A combination lock is described where the combination that is used to open the lock is generated on a separate computer system using information that is contained in the lock and a series of steps that combine selected items of the information contained in the lock and alter the results of the results of the combination of the information items. The lock incorporates a computer processor which performs the identical steps to generate an authorized combination after a combination is entered into the lock. When the two combinations match, the lock is enabled for opening. At least some of the information items used in the generation of the combinations change with each successful opening of the lock, rendering the combination generated by the computer system useable for only a single opening of the lock.
|
0. 6. A method of providing an electronic combination lock with a single use authorized combination for opening said lock comprising the steps of:
receiving a new combination into said lock; responsive to said receiving said new combination, generating an authorized combination based upon previously used authorized combination, a value unique to said lock, a randomly alterable master combination, a variable value unique to said lock and a mathematical combining of predesignated digits of said entered combination; comparing said generated, authorized combination with said entered combination, and responsive to said compare equal condition therebetween, replacing said previously used authorized combination with said generated authorized combination, and providing an electrical authorization signal to condition said lock to be opened.
0. 1. An electronic combination lock comprising:
an input dial for inputting numbers of a combination into said lock; a display for displaying numbers; an electronic control means for receiving said numbers of said combinations and for comparing said numbers with numbers of an authorized combination; said electronic control means including: an encrypting combination generator responsive to an entered combination for encrypting predetermined data and for generating a combination derived from said predetermined data; a comparator for comparing said entered combination with said generated combination and responsive to a compare equal to generate a signal permitting said lock to open, said encrypting and generating means responsive to a last accepted combination, a parameter unique to said lock, a master combination, a variable value, said variable value changed in a predictable manner upon each opening of said lock to form a result and manipulation of said result, to generate said authorized combination. 0. 15. An electronic combination lock comprising:
an input for entering numbers of a combination into said lock; an electronic control for receiving said number of said combination and for comparing said numbers with numbers of an authorized combination; said electronic control including: an encrypting combination generator responsive to an entered combination for encrypting predetermined data and for generating a combination derived from said predetermined data; a comparator for comparing said entered combination with said generated combination and responsive to a compare equal condition to generate a signal permitting said lock to open, said encrypting and generating means responsive to a last accepted combination, a parameter unique to said lock, a master combination, a variable value, said variable value changed in a predictable manner upon each opening of said lock to form an interim value and manipulation of said interim value, to generate said authorized combination. 0. 44. A method for opening a lock, the method comprising:
receiving an entered combination into the lock; obtaining a present authorized combination, the present authorized combination being different than a previous authorized combination utilized to condition the lock for opening at a previous opening of the lock; and comparing the entered combination with the present authorized combination and, responsive to a compare equal condition therebetween, providing an electrical signal to condition the lock to be opened.
0. 20. An electronic combination lock comprising:
a combination input device; and an electronic control, wherein said control receives signals from said combination input, said control converts said signals into an entered combination, wherein said control generates an authorized combination from at least one variable value utilizing a function, said control compares said entered combination with said authorized combination and, responsive to a compare equal, said control generates a signal permitting said lock to open.
0. 33. A method of providing an electronic combination lock with a single use authorized combination for opening said lock comprising the steps of:
receiving an entered combination into said lock; generating an authorized combination based upon at least one value, said authorized combination changing each time said lock is opened; comparing said generated authorized combination with said entered combination; and responsive to a compare equal condition there between, providing an electrical signal to condition said lock to be opened.
0. 26. An electronic combination lock comprising:
an input, said input permitting entry of an entered combination into said lock; and an electronic control, wherein said electronic control comprises: a combination generator, wherein said combination generator generates an authorized combination from at least one value, and wherein said authorized combination changes after each opening of said lock; and a comparator, wherein said comparator compares said entered combination with said authorized combination and, responsive to a compare equal, generates a signal permitting said lock to open. 0. 34. A method of providing an electronic combination lock with a single use authorized combination for opening said lock comprising the steps of:
receiving an entered combination into said lock; responsive to receiving said entered combination, generating an authorized combination based upon at least one value; comparing said generated authorized combination with said entered combination; responsive to a compare equal condition therebetween, providing an electrical signal to condition said lock to be opened; and changing said authorized combination each time said entered combination compares equal to said authorized combination.
0. 38. A method of providing a multi-mode electronic combination lock with an authorized combination for opening said lock comprising:
receiving an entered combination into said lock; obtaining a bank combination; obtaining a one-time combination; comparing said entered combination with said bank combination and, responsive to a compare equal condition therebetween, providing an electrical signal to condition said lock to be opened; and comparing said entered combination with said one-time combination and, responsive to a compare equal condition therebetween, providing an electrical signal to condition said lock to be opened and changing said one-time combination.
0. 45. A multi-mode electronic combination lock comprising:
an input, said input permitting entry of an entered combination and a user identification into said lock; and an electronic control, said electronic control comprising: a combination generator, the combination generator generating an authorized combination for each lock mode; a comparator, said comparator comparing said entered combination with the authorized combinations and, responsive to a compare equal to one of the authorized combinations, generating a signal permitting the lock to open; and at least one of the authorized combinations generated by the combination generator being different than the previous authorized combination utilized to generate the signal permitting the lock to open. 0. 39. An electronic combination lock comprising:
an input, said input permitting entry of an entered combination and a user identification into said lock; and an electronic control, said electronic control comprising: a bank combination generator, said bank combination generator generating an authorized bank combination; a one-time combination generator, said one-time combination generator generating an authorized one-time combination; and a comparator, said comparator comparing said entered combination with said authorized combinations and, responsive to a compare equal to one of said authorized combinations, generating a signal permitting said lock to open; wherein said authorized one-time combination generated by said one-time combination generator changes after said entered combination compares equal to said authorized one-time combination for said user identification entered.
0. 35. A multi-mode electronic combination lock comprising:
an input, said input permitting entry of an entered combination into said lock; and an electronic control, said electronic control comprising: a memory, said memory containing a bank combination; a one-time combination generator, said one-time combination generator generating a one-time combination from at least one value; a comparator, wherein said comparator compares said entered combination with said bank combination and, responsive to a compare equal, generates a signal permitting said lock to open; and wherein said comparator, responsive to a compare not-equal, compares said entered combination with said one-time combination and, responsive to a compare equal therebetween, generates said signal permitting said lock to open; and said one-time combination changing after each compare equal between said entered combination and said one-time combination. 14. An electronic combination lock having a computer for controlling operation of said lock, said computer lock comprising:
A a bolt, ; a bolt withdrawal mechanism including an actuator responsive to said computer for enabling withdrawal of said bolt; said computer further comprising: a memory for storing one fixed numerical value unique to a designated lock and at least three one variable numerical values value; a computer processor; a control program for controlling said processor to perform a predetermined sequence of operations involving a predetermined fixed numerical value and at least two one variable numerical values value; said sequence of operations including at least a first operation of combining one variable numerical value and one fixed numerical value, producing a first result; a mathematical combining of a second variable value with said first result producing a second result, a rearranging of digits of said second variable numerical value, a mathematical combining of said second result and said rearranged value, producing a third result, adding two digits of said third result to two predesignated digits of said third result, producing a fourth result, said result changing for each opening of said lock; said computer processor responsive to said control program to compare said fourth result to a combination generated on a computer system performing identical operations in an identical sequence, using identical fixed and variable values; said computer responsive to a finding of equality of said fourth result and said combination to signal said actuator to enable said bolt withdrawal.
10. A computer system for generating a combination for operation of a lock comprising:
a memory for storing one fixed numerical value unique to a designated lock and at least three two variable numerical values; a computer processor; a control program for controlling said processor to perform a predetermined sequence of operations involving a predetermined fixed numerical value and said at least two variable numerical values; said sequence of operations including at least a first operation of combining one variable numerical value and one the fixed numerical value, producing a first result; a mathematically combining of a second variable numerical value with said first result, producing a second result, ; a rearranging of digits of said second variable numerical value, ; a mathematically combining of said second result and said rearranged value, producing a third result, ; adding two digits of said third result to two predesignated digits of said third result, producing a fourth result, ; and providing said fourth result for the opening of a said lock, wherein said fourth result is incapable of opening said lock two consecutive times.
0. 2. The lock of
0. 3. The lock of
0. 4. The lock of
0. 5. The lock of
0. 7. The method of
testing said authorized combination for equality to at least one condition; responsive to said condition being equalled, altering said randomly alterable master combination to create an altered master combination, and replacing said randomly alterable master combination with said altered master combination.
0. 8. The method of
0. 9. The method of
11. The computer system of
12. The computer system of
13. The computer system of
0. 16. The lock of
0. 17. The lock of
0. 18. The lock of
0. 19. The lock of
0. 21. The electronic combination lock of
wherein said at least one variable value comprises: a last accepted combination; a parameter unique to said lock; and a variable parameter, wherein said variable parameter is changed in a predictable manner upon each opening of said lock; and wherein said combination generating means manipulates said last accepted combination, said parameter unique to said lock, and said variable parameter to generate said authorized combination.
0. 22. The lock of
0. 23. The lock of
0. 24. The lock of
0. 25. The lock of
0. 27. The lock of
0. 28. The lock of
0. 29. The lock of
0. 30. The lock of
0. 31. The lock of
0. 32. The lock of
0. 36. The lock of
0. 37. The lock of
0. 40. The lock of
0. 41. The lock of
0. 42. The lock of
0. 43. The lock of
|
|||||||||||||||||||||||||||||
This application
The understanding of this invention will be enhanced by setting forth definitions of several terms to be used throughout the following description.
ATM combination--the combination that will open the lock on the container or vault containing the automatic teller machine (ATM) and which is valid only for one use in this lock.
Old ATM combination--the last ATM combination used to open the lock and which is stored in the lock but is incapable of operating the lock a second time.
Bank combination--the combination which will open the lock on the container or vault containing the ATM but which does not change with each use.
Master combination--a combination unique to a single lock which is only used in the generation of other combinations or is used to verify that an individual has the authority to operate the lock in order to set the bank combination feature.
Seal count--the number of times the lock has been successfully opened or the vault "seal" has been broken using the ATM combination.
The operation of the ATM lock is an improved modification of the operation of the Mas-Hamilton Group X-07 lock through the addition of control programs affecting portions of the operation of the lock, yet do not affect the remainder of the X-07 operation.
The newly added portions of the control program will be described in detail below while the previously existing aspects of the X-07 lock will be referred to only generally.
A lock embodying the invention is delivered by the manufacturer in a condition referred to as the production setup. The combination for the ATM combination, the master combination and the bank combination are all set to a 50 25 50 value in the production setup.
A bank or other financial institution which owns and/or operates an ATM may provide service with its own employees to the ATM itself. Alternatively, servicing of the ATM may be contracted to an ATM service firm. In either event the servicing organization will repair the ATM, replenish the cash supply, pick up deposits, and perform periodic preventive maintenance on the mechanisms and elements of the ATM.
The ATM 10,
Vault 12 is provided with a door 14 to permit access to the ATM 10. Door 14 may be on one side or on the back wall of vault 12 as desired or as dictated by the construction of the ATM 10. Electronic combination lock 16 secures the door 14 relative to the vault 12 and prevents access to the ATM without the use of an authorized combination to operate the lock 16.
Since mechanically the ATM lock 16 is identical to the Mas-Hamilton Group X-07 lock, the mechanical elements of the lock 16 are not illustrated in detail but only in block diagram form as 18 in FIG. 2.
Electronic lock control 20 is comprised of a microprocessor 22 and memory 24, along with necessary support electronic circuitry as is conventional for the operation of such a microprocessor 22.
The preferred microprocessor 22 is an Intel 8051 which is manufactured by the Intel Corporation of Santa Clara, Calif. 95051.
It should be understood that other microprocessors by other manufacturers may be used if desired, with only those modifications being made that are necessary to support and operate that selected microprocessor in accordance with requirements set forth by the particular microprocessor manufacturer.
Memory 24 may be an on-chip memory in the microprocessor 22 or an auxiliary memory connected to the microprocessor 22 in a conventional manner, as desired by the individual implementing the invention.
Memory 24 is a non-volatile type memory which retains information after electrical power is no longer provided to the memory for purposes of operating the memory.
Memory 24 is provided with at least sufficient storage locations for the old ATM combination in memory segment 26, a master combination in memory segment 28, a seal count in memory segment 30, a bank combination in memory segment 32 and a bank array in memory segment 34.
The microprocessor receives a dial input over line 36. The dial input is a series of electrical pulses generated by generator 40 which is in turn operated by rotation of dial 42 and shaft 44 by the operator. The generator 40 also powers the electronic controls 20. The input function may be provided by a push button or key pad entry device, a card reader, and electronic memory reader, or a data interface, if desired. The microprocessor 22 is provided with a change key port 48 which is normally used to condition the microprocessor 22 to accept a change in the bank combination, reset the bank mode, or to initialize the lock 16. The change key port 48 may be electrically connected to a suitable connection on the ATM control 50 to indicate to the ATM control 50 that a condition exists which corresponds to a predetermined condition, thereby indicating that the lock 16 is being operated under duress. The ATM control 50 is typically connected to a host computer 52 for purposes of control and authorization of the ATM 10 functions and transactions, as well as for monitoring security of the ATM unit 10.
The ATM control 50 may be conditioned to report the condition of the lock 16 as indicated on the change key port 48 to the host computer 52 thereby accomplishing a silent alarm in the event that the lock 16 is being operated under duress. Thus, the change key port 48 may be used to act as a silent alarm port if a combination is entered and the last number entered through rotation of the dial 42 are offset by a constant predetermined increment from that of the ATM combination numbers. For example, if a combination of 30 60 27 is the authorized combination to be used to gain access to the lock, the entry of the combination as 30 60 37, the last number being offset by 10 from the authorized combination, would indicate that a duress condition exists and provide a signal to the change key port 48 and would be conveyed to the ATM control 50. Upon receipt of the signal from change key port 48, ATM control 50 then would initiate an appropriate signal to the host computer 52 indicating to the operator of the host computer 52 that the ATM vault 12 was being opened under a condition of duress so appropriate response personnel could be notified.
The best mode of the preferred embodiment is the incorporation of the microprocessor 22 into the electronic control 20 and operation of the microprocessor 22 by a control program. The program dictates the operation of the electronic control 20 which in turn controls the lock 16 operation. The program is represented in flow diagram form in
The preferred embodiment is an Intel 8051 microprocessor sold by Intel Corporation of Santa Clara, Calif. 95051.
The flow diagram of
While the structural, mechanical and electrical components of the lock 16 are the same as the Mas-Hamilton X-07 lock, the present control program when combined with the prior control programs and the mechanical and electrical components result in an improved lock 16 which differs from the X-07 lock in substantial aspects of operation and capability.
The flow diagram of
After the new ATM combination has been generated in operation 110, the new ATM combination is compared in operation 120 with the entered combination for identity. If found identical, a check is made to determine if the low order digits of each of the numbers of the combination when added together equal either 13 or 14.
By way of example, if the combination of 58 21 94 is the result of the new ATM combination generation operation in operation 110 and the entered combination matches in operation 120 the sum of the low order digits, 8, 1 and 4 equals 13, resulting in a branching at operation 130. When operation 130 results in an affirmative finding, a new master combination is generated in operation 140. The sums 13 and 14 are arbitrary and could be any numbers between 0 and 27. The use of two sums, 13 and 14, initiates the change of the master combination more frequently than only a single sum. The choice of 13 and 14 as the test sums will result in a master combination change about 16 times in 100 lock openings to further help disguise the authorized ATM combination. As will be seen, the master combination is an essential component of the ATM combination generation algorithm and with frequent changes will enhance security of the lock 16. The generation of the master combination in operation 140 will be expanded and explained in more detail below.
After the sum check of operation 130 or the master combination generation of operation 140, the new ATM combination is stored in memory segment 26 of
The ATM combination stored in memory segment 26 cannot be used again to open the lock 16.
Next, the seal counter 30 is updated. The seal counter is memory segment 30 as seen in FIG. 2 and contains a sequential count of the number of times that the lock 16 has been opened using an ATM combination. The contents of the seal counter 30 is incremented by one each time the lock is opened or the vault 12 "seal" broken using the ATM combination. The seal count typically starts at 0001 for a newly manufactured lock. Upon updating the seal counter 30 in operation 190, the lock 16 is conditioned for opening in operation 200. Conditioning to open in operation 200 is accomplished by activating or pulsing stepper motor 54 to complete a mechanical chain of elements to permit opening of the lock 16, as is conventional in the Mas-Hamilton X-07 lock.
The operation of the electronic control 20 then terminates at operation 220.
When a combination entered at operation 100 fails to match the generated ATM combination in operation 120, two possibilities exist, one being the entered combination is the bank combination and the other being that the entered combination is an incorrect combination different from either the bank or generated ATM combination.
Operation 300 determines, first, whether the bank combination feature is active on the lock 16; and if not the entered combination is an error and an error signal is displayed in operation 490 prior to the operation of the electronic control 20 termination its functioning in operation 220. The enabling or disabling of the bank combination feature will be explained below.
If on the other hand the bank combination feature is active as determined in operation 300, the entered combination is compared with the bank combination stored in memory segment 32 of memory 24 at operation 310.
If a failure to compare equal in operation 310 results, the error signal is displayed in operation 490 and the operation of the electronic control 20 is terminated at operation 220.
Should a compare-equal condition exist in operation 310, the seal count found in memory segment 30 is stored in the bank array segment 34 of memory 24 indicating a relative sequence of openings to maintain an audit trail or audit condition.
The bank array 34 is a segment of memory 24 to store the last several (3, 4, or 5) seal counts indicating each time the bank combination opened the lock 16. As a new seal count is stored the oldest (smallest) value of the seal count is removed. This may be accomplished in one of several conventional ways. The bank array 34 can be used also to determine the sequence of the opening of the lock 16 by the service personnel and the bank personnel and the appropriate corresponding time frames of entry.
To expand and explain the generation of the ATM combination as represented in operation 110, designated as ATMGEN.FLO, reference is now made to FIG. 5. The flow diagram of
The combinations, ATM, bank and master, are typically stored in encrypted form as an added security factor; the form of encryption is not critical. The preferred encryption is to distribute the bits of a binary representation of the combination in various locations of a memory and filling the unoccupied locations in the memory with random binary bits to disguise the combination. Decryption involves removal of the random binary bits and reassemblage of the remaining bits representing combination. Other encryption/decryption schemes may be used in lieu of the preferred scheme if desired.
After the old ATM combination is decrypted in operation 610, the old ATM combination remains in a binary form. The serial number of the lock 16, stored in binary form within the lock 16, is then combined with the old ATM combination in operation 620. The form of combining is preferably adding of the two values. It should be appreciated that the combining of the values may take one of several forms such as addition, subtraction, ORing or other mathematical or logical combination of the two binary values. The resulting binary representation of the combined values then is combined with a decrypted master combination. The decryption of the master combination, stored in memory segment 28 of memory 24, follows the approach for decryption of the old ATM combination described previously. Once the master combination is decrypted in operation 630, the decrypted master combination is combined with and preferably subtracted in operation 640 from the result of the adding in operation 620. Again, it should be noted that the combining operation may be adding, ORing, exclusive ORing or other mathematical or logical combinations.
The result of combining the output of the adding operation 620 in FIG. 5 and the output of operation 640 is then further manipulated in operation 650. The manipulation preferably is a rotation of the lowest order digit to the highest order position and the shifting of all other digits down by one position. The manipulation operation may be a rotation of one, two or more digits, inversion of digits, or any other similar operation.
Once the manipulated (rotated) master combination is determined that value is added to the result of operation 640, in operation 660. Thereafter, in operation 670 the contents of the seal counter 30 are added to the result of operation 660. Since the seal count is a value of 9999 or less, the addition thereof does not affect the values of the higher order digits in the decimal representation of the value resulting from operation 670. Accordingly, it is desirable to further disguise the generation of the ATM combination by adding the lowest two digits of the decimal six digit result from operation 670 to the highest order two digits of the decimal result of operation 670, in operation 680.
The resulting combination then is tested to ensure that certain value and the resulting combination are not equal. The values which cannot be validly equalled are the lock serial number, the master combination, or the initial combination as set at the factory of 50 25 50. In the event that the generated ATM combination equals any of the designated value, then operations 670 and 680 are repeated to further alter the resulting generated ATM combination. Such repetition of operations 670 and 680 continues until such time as the combination that has been generated does not equal the serial number, the master combination or 50 25 50. When the testing in operation 690 results in a negative result, the flow returns, in operation 695, to operation 120 of FIG. 4.
Referring briefly again to
Operations 810 and 820 are the same operations as described for operations 610 and 620 except that the master combination is operated on rather than the ATM combination of operation 610 and 620. Operation 630 of
Operations 840, 850, 860, 870 and 880 are identical operations to operations 640, 650, 660, 670 and 680, respectively, of
In operation 890 the result of operation 880 is tested to determine if the result is equal to the lock serial number, ATM combination or the factory-delivered 50 25 50 combination. If the result of operation 880 is equal to any of the above values, then operations 870 and 880 are repeated to produce a new result which is then tested in operation 890. Upon a negative result from operation 890, the routine of
In order to set up the lock 16 for operation, it is necessary to initialize the lock electronic control 20 to overcome the factory pre-set combination settings of 50 25 50 for all combinations and to start the generation of combinations by the lock electronic control 20. The initialization routine is illustrated in and described with reference to FIG. 7.
In order to condition the lock electronic control 20 to accept initialization, the change key 60 illustrated in
When the entered combination matches the factory set value for the ATM combination in operation 510, the lock electronic control 20 requests the entry of the lock serial number in operation 515. Since the lock serial number is found only within the case of lock 16, the serial number may be ascertained only by someone having access to the lock in a disassembled state or by opening the lock housing 17, as viewed in FIG. 1. The serial number of the lock 16 is dialed into the electronic control 20 in operation 517; and in operation 520 the entered number is verified as the serial number of the lock 16 as stored in ROM memory 35 of FIG. 2. If the entered serial number and the lock serial number do not match in operation 520, at attempt is being made to initialize the improper lock and the initiation routine is terminated with an error signal in operation 570 and an ending operation 560.
When the entered serial number matches the serial number stored in ROM 35, a new master combination is generated in operation 525. Operation 525 is the same as operation 140 of FIG. 4 and is represented in expanded form in FIG. 6 and explained above.
Due to the master combination being stored as 50 25 50 by the factory, the 50 25 50 master combination will be used by the electronic control 20 to create the new master combination in accord with FIG. 6.
Thereafter, the new ATM combination is generated in operation 530 in accord with the sub-routine of FIG. 5. The factory set ATM combination of 50 25 50 is used as the old ATM combination in the routine of FIG. 5. Upon return from the routine of
The next step, operation 540, is to remove the change key 60 from the change key port 48; and the operator then dials into lock 16 the ATM combination which was just flashed to the operator to confirm the combination. The dialed ATM combination is compared to the combination generated in operation 530 to confirm the combination in operation 545. If the two combinations do not compare equal in operation 545, the process is terminated in operation 560 after an error signal is displayed in operation 570. If the two combinations do compare equal in operation 545, then the new ATM combination is stored in memory segment 26 of memory 24 in
The lock electronic control 20 then conditions the lock 16 to be opened in operation 555. Thereafter, the initialization routine is terminated at operation 560.
However, if the dialed combination is not a match for the ATM combination in operation 505 of
If the entered master combination equals the stored master combination, in operation 1020, both the bank and master combinations have been entered and under this condition the bank combination feature is turned ON or activated in operation 1025.
If the bank combination feature is active, the condition in operation 1010 is true and operations 1015, 1020 and 1025 turning on the bank combination feature are bypassed. The flow from operation 1010 or operation 1025 is to operation 1030 where the bank combination is generated. Operation 1030 will be explained and expanded in more detail below. The newly generated bank combination is flashed back in operation 1035 to the operator so that the bank combination may be entered by the operator to confirm the combination. After the combination is flashed back in operation 1035, the change key 60 is removed at operation 1040 and the bank combination entered in operation 1042. The entering of the new bank combination confirms the bank combination and opens the lock 16, as well as allowing a way to abort the routine by entering an invalid combination. The lock 16 must be opened in order to close the vault door 14. The bank combination and the dialed bank combination are compared at operation 1045; if not equal, an error is signalled at operation 1065 and the routine ended at operation 1060.
If, on the other hand, the two combinations are equal at operation 1045, the new bank combination is stored at operation 1050. The lock is then conditioned to open in operation 1052 and thereafter the routine is terminated at operation 1060.
The combination entered at operation 502 which does not compare equal with the ATM combination in operation 505 or the bank combination at operation 1000 then is tested for equality with the serial number of the lock at operation 1070. If the entered number is not equal to the serial number, then the error signal is displayed at operation 1080 and the routine ended at operation 1085. Should the number entered equal the lock serial number, a second combination is requested at operation 1075 and a combination is entered at operation 1080. The entered combination can be either the master combination or the bank combination. If the entered combination is equal to the master combination, as determined in operation 1090, the bank array contents will be displayed in operation 1095. if the entered combination is not the master combination but is equal to the bank combination as determined in operation 1100 the bank combination feature is turned OFF in operation 1105 and the lock conditioned to open in operation 1110. In operation 1100 if the dialed combination is not equal to the bank combination, then an error signal is displayed in operation 1080. Following operation 1080, operation 1095 or operation 1110 the routine ends in operation 1085.
The routine illustrated in
Operations 720, 730, 740, 750, 760, 770 and 780 are identical operations to operations 620, 630, 640, 650, 660, 670 and 680 of
In the event of a compare-equal condition to one of the values compared in operation 790, the process loops back to repeat operations 770, 780 and 790 until such time as the compare-equal condition is not met with respect to each of the values.
From the foregoing it can be appreciated that after initialization, the lock 16 will generate a new combination each time a combination is entered and the lock 16 opened. The combination entered must be generated by a system which performs the same generation algorithm using the identical input factors in order that the combination resulting from the dispatch system will be in synchronism and will be exactly replicated by the generation routines in the lock 16. The generated combinations from both the lock 16 and the generating system (dispatch system) will be identical if the same algorithm and input factors (old ATM combination, master combination and seal count) are used. Thus, a one-time usable combination may be generated for entry into the lock 16.
The lock 16 automatically will change the master combination whenever a predetermined condition exists to further disguise the generation of the ATM combination. As each ATM combination is used, it becomes an invalid combination with respect to opening the lock 16 a second time. The bank combination feature may be turned ON by entering the bank combination and the master combination with the change key inserted in the change key socket 48. To turn OFF the bank combination feature, the change key 60 must be inserted and the serial number and the bank combination of the lock 16 entered by dialing.
The generation of the ATM combination, the bank combination and master combination by the dispatch system is accomplished by the system diagrammatically represented in FIG. 3. Dispatch system computer 250 is comprised of a processor 252, disk drive 254, memory 256, a display 258 and keyboard 260. Computer 250 is further provided with a special adapter board 262 which carries thereon a microprocessor 264 identical to the microprocessor 22 of the lock electronic control 20 in FIG. 2. Both microprocessor 264 and 22 are controlled by the same program to perform the same algorithm, responding to input of combinations, serial numbers and seal counts. The computer 250 serves as the control to prevent unauthorized access to microprocessor 264 and further provides a vehicle to store the serial numbers, the ATM combinations, the bank combinations, master combinations and seal counts for several locks 16. The adapter board 262 may be inserted into an expansion slot 266 in computer 250 or cable-connected as desired.
As a further security measure, computer 250 is further conditioned to only call the adapter card when key 268 is connected to the computer 250. Key 268 is a plug which controls an EEPROM 270. Stored in the EEPROM 270 is a code number which must compare to the identical number embedded in processor 264. Also the key may contain data that controls access to the ATM combination, master combination or bank combination so that only an authorized individual has access to only that combination they are authorized to access. Thus, a bank key, a supervisor key and a dispatcher key may exist to access the bank combination, the master and ATM combinations and the ATM combination, respectively.
The primary difference between the electronic control 20 of lock 16 and the dispatch system of
With the knowledge of the various values and the algorithm for combining those values, a combination generation function may be performed manually if necessary. As may be appreciated from the foregoing, a dispatcher may generate an ATM combination, a bank combination or master combination using the dispatch system of FIG. 3 and give the generated combination to the authorized person. When that person uses the combination provided to open the lock 16, the electronic controls 20 generate a combination which will be identical and which will authorize the opening of the lock 16.
When lock 16 is opened with an ATM combination, the combination used to open it is stored and no longer valid. That ATM combination cannot be used to open the lock 16 a second time. If access to the locked vault 12 is needed a second time, a new combination must be secured from the dispatcher where it is generated in a manner identical to the previously used combination.
This arrangement prevents a person who has had authorized access to a vault 12 from returning to open the vault 12 and remove money therefrom without authorization.
The essential aspects of the algorithm involve combining the different values in varying ways in order to generate a new combination. The preferred combinations of values are described above but are only exemplary. It should be understood that the combining of the values may be accomplished by use of any mathematical operation or logical combining operation and that the order in which the values are treated, likewise, are arbitrary and may be arranged in a different order if desired. It also should be understood that a plurality of algorithms may be programmed into the microprocessors 22 and 252 and one of several such algorithms may be selected with a change in the algorithm being commanded upon the lock 16 being operated a predetermined number of times using a particular algorithm.
The lock may be provided with a data port or connection, to which an electronic key may be connected. Keys of the type marketed by Dallas Semiconductor Corporation, Dallas, Tex., may be used to contain and provide to the electronic control of the lock, among other information, the personal identifier of the operator or the key identifier (PIN), date and time, an encrypted combination, other values or parameters for use by the lock as desired, and memory which may be used to record data about the date and time of the operation of the lock for audit trail purposes.
It should be noted that while specific logical and mathematical combinations have been illustrated and described, in the generation of the various lock combinations, the combining of predetermined values and the systematic and consistent altering of the results of some of the combining steps are only illustrative; that the generation of new combinations, whether they be the ATM combination, the master combination, or the bank combination may be generated by any number of different mathematical or logical functions. The essential aspect of the invention is that the combination to be used to open the lock 16 can be generated by a separate system known as a dispatch system of FIG. 3 and by the lock 16 when the combination is entered into the lock 16; therefore, the combination to authorize the opening of the lock 16 is changed after each use and the combination does not reside in the lock 16 in any memory at any time except when the lock 16 is being operated and powered. Therefore, the attack of the lock 16 in any manner to obtain the combination by reading information from the electronic control 20 of the lock 16 will be prevented by virtue of the fact that the ATM combination to be used to open the lock 16 the next time does not even exist in the lock 16 prior to a combination being entered into the lock 16.
It should be appreciated that these changes and modifications to the preferred embodiment and other similar changes may be made by one of skill in the art without removing such activities from the scope of the invention as defined in the attached claims.
Dawson, Gerald L., Thompson, Daniel L.
| Patent | Priority | Assignee | Title |
| 6766943, | Nov 25 2002 | GLAS AMERICAS LLC, AS THE SUCCESSOR AGENT | Automated banking machine housing with improved service access |
| 7216235, | Oct 19 1999 | TIVO SOLUTIONS INC | Drive/host locking system |
| 7954700, | Jun 22 2006 | Giesecke & Devrient GmbH | Processing device for value documents |
| 8403206, | Jun 22 2006 | GIESECKE+DEVRIENT CURRENCY TECHNOLOGY GMBH | Processing device for documents of value |
| 8587405, | Nov 15 1994 | O S SECURITY LLC | Electronic access control device |
| 8756431, | Nov 12 2003 | UTC Fire & Security Americas Corporation, Inc | Remote access privileges renewal |
| Patent | Priority | Assignee | Title |
| 4213118, | Nov 08 1976 | UNIQEY LOCK COMPANY | Combination changing system and method |
| 4511946, | Jan 14 1983 | SCHLAGE LOCK COMPANY, A CORP OF CA | Programmable combination electronic lock |
| 4536647, | Jul 15 1983 | Atalla Corporation | Pocket banking terminal, method and system |
| 4652698, | Aug 13 1984 | NCR Corporation | Method and system for providing system security in a remote terminal environment |
| 4717816, | Feb 13 1984 | WINFIELD LOCKS, INC , A CORP OF CA | Electronic lock and key system for hotels and the like |
| 4797920, | May 01 1987 | MASTERCARD INTERNATIONAL, INC | Electronic funds transfer system with means for verifying a personal identification number without pre-established secret keys |
| 4837822, | Apr 08 1986 | Schlage Lock Company | Cryptographic based electronic lock system and method of operation |
| 5010238, | Mar 18 1988 | Hitachi, Ltd. | Automatic cash transaction system and method |
| 5061923, | Sep 29 1988 | LOCK II, LLC | Computerized combination lock |
| 5089692, | Jul 29 1988 | Trioving a.s. | Electronic lock |
| 5130519, | Jan 16 1990 | BUSH, GEORGE; ROSS, ESTELLE, | Portable pin card |
| 5140317, | May 11 1990 | Medeco Security Locks, Inc. | Electronic security system |
| 5148007, | Mar 08 1989 | Siemens Aktiengesellschaft | Method for generating random number for the encoded transmission of data |
| 5163097, | Aug 07 1991 | DYNAMICSERVE, LTD , | Method and apparatus for providing secure access to a limited access system |
| 5170431, | Sep 20 1991 | Mas-Hamilton Group | Electronic bolt lock with enhanced security features |
| 5224162, | Jun 14 1991 | Nippon Telegraph and Telephone Corporation | Electronic cash system |
| 5243654, | Mar 18 1991 | Pitney Bowes Inc. | Metering system with remotely resettable time lockout |
| 5321242, | Dec 09 1991 | BRINK S NETWORK, INC | Apparatus and method for controlled access to a secured location |
| 5349345, | Jun 30 1992 | VINDICATOR CORPORATION A CORPORATION OF CA | Electronic lock |
| EP459781, | |||
| EP546701, |
| Executed on | Assignor | Assignee | Conveyance | Frame | Reel | Doc |
| Oct 19 1999 | Kaba Mas Corporation | (assignment on the face of the patent) | / | |||
| Jul 31 2001 | MAS-HAMILTON GROUP, INC | Kaba Mas Corporation | CHANGE OF NAME SEE DOCUMENT FOR DETAILS | 013702 | /0870 | |
| Oct 01 2001 | KABA BENZING AMERICA, INC | UBS, AG ZURICH | SECURITY AGREEMENT | 012495 | /0716 | |
| Oct 01 2001 | Kaba Mas Corporation | UBS, AG ZURICH | SECURITY AGREEMENT | 012495 | /0716 | |
| Oct 01 2001 | ILCO UNICAN PROPERTIES, INC | UBS, AG ZURICH | SECURITY AGREEMENT | 012495 | /0716 | |
| Oct 01 2001 | Kaba High Security Locks Corporation | UBS, AG ZURICH | SECURITY AGREEMENT | 012495 | /0716 | |
| Oct 01 2001 | KABA ILCO CORPORATION | UBS, AG ZURICH | SECURITY AGREEMENT | 012495 | /0716 | |
| Oct 01 2001 | KABA Corporation | UBS, AG ZURICH | SECURITY AGREEMENT | 012495 | /0716 | |
| Nov 02 2004 | UBS AG, ZURICH | KABA Corporation | RELEASE AND TERMINATION | 015980 | /0516 | |
| Nov 02 2004 | UBS AG, ZURICH | KABA BENZING AMERICA, INC | RELEASE AND TERMINATION | 015980 | /0516 | |
| Nov 02 2004 | UBS AG, ZURICH | Kaba Mas Corporation | RELEASE AND TERMINATION | 015980 | /0516 | |
| Nov 02 2004 | UBS AG, ZURICH | ILCO UNICAN PROPERTIES, INC | RELEASE AND TERMINATION | 015980 | /0516 | |
| Nov 02 2004 | UBS AG, ZURICH | Kaba High Security Locks Corporation | RELEASE AND TERMINATION | 015980 | /0516 | |
| Nov 02 2004 | UBS AG, ZURICH | KABA ILCO CORPORATION | RELEASE AND TERMINATION | 015980 | /0516 |
| Date | Maintenance Fee Events |
| Jul 09 2003 | M1552: Payment of Maintenance Fee, 8th Year, Large Entity. |
| Aug 26 2003 | STOL: Pat Hldr no Longer Claims Small Ent Stat |
| Feb 09 2004 | ASPN: Payor Number Assigned. |
| Aug 06 2007 | REM: Maintenance Fee Reminder Mailed. |
| Jan 25 2008 | EXPX: Patent Reinstated After Maintenance Fee Payment Confirmed. |
| Feb 20 2008 | M1553: Payment of Maintenance Fee, 12th Year, Large Entity. |
| Feb 20 2008 | M1558: Surcharge, Petition to Accept Pymt After Exp, Unintentional. |
| Feb 20 2008 | PMFP: Petition Related to Maintenance Fees Filed. |
| Jul 22 2008 | PMFG: Petition Related to Maintenance Fees Granted. |
| Date | Maintenance Schedule |
| Jun 17 2006 | 4 years fee payment window open |
| Dec 17 2006 | 6 months grace period start (w surcharge) |
| Jun 17 2007 | patent expiry (for year 4) |
| Jun 17 2009 | 2 years to revive unintentionally abandoned end. (for year 4) |
| Jun 17 2010 | 8 years fee payment window open |
| Dec 17 2010 | 6 months grace period start (w surcharge) |
| Jun 17 2011 | patent expiry (for year 8) |
| Jun 17 2013 | 2 years to revive unintentionally abandoned end. (for year 8) |
| Jun 17 2014 | 12 years fee payment window open |
| Dec 17 2014 | 6 months grace period start (w surcharge) |
| Jun 17 2015 | patent expiry (for year 12) |
| Jun 17 2017 | 2 years to revive unintentionally abandoned end. (for year 12) |