Vending machines with field-programmable electronic locks

• US 20050088279A1
• Filed: 11/24/2004
• Published: 04/28/2005
• Est. Priority Date: 12/27/2001
• Status: Active Grant

• Current Assignee: Micro Enhanced Technology Incorporated
• Original Assignee: Micro Enhanced Technology Incorporated
• Inventors: Denison, William D., Silvers, Bradley S., Brownfield, Lawrence C.
• Granted Patent: US 7,495,543 B2
• Time in Patent Office: Days
• US Class Current: 340/5.230
• CPC Class Codes: G07C 2009/00388 code verification carried out according to the challenge/response method
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/005 whereby the code is a random code
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 2009/00849 programming by learning
• CPC Class Codes: G07C 2209/04 Access control involving a hierarchy in access rights
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/00817 where the code of the lock can be programmed
• CPC Class Codes: G07C 9/00896 specially adapted for particular uses
• CPC Class Codes: G07F 11/62 in which the articles are stored in compartments in fixed receptacles
• CPC Class Codes: G07F 5/26 Interlocks, e.g. for locking the doors of compartments other than that to be used
• CPC Class Codes: G07F 9/001 Interfacing with vending machines using mobile or wearable devices
• CPC Class Codes: G07F 9/002 Vending machines being part of a centrally controlled network of vending machines
• CPC Class Codes: G07F 9/026 for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: Y10T 70/7079 Key rotated [e.g., Eurocylinder]

Abstract

A vending machine uses a field-programmable electronic lock that learns a key code from a corresponding electronic key. The electronic lock has a learning process activation device that is accessible when the door of the vending machine is in the open position. Using the learning process activation device, a service person activates the electronic lock to perform a key code learning operation, in which the electronic lock receives a key code transmitted from an electronic key and stores the key code in a non-volatile memory for future access control of the vending machine. Data encryption is employed in the communications between the key and the lock to ensure the security of the communications. A communication device installed in the vending machine for communicating with a home base computer allows the operation of the electronic lock to be remotely controlled for access control and auditing purposes.

Claims

1. A vending machine comprising:

a door openable to access contents of the vending machine;

an electronic lock for unlocking the door of the vending machine, the electronic lock comprising a control circuit including a microcomputer, a non-volatile memory containing computer-executable instructions for performing a decryption operation based on an encryption code, a communication interface for receiving communications, and a learning mode activation device, the microcomputer being programmed to perform steps of receiving a learning mode activation signal from the learning mode activation device and, in response to the learning mode activation signal, receiving a first key code in an encrypted form via the communication interface, performing the decryption operation to decrypt the first key code, and storing the decrypted first key code in the non-volatile memory.

2. A vending machine as in claim 1, wherein the communication interface is a wireless communication interface that receives communications over an infrared band.

3. A vending machine as in claim 2, wherein the wireless communication interface includes an infrared receiver disposed behind an item selection button on the vending machine.

4. A vending machine as in claim 3, wherein the infrared receiver is also an infrared transmitter.

6. A vending machine as in claim 1, wherein the microcomputer of the electronic lock is programmed to communicate with an electronic key to receive a second key code from the electronic key and unlock the door of the vending machine when the second key code matches the first key code stored in the non-volatile memory.

7. A vending machine as in claim 1, wherein the microcomputer of the electronic lock is further programmed to transmit access event data regarding access attempts directed to the electronic lock to the electronic key after a match is found between the first and second key codes.

8. A vending machine as in claim 1, wherein the vending machine further includes an electrical switch operable by a mechanical lock operable by an associated mechanical key, wherein the microcomputer of the electronic lock is further programmed to receive a trigger signal from the electrical switch when the microcomputer is set in a learning mode using the learning mode activation device and, in response to the trigger signal, enter an operation mode in which the microcomputer unlocks the door of the vending machine upon receiving a subsequent trigger signal generated by the electrical switch.

9. A vending machine as in claim 1, further including a communication device external to the electronic lock for wirelessly communicating with a control computer at a remote location, and a lock controller for controlling operation of the electronic lock in response to control commands received from the control computer via the communication device.

10. A vending machine as in claim 9, wherein the lock controller forwards data received from the electronic lock to the communication device for transmission to the control computer.

11. A vending machine as in claim 8, wherein the data received from the electronic lock include access event data regarding access attempts directed to the electronic lock of the vending machine.

12. A vending machine as in claim 1, further including a state indication device operable by the microcomputer to indicate operation status of the electronic lock.

13. A vending machine as in claim 1, wherein the microcomputer of the electronic lock is programmed to receive an encrypted transmission through the communication interface, decrypt the received encrypted transmission to retrieve a second key code, compare the second key code with the first key code stored in the non-volatile memory, and unlock the door of the vending machine when the second key code matches the first key code.

45. A vending machine as in claim 1, wherein the microcomputer of the electronic lock is further programmed to determine whether the received first key code is encrypted using the encryption code before storing the decrypted first key code in the non-volatile memory.

46. A vending machine as in claim 1, wherein the communication interface is a wireless communication interface.

47. A vending machine as in claim 13, wherein the communication interface is a wireless communication interface.

5. (canceled)

14. A vending machine comprising:

a door openable for accessing contents of the vending machine; and

an electronic lock for unlocking the door of the vending machine, the electronic lock comprising an electronic control circuit including a microprocessor, a non-volatile memory containing computer-executable instructions for performing a decryption operation based on an encryption code, and a communication interface for transmitting and receiving communications, the microcomputer being programmed to perform a bi-directional challenge-response process with an electronic key using encrypted communications through the communication interface, wherein during the challenge-response process the microcomputer receives a key code transmitted from the electronic key in an encrypted form, performs the decryption operation to decrypt the received key code, compares the decrypted received key code with a key code stored in the non-volatile memory of the electronic lock, and unlocks the door of the vending machine if the decrypted received key code matches the key code stored in the non-volatile memory.

15. A vending machine as in claim 14, wherein the communication interface is a wireless communication interface that includes a transceiver for transmitting and receiving wireless communication signals.

16. A vending machine as in claim 15, wherein the transceiver transmits and receives infrared signals and is disposed behind an infrared-transparent panel on the vending machine.

18. A vending machine as in claim 14, wherein the non-volatile memory has multiple key codes stored therein.

19. A vending machine as in claim 14, wherein the microcomputer of the electronic lock is further programmed to transmit access event data regarding access attempts directed to the electronic lock to the electronic key if the received key code matches the key code stored in the non-volatile memory.

20. A vending machine as in claim 14, further including a communication device external to the electronic lock for wirelessly communicating with a control computer at a remote location, and a lock controller for controlling operation of the electronic lock in response to control commands received from the control computer via the communication device.

21. A vending machine as in claim 20, wherein the lock controller forwards data received from the electronic lock to the communication device for transmission to the control computer.

22. A vending machine as in claim 21, wherein the data received from the electronic lock include access event data regarding access attempts directed to the electronic lock of the vending machine.

23. A vending machine as in claim 14, further including a state indication device operable by the microcomputer to indicate operation status of the electronic lock.

74. A vending machine as in claim 14, wherein the microprocessor of the electronic lock is further programmed to receive encrypted codes from an electronic key, and in response transmit diagnostic codes to the electronic key.

75. A vending machine as in claim 74, wherein the electronic lock of the vending machine displays an indicator indicating whether the electronic lock is unlocked.

76. A vending machine as in claim 74, wherein the electronic lock of the vending machine displays an indicator indicating whether a key code transmitted by the electronic key matches an access code stored in the electronic lock.

17. (canceled)

24. An electronic key comprising:

a clock;

a microcomputer;

a wireless communication interface for transmitting and receiving communications over a wireless band;

a non-volatile memory having stored therein a key code, and computer executable instructions for performing an encryption operation based on an encryption code; and

an activation device connected to the microcomputer and operable for generating an activation signal for triggering the microcomputer to initiate a key code transmission operation in which the microprocessor performs the encryption operation to encrypt the key code stored in the non-volatile memory, and the wireless communication interface is used to transmit the encrypted key code

wherein the microcomputer is programmed to perform a bi-directional challenge-response process during a key transmission operation with an electronic lock on a vending machine using encrypted communications through the wireless communication interface.

25. An electronic key as in claim 24, wherein the key contains a power-up counter, and wherein the microcomputer is further programmed to increment the power-up counter each time the electronic key is powered up by insertion of a battery, determine whether the power-up counter has reached a pre-selected number, and select not to initiate a key code transmission operation in response to an activation signal from the activation device if the power-up counter has reached the pre-selected number.

26. An electronic key as in claim 24, wherein the key contains a clock data back-up buffer, and wherein the microcomputer is further programmed to read clock data from the clock in response to receiving an activation signal from the activation device, and store the clock data into the clock data backup buffer in the non-volatile memory, and to reset the clock using the clock data stored in the clock data backup buffer when the electronic key is powered up by insertion of a battery.

27. An electronic key as in claim 24, wherein the microcomputer is further programmed to store an access event record in the non-volatile memory when the key code is transmitted in response to receiving an activation signal from the activation device, and wherein the access event record includes a flag that is set when the power-up counter is non-zero.

28. An electronic key as in claim 24, wherein the non-volatile memory further includes at least one operation limit register for storing an operation limit of the electronic lock, and wherein the microcomputer is programmed to terminate a key code transmission operation if the operation limit is reached.

29. An electronic key as in claim 24, wherein the non-volatile memory further has an encryption code stored therein, and the microcomputer is programmed to use the encryption code to encrypt communications for transmitting the key code in the bi-directional challenge-response process.

30. An electronic key as in claim 24, wherein the microcomputer is further programmed to receive audit data from an electronic clock on a vending machine accessible by the electronic key and storing the received audit data in the non-volatile memory of the electronic lock.

31. An electronic key as in claim 24, wherein the activation device is a button switch.

32. An electronic key as in claim 24, wherein the non-volatile memory further has a key identification number of the electronic key stored therein.

33. An electronic key as in claim 24, wherein the microcomputer is further programmed to continuously use the wireless communication interface to transmit the key code for a pre-selected period of time in response to each activation signal from the activation device.

77. A electronic key as in claim 24, wherein the microprocessor is further programmed to initiating a transmission of a key code from the electronic key upon actuation of the electronic key, and annunciate a status of the electronic key being enabled or disabled.

34-39. -39. (canceled)

40. An electronic security system for vending machines, comprising:

a home base computer;

an electronic lock accessible using an associated electronic key, a communication device for communication with the home base computer, and a lock controller in each of the vending machines, the electronic lock controlling access to a door of said each vending machine, the lock controller being connected to the electronic lock for controlling operation of the electronic lock in response to commands received from the home base computer through the communication device, the lock controller being programmed with computer-executable instructions for receiving a key code in an encrypted form from the home base computer, performing a decryption operation to decrypt the received key code, and storing the decrypted key code in a memory for controlling access to the door of said each vending machine.

41. An electronic security system as in claim 40, wherein the communication device in said each vending machine communicates wirelessly with the home base computer.

42. An electronic security system as in claim 40, wherein the communication device in said each vending machine communicates wirelessly with the home base computer over a RF band.

43. An electronic security system as in claim 40, wherein the electronic lock in said each vending machine is further programmed to perform, during the key transmission operation, a bi-directional challenge-response process with the associated electronic key using encrypted communications, the challenge-response process including receiving a key code from the electronic key and comparing the received key code with a key code stored in the electronic lock.

44. An electronic security system as in claim 43, wherein the electronic lock in said each vending machine is further programmed to send data concerning access attempts directed to the electronic lock through the communication device to the home base computer.

48. A vending machine comprising:

a door openable for accessing contents of the vending machine;

an electronic lock for unlocking the door of the vending machine, the electronic lock comprising a control circuit including a microcomputer, a non-volatile memory, a communication interface for receiving communications, and a learning mode activation device operable only when the door is in an unlocked state, the microcomputer being programmed to receive a learning mode activation signal from the learning mode activation device when the lock is in an unlocked state and, in response to the learning mode activation signal, receive a first key code via the communication interface, and store the first key code in the non-volatile memory.

49. A vending machine as in claim 48, wherein the learning mode activation device is a switch.

50. A vending machine as in claim 48, wherein the learning mode activation device is a computing device.

51. A vending machine as in claim 48, wherein the communication interface is a wireless communication interface.

52. A vending machine as in claim 48, wherein the wireless communication interface receives communications over an infrared band.

53. A method for distributing an access code into an electronic lock of a vending machine, the vending machine having a door openable for accessing contents of the vending machine and an electronic lock containing an encryption code, the method comprising:

placing the electronic lock in a learning mode;

transmitting a first access code in an encrypted form to the electronic lock while the electronic lock is in the learning mode;

decrypting, by the electronic lock, the received first access code using the encryption code; and

storing, by the electronic lock, the first access code in the lock memory.

54. A method as in claim 53, wherein the first access code in the encrypted form is transmitted to the electronic lock over a wireless interface.

55. A method as in claim 54 wherein the wireless interface transmits over an infrared band.

56. A method as in claim 53, further including the steps of:

transmitting from an electronic key to the electronic lock a key code;

unlocking the door by the electronic lock to provide access to the vending machine if the key code matches the first access code stored in the lock memory.

57. A method as in claim 56, wherein the step of transmitting the key code includes checking by the electronic key a limit parameter stored in the electronic key, and wherein the electronic key transmits the key code to the electronic lock of the vending machine if the limit parameter is not exceeded.

58. A method as in claim 57, wherein the limit parameter is a number of days of allowed operation.

59. A method as in claim 57, wherein the limit parameter is a number of allowed accesses.

60. A method as in claim 57, wherein the limit parameter is a number of allowed accesses per day.

61. A method as in claim 57, wherein the limit parameter is a beginning time of day for allowed operation.

62. A method as in claim 57, wherein the limit parameter is an ending time of day for allowed operation.

63. A method as in claim 57, wherein the limit parameter is an expiration date for allowed operation.

64. A method as in claim 56, wherein the lock memory has access attempts data stored therein, and wherein the electronic lock transmits the access attempts data to the electronic key before unlocking the door.

65. A method as in claim 64, further including the steps of transferring access attempts data from the electronic key to a database.

66. A method as in claim 56, further including the step of storing by the electronic lock access attempts data into the lock memory after an attempt to access the electronic lock.

67. A method as in claim 53, further including the steps of:

selecting an electronic key;

placing the electronic key in a key programming device;

transmitting access control parameters including a programmed access code and a limit parameter to the electronic key for storage in a memory of the electronic key;

checking by the electronic key whether the limit parameter is exceeded before transmitting the programmed access control for accessing a vending machine.

68. A method as in claim 53, wherein the lock memory contains a non-secure access code prior to receiving the first access code in the encrypted form.

69. A method as in claim 53, further comprising:

placing the electronic lock in the learning mode;

transmitting a second access code in an encrypted form to the electronic lock while the electronic lock is in the learning mode;

decrypting, by the electronic lock, the received second access code using the encryption code; and

storing, by the electronic lock, the second access code in the lock memory without erasing the first access code stored in the lock memory.

84. A method as in claim 53, wherein the step of storing stores the decrypted access code into the lock memory together with a key-type identifier that identifies a key type of the electronic key.

85. A method as in claim 53, further including the steps of:

displaying a first indication when the electronic lock is placed in the learning mode;

displaying a second indication when the electronic lock has stored the decrypted access code into the lock memory.

70. A vending machine security system comprising:

a vending machine having a door openable for accessing contents of the vending machine and an electronic lock for unlocking the door of the vending machine, the electronic lock comprising an electronic control circuit including a microprocessor, a non-volatile memory containing computer-executable instructions for performing a decryption operation based on an encryption code, and communication interface for transmitting and receiving communications, the microcomputer being programmed to perform a bi-directional challenge-response process with an electronic key using encrypted communications through the communication interface, wherein during the challenge-response process the microcomputer receives a key code transmitted from the electronic key in an encrypted form, performs the decryption operation to decrypt the received key code, compares the decrypted received key code with a key code stored in the non-volatile memory of the electronic lock, and unlocks the door of the vending machine if the decrypted received key code matches the key code stored in the non-volatile memory; and

a reader tool for accessing information stored in the electronic lock, wherein the reader tool is programmed to transmit encrypted codes to the electronic lock of the vending machine, and the microprocessor of the electronic lock is further programmed to transmit diagnostic codes to the reader tool in response to receiving the encrypted codes.

71. A vending machine security system as in claim 70, wherein the reader tool displays a key code of the electronic lock.

72. A vending machine security system as in claim 70, wherein the reader tool displays a serial number of the electronic lock.

73. A vending machine security system as in claim 70, wherein the reader tool displays diagnostic codes received from the electronic lock.

78. A method of determining accessibility of an electronic lock of a vending machine using an electronic key, comprising:

encrypting, by the electronic key, a first key code together with a random number to form an encrypted message, the first key code being stored in a memory of the electronic key;

transmitting, by the electronic key, the encrypted message to the electronic lock;

decrypting, by the electronic lock, the encrypted message received from the electronic key to extract the first key code;

comparing, by the electronic lock, the extracted first key code with a second key code stored in a memory of the electronic lock; and

unlocking, by the electronic lock, a door of the vending machine when the first key code matches the second key code.

79. A method of determining accessibility of an electronic lock of a vending machine using an electronic key, comprising:

encrypting, by the electronic key, a first key code together with a timestamp and a random number to form a first encrypted message, the first key code being stored in a memory of the electronic key;

transmitting, by the electronic key, the first encrypted message to the electronic lock;

decrypting, by the electronic lock, the first encrypted message received from the electronic key to extract the first key code;

comparing, by the electronic lock, the extracted first key code with a second key code stored in a memory of the electronic lock;

when the first key code matches the second key code, forming by the electronic lock a second encrypted message by encrypting the first key code together with a lock ID and the random number;

transmitting, by the electronic lock, the second encrypted message to the electronic key;

decrypting, by the electronic key, the second encrypted message to extract the first key code and the lock ID;

encrypting by the electronic key the lock ID with the random number to form a third encrypted message;

transmitting by the electronic key the third encrypted message to the electronic lock;

decrypting by the electronic lock the third encrypted message to extract the lock ID; and

unlocking, by the electronic lock, a door of the vending machine when the lock ID extracted from the thirst encrypted message is correct.

80. A method of determining accessibility of an electronic lock of a vending machine using an electronic key, comprising:

encrypting, by the electronic key, a first key code together with a timestamp and a random number to form a first encrypted message, the first key code being stored in a memory of the electronic key;

transmitting, by the electronic key, the first encrypted message to the electronic lock;

decrypting, by the electronic lock, the first encrypted message received from the electronic key to extract the first key code;

comparing, by the electronic lock, the extracted first key code with a second key code stored in a memory of the electronic lock;

when the first key code matches the second key code, forming by the electronic lock a second encrypted message by encrypting the first key code together with a lock ID and the random number;

transmitting, by the electronic lock, the second encrypted message to the electronic key;

decrypting, by the electronic key, the second encrypted message to extract the first key code and the lock ID;

comparing by the electronic key the lock ID extracted from the second encrypted message with a list of authorized lock ID'"'"'s stored in the memory of the electronic key;

if the lock ID matches one of the authorized lock ID'"'"'s, encrypting by the electronic key the lock ID and the random number to form a third encrypted message;

transmitting by the electronic key the third encrypted message to the electronic lock;

decrypting, by the electronic lock, the third encrypted message to extract the lock ID; and

unlocking, by the electronic lock, a door of the vending machine when the lock ID extracted from the thirst encrypted message is correct.

81. A method of programming an access code into an electronic lock of a vending machine, comprising:

putting the electronic lock in an unlocked state;

activating a learning mode of the electronic lock, the electronic lock displaying a first indication for annunciating that the electronic lock is in the learning mode;

transmitting an access code to the electronic lock when the electronic lock is in the learning mode;

displaying by the electronic lock a second indication for annunciating receipt of the access code; and

storing by the electronic lock the access code into a memory of the electronic lock.

82. A method as in claim 81, wherein the step of transmitting is performed by an electronic key, the method further including the steps of:

sending by the electronic lock a message to the electronic key indicating receipt of the access code;

displaying by the electronic key an indication that the electronic lock has acknowledged receipt of the access code.

83. A method performed by an electronic key for initialization from power up, comprising:

reading a backup time and date stored in a non-volatile memory;

resetting a clock according to the backup time and date read from the non-volatile memory;

obtaining a reading of a power-up counter;

if the power-up counter reading has reached a pre-set limit, disabling the electronic key; and

if the power-up counter reading has not reached a pre-set limit, incrementing the power-up counter.

86. A combination of a vending machine with an electronic lock mounted therein and an electronic key for accessing the electronic lock, the electronic key having a wireless transmitter and being programmed to use the wireless transmitter to transmit a key code to the electronic lock on the vending machine, the wireless transmitter having a transmission pattern with a transmission angle set such that an effective width of the transmission pattern is substantially identical or less than the width of the vending machine.

87. A combination of a vending machine with an electronic lock mounted therein and an electronic key for accessing the electronic lock, the electronic key having a wireless transmitter and being programmed to use the wireless transmitter to transmit a key code to the electronic lock on the vending machine, the wireless transmitter having an effective transmission pattern set to cover only the vending machine.