CA2082649C

CA2082649C - Electronic security system

Info

Publication number: CA2082649C
Application number: CA 2082649
Authority: CA
Inventors: Richard G. Hyatt, Jr.; Charles E. Hall
Original assignee: Medeco Security Locks Inc
Current assignee: Assa Abloy High Security Group Inc
Priority date: 1990-05-11
Filing date: 1991-05-08
Publication date: 1997-04-15
Anticipated expiration: 2011-05-08
Also published as: EP0527886A1; DE69130477T2; CA2082649A1; WO1991018169A1; EP0527886A4; ATE173315T1; EP0527886B1; DK0527886T3; US5140317A; JPH05506898A; DE69130477D1

Abstract

An electronic security system includes an electronic lock mechanism (201) and an electronic key (101 and 104), each of which is provided with a microprocessor controller (501) and a memory (502) storing data including an ID code. The lock microprocessor (601) changes the ID code stored in its memory (602) upon the operation of the lock by a correct key.
The key (101) can only be used to operate the lock once, and thereafter must be reprogrammed by a host computer with the updated ID code for the lock. The electronic lock operates a solenoid (209) which retracts a bolt blocking mechanism (210) which prevents the unlocking of the bolt (202) even when a key having the correct mechanical key cuts (102) inserted into the lock. Power for operating the electronic lock as well as the solenoid is provided by a power supply within the key (504).

Description

ELECTRONIC SECURITY SYSTEM

BACKGROUND OF THE INVENTION
F$eld of the Invention This lnvention relates generally to elQctronlc securlty systQms, and more particularly to electronlc security systems for money-containing dQvlc~s such as pay tQlephones, vending machines, bill changQrs or the llke, which must be periodically accessed by a collector in order to retrieve the funds accumulated ln the device.
Back~round and Prior Art Typically, the collection of money from coin or currency operated dQvices such as pay telephones, transit system fare card machlnes or the like is a costly and burdensome operation. For instAnce, a company may own tens or even hundreds of thousands of pay telephones for which tens or hundreds of thousands of keys must be kept in order to prevent the 108~ of a key from requlrlng the changing of locks on thousands of devices which would operate with the lo~t key.
Another problem involved wlth the collection of funds from currency operated devices ls the po6sibility of fraud or theft by a collector. Typically, a collector should remove a locked coin box from the devlce and replace it with an empty lock box to which he does not have acce~s. However, lt is pos~ible that a removed coin box will not be replaced with another " *

PCTJUS9l/03259 lock box but rather will be replaced with an unlocked receptacle whlch can be later removed by th~t collector before turnlng in hi~ key at the end of the collectlon ~hift.
Yet another C08t involved in the collection process i~ the sheer manpower requLred for the ta~k of distributing, collecting, and keeping track of many thousands of key~ on a daily bssis.
Although electronic ~ecurity systems are known and hsve been used for variou~ purposes, see e.g. U.S.
Pstents 4,789,859, 4,738,334, 4,697,171, ~,438,426, spplicsnts are un~warQ of sny which specificslly address the problems, noted above.
SUMMAQY 0~ T~E lh~NlION
The pre~ent lnvention provides an electronic security systQm which overcomes the problems mentioned sbove nnd signlfic~ntly reducQs collection costs.
The present invention also provides an electronic security system which elimin~tes the requirement of costly rekQying ln the event of a key 108~.
The present inventlon further providQs an electronic security sy~tem which substantially elimlnatQs the posslbility of intern~l fraud and theft.
This inv~ntion 18 an electronic security system comprising a lock including a bolt movable between a locked and an unlocked position, a key actuated lock cylinder having a bolt cnm in contact with said bolt to prevent the bolt from moving when in a locked position, ~nd operable upon actuation to move the bolt to the unlocked pos~tion, n retractnble locking menns for preventing the bolt from moving to the unlocked position when unretracted and allowing the bolt to be moved to the unlocked position when retracted, an electrically powered fiolenoid operable to retract the PCT/~'S9l/03259 WO9l/t8169 3 20826~9 blocking means upon 6witching of power thereto, a microprocessor for controlling the swltching of power to the solenoid, and a memory coupled to the microprocQssor storing coded data.
S The invention further include~ key mean~
insertable into the lock cylinder for supplying power to the solenold to retract the blocking means and for actuating the lock cylinder to move the bolt to the unloc~ed position, including a power supply for supplying power to the solenoid, a controller, a memory storlng coded data, and mean~ for establishing electrical connection between the controller and the microprocessor through contact terminals in the lock cylinder for transmission of the coded data, in which lS the microprocessor includes means for comparing the coded data read from the key mean~ with coded data stored in the coupled memory, and means for enabling the power supply of the key means to power the solenoid when thQ mQans for comparing has detQrminQd that the coded data from the key means matches the coded data in the coupled memory of the lock.

BRIEF DESCRIPTION OF THE DRA~INGS
The presQnt invention will become mOrQ fully understood from the detailed description given here~nbelow and the accompanying drawings which sre given by way of illustration only, and are not limitative of the present invention, and wherein:
FigurQs lA and lB are ~ide and end elevational views, respectlvely, of an electronic key wlth its own power supply according to one preferred embodiment of the present invention;
Figure 2 is a front elevation view of a lock cyllnder and assoclated mechanlsms (shown w~th the ,~

~ 91/t8169 PCTlUS91/032s9 housing cover removed) for operation with the key of Figure~ lA and 1~;
Figure 3 is a schematic view of an electronic key programmer according to an embodiment of the present invention;
Figure 4 i8 a ~chematic view of a portable key programmer according to another embodiment of the present invention;
Figure 5 is a schematic block diagram of the circuit elements of the electronic key of Figure lA;
Figure 6 is a schematic block diagram of the electronic components of the lock mechanism of Figure 2;
Figure 7 i8 a schematic block diagram of the electronic key programmer of Figures 3 and 4; and Figure 8 is an operational flow chart diagram of the electronic lock mechanism operation.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
Figures lA and lB illustrate an electronic key 100 accordlng to an embodiment of the pre~ent invent~on.
The key has a key body 101 which contains logic and power transfer circuitry, and a ~ey blade 102 with appropriately cut key bits for operating pin tumblerR
as is known in the art. The key 100 also carries a spring loaded data and power electrical contact 103, which is made of a suitable material and is preferably gold pleted.
Portable battery and logic housing 104 contains a battery power supply and electronic circuitry, a battery charging port 10S, a wrist strap or belt clip 106, and a plug-connected cable 107 for transferring power and dnta 8~ gnals between the housing 104 and the key body 101.

WO9l/18169 PCT/US91/03259 20826~9 Figure lB is an end view of the key body ~howing the orientation of the spring loaded contact 103 with relation to the key blade 102. The key 100 and connected housing 104 with their components are portable and are referred to as ~key means".
Figure 2 illustrates a lock cylinder and bolt mechanism according to one embodiment of the present invention, included in a housing 201 (with its cover removed). Within the housing is a bolt 202 operated by a lock cylinder 203 containing a key cylinder plug 204 having a keyway 205 for key blade 102, and an electrical contact 206 which makes contact with the power and data contact 103 of the key body when the key blade 102 is inserted into the key blade opening 205.
A bolt cam 207 is rotated by the lock cylinder 203 to move the bolt 202 between the locked po~ition shown and an unlocked position in which the bolt is withdrawn downward to be ~ubstantially within the housing 201. The lock housing 201 further includes electronic logic circuitry 208 and an electrically powered solenoid 209. Solenoid 209 includes a ~pring bia~ed bolt blocking plunger 210 which, when extended, prevents bolt 202 from being withdrawn by the bolt cam into the housing 201 to its unlocked position. Upon operation of the solenoid 209, bolt blocking plunger 210 is retracted toward the solenoid to enable the key 100 to be turned in the clockwise direction which rotates bolt cam 207 against the bolt 202 and cauges the movement of the bolt 202 downward into the housing 201.
Figure 3 illustrates a programmer for writing data into and reading data from the circuitry in key body 104 through cable 107. The programmer includes a host computer 301 which may be a minicomputer, personal computer, or any other type of computer, but which preferably is an IBM~

20826~!~

compatible microcomputer. A key programmer interface unit 302 18 connected to the computer 301 by means of a cable 303 which plug-~ into a communication port of the computer 301. The programmer interface unit 302 contalns 8 key receptacle 304 having electrical contacts into which the plug end of the key cable 107 is inserted after being disconnected from key body lOl to allow the computer to write into the memory within key housing 104. The computer 301 is londed wlth a software program 305 for loading and retrieving files from the key logic hou~ing 104.
Figure 4 illustrate~ a portsble programmer interface unit 401 including ~ modem which en~bles the portable programmer interface unit 401 to communicate with the computer 301 through the public switched telephone networ~ (PSTN) Vi8 a standard phone ~àck 402.
In this embodiment, an operator in the field needing to update the contents of files in the key housing lO4 would dial up the ho~t computer using a ~tandard phone sQt 403 which is connectable via a ~ack to the programmer interface 401. Once communication with the host computer 301 is established, the programmer interface unit 401 operates in the same manner as the office programmer interface unit 302.
Figure 5 is a schematic block diagr~m illustrating the components within the electronic key housing lOg.
The components include a microcontroller or microprocessor 501, an electrically erasable programmable read only memory (EEPROM) 502 coupled to the controller 501, an osclllstor or clock 503 which provides clock signals for the operation of controller 501, and a battery power source 504 which operates the controller 501 a8 well as the solenoid 209 and the circuitry 208 withln the lock mechanism housing 201.

PCr/US9 1 /03259 WO 91tl8169 The electronic key components further include an electronic switch 505 operated by the controller 501 and a power sensing circuit 506.
Figure 6 is a schematic block diagram of the electronic circuitry 208 within the lock houslng 201.
This circultry includes a mlcroprocessor 601, an EEPROM
602 coupled to the microproce~sor 601, an oscillator or clock 603 for providing operational clock signals to the microprocQssor 601, a power filter 604, electronic switch 605 ~nd load 606 for transmission of signnls to the key controller 501 via line 607, and an electronic swltch 608 for allowing power to flow from power ~ource 504 within the key houfiing 104 through cable 107 and cont~cts 103-206 through the solenoid 209 to ground to activate the solenoid.
Figure 7 is a schematic diagram of the electronic key programmQr interface unit 302. It is noted that the portable key programmer interface unit 401 contains subst~ntially the same components as the programmer 302, in additlon to the modem and telephone ~ack not shown. The programmer interface unit 302 includes a microcontroller 701, a clock oscillator 702, an electronic switch 703 and load 704 combination which operate similarly to the switch 605 and load 606, a power ~upply 705, and a standard RS-232 receiver and driver 706 which couples the programmer interface unit 302 to the host computer 301.
The operation of the ~ystem components will now be described with reference to Figure~ 5-7.
The electronic key 1~0 is insQrted into the key programmer interface unit ~2 or 401 to be programmed by the host computer running the customized software application 305 via cable 107 as described above.

W() 91/18169 208264~

Using the example of a lock for pay telephone~ for illustration, the EEPROM 502 is loaded with dnta corresponding to a specific collection route. The data can be entered manually through a keyboard provided with the host computer 301, or the data can be transferred to the EEPROM 502 from file~ on a floppy disk in~erted into a stsndard floppy disk drive of the computer 301.
EEPROM S02 is loaded with specially encrypted data corresponding to specific ID codes stored in each of the electronic lock memories 602 of the locks on the specific collection route. Data encryption i~
performed by an encryption algorithm in a known manner.
EEPROM 502 also is loaded with the date of key programming, the start date a~ of which the ~ey i8 valid, and a time window during which the key can be used, for example, 24, 48 or 72 hours from the start date. EEPROM 502 also contains an address location storing the particular key category, for example, whether the key is a collection key or service key, and a serial number for key identification. The data is encrypted using a specific algorithm performed by the software 305.
The computer 301 may also print out the part~cular collection route, lock key codes, time window, and start d~te for confirmation by the programmer.
Controller 501 keeps track of the current time and date by counting the clock inputs of oscillator 503 and U8 ~ng the ~ey progr~mming date as a reference.
The data is wrltten into EEPROM 502 through switching of electronic switch 703 by microcontroller 701 which serves to increase and decrease the amount of power consumed by the load 703 which in turn provides the logic levels for binary n 1~ and ~0~ digltal WO9l/18169 _ 2082~49 communication to the microcontroller 501. This increase and decrea~e in power is sensed by the power sense circuit 506 and is converted into dlgital s1gnal~
readable by the microcontroller 501.
Referring now to Figure 6, the lock mechani~m microprocessor 601 is coupled to ~EPROM memory 602 which stores a specific ID code for that speciflc lock.
One important feature of the prQsent invention is that the lock mechanism of Figure 2 contains no power 8upply itself but i~ completely powered by the power ~ource 504 of the electronic key 100. Power filter 604 is provided to ~upply power to the logic c1rcu~ts from the key 100 over line 607, the power filter smoothing the voltage waveform 80 that power interruption~ caused by data transmlss~on over line 607 will not affect the operatlon of the logic clrcuits.
As an additional security feature, a solenoid activation switch 609 can be mechanically coupled to the bolt blocking plunger 210 of Figure 2 to detect the retr~ction of the bolt blocking plunger. In telephones equlpped wlth a so-called ~Smsrt Terminal~ or circuit board 610, which ~8 provided w1th 8 modem to llnk the telephone to the ho~t computer over a telephone line, activation swltch 609 can be u~ed to send an alarm to the host computer when switch 609 detects the retr~ctlon of the bolt blocking plunger in the absence of generation of an enable signal by the microproces~or 601, which would be indicative of someone tampering with the lock by trying to manually pry the bolt blocklng plunger away from bolt 202. An additional line 611 msy be provlded to establish communication between the lock mlcroproce~or and the smart terminal 610.

10 20826~9 The use of a smart telephone terminal 610 al80 ~llows the use of a host confirmation feature as an addltlonal feature of the present invention. Part of the data stored in the key memory 502 is the key's particular serial number. Using the host confirmation feature, the ho~t computer 301 would dial up the smart terminal 610 via a modem and transmit a host confirmation mess~ge to the microproce~sor 601. The me~sage may instruct the microprocessor to ~llow the solenold 209 to be powered by any mechanically operable key inserted into the key ~lot 205, may lnstruct the microprocessor 601 to prevent any key at all from operatlng the lock by prohibiting powering of the solenoid 209, or may instruct the microprocessor 601 to allow only a key hnving a particular serial number, transm~tted by the ho~t computer, to operate the lock by powerlng the solQnoid. The host confirmation data may then be stored in the memory 602 coupled to the mlcroprocQssor 601.
Referring now to Figure 8, the overall operation of the electronlc lock system will be described.
After the key blade 102 is lnserted into the keyw~y 205 ~nd the contact 103 is electrlcally coupled to the key cylinder contact 206, the elQctronic lock logic circultry is powered up or awa~QnQd at step 801.
At step 802, microproce~or 601 communlc~tes with the microcontroller 501 to read the d~ta ~tored in the memory 502. At step 803, microprocessor 601 check~
whether the current date ~tored in memory 502 is ~fter the start date written in~o memory 502 during the programming mode of the ~ey, determines whether the current time read from memory 502 is within the time window stored in memory 502 whlch has been programmed by the host computer in advance. If the Rtart date PC~r/US9t/~3259 11 20826~9 read from the key memory i~ subsequent to the current date read from the key memory, or if the current time is outside of the time window stored in the key memory, the microprocessor advance~ to step 809 at which the key is determined to be invalid, the microprocessor 601 18 reset, and no further action is taken. If the time and date data i8 valid, the microprocessor 601 proceeds to step 804 in which the 11st of ID codes stored in key memory 502, corresponding to the locks that key 100 is to operate on this particular collection roUtQ, i8 compared with the current ID code stored in the memory 602. If the ID code in memory 602 18 contained ln the 11st stored ln memory 502, the process proceQds to step 805 in which the presence of a host confirmation feature is checked. If not, the microproce~sor proceeds to step 809. If the telephone is not equipped with a smart terminal 610, processing proceeds to step 806 in which m~croprocessor 601 calculates a new ID
code accord~ng to a pre~tored algor~thm in memory 602, encrypts the new ID code and stores it ln memory 602, replacing the previous ID code storQd therein. At step 807, microprocessor 601 transmlts a signal to electronic ~witch 608 which allows power to flow from power source S04 through solenoid 209, and causes bolt blocking plunger 210 to retract in the direction toward the solenoid 209 for a predetermined period of time such a8 5 seconds. At this time, the oper~tor may turn the key body 101 and unlock the bolt. The microproce~or 601 then resets before the key body 101 ~0 i8 withdrawn from the in~ert slot 205. After the bolt ~8 relocked, the bolt blockinq plunger 210 moves back to ~ts blocking position ~hown in Figure 2 by spring bias action.

~091t18169 PCT/US91/032~9 12 20826~9 If the coin telephone is one equipped with a smart terminal, processinq proceeds from step 805 to step 808. In this step, microprocessor 601 determines whether the key serial number matches the serlal number trAnsm~tted from the ho~t computer, or whether the host computer has sent a mes~age to prevent all kQys from operating. If the key data matches the data stored in the memory 602, processing proceeds to step 806 as described above. If the key data does not match, or mlcroprocessor 601 hAs received a prohlbit mQssage, processing proceed~ to ~tep 809.
As an add~tional feature, each lock may write its serial number and current time into a specific locatlon of the memory 502 of the key in the event that all key lS data is valid to indicate that the specific lock was operated at the particular time stored with the serial number. Upon return of the key to the central office, the key may be re-inserted into the programmer interf~ce unit 302 and the files in memory 502 read by the host computer in order to maintain a list of the locks that were operated as well as those that were not operated. All of the algorithms utilized by each of the lock microprocessors 601 are stored in the host computer 301 such thst after the key is returned at the end of a collection cycle, the key may b~ reprogrammed with the new ID codes currently being stored in each of the operated locks, while the ID codes for the locks that have not been operated sre left unchanged within the key memory 502.
The invention bein~ thus described, it will be apparent to those skilled in the srt that the same may be varled in many ways without departing from the spirit and scope of the invention. Any and all such 13 20~26~9 modlfications are intended to be included within the 8 cope of the following claim~.

Claims

THE EMBODIMENTS OF THE INVENTION IN WHICH AN EXCLUSIVE
PROPERTY OR PRIVILEGE IS CLAIMED ARE DEFINED AS FOLLOWS:

1. An electronic security system, comprising:
a lock, including a bolt movable between a locked and an unlocked position, a key-actuated lock cylinder having a bolt cam in contact with said bolt to prevent said bolt from moving when in a locked position, and operable upon actuation to move said bolt to said unlocked position, retractable blocking means for preventing said bolt from moving to said unlocked position when unretracted and allowing said bolt to be moved to said unlocked position when retracted, an electrically powered solenoid operable to retract said blocking means upon switching of power thereto, a microprocessor for controlling the switching of power to said solenoid, and a memory coupled to said microprocessor storing coded data; and key means insertable into said lock cylinder for supplying power to said solenoid to retract said blocking means and for actuating said lock cylinder to move said bolt to said unlocked position, including a power supply for supplying power to said solenoid, a memory storing coded data, a controller for controlling actuation of said power supply and controlling data transfer between said memory and said microprocessor, and means for establishing electrical connection between said controller and said microprocessor through contact terminals in said lock cylinder for transmission of said coded data;
said microprocessor including means for comparing coded data read from said key means with coded data in said coupled memory, and means for enabling said power supply to power said solenoid when said means for comparing has determined that said coded data from said key means matches the coded data in said coupled memory.

2. An electronic security system as set forth in claim 1, wherein said coded data stored in said coupled memory and said key means memory includes ID codes, said microprocessor further comprising means for changing the ID code in said coupled memory after said means for comparing has determined an ID code match.

3. An electronic security system as set forth in claim 2, further comprising:
host computer means for updating the coded data stored in said key means memory; and programmer interface means coupled between said host computer means and said key means for writing said coded data from said host computer means into said key means memory.

4. An electronic security system as set forth in claim 3, wherein said coded data comprises current ID codes for locks accessible by said key means, the start date on which said key means is valid, the date on which the coded data stored in said key means memory was written into said key means memory, and a selected time period during which said key means is to remain valid.

5. An electronic security system as set forth in claim 4, wherein said key means further comprises clock means for determining the current time and date and means for transmitting the current time and date to said microprocessor, and said microprocessor further comprises means for comparing said start date with the current date, means for determining whether the current time is within said selected time period, and means for prohibiting the powering of said solenoid when the start date is invalid and also when the start date is valid and the current time is outside said selected time period.

6. An electronic security system as set forth in claim 1, wherein said coded data stored in said key means memory includes a key serial number, said comparing means comparing said key serial number with a prestored key serial number in said coupled memory and said enabling means enabling said solenoid to be powered upon a serial number match.

7. An electronic security system as set forth in claim 6, wherein said lock further comprises a modem for coupling said microprocessor to a host computer, means for reading coded data transmitted by said host computer, and means for storing said coded data in said coupled memory.

8. An electronic security system as set forth in claim 7, wherein said microprocessor further comprises means for reading an override signal from said host computer and means for enabling said power supply to power said solenoid without comparison of the coded data in said key means memory and said coupled memory.

9. An electronic security system as set forth in claim 7, wherein said microprocessor further comprises means for reading a disable signal from said host computer and means for prohibiting said power supply from powering said solenoid regardless of a match between the coded data in said key means memory and said coupled memory.

10. An electronic security system as set forth in claim 7, further comprising a sensor for sensing the retraction of said blocking means and means for sending a signal to said host computer when said blocking means has been retracted in the absence of a determined coded data match.

11. An electronic security system as set forth in claim 1, wherein said microprocessor further comprises means for writing the time and/or date of access to said lock into the memory of said key means after determination of a coded data match.

12. An electronic security system as set forth in claim 11, further comprising:
host computer means for updating the coded data stored in said key means memory and receiving said time and/or date data stored therein; and programmer interface means coupled between said host computer means and said key means for writing said coded data from said host computer means into said key means memory and reading said time and/or date data from said key means memory to said host computer means.

13. An electronic security system as set forth in claim 12, wherein said programmer interface means is connected to a communication port of said host computer via a cable.

14. An electronic security system as set forth in claim 12, wherein said programmer interface means is connected to a communication port of said host computer via a modem.

15. A lock mechanism, comprising:
a bolt movable between a locked and an unlocked position;
a lock cylinder having a bolt cam in contact with said bolt to prevent said bolt from moving when in a locked position, and operable upon actuation to move said bolt to said unlocked position;
retractable blocking means for preventing said bolt from moving to said unlocked position when unretracted and allowing said bolt to be moved to said unlocked position when retracted;
an electrically powered solenoid operable to retract said blocking means upon switching of power thereto; and means for selectively powering said solenoid, comprising a portable key means for operating said lock cylinder and including a power supply.