access limitations may be programmed by a supervisor into the electronic keys to restrict when and how they can be used to access the vending machines. Each key may also be programmed with a specific list of lock IDs identifying the electronic locks oh vending machines that the key is allowed to unlock.
  • In accordance with one aspect of the invention, a history of access attempts may be stored in each of the electronic key and the electronic lock for audit purposes. The key may store the access history each time it is used to access an electronic lock on a vending machine. Likewise, each electronic lock on a vending machine may store audit data regarding the access attempts directed to it. The audit data may be transferred from the electronic lock to the electronic key during an unlocking operation, and the audit data of different vending machines collected by an electronic key can be later downloaded to a computer for analysis.
  • In accordance with another aspect of the invention, the electronic lock may accept more than one type of keys and corresponding key codes. The different key types may be associated with different levels of security of the unlocking operations and the type of data transmitted between the key and lock during the unlocking operations.
  • In accordance with another aspect of the invention, the electronic lock in a vending machine can work in conjunction with an electronic communication device in the vending machine that is in wireless communication with a home base to accomplish many of the same access control, auditing, and additionally some inventory and money settlement processes.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • FIG. 1 is a schematic view of a vending machine and an electronic key for opening an electronic lock inside the vending machine;
  • FIG. 2 is a perspective view of an electronic lock assembly mounted on a door of a vending machine;
  • FIG. 3 is a block diagram showing electronic circuit components of an electronic lock used in a vending machine;
  • FIG. 4 is a block diagram showing electronic circuit components of an electronic key;
  • FIGS. 5A and 5B are schematic diagrams showing key codes stored in the memories of an electronic key and an electronic lock, respectively;
  • FIG. 6 is a schematic diagram showing the transmission of data between an electronic lock on a vending machine and an electronic key during a simplified unlocking process;
  • FIG. 7 is a schematic diagram showing communications between an electronic lock on a vending machine and an electronic key during an unlocking process that has higher security than the process in FIG. 6;
  • FIG. 8 is a schematic diagram showing communications between an electronic lock on a vending machine and an electronic key during an unlocking process similar to that FIG. 7 but with a step of checking the lock ID for access control;
  • FIG. 9 is a schematic diagram showing a computer used to program operational limitations into an electronic key;
  • FIG. 10 is a schematic diagram showing the downloading of audit data from vending machines to an electronic key; and
  • FIG. 11 is a schematic diagram showing an example of audit data uploaded from a vending machine to an electronic key.
  • FIG. 12 is a flowchart showing the key code learning process of an embodiment of the electronic lock;
  • FIG. 13 is a flowchart showing an operation by an embodiment of the electronic key to back up the time and date for restoring the clock of the key in case of a faulty or removed battery;
  • FIG. 14 is a flow chart showing an operation by the electronic key to record the number of power-up of the key to prevent tampering by battery removal;
  • FIG. 15 is a schematic block diagram showing an embodiment of a vending machine that has a communication device that is interfaced to the electronic lock and in wireless communications with a home base for access control and auditing purposes; and
  • FIG. 16 is a schematic diagram showing vending machines accessible by an electronic key that has a narrow wireless signal transmission pattern to avoid accidental opening of the vending machines.
  • DETAILED DESCRIPTION OF EMBODIMENTS OF THE INVENTION
  • Referring now to the drawings, the present invention is directed to an electronic lock system for use in vending machines that provides significantly improved security and ease of management over conventional vending machines equipped with mechanical locks. The term “vending machine” as used herein means a device that performs a money transaction, which may involve the insertion of cash or commercial paper, or the swiping of a credit and/or debit card, and may (but not required to) dispense an item or items or provide functions in response to the money transaction. In this regard, this term is meant to cover broadly machines commonly used for vending drinks and snacks, ATM stations, change machines, toll machines, coin-operated laundry machines, video arcades, etc. FIG. 1 shows, as an example, a vending machine 20 with an embodiment of an electronic lock of the invention mounted therein. The vending machine 20 has a front panel 22 or door that can be opened when the electronic lock is unlocked with a properly programmed electronic key 26. It will be appreciated that the vending machine and the electronic key are not shown to scale in FIG. 1, and the view of the electronic key is significantly enlarged with respect to the vending machine to show its features.
  • The key 26 and the lock preferably communicate with each other wirelessly, which may be via an infrared or radio frequency (RF) channel. In a preferred embodiment, the wireless communications between the key and the lock is via infrared transmissions. The infrared medium is preferred because it is directional and short range, and the infrared circuitry in the lock is not sensitive to the metal cabinet enclosure of the vending machine. Thus the vending machine will less likely be opened accidentally if the key is accidentally operated of if the key is operated to unlock another vending machine nearby. In addition, the infrared light can travel through the selection buttons on the vending machine. This allows the infrared transceiver of the electronic lock to be positioned behind a selection button 30 of the vending machine, as illustrated in FIG. 1. To that end, the vending machine 20 has an infrared transceiver disposed to receive infrared transmission through its front panel 22, and the electronic key 26 has an infrared transceiver at one end 32. As shown in FIG. 1, in one implementation, the electronic key 26 has a very simple profile, having only a “START” button 36 that can be activated by a user for lock opening and key code learning operations. In a preferred embodiment, the “START” button 36 need not be continuously pressed in order for the key to transmit the encrypted code to the lock. Instead, the user only has to only momentarily press the button 36, and the key will automatically stop transmitting after a few seconds, thus the key will not transmit indefinitely and deplete the battery if the button is stuck down. The electronic key 26 also has a light-emitting diode (LED) 38 exposed through a hole in the housing of the key for indication the operation status of the key.
  • In accordance with an aspect of the invention, the electronic lock assembly is mounted inside the vending machine 20 to prevent unauthorized access and tampering. It can be physically accessed only when it is properly unlocked and the door 22 or front panel of the vending machine is opened. In one embodiment, as shown in FIG. 2, the electronic lock assembly 48 is mounted on the inside of the door 22, and opening the door of the vending machine exposes the lock assembly housing 40. The electronic lock 48 includes a lock shaft 42 that engages into a corresponding receptacle in the body of the vending machine to prevent the door from being opened when it is in a locked position. The electronic circuit of the lock resides in the housing 40 of the lock assembly. The housing 40 has two holes. Behind one hole 44 is a “LEARN” switch connected to the electronic lock circuit. This switch can be accessed and pressed down with a thin object, such as a screwdriver or a car key. Behind the other hole 46 is a light-emitting diode (LED), which servers as a means for providing an indication of the operational state of the electronic lock during a key code learning operation or a lock opening operation, as will be described in greater detail below.
  • Turning now to FIG. 3, in one embodiment, the circuit of the electronic lock 48 comprises a microcomputer 50, a non-volatile memory 52, a half-duplex IRDA infrared communication interface 54 for communicating with an electronic key, a power supply voltage regulator 56, a lock motor or solenoid control circuit 58, position feedback switches 60, a learn switch 62 as mentioned above, and the LED 64 for state indication. The non-volatile memory is for storing key codes 68, encryption codes 70, and audit data 72, as will be described in greater detail below.
  • In an alternative embodiment, the vending machine with the electronic lock is to be accessed using a mechanical key rather than an electronic key. To that end, the electronic lock includes an interface to a combination (the “switch-lock” combination) of an electrical switch 74 and a mechanical lock 76 that has a cam for moving the switch into a closed or open position. The electrical switch 74 is normally in an open state and is closed when the mechanical lock 76 is opened using an associated mechanical key 78. The open/close state of the switch 76 is detected by the microcomputer 50 and is used to determine whether the mechanical lock 76 is opened or closed. T The microcomputer 50 is programmed to unlock the door 22 of the vending machine 20 in response to the closing of the switch contact caused by unlocking of the mechanical lock 76 using the mechanical key 78. Thus, the unlocking process does not involve the passing of a key code between the electronic lock and an electronic key. Accordingly, as described in greater detail below, during a learning process, the electronic lock learns that it is to be accessed using a mechanical key instead of an electronic key with a key code.
  • As shown in FIG. 4, in one embodiment, the electronic key 26 includes a microcomputer 80, a non-volatile memory 82, a half-duplex IRDA infrared communication interface 84 for communicating with the electronic lock of a vending machine or with a computer for programming the key, a power source (e.g., a battery) 86, a real-time clock integrated circuit (IC) 94 for generating data indicating the date and time, and the “START” switch 36 and the LED light 38 as mentioned above. The non-volatile memory 82 is for storing a key code 88, encryption codes 90, and audit data 92 generated by the key and/or downloaded from vending machines operated using the key, as will be described below.
  • The key codes in the keys and the locks of the vending machines are used to define the security and access control strategy of the electronic lock system. Each electronic key 26 has a key code 88 stored therein, and the same key code is stored in the memory 52 of the electronic lock in each vending machine to be operated with the electronic key. During each access attempt, the key code in the electronic key is transferred from the key to the electronic lock using a secured communication method. The electronic lock can be unlocked if the key code it receives from the electronic key matches the key code stored in the memory of the lock.
  • In one implementation as shown in FIG. 5A, a key code 68 stored in an electronic key includes seven (7) digits. The first digit of the key code is used to indicate the type of the key. As the value of the key-type digit may go from 0 to 9, there may be up to 10 total key types. As will be described below, in one embodiment of the electronic lock system, there are three different key-types: low-security key, standard key, and auto-tracking key, which correspond to different levels of security in lock-opening operation and audit data collection. The next 6 digits in the key code are the access code (000,000 to 999,999). In addition to the 7 digits representing the key type and access code, a key code stored in the electronic key additionally includes two lower digits, which may be used as the identification (ID) code of that key. In this example, the key ID may vary from 0 to 99. Thus, there may be up to 100 keys that have the same key type and access code but different key ID numbers.
  • Similarly, as shown in FIG. 5B, a key code 68 stored in the electronic lock has seven (7) digits. The first digit indicates the key type, and the remaining 6 digits are the access code. As mentioned above, there may be up to 10 different key types, and the electronic lock may be programmed to accept a number of key codes of different key types.
  • In accordance with a feature of the invention, the electronic lock 48 of the vending machine 20 is field-programmable. In other words, the key code or key codes of the electronic lock 48 can be programmed (or “learned”) into the non-volatile memory 52 of the lock after the vending machine has been installed in a given location. In a preferred embodiment, the electronic keys to be used to operate the vending machines are programmed with a permanent key code at the factory and ordered by the users of the electronic locks. In the example given above, the users may order up to 100 keys with the same access code. In contrast, the electronic locks to be used in the vending machines are not programmed with any customer-specific key code. Instead, the electronic locks are programmed with a universal code at the factory. The “universal code” is the code put in the lock by the manufacturer of the lock or the vending machine, and is used by the customers to unpack and open the machines after they receive the machines. Thereafter, the electronic locks are installed in the vending machines, which are then shipped to and set up at their respective operating places. In accordance with the invention, the access control strategy is established by “learning” or transferring the access code of the electronic key to be used to operate the machine into the electronic lock via a secured transfer process.
  • Referring back to FIGS. 1-3 and 12, in one embodiment, to make the electronic lock 48 learn the access code from an associated electronic key 22 or that it is to be controlled by a switch-lock, the service person has to gain access to the LEARN switch 62 of the lock. In addition, it is preferred that the lock microcomputer senses, using the position switches 60, that the lock is in the unlocked position to allow entering into the “learn” mode (step 260 in FIG. 12). To that end, if the door 22 of the vending machine is originally closed and the lock contains the universal key code programmed at the factory, the service person uses a key containing the universal key code to unlock the vending machine and open the door to gain access to the LEARN button of the lock. As mentioned above, the LEARN switch 62 should be at a secured location such that it can be accessed only when the lock is properly unlocked (as opposed to a forced entry) and when the door is open. An assumption in the access control strategy is that an authorized person is servicing and/or reprogramming the lock if the door is properly unlocked and opened. If the microcomputer 50 detects (step 262) that the LEARN switch 62 is pressed (e.g., held for longer than three seconds), it waits (step 266) for the switch to be held in that position for a pre-selected time period (e.g., 3 seconds) and then enters a LEARN process (step 268). In response to the pressing of the learn button, the LED 64 is turn on (step 270). In alternative embodiments, the LEARN switch 62 can be substituted by another activation means that provides a greater level of security, such as a keypad for entering a service authorization code or an electromechanical switch lock that requires a mechanical or another electronic key.
  • Once the lock 48 is put in the LEARN mode, the service person operates the electronic key 22 containing the desired key code by pressing the button 36 on the key. This causes the key 22 to transmit the key code stored in its memory to the electronic lock. If the electronic key and the lock employ encryption techniques in their communications, the electronic key 22 first encrypts the key code 88 with the encryption codes 90 in its non-volatile memory and then transmits the encrypted code.
  • The service person is given a pre-selected timeout period (e.g., 15 seconds) to press the key to transmit the key code. To that end, the lock 48 determines whether it has received the transmitted key code (step 272). If it determines (step 274) that a key code transmission is not received within the timeout period, the learning process is terminated. If a key code has been transmitted within the timeout period, the electronic lock 48 receives the transmitted key code via its receiver port 30. If the transmitted code is encrypted, the electronic lock decrypts the received data with the encryption codes 72 in its memory 52. In a preferred embodiment, the encryption codes in the electronic key and the electronic lock are inserted during manufacturing at the factory, and different encryption codes may be used for different vending machine owners (e.g., different soft drink bottlers) so the keys given to one owner may not be learned into and used to access the vending machines of another owner.
  • If the encryption codes of the key and the lock do not match, the electronic lock will not be able to successfully decrypt the received key code. In that case, the process will end and the lock will not learn the new key code. If, however, the decryption was successful, the lock stores the key code at a proper location in its non-volatile memory 52 according to its key type (step 276). After verifying that the key code is stored correctly in the proper key type location, the lock 48 provides a signal to the service person by flashing the LED 64 to indicate that the LEARN process is successfully completed (step 278). From this point forward, the electronic lock will use the newly learned key code for access control. In other words, it will compare this key code with the key code transmitted from an electronic key to determine whether the door should be unlocked. If there was a key code of the same key type previously stored in the memory 52 prior to the LEARN operation, that old key code will be erased and can no longer be used to access the vending machine.
  • As mentioned above, in an alternative embodiment, the vending machine equipped with the electronic lock may be accessed with a mechanical key rather than an electronic key. The electronic lock learns that it is to be controlled by the combination of the electrical switch 74 and the mechanical lock in a learning process similar to the one for learning a key code as described above. Specifically, to enable the lock access via the switch-lock, the service person puts the electronic lock into the learn mode by pressing the LEARN switch 62 as described above. Once the electronic lock 48 is in the learn mode, the service person uses the mechanical key 76 to unlock the mechanical lock 76. When the mechanical lock 76 is moved to its unlocked position, its cam closes the contact of the electrical switch 74. The microcomputer 50 of the electronic lock receives the contact-closure signal (i.e., detecting that the electrical switch is closed) and treats the signal as indication that the vending machine is to be accessed using a mechanical key. In response, the microcomputer set its operation mode such that in the future it will unlock the door of the vending machine in response to detecting the closure of the contact of the electrical switch 74. Thus, from this point forward, the vending machine is accessed using the mechanical key 78, which replaces one or more types of electronic keys.
  • It will be appreciated that the key learning process described above does not require changing or replacing any physical components of the lock. If the electronic key for operating the lock on the vending machine is stolen or lost, the service person will first use a back-up key that has the key code of the key that is lost, or a key that has a different key code that has been previously learned into the lock, to open the door. The service person then uses the key learning process described above to change the key code in the memory of the lock to a new value. This field-programmability of the electronic lock makes key management significantly easier and cost-effective, and provides a greater level of key security compared to mechanical keys. In contrast, with conventional vending machines using mechanical locks, the mechanical keys may be copied or stolen easily, and the entire lock core of each of the vending machines affected has to be replaced in order to change to a different key.
  • In the illustrated embodiment, one digit in each key code stored in the lock indicates the type of the key, and there may be up to ten different key types. A lock is able to learn one key code for each allowed key type. A key code of a first type may be that learned from a “primary” electronic key for the vending machine, while a key code of a second type may correspond to a different electronic key, such as a “master” key that can be used as a back-up in case the primary key is lost, stolen, broken, or otherwise unavailable.
  • In a preferred embodiment, as briefly mentioned above, different types of electronic keys (indicated by the different values of the key type digit) are provided that correspond to different levels of security (and the associated complexity of communication) and audit data collection function. The three types of electronic keys are economy key, standard key, switch-lock, and auto-tracking key. The operation of each of these three types of keys is described below.
  • Referring to FIG. 6, the economy key employs a simple one-way communication process for interacting with a corresponding electronic lock on a vending machine. Since the communication process is simpler and the one-way communication does not require a receiver in the key, the key can be build at a lower cost. As shown in FIG. 6, the memory 102 of the economy key contains a key code 104, an encryption code 106, and a random number 108. In a preferred embodiment, the key starts with a given value of the random number, and the random number changes every time the key cycles through a key code transmission. When a user activates the key by pressing the button on the key, the key uses the encryption code to encrypt (step 110) the key code 104 together with the random number 108, and transmits the encrypted number 112 to the electronic lock. When the electronic lock receives the transmitted encrypted data, it decrypts (step 116) the data with the encryption code 118 in its memory 52. The lock then retrieves the key code 122 from the decrypted data and compares it with the key code 120 of the same type in its memory. If the two key codes do not match, the process ends. If they match, the electronic lock proceeds to unlock the door of the vending machine.
  • In comparison with the economy key, the standard key provides a more secure unlocking process that requires 2-way encrypted communications between the key and the electronic lock. The 2-way communications is in the form of a bi-directional challenge-response process. Referring to FIG. 7, the memory 130 of the key contains the key code 132, the encryption code 134, a real-time clock timestamp 136, and a random number 138. Similarly, the memory 52 of the electronic lock of the vending machine contains a learned key code 140, the encryption code 142, and an ID 146 of the electronic lock. When the service person presses the transmission button on the electronic key, the electronic key encrypts (step 150) the key code 132 in its memory together with the time stamp 136 and the random number 138, and transmits the encrypted key code and timestamp to the electronic lock of the vending machine. The electronic lock receives the transmitted data 152 through its infrared communication interface and decrypts (step 156) the received data with the encryption code 142 in its memory. Next, the electronic lock compares (step 162) the decrypted key code 160 with the key code 140 of the same type in its memory. If the two key codes don't match, the process ends, and the door will not be unlocked. In that case, the electronic lock sends a code to the key to indicate that the key has tried an incorrect key code.
  • If the two key codes match, the process continues and enters a second phase in which the electronic lock transmits data to the electronic key. Specifically, the lock encrypts (step 164) the key code, the lock ID 146, and the random number. It then transmits the encrypted key code, lock ID, and the random number (originally sent by the key) to the electronic key. The electronic key receives the encrypted data 166 and decrypts (step 168) the data to retrieve the key code and the lock ID. If the key determines (step 172) that the key code 170 returned by the lock matches the key code 132 in the memory of the key, it stores data regarding the access event, including the lock ID, in an audit trail data portion of the key's memory for audit purposes.
  • The key then proceeds to the third phase of the unlocking process, in which the key communicates to the lock to allow access. To that end, the key encrypts (step 176) the received lock ID and transmits the encrypted lock ID and random number to the lock. The lock receives the transmitted data 180 and decrypts (step 182) the data to retrieve the lock ID. If the received lock ID 186 matches the lock ID 146 stored in the memory of the lock, the microcomputer of the lock proceeds to unlock the door of the vending machine.
  • The unlocking operation described above has several advantages. It allows the transfer of the lock ID and the key codes between the electronic key and the lock on the vending machine without repeating numbers or a distinguishable pattern of numbers in case of eavesdropping of repeated access attempts. It also prevents a transfer of data between the key and the lock with different encryption codes. Further, it provides a consistent and secure means of data transfer between the key and the lock for a condition where many keys with the same key code will be expected to communicate with many locks on different vending machines containing that key code. This bi-directional challenge-response encryption scheme provides no risk of the keys and the locks going out of sequence, which is a common problem with unidirectional rolling-code encryption systems.
  • The lock ID code is used in the unlocking operation described above for generating audit data for audit trail identification purposes and also for data transfer encryption purposes. In an alternative embodiment, however, it is also be used to provide a method for controlling which vending machines a key is allowed to access. In this method, there may be many keys containing the same key code, and there may be many vending machines that have “learned” the same key code. It is possible, however, to specify which vending machines a given key is allowed to access so that a single key cannot open all the vending machines. Referring to FIG. 8, this is accomplished by loading a list of lock ID codes 192 into the memory 130 of that key prior to operation. During an unlocking operation, the key receives a lock ID 174 from the electronic lock on the vending machine and compares the received lock ID with the list of lock IDs 192 in its memory. Only if it is determined (step 198) that the received lock ID 174 matches one of the lock IDs in the list will the key proceed to send the unlock command signal (e.g., the transmission 180 in the third phase) to the electronic lock. As shown in FIG. 8, the unlocking process is otherwise similar to that shown in FIG. 7. This method of access control provides supervisors of the operation the flexibility of allowing or disallowing a given key to access selected vending machines.
  • In an alternative embodiment, an electronic key may also be programmed with other types of limits of operation of the key. For instance, the key may be programmed with limit registers that contain values chosen by a supervisor to limit the operation of that particular key. In a preferred embodiment, the limit registers 200 (FIG. 4) are part of the non-volatile memory 52. The operation limits include, for example, time of data, date, number of days, number of accesses, number of accesses per day, etc. When the user of the key presses the button on the key to initiate a key code transmission, the microcomputer of the key first compares the limits set in the registers with a real-time clock in the key and an access counter in the key memory. If any of the limits is exceeded, the key will not transmit the key code to the electronic lock and will terminate the operation.
  • Referring to FIG. 9, the key operation limits may be set by the supervisor 208 of the employee that uses the electronic key 212 to access vending machines in the field. The limits can be selected by using a personal computer (PC) 210 with the appropriate software program. The limits for each key may be customized depending on, for instance, the work schedule or habits of the employee to whom the key is given. For illustration purposes, FIG. 9 shows an exemplary user interface screen 216 for prompting the user 208 to enter the limits. After the limits are selected on the PC 210, they are loaded from the PC into the operation limit registers in the electronic key 212 in a communication process between a key read/write device 218 and the key. During this communication process, other types of data, such as data for updating the real-time clock in the key, may also be loaded into the key. Also, the communication process may be used to transfer data, such as the audit trail data collected from vending machines by the key during previous field operations, from the electronic key 212 to the PC 210.
  • In accordance with an aspect and alternative embodiment of the invention, an advantage of electronic keys is that they can be used to record and collect and track the attempted accesses of locks on vending machines in the field. Keys that provide this function are of the “auto-tracking” type mentioned above. Referring to FIG. 10, with an auto-tracking key 212, each access attempt triggers an audit data event in both the electronic key and the electronic lock in the vending machine 20. To that end, a space for audit data is reserved in each of the non-volatile memories of the key 212 and the lock 48. During an access attempt, the key 212 transfers the key code 220 and a timestamp 222 to the lock. Regardless of whether the access attempt succeeds or fails, the lock stores the key code and timestamp in its audit data memory. In one implementation, the lock will filter the number of accesses from a given key in a given period (e.g., one attempt per key for every 20 minutes) so that it does not create a separate record for each access attempt. It may, however, include data in the record counting the number of access attempts from the key in the time period. This minimizes the chances that when a key is used to make many access attempts in a row it will fill the audit trail memory and erase existing records of previous access attempts. One way to set this time period in the lock is to transfer the value of the period from a key (which is in turn set by a supervisor using a PC) to the lock.
  • If the access attempt results in a key code mismatch or if the key is disallowed for access because an operation limit in its limit registers is reached, the access process is terminates. In either case, the lock transfers its lock ID 228 to the key 212. The key is expected to store the lock ID and the timestamp in its audit data memory as an invalid access attempt.
  • If, on the other hand, the access attempt results in a valid match of key code and the key has not exceeded its operation limits, the lock still transfers its lock ID to the key 212. The key 212 then stores the lock ID and timestamp in the audit data memory as a record of a proper access. In addition, as the electronic key is an auto-tracking key, the lock transfers all the audit data 228 entries in its audit data memory to the key. The data in the audit data memory includes the lock ID, a record for each access attempt that includes the entire key code (including the key ID digits) received from the key that made the access attempt, and the timestamp for that access attempt. The auto-tracking key 212 then stores the audit data 228 of the lock in its own non-volatile memory. In this regard, each key preferably is capable of uploading the audit data memories of 200-300 vending machines. This eliminates the need for a separate process or equipment in the field for performing the same data retrieving function.
  • When the electronic keys 212 are returned to the home base, the audit data they generated themselves and the audit data they collected from the vending machines 20 can be transferred to a central control computer 210. The audit data can be downloaded to the PC 210 by the supervisor using the key read/write device 218 that is also used for programming the electronic key.
  • By way of example, FIG. 11 shows exemplary audit data collected by an auto-tracking key from a vending machine. In this example, the key code stored in the lock on the vending machine is “A100”. The vending machine was accessed using the auto-tracking key on Dec. 8, 2001. Since the key contains the correct key code, the access operation is successful. Thereafter, there were two unauthorized access attempts. The first unauthorized access attempt on Dec. 19, 2001 failed, because the key code (“A500”) in the electronic key did not match the key code in the lock. The second unauthorized attempt on December 20 used a stolen key with the right key code and was successful. When the auto-tracking key is used on Dec. 22, 2001 to unlock the vending machine, the audit data 232 stored in the memory of the electronic lock on that vending machine are transferred to the auto-tracking key, which stores the transferred audit data in its own memory. As stored in the key, the audit data 236 identifies the vending machine from which the audit data are uploaded. The audit data 236 stored in the key are later downloading to the home base PC.
  • Due to the various complexities of this system concerning multiple key users, key codes, and the multiple keys sharing the same key codes, as well as the flexibility provided by the ease of changing access codes of the vending machines in the field, it is often desirable to provide simple diagnostic capabilities to the keys, electronic locks. It may also be desirable to provide special reader tools for use in the field.
  • In one implementation, the electronic key uses its LED light to provides several diagnostic signals to the user when its START button is pressed and when it is communicating with the electronic lock. If the key correctly communicates with the lock and the key codes match, the LED light is on continuously for about five seconds. If the key correctly communicates with the lock but the key codes do not match, the LED light flashes around five times a second for about five seconds. If the key cannot establish correct communication with the lock, the LED light is set to flash faster, such as 25 times a second, for about five seconds. If the key correctly communicates with the lock and the key codes match, but the operation limits set in the limit registers are exceeded, the LED flashes at a lower frequency, such as three times per second for about 3 seconds. If the START switch of the key is pressed and the key does not communicate with the lock and its operation limits are exceeded, the LED first flash quickly, such as 25 times per second, for up to 5 seconds, and then flash three time per second for up to three seconds.
  • In a preferred embodiment, a diagnostic tool 240 is used in the field to communicate with electronic locks on vending machines, which provide diagnostic information in the event of problems with the operation of the lock or the door. As shown in FIG. 10, the diagnostic tool 240 includes a display 242 that displays information read from the electronic lock. For instance, the display may show each of the access control key codes stored in the non-volatile memory of the lock, the lock ID of that lock, and any other information pertaining to the state of the electronic lock, such as an indication of whether the lock expects the door to be in a locked or unlocked state based on a position-control feedback measured by the lock circuit.
  • In a preferred embodiment, security measures are implemented in the electronic key concerning key tampering by replacing the battery in the key. It is possible that the employees or thieves that gain access to the electronic keys will attempt to trick the security of the system by tampering with the key. Since the key contains the clock that provides the time and date of access limiting, it is likely the users will attempt to disable or trick the clock to override the access limits. For example, if the key operation limits are set to only allow accesses between 7 AM and 6 PM, the user may attempt to disconnect the battery of the key in-between lock accesses to stop the clock in the key from counting down the time and disabling the key.
  • Referring to FIG. 13, to reduce of risk of clock tampering by removing the battery, the key is programmed such that it will reset its clock back to approximately the correct time and date after the battery is reconnected. This feature is provided for both cases of the battery going low naturally or if it is tampered with by the user. To that end, each time the START button 36 of the key is pressed (step 290), the microcomputer 80 of the key reads the time and date from the clock 94 (step 292), and stores the time and date data 298 in the non-volatile memory 82 of the key (step 296). Alternatively, the key may store the time and date periodically, such as every 1-2 minutes. Referring now to FIG. 14, if the key battery is disconnected and later a battery is inserted into the key, the key starts a power-up process (step 300). The microprocessor is programmed to read the back-up time and date 298 stored in the non-volatile memory 82 (step 302) and writes that time and date into the clock 94 (step 306). The clock will then run based on the restored time and date as a substitute until the electronic key is re-docked into the cradle and the home base computer 210 stores a new accurate time and date in the clock of the key. When the restored time and date is in use, the key can still be used to access locks on the vending machines as long as the operation limits of the key are not exceeded.
  • In addition to the time-restoration feature, the microcomputer 80 in the key employs logic that counts the number of times the battery is removed and will immediately disable the key indefinitely if the battery is disconnected and re-connected more than a pre-selected number of times, such as three times. Specifically, the microprocessor maintains in the non-volatile memory 82 a counter 312 that counts the number of times the key has been powered up since the last docking of the key. This counter 312 is cleared each time the key is docked. Each time a battery is inserted in the key and the microcomputer 80 goes through the power-up process (step 306), the microcomputer 80 reads the counter 302 (step 316). If the microcomputer determines (step 318) that the counter reading has reached the allowed number of power-up, such as 3 times, it disables the key from any access operation. If the allowed number of power-up is not reached, the microcomputer increments the counter (step 320). Thereafter, the key continues with regular key operation, but with each access attempt the key will store a “battery removed” bit with the audit data for that access event in the memories of the lock and the key. This “battery removed” bit indicates that the time and date stamp of the access event is recorded after the key battery was disconnected, and that the accuracy of the time and date is questionable.
  • Referring to FIG. 15, in accordance with a feature of an alternative embodiment, the vending machine 20 is equipped with an electronic device for communicating with the home base. The communication device 360 preferably communicates wirelessly, such as over a RF channel, to the computer 210 at the home base of the owner of the vending machine. The vending machine also includes a vendor controller electronic circuit 362 for controlling the operation of the lock 48. The vendor controller 362 is connected to the lock 48 and the communication device 360. The electronic lock 48 working together with the vendor controller 362 and the communication electronic device 360 in communication with the home base can accomplish many of the same access control and auditing functions described above and additionally some inventory and money settlement processes. For example, the communication device 360 can receive a command from the home base to disable operation of the lock 360 regardless if an electronic key with the correct key code attempts to access the vending machine. Also for example, the lock 48 can indicate to home base computer 210 through the communication device 360 which keys have attempted to access of the vending machine. This arrangement eliminates the need to use an electronic key to collect, store, and transfer the audit events to the home base via the memory and communication medium of the key.
  • Moreover, the communication device 360 may be used with the vendor control 362 to keep track of the inventory and the cash transactions of the machine. In many cases, when the service person (route driver) visits the machine, his job is to fill the machine and collect money. During this task, the vendor control 362 is involved in interfacing with the service person to ensure the proper resetting and settlement processes take place, and that the service person closes the door of the vending machine. The vendor controller 362 can inform the home base computer of the open/close state of the vending machine door. In the case the Route Driver does not satisfy the conditions of the vendor controller 362 by way of inventory or monetary or debit card processing, the vendor controller can send a disable signal to the electronic lock 48 so the door of the vending machine cannot be closed and locked. Thus, since the service person cannot leave a vendor unlocked, this process would force him to complete the required resetting and settlement processes so the vendor controller can allow the vendor door to be locked before the service person leaves the vending machine.
  • Referring now to FIG. 16, in accordance with a feature of a preferred embodiment, the wireless transceiver of the electronic key 26 is designed to have limited transmission range and angle to prevent a vending machine 380 from being accidentally opened due to receiving stray transmission from the key when the key is used to open another vending machine 20 in its vicinity. Specifically, the transmitter 382 of the key 20 has a pre-defined transmission angle 386. Also, due to the limited transmission power of the transmitter 382, the transmission from the key 26 has a limited transmission power range 388, beyond which the signal strength is generally too weak for the transceiver 390 of the electronic lock of the vending machine 20 to reliably detect. In a preferred implementation, the transmission power and the transmission angle 386 of the key 26 is selected such that the width 392 of the transmission pattern at the effective transmission range 388 is about the same or smaller than the width of the vending machine 20. As mentioned above, in a preferred implementation, the transceivers in the keys and the electronic locks on vending machines are infrared transmitters for transmitting and receiving infrared signals.
  • In view of the many possible embodiments to which the principles of this invention may be applied, it should be recognized that the embodiments described herein with respect to the drawing figures are meant to be illustrative only and should not be taken as limiting the scope of the invention. Therefore, the invention as described herein contemplates all such embodiments as may come within the scope of the following claims and equivalents thereof.

Claims (42)

1. An access control system for a plurality of vending machines wherein each vending machine has a door openable for accessing contents of each vending machine and an electronic lock for unlocking the door of each vending machine, the access control system comprising:
at least one electronic key comprising:
a microcomputer;
a wireless communication interface for transmitting and receiving communications over a wireless band;
a non-volatile memory having stored therein at least one operation limit parameter, and computer executable instructions for performing an encryption operation based on an encryption code; and
an activation device connected to the microcomputer and operable for generating an activation signal for triggering the microcomputer to initiate an access code transmission operation in which the microprocessor performs the encryption operation to encrypt a value including an access code, and the wireless communication interface is used to transmit the encrypted value,
wherein the microcomputer is programmed to perform a bi-directional challenge-response process during a key transmission operation with an electronic lock on a vending machine using encrypted communications through the wireless communication interface; and
at least one key management system for management of electronic keys used to access electronic locks of vending machines, comprising:
a computer having a software program for key management functionality;
a memory containing key management data; and
a key reader communicating with the computer for interfacing the computer with an electronic key; the software program having computer-executable instructions for performing an key programming operation with the steps of:
retrieving from the memory information of a user of the key and at least one operation limit parameters for said key;
sending the at least one operation limit parameter through the key reader to the key for writing into a memory of the key; and
each electronic lock comprising an electronic control circuit including a microprocessor, a memory and a wireless communication interface for transmitting and receiving wireless communications, the microcomputer being programmed to perform a bi-directional challenge-response process with an electronic key using encrypted communications through the wireless communication interface, wherein during the challenge-response process the microcomputer receives an encrypted value including an access code transmitted from the electronic key, decrypts the received value and compares the received access code with a code stored in the memory of the electronic lock, and unlocks the door of the vending machine if the received access code matches code stored in the memory.
2. The access control system of claim 1 wherein said electronic lock memory contains computer-executable instructions for performing a decryption operation based on an encryption code and performs a decryption operation to decrypt a received access code.
3. The access control system of claim 1 wherein said operation limits are retrieved from the memory based on an identification number or a name associated to the key.
4. The access control system of claim 3 wherein the operation limits can be modified at a docking station to either be equal or unique for a plurality of electronic keys.
5. The access control system of claim 1 wherein the operation limit parameters in the key include at least one of the following parameters: number of days, days of the week, hours of the day, number of vending machine accesses, at least one vendor identification number.
6. The access control system of claim 1 wherein the electronic lock memory contains identification codes of a plurality of electronic keys that attempted to access the lock.
7. The access control system of claim 6 wherein said memory of key identification codes in the electronic lock is transmitted to the key during the lock access event.
8. The access control system of claim 1 wherein the electronic key contains a memory consisting of a plurality of key identification codes of electronic keys that attempt to access at least one vending machine.
9. The access control system of claim 8 wherein said key identification codes are transferred to the docking station during a key download operation.
10. The access control system of claim 9 wherein said key identification codes are transferred to a memory accessible by the docking station.
11. The access control system of claim 9 wherein said key identification codes are displayed at the docking station.
12. The access control system of claim 1 wherein a plurality of vending machine lock identification numbers are transferred to the electronic key memory during the key programming operation.
13. The access control system of claim 1 wherein the communication between the key and the lock during an access control event is initiated by wireless signal by the key.
14. The access control system of claim 1 wherein the key and the lock are powered by individual non-common power sources.
15. The access control system of claim 1 wherein the electronic lock controller receives commands through a communication port to enable or disable the electronic lock.
16. The access control system of claim 15 wherein the vending machine contains a controller separate from the electronic lock and sends the enable or disable commands to the electronic lock.
17. The access control system of claim 1 wherein the electronic key includes an enunciator to display key operation messages to the user of the key.
18. The access control system of claim 17 wherein said messages are annunciated visually to the user during operation of the key with a lock.
19. The access control system of claim 1 wherein a lock reader tool comprises a communication port to communicate with an electronic lock to receive and annunciate lock operation messages to the user.
20. The access control system of claim 1 wherein the access code is a lock identification number.
21. A vending machine comprising:
a door openable to access contents of the vending machine;
an electronic lock for unlocking the door of each vending machine; and an electronic key comprising:
a microcomputer;
a wireless communication interface for transmitting and receiving communications over a wireless band;
a non-volatile memory having stored therein an access code, and computer executable instructions for performing an encryption operation based on an encryption code; and
an activation device connected to the microcomputer and operable for generating an activation signal for triggering the microcomputer to initiate an access code transmission operation in which the microprocessor performs the encryption operation to encrypt the access code stored in the non-volatile memory, and the wireless communication interface is used to transmit the encrypted access code;
wherein the microcomputer is programmed to perform a bi-directional challenge-response process during a key transmission operation with an electronic lock on a vending machine using encrypted communications through the wireless communication interface; and,
an electronic lock for unlocking the door of the vending machine, the electronic lock comprising a control circuit including a microcomputer, a non-volatile memory, a wireless communication interface for receiving wireless-communications, and a learning mode activation device, the microcomputer being programmed to perform steps of receiving a learning mode activation signal from the learning mode activation device and, in response to the learning mode activation signal, receiving a first access code in an encrypted form via the wireless communication interface, and store the first access code in the non-volatile memory.
22. The vending machine of claim 21 wherein each electronic lock comprising an electronic control circuit including a microprocessor, a non-volatile memory containing computer-executable instructions for performing a decryption operation based on an encryption code, and a wireless communication interface for transmitting and receiving wireless communications, the microcomputer being programmed to perform a bi-directional challenge-response process with an electronic key using encrypted communications through the wireless communication interface, wherein during the challenge-response process the microcomputer receives a key code transmitted from the electronic key in an encrypted form, performs the decryption operation to decrypt the received key code, compares the decrypted received key code with a key code stored in the non-volatile memory of the electronic lock, and unlocks the door of the vending machine if the decrypted received key code matches the key code stored in the non-volatile memory.
23. The vending machine of claim 21 wherein at least one key management system for management of electronic keys used to access electronic locks of vending machines, comprising:
a computer having a software program for key management functionality;
a memory containing key management data; and
a key reader communicating with the computer for interfacing the computer with an electronic key;
the software program having computer-executable instructions for performing an key programming operation with the steps of:
retrieving from the memory information of a user of the key and operation limit parameters for said user; and,
sending the operation limit parameters through the key reader to the key for writing into a memory of the key.
24. The vending machine of claim 23 whereby the operation limits can be modified at a docking station to either be equal or unique for a plurality of electronic keys.
25. The vending machine of claim 23 wherein said operation limits are retrieved from the memory based on an identification number or a name associated to the key.
26. The vending machine of claim 23 wherein the operation limit parameters in the key include at least one of the following parameters: number of days, days of the week, hours of the day, number of accesses, at least one vendor identification number.
27. The vending machine of claim 21 wherein the electronic lock memory contains identification codes of a plurality of electronic keys that attempted to access the lock.
28. The vending machine of claim 27 wherein said memory of key identification codes in the electronic lock is transmitted to the key during the lock access event.
29. The vending machine of claim 21 wherein the electronic key contains a memory consisting of a plurality of key identification codes of electronic keys that attempt to access at least one vending machine.
30. The vending machine of claim 29 wherein said key identification codes are transferred to the docking station during a key download operation.
31. The vending machine of claim 30 wherein said key identification codes are transferred to a memory accessible by the docking station.
32. The vending machine of claim 30 wherein said key identification codes are displayed at the docking station.
33. The vending machine of claim 21 wherein a plurality of vending machine lock identification numbers are transferred to the electronic key memory during the key programming operation.
34. The vending machine of claim 21 wherein the communication between the key and the lock during an access control event is initiated by wireless signal by the key.
35. The vending machine of claim 21 wherein the key and the lock are powered by individual non-common power sources.
36. The vending machine of claim 21 wherein the electronic lock controller receives commands through a communication port to enable or disable the electronic lock.
37. The vending machine of claim 36 wherein the vending machine contains a controller separate from the electronic lock and sends the enable or disable commands to the electronic lock.
38. The vending machine of claim 21 wherein the electronic key includes an enunciator to display key operation messages to the user of the key.
39. The vending machine of claim 37 wherein said messages are annunciated visually to the user during operation of the key with a lock.
40. The vending machine of claim 21 wherein a lock reader tool comprises a communication port to communicate with an electronic lock to receive and annunciate lock operation messages to the user.
41. The vending machine of claim 21 wherein during the learn procedure the lock will store the access code only if the encryption code in the key is equal to the encryption code in the lock.
42. The vending machine of claim 21 wherein the lock will enter into the learn mode of operation if the vending machine door is unlocked.
US11/583,670 2001-12-27 2006-10-19 Vending machines with field-programmable electronic locks Abandoned US20070096867A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US11/583,670 US20070096867A1 (en) 2001-12-27 2006-10-19 Vending machines with field-programmable electronic locks

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US34422101P 2001-12-27 2001-12-27
US10/329,626 US6900720B2 (en) 2001-12-27 2002-12-26 Vending machines with field-programmable locks
US10/997,550 US7725897B2 (en) 2004-11-24 2004-11-24 Systems and methods for performing real-time processing using multiple processors
US11/583,670 US20070096867A1 (en) 2001-12-27 2006-10-19 Vending machines with field-programmable electronic locks

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US10/997,550 Continuation US7725897B2 (en) 2001-12-27 2004-11-24 Systems and methods for performing real-time processing using multiple processors

Publications (1)

Publication Number Publication Date
US20070096867A1 true US20070096867A1 (en) 2007-05-03

Family

ID=36462334

Family Applications (2)

Application Number Title Priority Date Filing Date
US10/997,550 Expired - Fee Related US7725897B2 (en) 2001-12-27 2004-11-24 Systems and methods for performing real-time processing using multiple processors
US11/583,670 Abandoned US20070096867A1 (en) 2001-12-27 2006-10-19 Vending machines with field-programmable electronic locks

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US10/997,550 Expired - Fee Related US7725897B2 (en) 2001-12-27 2004-11-24 Systems and methods for performing real-time processing using multiple processors

Country Status (2)

Country Link
US (2) US7725897B2 (en)
JP (1) JP4786313B2 (en)

Cited By (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030101262A1 (en) * 2001-11-27 2003-05-29 Isochron Data Corporation Method and system for scheduling the maintenance of remotely monitored devices
US20030204391A1 (en) * 2002-04-30 2003-10-30 Isochron Data Corporation Method and system for interpreting information communicated in disparate dialects
US20060183422A1 (en) * 2001-06-29 2006-08-17 Defosse Erin M Method and System for Interfacing a Machine Controller and a Wireless Network
US20070112907A1 (en) * 1998-03-19 2007-05-17 Defosse Erin M Remote Data Acquisition, Transmission And Analysis System Including Handheld Wireless Equipment
US20070136125A1 (en) * 2005-12-14 2007-06-14 Godwin Bryan W Method and system for evaluating consumer demand for multiple products and services at remotely located equipment
US20070195490A1 (en) * 2006-02-13 2007-08-23 Howell Sean V Apparatus And Method For Attaching An Electronic Module To A Lock Assembly
US20080083770A1 (en) * 2006-09-13 2008-04-10 Godwin Bryan W Rich content management and display for use in remote field assets
US20080172238A1 (en) * 2007-01-12 2008-07-17 Yosuke Muraki Electronic system with run-time information
US20090013028A1 (en) * 2007-07-02 2009-01-08 Canter James M Apparatus And Method For Monitoring And Control Of Remotely Located Equipment
US20090113038A1 (en) * 2007-10-25 2009-04-30 Godwin Bryan W Systems and Methods for Monitoring Performance of Field Assets
US7778600B2 (en) 2001-06-29 2010-08-17 Crane Merchandising Systems, Inc. Apparatus and method to provide multiple wireless communication paths to and from remotely located equipment
WO2011078811A1 (en) * 2009-12-24 2011-06-30 Vasan Abe Sun Retail machine and system and method of transaction thereof
CN102667745A (en) * 2009-11-18 2012-09-12 日本电气株式会社 Multicore system, multicore system control method and program stored in a non-transient readable medium
CN105469489A (en) * 2015-11-29 2016-04-06 林海航 Electronic locking system based on random key
US20160171851A1 (en) * 2013-02-27 2016-06-16 Welch Allyn, Inc. Anti-Loss for Medical Devices
CN106504377A (en) * 2016-06-23 2017-03-15 林海航 A kind of electronic lock keyless access system of random key
CN107492175A (en) * 2017-08-25 2017-12-19 深圳市光域物联科技有限公司 Visible ray safety door latch, system and method for unlocking
US20180268633A1 (en) * 2017-03-16 2018-09-20 Samsung Electronics Co., Ltd. Electronic device for controlling door lock and method thereof
CN109151181A (en) * 2018-07-27 2019-01-04 南昌黑鲨科技有限公司 Control method, device and the terminal of smart phone function key
US20190266818A1 (en) * 2017-09-05 2019-08-29 Suprema Inc. Access control system and access control method using the same
US20220068058A1 (en) * 2020-09-01 2022-03-03 Yokogawa Electric Corporation Apparatus, system, method and storage medium
US20220253818A1 (en) * 2018-11-13 2022-08-11 Norio Ichihashi Communication system, communication method, and sensor unit

Families Citing this family (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102004052576A1 (en) * 2004-10-29 2006-05-04 Advanced Micro Devices, Inc., Sunnyvale Parallel processing mechanism for multiprocessor systems
US7877355B2 (en) * 2005-04-12 2011-01-25 International Business Machines Corporation Job scheduling for automatic movement of multidimensional data between live datacubes
US8468125B2 (en) * 2005-04-12 2013-06-18 International Business Machines Corporation Automatically moving multidimensional data between live datacubes of enterprise software systems
US8225320B2 (en) * 2006-08-31 2012-07-17 Advanced Simulation Technology, Inc. Processing data using continuous processing task and binary routine
US8347207B2 (en) * 2007-07-16 2013-01-01 International Business Machines Corporation Automatically moving annotations associated with multidimensional data between live datacubes
US9268837B2 (en) 2007-12-04 2016-02-23 International Business Machines Corporation Data entry commentary and sheet reconstruction for multidimensional enterprise system
US8875147B2 (en) * 2008-11-12 2014-10-28 Siemens Aktiengesellschaft Scalable system and method thereof
WO2011027302A1 (en) * 2009-09-02 2011-03-10 Plurality Ltd. Associative distribution units for a high flow-rate synchronizer/scheduler
WO2011076276A2 (en) * 2009-12-23 2011-06-30 Inchron Gmbh Method for generating an optimised hardware/software partitioning of embedded systems using a plurality of control appliances
US9323438B2 (en) 2010-07-15 2016-04-26 Apple Inc. Media-editing application with live dragging and live editing capabilities
KR101686082B1 (en) 2010-07-22 2016-12-28 삼성전자주식회사 Apparatus and method for thread scheduling and lock acquisition order control based on deterministic progress index
US20120130725A1 (en) * 2010-11-22 2012-05-24 Microsoft Corporation Automatic upgrade scheduling
US8954477B2 (en) 2011-01-28 2015-02-10 Apple Inc. Data structures for a media-editing application
US11747972B2 (en) 2011-02-16 2023-09-05 Apple Inc. Media-editing application with novel editing tools
US9997196B2 (en) 2011-02-16 2018-06-12 Apple Inc. Retiming media presentations
RU2011117765A (en) 2011-05-05 2012-11-10 ЭлЭсАй Корпорейшн (US) DEVICE (OPTIONS) AND METHOD FOR IMPLEMENTING TWO-PASS PLANNER OF LINEAR COMPLEXITY TASKS
JP6223224B2 (en) 2014-02-21 2017-11-01 ルネサスエレクトロニクス株式会社 Image processing apparatus and control method thereof
US9632823B1 (en) * 2014-09-08 2017-04-25 Amazon Technologies, Inc. Multithreaded application thread schedule selection
RU2595559C2 (en) * 2014-12-16 2016-08-27 Общество с ограниченной ответственностью "Аби Девелопмент" System and method of using previous frame data for optical character recognition of frames of video materials
US10175885B2 (en) * 2015-01-19 2019-01-08 Toshiba Memory Corporation Memory device managing data in accordance with command and non-transitory computer readable recording medium
JP6540166B2 (en) * 2015-03-31 2019-07-10 オムロン株式会社 Control device
CN108171442A (en) * 2018-01-18 2018-06-15 深圳市伟博思技术有限公司 A kind of Intelligent Dynamic project management method and relevant device
CN109298919B (en) * 2018-08-27 2021-09-07 西安工业大学 Multi-core scheduling method of soft real-time system for high-utilization-rate task set
CN110109743B (en) * 2019-05-09 2023-07-21 中国航空工业集团公司西安航空计算技术研究所 Real-time process scheduling method
US11106496B2 (en) * 2019-05-28 2021-08-31 Microsoft Technology Licensing, Llc. Memory-efficient dynamic deferral of scheduled tasks
CN111966472B (en) * 2020-07-02 2023-09-26 佛山科学技术学院 Process scheduling method and system of industrial real-time operating system
CN113518110A (en) * 2021-04-28 2021-10-19 深圳先进技术研究院 Traffic investigation system and resource scheduling method thereof

Citations (64)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4031434A (en) * 1975-12-29 1977-06-21 The Eastern Company Keyhole-less electronic lock
US4053939A (en) * 1974-11-25 1977-10-11 Kokusai Gijutsu Kaihatsu Kabushiki Kaisha Electric lock system
US4167104A (en) * 1977-11-21 1979-09-11 Coca-Cola Bottling Works Company Solenoid enabled lock for vending machines and the like
US4268076A (en) * 1977-09-27 1981-05-19 Kabushiki Kaisha Itoi Seisakusho Cash box provided with a till
US4353064A (en) * 1981-01-14 1982-10-05 Honeywell Inc. Battery operated access control card
US4354189A (en) * 1977-11-09 1982-10-12 Lemelson Jerome H Switch and lock activating system and method
US4369442A (en) * 1977-09-06 1983-01-18 Robert L. Werth Code controlled microcontroller readout from coin operated machine
US4391204A (en) * 1980-09-09 1983-07-05 Safekeeper Systems, Inc. Security cabinets for hotel rooms
US4509093A (en) * 1982-07-09 1985-04-02 Hulsbeck & Furst Gmbh & Co. Kg Electronic locking device having key and lock parts interacting via electrical pulses
US4594637A (en) * 1985-02-21 1986-06-10 Sidney Falk Digital electronic lock system
US4674454A (en) * 1985-08-22 1987-06-23 Donald Phairr Remote control engine starter
US4709202A (en) * 1982-06-07 1987-11-24 Norand Corporation Battery powered system
US4766746A (en) * 1986-02-21 1988-08-30 Supra Products, Inc. Electronic real estate lockbox system
US4779090A (en) * 1986-08-06 1988-10-18 Micznik Isaiah B Electronic security system with two-way communication between lock and key
US4827395A (en) * 1983-04-21 1989-05-02 Intelli-Tech Corporation Manufacturing monitoring and control systems
US4918431A (en) * 1988-10-31 1990-04-17 Motorola, Inc. Method and apparatus for automatically adjusting the output power of a transmitter
US4926996A (en) * 1983-12-06 1990-05-22 Mars Incorporated Two way communication token interrogation apparatus
US4952864A (en) * 1988-10-18 1990-08-28 Ventritex Power supply down-conversion, regulation and low battery detection system
US5021776A (en) * 1988-07-11 1991-06-04 Yale Security Inc. Electronic combination of lock with changeable entry codes, lock-out and programming code
US5090022A (en) * 1990-05-21 1992-02-18 Inductotherm Corp. Cold crucible induction furnace
US5109530A (en) * 1990-10-24 1992-04-28 Motorola, Inc. Receiver with battery saver
US5113182A (en) * 1990-01-19 1992-05-12 Prince Corporation Vehicle door locking system detecting that all doors are closed
US5184855A (en) * 1991-12-23 1993-02-09 Von Duprin, Inc. Electromagnetic door lock assembly
US5280518A (en) * 1985-10-16 1994-01-18 Supra Products, Inc. Electronic security system
US5339250A (en) * 1990-06-15 1994-08-16 Inn Room Systems, Inc. Interactive network for remotely controlled hotel vending systems
US5347419A (en) * 1992-12-22 1994-09-13 Eaton Corporation Current limiting solenoid driver
US5349345A (en) * 1992-06-30 1994-09-20 Vindicator Corporation Electronic lock
US5392025A (en) * 1993-09-24 1995-02-21 Intermark Corporation Electronic security system for display cabinets
US5506575A (en) * 1991-09-25 1996-04-09 Ormos; Zoltan S. Key-lock system and method using interchange of system-originated codes
US5561420A (en) * 1994-08-16 1996-10-01 Kiekert Aktiengesellschaft Motor-vehicle central lock system with transponder in key
US5575515A (en) * 1994-02-10 1996-11-19 Fuji Electric Co., Ltd. Door locking apparatus for dispenser
US5599505A (en) * 1994-09-16 1997-02-04 Fuji Photo Film Co., Ltd. Chemical analysis element cartridge with capping member
US5602536A (en) * 1985-10-16 1997-02-11 Supra Products, Inc. Data synchronization method for use with portable, microprocessor-based device
US5617082A (en) * 1994-11-15 1997-04-01 Micro Enhanced Technology, Inc. Electronic access control device utilizing a single microcomputer integrated circuit
US5625338A (en) * 1993-12-16 1997-04-29 Digital Security Controls Ltd. Wireless alarm system
US5636881A (en) * 1994-10-21 1997-06-10 Star Lock Systems, Inc. Automatic latching system with automated unlatching feature
US5661470A (en) * 1994-03-04 1997-08-26 Karr; Gerald S. Object recognition system
US5673034A (en) * 1993-10-12 1997-09-30 Saliga; Thomas V. Security system comprising three apparatuses sharing a time-varying code
US5742238A (en) * 1995-09-01 1998-04-21 Emtrak, Inc. System for communication between a central controller and items in a factory using infrared light
US5745044A (en) * 1990-05-11 1998-04-28 Medeco Security Locks, Inc. Electronic security system
US5774053A (en) * 1996-05-02 1998-06-30 Porter; David Storage device for the delivery and pickup of goods
US5813257A (en) * 1997-06-25 1998-09-29 Coin Acceptors, Inc. Electrically controllable locking device for vending machines and the like
US5841866A (en) * 1994-09-30 1998-11-24 Microchip Technology Incorporated Secure token integrated circuit and method of performing a secure authentication function or transaction
US5888644A (en) * 1995-07-17 1999-03-30 Fujicopian Co., Ltd. Thermal transfer recording material
US6005487A (en) * 1990-05-11 1999-12-21 Medeco Security Locks, Inc. Electronic security system with novel electronic T-handle lock
US6038491A (en) * 1997-11-26 2000-03-14 Mars, Incorporated Monitoring and reporting system using cellular carriers
US6068305A (en) * 1997-07-09 2000-05-30 Fort Lock Corporation Lock assembly for vending machines and method for locking and unlocking same
US6130602A (en) * 1996-05-13 2000-10-10 Micron Technology, Inc. Radio frequency data communications device
US6318137B1 (en) * 1998-04-08 2001-11-20 David Chaum Electronic lock that can learn to recognize any ordinary key
US6345522B1 (en) * 1998-08-12 2002-02-12 Star Lock Systems, Inc. Electro-mechanical latching apparatus
US20020024420A1 (en) * 1998-08-12 2002-02-28 Ayala Raymond F. Key for selectively allowing access to an enclosure
US20020024418A1 (en) * 1999-08-11 2002-02-28 Ayala Raymond F. Method for a key to selectively allow access to an enclosure
US6359547B1 (en) * 1994-11-15 2002-03-19 William D. Denison Electronic access control device
US6401059B1 (en) * 1999-05-25 2002-06-04 International Business Machines Corporation Method and system for using a personal digital assistant as a remote control
US6483424B1 (en) * 1991-10-21 2002-11-19 James S. Bianco Electronic lock and key apparatus and method
US6496101B1 (en) * 1998-08-12 2002-12-17 Star Lock Systems, Inc. Electro-mechanical latch assembly
US20030030539A1 (en) * 2001-08-07 2003-02-13 Mcgarry Patrick J. Vending audit system
US6575504B2 (en) * 2000-11-21 2003-06-10 Triteq Lock And Security, L.L.C. Bayonet locking system and method for vending machines and the like
US6581986B2 (en) * 2000-11-21 2003-06-24 Tri Teq Lock And Security, L.L.C. Bayonet locking system and method for vending machines and the like
US20030128101A1 (en) * 2001-11-02 2003-07-10 Long Michael Lee Software for a lock
US20030127866A1 (en) * 2001-12-14 2003-07-10 Martinez Richard A. Electromechanical locking mechanism
US6684671B2 (en) * 2000-11-02 2004-02-03 Best Lock Corporation Vending machine lock
US6867685B1 (en) * 1999-05-10 2005-03-15 Star Lock Systems, Inc. Electro-mechanical lock assembly
US20050088279A1 (en) * 2001-12-27 2005-04-28 Micro Enhanced Technology, Inc. Vending machines with field-programmable electronic locks

Family Cites Families (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
IL93239A (en) * 1990-02-01 1993-03-15 Technion Res & Dev Foundation High flow-rate synchronizer/schedular apparatus for multiprocessors
US5109512A (en) * 1990-05-31 1992-04-28 International Business Machines Corporation Process for dispatching tasks among multiple information processors
JPH05216694A (en) * 1992-02-06 1993-08-27 Mitsubishi Electric Corp Fa controller
JPH09237256A (en) 1996-02-29 1997-09-09 Mitsubishi Electric Corp Dynamic load distribution method for parallel computer
JP2933005B2 (en) 1996-04-05 1999-08-09 日本電気株式会社 Management information storage device
US7165252B1 (en) * 1999-06-21 2007-01-16 Jia Xu Method of scheduling executions of processes with various types of timing properties and constraints
JP2001022595A (en) 1999-07-06 2001-01-26 Nec Corp Real time processing task controller and computer readable recording medium stored with program of the controller
JP3723015B2 (en) * 1999-07-26 2005-12-07 三菱電機株式会社 Numerical controller
US6246720B1 (en) * 1999-10-21 2001-06-12 Sony Corporation Of Japan Flexible software-based decoding system with decoupled decoding timing and output timing
JP2001256063A (en) * 2000-03-13 2001-09-21 Denso Corp Controller and engine controller
US6985937B1 (en) * 2000-05-11 2006-01-10 Ensim Corporation Dynamically modifying the resources of a virtual server
US20020099759A1 (en) * 2001-01-24 2002-07-25 Gootherts Paul David Load balancer with starvation avoidance
US6993763B2 (en) * 2001-06-26 2006-01-31 International Business Machines Corporation Technique for scheduling execution of jobs for or by network-connected devices
US7028302B2 (en) * 2002-04-24 2006-04-11 Hewlett-Packard Development Company, L.P. System and method for automatically tuning a multiprocessor computer system
JP3938343B2 (en) 2002-08-09 2007-06-27 インターナショナル・ビジネス・マシーンズ・コーポレーション Task management system, program, and control method
JP3889726B2 (en) * 2003-06-27 2007-03-07 株式会社東芝 Scheduling method and information processing system
US7359324B1 (en) * 2004-03-09 2008-04-15 Nortel Networks Limited Adaptive jitter buffer control

Patent Citations (73)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4053939A (en) * 1974-11-25 1977-10-11 Kokusai Gijutsu Kaihatsu Kabushiki Kaisha Electric lock system
US4031434A (en) * 1975-12-29 1977-06-21 The Eastern Company Keyhole-less electronic lock
US4369442A (en) * 1977-09-06 1983-01-18 Robert L. Werth Code controlled microcontroller readout from coin operated machine
US4268076A (en) * 1977-09-27 1981-05-19 Kabushiki Kaisha Itoi Seisakusho Cash box provided with a till
US4354189A (en) * 1977-11-09 1982-10-12 Lemelson Jerome H Switch and lock activating system and method
US4167104A (en) * 1977-11-21 1979-09-11 Coca-Cola Bottling Works Company Solenoid enabled lock for vending machines and the like
US4391204A (en) * 1980-09-09 1983-07-05 Safekeeper Systems, Inc. Security cabinets for hotel rooms
US4353064A (en) * 1981-01-14 1982-10-05 Honeywell Inc. Battery operated access control card
US4709202A (en) * 1982-06-07 1987-11-24 Norand Corporation Battery powered system
US4509093A (en) * 1982-07-09 1985-04-02 Hulsbeck & Furst Gmbh & Co. Kg Electronic locking device having key and lock parts interacting via electrical pulses
US4827395A (en) * 1983-04-21 1989-05-02 Intelli-Tech Corporation Manufacturing monitoring and control systems
US4926996A (en) * 1983-12-06 1990-05-22 Mars Incorporated Two way communication token interrogation apparatus
US4594637A (en) * 1985-02-21 1986-06-10 Sidney Falk Digital electronic lock system
US4674454A (en) * 1985-08-22 1987-06-23 Donald Phairr Remote control engine starter
US5602536A (en) * 1985-10-16 1997-02-11 Supra Products, Inc. Data synchronization method for use with portable, microprocessor-based device
US5280518A (en) * 1985-10-16 1994-01-18 Supra Products, Inc. Electronic security system
US4766746A (en) * 1986-02-21 1988-08-30 Supra Products, Inc. Electronic real estate lockbox system
US4779090A (en) * 1986-08-06 1988-10-18 Micznik Isaiah B Electronic security system with two-way communication between lock and key
US5021776A (en) * 1988-07-11 1991-06-04 Yale Security Inc. Electronic combination of lock with changeable entry codes, lock-out and programming code
US4952864A (en) * 1988-10-18 1990-08-28 Ventritex Power supply down-conversion, regulation and low battery detection system
US4918431A (en) * 1988-10-31 1990-04-17 Motorola, Inc. Method and apparatus for automatically adjusting the output power of a transmitter
US5113182A (en) * 1990-01-19 1992-05-12 Prince Corporation Vehicle door locking system detecting that all doors are closed
US5113182B1 (en) * 1990-01-19 1995-11-07 Prince Corp Vehicle door locking system detecting that all doors are closed
US6005487A (en) * 1990-05-11 1999-12-21 Medeco Security Locks, Inc. Electronic security system with novel electronic T-handle lock
US5745044A (en) * 1990-05-11 1998-04-28 Medeco Security Locks, Inc. Electronic security system
US5090022A (en) * 1990-05-21 1992-02-18 Inductotherm Corp. Cold crucible induction furnace
US5339250A (en) * 1990-06-15 1994-08-16 Inn Room Systems, Inc. Interactive network for remotely controlled hotel vending systems
US5109530A (en) * 1990-10-24 1992-04-28 Motorola, Inc. Receiver with battery saver
US5506575A (en) * 1991-09-25 1996-04-09 Ormos; Zoltan S. Key-lock system and method using interchange of system-originated codes
US6483424B1 (en) * 1991-10-21 2002-11-19 James S. Bianco Electronic lock and key apparatus and method
US5184855A (en) * 1991-12-23 1993-02-09 Von Duprin, Inc. Electromagnetic door lock assembly
US5349345A (en) * 1992-06-30 1994-09-20 Vindicator Corporation Electronic lock
US5347419A (en) * 1992-12-22 1994-09-13 Eaton Corporation Current limiting solenoid driver
US5392025A (en) * 1993-09-24 1995-02-21 Intermark Corporation Electronic security system for display cabinets
US5673034A (en) * 1993-10-12 1997-09-30 Saliga; Thomas V. Security system comprising three apparatuses sharing a time-varying code
US5625338A (en) * 1993-12-16 1997-04-29 Digital Security Controls Ltd. Wireless alarm system
US5575515A (en) * 1994-02-10 1996-11-19 Fuji Electric Co., Ltd. Door locking apparatus for dispenser
US5661470A (en) * 1994-03-04 1997-08-26 Karr; Gerald S. Object recognition system
US5561420A (en) * 1994-08-16 1996-10-01 Kiekert Aktiengesellschaft Motor-vehicle central lock system with transponder in key
US5599505A (en) * 1994-09-16 1997-02-04 Fuji Photo Film Co., Ltd. Chemical analysis element cartridge with capping member
US5841866A (en) * 1994-09-30 1998-11-24 Microchip Technology Incorporated Secure token integrated circuit and method of performing a secure authentication function or transaction
US5636881A (en) * 1994-10-21 1997-06-10 Star Lock Systems, Inc. Automatic latching system with automated unlatching feature
US7019615B2 (en) * 1994-11-15 2006-03-28 Micro Enhanced Technology, Inc. Electronic access control device
US5617082A (en) * 1994-11-15 1997-04-01 Micro Enhanced Technology, Inc. Electronic access control device utilizing a single microcomputer integrated circuit
US20040178885A1 (en) * 1994-11-15 2004-09-16 Denison William D. Electronic access control device
US6977576B2 (en) * 1994-11-15 2005-12-20 Micro Enhanced Technology, Inc. Electronic access control device
US6359547B1 (en) * 1994-11-15 2002-03-19 William D. Denison Electronic access control device
US20040246098A1 (en) * 1994-11-15 2004-12-09 Denison William D. Electronic access control device
US20040178884A1 (en) * 1994-11-15 2004-09-16 Denison William D. Electronic access control device
US5888644A (en) * 1995-07-17 1999-03-30 Fujicopian Co., Ltd. Thermal transfer recording material
US5742238A (en) * 1995-09-01 1998-04-21 Emtrak, Inc. System for communication between a central controller and items in a factory using infrared light
US5774053A (en) * 1996-05-02 1998-06-30 Porter; David Storage device for the delivery and pickup of goods
US6130602A (en) * 1996-05-13 2000-10-10 Micron Technology, Inc. Radio frequency data communications device
US5813257A (en) * 1997-06-25 1998-09-29 Coin Acceptors, Inc. Electrically controllable locking device for vending machines and the like
US6068305A (en) * 1997-07-09 2000-05-30 Fort Lock Corporation Lock assembly for vending machines and method for locking and unlocking same
US6038491A (en) * 1997-11-26 2000-03-14 Mars, Incorporated Monitoring and reporting system using cellular carriers
US6318137B1 (en) * 1998-04-08 2001-11-20 David Chaum Electronic lock that can learn to recognize any ordinary key
US6345522B1 (en) * 1998-08-12 2002-02-12 Star Lock Systems, Inc. Electro-mechanical latching apparatus
US6525644B1 (en) * 1998-08-12 2003-02-25 Star Lock Systems, Inc. Electro-mechanical latch assembly
US6496101B1 (en) * 1998-08-12 2002-12-17 Star Lock Systems, Inc. Electro-mechanical latch assembly
US20020024420A1 (en) * 1998-08-12 2002-02-28 Ayala Raymond F. Key for selectively allowing access to an enclosure
US6867685B1 (en) * 1999-05-10 2005-03-15 Star Lock Systems, Inc. Electro-mechanical lock assembly
US6401059B1 (en) * 1999-05-25 2002-06-04 International Business Machines Corporation Method and system for using a personal digital assistant as a remote control
US20020024418A1 (en) * 1999-08-11 2002-02-28 Ayala Raymond F. Method for a key to selectively allow access to an enclosure
US6684671B2 (en) * 2000-11-02 2004-02-03 Best Lock Corporation Vending machine lock
US6581986B2 (en) * 2000-11-21 2003-06-24 Tri Teq Lock And Security, L.L.C. Bayonet locking system and method for vending machines and the like
US6575504B2 (en) * 2000-11-21 2003-06-10 Triteq Lock And Security, L.L.C. Bayonet locking system and method for vending machines and the like
US6874828B2 (en) * 2000-11-21 2005-04-05 Triteq Lock And Security, L.L.C. Bayonet locking system for vending machines and the like
US20030030539A1 (en) * 2001-08-07 2003-02-13 Mcgarry Patrick J. Vending audit system
US20030128101A1 (en) * 2001-11-02 2003-07-10 Long Michael Lee Software for a lock
US20030127866A1 (en) * 2001-12-14 2003-07-10 Martinez Richard A. Electromechanical locking mechanism
US20050088279A1 (en) * 2001-12-27 2005-04-28 Micro Enhanced Technology, Inc. Vending machines with field-programmable electronic locks
US6900720B2 (en) * 2001-12-27 2005-05-31 Micro Enhanced Technology, Inc. Vending machines with field-programmable locks

Cited By (34)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070112907A1 (en) * 1998-03-19 2007-05-17 Defosse Erin M Remote Data Acquisition, Transmission And Analysis System Including Handheld Wireless Equipment
US8631093B2 (en) 1998-03-19 2014-01-14 Crane Merchandising Systems, Inc. Remote data acquisition, transmission and analysis system including handheld wireless equipment
US7778600B2 (en) 2001-06-29 2010-08-17 Crane Merchandising Systems, Inc. Apparatus and method to provide multiple wireless communication paths to and from remotely located equipment
US20060183422A1 (en) * 2001-06-29 2006-08-17 Defosse Erin M Method and System for Interfacing a Machine Controller and a Wireless Network
US8005425B2 (en) 2001-06-29 2011-08-23 Crane Merchandising Systems, Inc. Method and system for interfacing a machine controller and a wireless network
US20030101262A1 (en) * 2001-11-27 2003-05-29 Isochron Data Corporation Method and system for scheduling the maintenance of remotely monitored devices
US20030204391A1 (en) * 2002-04-30 2003-10-30 Isochron Data Corporation Method and system for interpreting information communicated in disparate dialects
US20070136125A1 (en) * 2005-12-14 2007-06-14 Godwin Bryan W Method and system for evaluating consumer demand for multiple products and services at remotely located equipment
US8484068B2 (en) 2005-12-14 2013-07-09 Crane Merchandising Systems, Inc. Method and system for evaluating consumer demand for multiple products and services at remotely located equipment
US20070195490A1 (en) * 2006-02-13 2007-08-23 Howell Sean V Apparatus And Method For Attaching An Electronic Module To A Lock Assembly
US20080083770A1 (en) * 2006-09-13 2008-04-10 Godwin Bryan W Rich content management and display for use in remote field assets
US7997484B2 (en) 2006-09-13 2011-08-16 Crane Merchandising Systems, Inc. Rich content management and display for use in remote field assets
US20080172238A1 (en) * 2007-01-12 2008-07-17 Yosuke Muraki Electronic system with run-time information
US8959028B2 (en) 2007-07-02 2015-02-17 Crane Merchandising Systems, Inc. Apparatus and method for monitoring and control of remotely located equipment
US20090013028A1 (en) * 2007-07-02 2009-01-08 Canter James M Apparatus And Method For Monitoring And Control Of Remotely Located Equipment
US8533315B2 (en) 2007-10-25 2013-09-10 Crane Merchandising Systems, Inc. Systems and methods for monitoring performance of field assets
US20090113038A1 (en) * 2007-10-25 2009-04-30 Godwin Bryan W Systems and Methods for Monitoring Performance of Field Assets
CN102667745A (en) * 2009-11-18 2012-09-12 日本电气株式会社 Multicore system, multicore system control method and program stored in a non-transient readable medium
US8892230B2 (en) 2009-11-18 2014-11-18 Nec Corporation Multicore system, control method of multicore system, and non-transitory readable medium storing program
WO2011078811A1 (en) * 2009-12-24 2011-06-30 Vasan Abe Sun Retail machine and system and method of transaction thereof
US20160171851A1 (en) * 2013-02-27 2016-06-16 Welch Allyn, Inc. Anti-Loss for Medical Devices
US9761100B2 (en) * 2013-02-27 2017-09-12 Welch Allyn, Inc. Anti-loss for medical devices
CN105469489A (en) * 2015-11-29 2016-04-06 林海航 Electronic locking system based on random key
CN106504377A (en) * 2016-06-23 2017-03-15 林海航 A kind of electronic lock keyless access system of random key
US10490009B2 (en) * 2017-03-16 2019-11-26 Samsung Electronics Co., Ltd. Electronic device for controlling door lock and method thereof
US20180268633A1 (en) * 2017-03-16 2018-09-20 Samsung Electronics Co., Ltd. Electronic device for controlling door lock and method thereof
US20220351561A1 (en) * 2017-08-05 2022-11-03 Suprema Inc. Access control system and access control method using the same
CN107492175A (en) * 2017-08-25 2017-12-19 深圳市光域物联科技有限公司 Visible ray safety door latch, system and method for unlocking
US20190266818A1 (en) * 2017-09-05 2019-08-29 Suprema Inc. Access control system and access control method using the same
US11386733B2 (en) * 2017-09-05 2022-07-12 Suprema Inc. Access control system and access control method using the same
US11651638B2 (en) * 2017-09-05 2023-05-16 Suprema Inc. Access control system and access control method using the same
CN109151181A (en) * 2018-07-27 2019-01-04 南昌黑鲨科技有限公司 Control method, device and the terminal of smart phone function key
US20220253818A1 (en) * 2018-11-13 2022-08-11 Norio Ichihashi Communication system, communication method, and sensor unit
US20220068058A1 (en) * 2020-09-01 2022-03-03 Yokogawa Electric Corporation Apparatus, system, method and storage medium

Also Published As

Publication number Publication date
JP2006146937A (en) 2006-06-08
US7725897B2 (en) 2010-05-25
JP4786313B2 (en) 2011-10-05
US20060112390A1 (en) 2006-05-25

Similar Documents

Publication Publication Date Title
US6900720B2 (en) Vending machines with field-programmable locks
US7821395B2 (en) Vending machines with field-programmable locks
US20070096867A1 (en) Vending machines with field-programmable electronic locks
US10269202B2 (en) Intelligent key system
US20050212656A1 (en) Electronic access control device
US20110050390A1 (en) Electronic Access Control Device and Management System
US20020024420A1 (en) Key for selectively allowing access to an enclosure
US20110289123A1 (en) Method for Controlling and Recording the Security of an Enclosure
US20110025459A1 (en) Electronic Access Control Device and Management System
US20120011367A1 (en) Method for Controlling and Recording the Security of an Enclosure
US20090051486A1 (en) Electronic key control and management system for vending machines and the like
US20110187496A1 (en) Electronic Access Control Device and Management System
US20020014950A1 (en) Method for programming a key for selectively allowing access to an enclosure
US6525644B1 (en) Electro-mechanical latch assembly
US20120011366A1 (en) Method for Controlling and Recording the Security of an Enclosure
US6384711B1 (en) Electronic lock in cylinder of standard lock
US20110087370A1 (en) Electronic Access Control Device and Management System
US20110289124A1 (en) Method for Controlling and Recording the Security of an Enclosure
US20110082882A1 (en) Electronic Access Control Device and Management System
US6005487A (en) Electronic security system with novel electronic T-handle lock
US6643843B1 (en) Methods and apparatus for optical communication update of program memory in embedded systems
US20110050391A1 (en) Electronic Access Control Device and Management System
US20020024418A1 (en) Method for a key to selectively allow access to an enclosure
EP0688491B1 (en) Electronic security system with novel electronic t-handle lock
JP2006127237A (en) Automatic vending machine

Legal Events

Date Code Title Description
STCB Information on status: application discontinuation

Free format text: EXPRESSLY ABANDONED -- DURING EXAMINATION