EP1082514B1

EP1082514B1 - Device for securing valuable goods and storage rack as well as base station for use therewith

Info

Publication number: EP1082514B1
Application number: EP98923195A
Authority: EP
Inventors: Harald Vyslouzil; Philip Debaere
Original assignee: Iqsec Nv/sa
Current assignee: Iqsec Nv/sa
Priority date: 1998-05-08
Filing date: 1998-05-08
Publication date: 2002-08-07
Anticipated expiration: 2018-05-08
Also published as: AU7553498A; DE69807121D1; ATE221950T1; EP1082514A1

Description

The invention relates to a device for securing valuable goods, in particular securities and documents, comprising a portable container with a closable compartment for receiving the goods therein and destruction means for destroying the goods in the case of wrongful use of the device.

Such a device (e.g. known from GB-A-2 280 056 and WO 93/14477) is usually applied in the case of security transports. The greatest risk in such transports is found to be the so-called pavement risk, wherein a money courier on foot carries a filled device with him outside the secured vehicle, for instance from the secured vehicle to a bank branch or vice versa. In order to reduce this pavement risk the money courier usually has, in the case of a device of the type stated in the preamble, the option of setting into operation the destruction means thereof in the case of danger so that the content of the device is destroyed. Such destruction means provide for instance a cosmetic destruction, wherein coloured and indelible smoke or ink is poured over the items present in the device or they bring about pyrolytic destruction of the transported items, wherein the items are perforated by a flame or otherwise damaged. In both cases the objects can later be identified as originating from theft and are thereby non-negotiable or even completely worthless, which should discourage potential thieves.

Despite the presence of such additional security means security transports have in recent times nevertheless proved to an increasing extent to be the target of hold-ups. A thief herein sometimes manages to seize the device before the money courier has activated the destruction means. At a safe location the thus seized device can be dismantled in undisturbed manner in order to gain access to the objects present therein. In order to nevertheless sufficiently deter thieves, a large manpower team is usually deployed for a security transport, which may or may not be legally required and which will obviously result in higher transport costs.

The present invention has for its object inter alia to provide a device of the type stated in the preamble which is secured such that even in the aforesaid case, wherein the device is seized before destruction means present therein are set into operation, a thief is nevertheless unable to gain intact access to objects present in the device, this so that a potential hold-up is sufficiently discouraged and increased manpower remains unnecessary.

To achieve the intended objective a device of the type stated in the preamble has the feature according to the invention that the device comprises connection means which are capable of establishing a connection with a base station related thereto, that the device is further provided with clock means and with detection means which are capable of co-acting such that when the connection of the connection means to the base station is broken the destruction means will be activated after a pre-determined delay time has elapsed. The present invention is herein based on the insight that a forced entry to the compartment will generally require a minimum length of time and that the time available for this purpose can be limited in failsafe manner to below this minimum by giving the device a certain degree of autonomy, wherein the device will automatically proceed to self-destruction in order to destroy the content after said built-in delay time has elapsed. In practice this means for instance that in the case of money transport the device will be coupled in the security vehicle to a base station present in the vehicle whereby the clock means will be inactive during the journey. As soon as the device is removed from the base station at the destination, for instance to be carried on foot to a bank branch, the clock means start and said delay time counts down. Self-destruction of the device can then be stopped only by taking the device into the bank branch and there placing it on a subsequent base station before the time expires. Should the money courier not succeed herein for whatever reason, the self-destruction is then set irreversibly into operation. By adapting the delay time to the time which is actually usually required to cover the route between the transport vehicle and the bank branch on foot, there remains only a minimum of time for a potential thief to gain unlawful access to the contents of the device. This latter can therefore be virtually precluded with the device according to the invention, whereby the pavement risk is very considerably reduced.

Although the device can be provided with one uniform delay time which is generally applied for numerous situations, it is recommended to always adapt the delay time specifically to the relevant route to be covered. To provide herefor a further embodiment of the device according to the invention has the feature that the clock means and detection means in the device are coupled to a central processing unit which is further coupled to a repeatedly programmable memory unit for storing therein and reading therefrom of the delay time. The required delay time, hereafter also referred to as pavement time, specific to a transport can herein be stored beforehand in the memory of the device. The tolerance for a possible thief is thus limited to a minimum.

In a further development thereof, a particular embodiment of the device according to the invention has the feature that the memory unit is suitable for storing therein different pre-determined delay times related to different part-routes to be covered by the device between a point of departure and a final destination in order that during operation one thereof be read in each case by the processing unit subject to a part-route to be covered. In this case a complete route can be pre-programmed in the memory of the device, wherein for each part-route wherein the device is disconnected from any base station a delay time counts down in each case which is related to that part-route. Through adequate pre-programming of such a device it is thus capable of applying differentiation in the activation of clock times. Thus in the case of incorrect manipulation of the device, which can be the result of a mistake, a relatively short clock time will count down, the so-called alarm time, within which the error can be corrected so as to avoid complete destruction. A different pavement time can further be entered for each base station, wherein the device itself, i.e. fully autonomously, will activate the correct pre-determined pavement time or, in the case of an error, will activate the alarm time depending on the determined identification of the base station. Communication or control from outside is not required for this purpose, whereby external influencing by other factors can be precluded. A necessary tolerance in the set delay times can thus be limited, and thereby the pavement risk.

In a further embodiment the device according to the invention has the feature that reading means are accommodated therein which, at least during the connection of the device to the base station, are capable of co-acting with identification means of the base station in order to establish an identity thereof. The device can therefore distinguish between different base stations so as to be able to respond on the basis of parameters entered beforehand for this purpose. In this respect a further embodiment has the feature that the connection means, detection means, destruction means and the central processing unit form part of an integrated security system in the device which also comprises an electrical power supply unit and electrical locking means of an access cover to the compartment, which locking means can be actuated by the central processing unit during operation, and more particularly that the memory unit is able to store a number of operating parameters which enable the processing unit to actuate the locking means therewith. Owing to the above described possibility of identifying a base station, in such an embodiment the identity of the destination base station can be given to the device as operating parameter, so that the processing unit will only release the locking means after the device has actually been connected to the relevant base station. It is further possible herein to enter for instance a point in time or even a time period as operating parameters such that only at that point in time respectively within the set time period the locking of the access cover can be released in regular manner to provide access to the secured compartment. The device thus determines in fully autonomous manner the situation of the locking of the access cover. It will not be possible to open the device, even with the intervention of the money courier or other security officer, if it is not connected to a base station where this is allowed. Instead, the processing unit will therefore always keep the compartment hermetically closed and never release the locking means outside that base station.

In a further embodiment the device according to the invention has the feature that the security system is also provided with one or more further detection means from a group comprising liquid detection means, voltage detection means of the electrical power supply, temperature detection means, perimeter detection means and other sabotage detection means, and that these further detection means are able to generate a signal to the central processing unit in the case of disturbance to cause the destruction means to be set into at least almost immediate operation. The device is therefore not only capable of responding to pre-determined and pre-set parameters but also has available an intricate system of detection means to enable response to numerous ambient factors. Once the security system of such a device has been set into operation, the integrity of the device will be monitored continuously in one or more aspects. Irregular manipulations of the device will herein result irreversibly in a practically immediate self-destruction of the device, or at least of its contents. If access is forced outside a base station, which will normally be the case after a robbery, the thief moreover only has the then elapsing delay time to attempt to bypass the detection means, which is thereby virtually precluded.

A plurality of devices will usually be transported simultaneously by a secured vehicle. It must be avoided that an incorrect device is herein delivered to a particular destination. A further embodiment of the device has for this purpose the feature according to the invention that the device comprises input means to generate a specific location along the route in coded or non-coded form to the central processing unit. When the secured vehicle arrives at a particular destination, this destination can thus be made known to all the devices present in the vehicle. Only the device for this destination will subsequently allow itself to be taken out of the vehicle to be transferred to the final destination thereof.

In a very practical embodiment the device according to the invention has the feature that the device comprises a unit for wireless data transmission which is able to co-act with a unit associated therewith outside the device to enter data from outside into the memory unit of the device. In this case it is not necessary to make physical contact with the device in order to program the required data therein. A preferred embodiment of the device has the further feature according to the invention that the data are stored in the memory unit in coded form. Unauthorized reading or changing of the data in the memory unit is thus prevented.

It is possible that due to unforeseen circumstances a money courier is unable to reach the base station at his destination within the pavement time set for him. In order to avoid the content of the device being lost unnecessarily in such a case, a particular embodiment of the device according to the invention has the feature that the clock means are coupled to an external lock for receiving therein an electrical or non-electrical key which is capable during operation of generating a second delay time to the clock means whereby the first delay time is extended once only. As soon as the money courier notices that the set pavement time will be too short, the key can be placed in the lock to extend the pavement time once only. In a particular embodiment this extension is at most equal to the first delay time and will in any case enable the money courier to at least return to the transport vehicle.

A particular embodiment of the device according to the invention otherwise has the feature that auditive and/or visual signalling means are provided to make known the status of the device, and more particularly that the signalling means are capable of generating distinguishable signals to designate an activation of the clock means and subsequently of the destruction means. The money courier is in any case continuously informed or alerted concerning the status of the device so that he can where possible remedy errors in good time and prevent unintentional destruction of the contents of the device.

Activation and de-activation of the clock means in the device during removal and placing on the base station can be realized in many ways, for instance mechanically by means of a ratchet which is adequately disturbed during the above stated actions, but also electrically or electronically either wirelessly or not. A particular embodiment of the device according to the invention which has been found to be particularly practical has in this respect the feature that the connection means comprise at least one electrical contact on an outer shell of the device which is able to co-act with at least one contact associated therewith of the base station in order to realize said connection. A further embodiment hereof is further characterized herein in that the connection means comprise a set of contacts on an underside of the device which is able to co-act with a set of contacts associated therewith in a central control panel of the base station in order to realize said connection when the device is placed on the central control panel. In this case the device is simply placed on the central control panel of the base station, whereby the connection is effected automatically. Conversely, the connection is automatically broken, and thereby the delay time in the device automatically started, when the device is picked up from the central control panel.

In security transports a number of deliveries will in practice be combined in one journey of a vehicle, wherein a device of the above described type will be carried for each destination. With this in mind, a preferred embodiment of the device according to the invention has the feature that the at least one electrical contact is able to co-act with at least one electrical contact from a set of similar electrical contacts distributed over different shelves of a storage rack, which storage rack is equipped with a collective plug for all shelves which is able to co-act with a complementary plug coupled to the base station in order to thus effect the above stated connection by means of a plug connection and interposing of the storage rack. The devices for the different destinations in the same transport are herein placed together in the storage rack and then made ready for dispatch or stored for longer or shorter periods. The devices will herein be connected at all times to a base station due to interposing of the storage rack so that no delay times counts down and the destruction means remain inactive. For transport the storage rack is disconnected from the base station, whereby a delay time begins to count down in all devices, and is transferred to a secured vehicle before the delay time has elapsed, where the storage rack is once again coupled to a base station in the vehicle by means of a plug connection so that the clock means are rendered inoperative. A great advantage hereof is that the clock means in all devices are thus rendered inactive by one operation, so that the risk of errors is limited and the time required therefor can be short whereby the set delay time can likewise be shortened in order to further reduce the pavement risk.

The invention also relates to a storage rack for use with one or more such devices, comprising a frame with beams which are subdivided into shelves for receiving the devices thereon in separate shelves, that each shelf comprises connection means for co-action with the connection means of a device when this device is placed in the shelf in order to effect an electrical connection, and that the connection means of the shelves of the storage rack are coupled to a collective plug for the storage rack which can be coupled to a complementary plug which is connected to one or more base stations. A further embodiment of the storage rack herein has the feature according to the invention that the diverse shelves of the storage rack can be coupled via the plug connection to an individual base station for each shelf. Because in this latter case a connection to an individual base station can be made per shelf and therefore per device placed therein, it is possible to make a check in the storage rack of the devices present in the rack. If for instance an incorrect device is removed at a destination, i.e. a device intended for another destination, this can be signalled immediately and made known by means of auditive or visual means. In the device in question a relatively short delay time herein begins within which the device must be re-placed to prevent self-destruction. The device must herein be re-placed in exactly the same shelf from which it was removed. It will be apparent that an unsuspecting thief will generally not succeed in this if he has meanwhile taken a number of devices and said delay time is relatively short. To facilitate manipulation with such a storage rack a preferred embodiment thereof has the feature according to the invention that the storage rack comprises a mobile undercarriage.

The invention further relates to a base station for use with the above described device. A particular embodiment of such a base station herein has the feature according to the invention that a repeatedly programmable memory unit is incorporated therein which is able, at least during the connection of the device to the base station, to co-act with the device in order to store therein an identity of the device, and more particularly that the memory unit in the base station comprises a shift register for storing therein in accordance with a First-In-First-Out principle the identities of devices successively connected to the base station. At least the most recent transactions can thus be stored in said memory unit of the base station, which provides an additional checking option for the actual delivery of the device at the relevant base station.

A further particular embodiment of the base station has the feature according to the invention that electrical contacts are provided therein which, when the device is connected to the base station, are able to co-act with corresponding electrical contacts of the device in order to supply a charging current to a rechargeable power unit of the device. Because in practice the device will practically never be disconnected from a base station, it is thus possible to achieve that a rechargeable power unit of the device is always in optimal condition, or at least will never fall below a minimal condition.

The invention will now be further described in more detail with reference to an embodiment and an accompanying drawing. In the drawing:

Figure 1A: shows a front view of an embodiment of a device according to the invention;
Figure 1B: shows a side view of the device of figure 1A;
Figure 1C: shows a rear view of the device of figures 1A and 1B;
Figure 1D: is a schematic representation of an integrated security system in the device of figures 1A-1C;
Figure 2: shows a cross-section of an embodiment of a base station according to the invention for use with the device of figure 1;
Figure 3: shows an embodiment of a transport rack according to the invention for use with the device of figure 1; and
Figure 4: shows an armoured vehicle for a secured transport of the device of figure 1.

The drawing is otherwise purely schematic and not shown to scale. Some dimensions in particular are drawn in greatly exaggerated manner for the sake of clarity. Corresponding parts are designated as far as possible in the figures with the same reference numeral.

Figure 1 shows an example of a device according to the invention. The device comprises a portable container 1 with a compartment 2 for receiving therein valuable goods, and particularly documents and securities such as banknotes. The compartment can be closed by means of an access cover 3 arranged on a front side of the container, see figure 1A. Further situated on the front side are a display LED 4, an alphanumeric display screen 5 and a control button 6, although it will be apparent that within the scope of the invention it is possible to deviate from such a specific configuration. The outer shell of the container is manufactured from an impact-proof plastic, in this example polyurethane. This material is flexible and yet very strong and sturdy so that a highly impact-resistant, robust whole is obtained. The container wall is constructed from a three-layer system of an inner shell, an outer shell and an advanced shell security electrode placed therebetween which is able to detect even the slightest penetration. This electrode is described in more detail in a patent application filed simultaneously by applicant, the content of which is deemed to be interpolated herein by way of this reference. For additional protection the container can be placed in a wear-resistant cover/sleeve of nylon or any other suitable material in which the container is then carried and provided for this purpose with a handgrip or handle.

As shown in the side view of figure 1B, destruction means are situated under compartment 2 in the form of a number of pyrotechnic charges 7 which, when activated, produce a powerful flame to perforate and thus destroy the papers located thereabove. This aspect is described in more detail in a patent application which has likewise been filed and the content of which is deemed interpolated herein by way of reference. However, within the scope of the present invention other types of destruction means are also suitable, such as for instance those which are based on the release of coloured ink or smoke to permanently damage the contents and thereby make them worthless.

For monitoring of the integrity of the device, more particularly its contents, and for possible actuation of the destruction means the device comprises an integrated security system which is shown schematically in figure 1D. The heart of the security system is formed by a central processing unit 11, for instance a microprocessor of the Z80 type, which is provided with the required operating voltage from a rechargeable power unit 12 provided in the device, in this case an NiCd battery. Processing unit 11 is further coupled to connection means 13 in the form of a set of electrical contacts 8 on a rear side of the device, see figure 1C, which are able to make an electrical connection with a base station related thereto, as will be further explained hereinbelow. Detection means in processing unit 11 are capable of determining the presence or absence of this connection. Diverse detection means 18 are further coupled to processing unit 11, including the above mentioned shell security electrode, liquid and moisture detectors, temperature sensors, voltage detection means of power unit 12 and other sabotage detection means, which are shown together schematically in the figure. These detection means continuously monitor the condition and integrity of the device and, when parameters associated therewith are exceeded, are able to generate a signal to the processing unit for virtually immediate activation of destruction means 17.

Situated on the rear of the container, see figure 1C, are two pairs of

electrical contacts

8,9 which are able to co-act with four

contacts

28,29 associated therewith in a central control panel of a base station 20 related thereto, an embodiment of which is shown in figure 2. Base station 20 comprises in this example a central control panel 21 which is manufactured wholly of stainless steel and which is entirely recessed into a concrete floor 22 and fixed rigidly therein by means of anchors 23. An integrated circuit 24 which forms part of base station 20 and is intended for communication with the device, at least when this latter is placed on the base station, is also cast into the concrete in order to preclude the possibility of sabotage or other manipulation thereof.

Integrated circuit 24 contains a memory unit from which an identity of the base station can be read by the processing unit of a container and in which, if desired, the identities of at least the containers most recently connected to the base station can be stored. For this latter purpose the starting point is preferably a memory based on the First-In-First-Out principle (FIFO), such as a shift register, which, when the maximum memory space has been exceeded, will always erase the oldest data in favour of the most recent data. The most recent data will therefore automatically be stored in the memory at all times. The

inner contacts

8,28 of the device respectively the base station serve for communication between the integrated circuit 24 of the base station and the processing unit 11 of the device.

The

outer contacts

9,29 of the device respectively the base station are arranged to couple the device from base station 20 to an external power supply 25 which provides the battery of the device with the required charging current as soon as the device is placed on the base station. The battery is thus recharged each time the device is placed on a base station and the condition thereof will always be satisfactory.

The security system of the device further comprises a transmitting and receiving unit 14 for wireless data transfer, by means of which data can be loaded from outside into a repeatedly programmable memory unit 15 and, if desired, read. Thus stored in the memory are one or more pre-determined delay times which can be read by central processing unit 11. Further coupled to processing unit 11 are clock means 16 which are capable of co-acting with the detection means of the processing unit for the purpose, when the connection of connection means 8,12 to a base station is broken, of immediately activating the destruction means 17, which are likewise coupled to the processing unit, after this delay time has elapsed.

In a distribution centre the valuable goods, for instance a large sum of money in the form of stacks of banknotes, are made ready for transport in a secured, impenetrable space and placed in a separate container for each destination as specified above. Each container is programmed for its specific destination, i.e. in the memory unit thereof are stored the final destination and different pre-determined delay times and identities of base stations along the route related to different part-routes to be covered by the device between starting and finishing points. During operation the correct one of these delay times is read and used in each case by the processing unit subject to a part-route to be covered at that moment. The delay times can herein be distinguished into roughly three categories. In the first place an alarm time of for instance 30 seconds is pre-programmed within which a manipulation error or other mistake with the device can be corrected in order to thereby prevent complete destruction. In addition, one or more transfer times are programmed within which a storage rack as further described hereinbelow and loaded with containers must be taken from a secured space to a following secured space along a route. The same transfer time applies in principle for all containers in the storage rack per such transport. Exceeding thereof results irreversibly in destruction of all containers in the rack. Finally, one or more pavement times are stored in the memory unit for each container individually which are related to the route or routes to the final destination in which the container is carried by hand and transferred on foot by a security officer.

For the programming use is made of a central fixed work-station and one or more portable work-stations which are suitable for wireless communication with the transmitting and receiving unit 14 of the device. The central work-station is a stand-alone computer system, for instance a personal computer with a hard disc of 100 Mb or more on which all data relating to the different destinations is stored and having a communication module for the portable work-stations. This equipment is situated in a secured area of the distribution centre. For protection purposes the stored data is always stored in coded form and further security software is also available to guard . against access to the data. The portable work-stations are loaded from the central work-station. A container is programmed by means of a portable work-station. The container contains for this purpose an identification means, in this case a label with a unique bar code, which is read by the portable work-station, whereafter the data for the relevant container is transferred in wireless manner from the portable work-station to the memory module in the container. In addition to the above specified destination and pavement times, transfer and alarm times, this data may also include operational parameters on the basis of which the central processing unit operates. A moment in time or time period can thus be entered in order to preset the moment in time or time period at which or within which it is possible to obtain regular access to the compartment. The identity of the base station of final destination can also be entered so that only there can the container be opened. Any attempt to acquire access outside the pre-programmed time interval or separately of this base station results unavoidably in starting of the alarm time or in immediate destruction of the contents. It will be apparent that unauthorized access to the compartment to acquire the contents intact therefrom is thus all but impossible. From the moment that the device has been programmed its specific final destination appears on the display screen 5.

After being programmed the container is armed with control button 6, which means that the security system therein is activated and electronic locking means 19 coupled to the processing unit 11 of the device are thereby actuated to hermetically close the access cover to compartment 2. The container can now no longer be opened unless it has arrived in a secured space at its programmed final destination. There is no possible method of gaining access to the valuable goods in the container in any manner or by any person whatsoever before the final destination has been reached without these goods being destroyed. The programmed security system ensures that the container can function fully autonomously and can recognize different situations so as to respond adequately thereto. Once programmed, the device has all the information necessary to make wholly independent decisions. A command or other input from outside is unnecessary for operating the security system and ultimately for the destruction of the contents. Possible abnormalities in the handling of the device, such as exceeding a delay time or an attempted forced entry, result automatically, i.e. without intervention of personnel, in destruction of the contents of the container. All visited locations and occurring situations and actions are moreover stored as a type of electronic log book in the memory unit of the container.

A number of containers for different destinations called at on the route of the vehicle is usually combined per journey of a vehicle. For this purpose the loaded containers forming part of the same shipment are placed together according to the invention in a special transport rack 30, see figure 3. This transport rack comprises a storage rack 31 which is provided with a mobile undercarriage 32 so that one person can manage it easily. Storage rack 31 comprises a frame with a number of beams 36 which are subdivided into separate shelves 33. The rack comprises per shelf 33 connection means which include a pair of contacts 38 which can co-act with contacts 8 on the rear of a device as soon as this latter is placed in the relevant shelf. Contact pairs 38 of the different shelves 33 of the rack are coupled to a collective plug 34 with which a connection to a base station can be made simultaneously for all containers present in the rack, which base station is equipped for this purpose with a complementary plug. Further provided per shelf 33 is a pair of contacts 39 by means of which a suitable charging current can be supplied to the power units of the devices placed in the rack so that they remain in prime condition.

The containers can be stored temporarily in such a transport rack in the distribution centre and there be coupled to a base station so that the clock means of the device are inactive and the power unit of each device is recharged if necessary. In this case, however, the containers are transferred in the transport rack to a specially equipped vehicle 40, as shown by way of example in figure 4.

During the transport of the transport rack to the vehicle the clock means of all containers placed therein are active and a transfer time counts down within which the rack must be coupled to the base station of the vehicle or an intermediate station provided for this purpose along the route of the containers. If during such a collective transport a container is removed from the rack the relatively short alarm time within which this irregularity must be corrected will immediately start in this container.

Once in the vehicle, the transport rack is locked mechanically in the loading space thereof and its plug 34 inserted into a complementary plug connection of a chip box 41 of the vehicle which forms a base station for every container in the rack. The chip box contains for each container an individual integrated circuit 24 as described above. For each rack that can be placed in the vehicle such a chip box is arranged concealed in an armoured part of the vehicle and anchored to the vehicle. The loading space of the vehicle is secured against forced entry and armoured all round. Loading and unloading of the transport racks with containers takes place via a double access door which can only be opened remotely from a secured area in the distribution centre.

Once the vehicle has arrived at one of its destinations along a route, the relevant destination is transmitted in coded form to all containers 30 in the vehicle via input means 42 serving for this purpose in the vehicle. To this end the input means comprise a unit 43 for wireless signal transfer which is able to co-act with a corresponding device 14 in each container. Only the container for this destination will respond by means of auditive means provided therein which will then generate a continuous sound signal, as well as by means of visual signals generated via LED 4 and display screen 5 on the front side. The LED will for instance light up green as an indication that the relevant container can be removed from the rack, while the LED of the other containers will not change and continue to flash red. A container which is erroneously removed from the rack immediately starts an alarm procedure, wherein the above stated alarm time of only a few tens of seconds counts down and an intermittent sound signal is emitted. If the container is not re-placed on the same position in the rack before this alarm time has elapsed the contents thereof are irreversibly devalued. The former position of the container is herein deduced by the container itself from the identity of the unique integrated circuit of chip box 41 to which the container was previously connected. If the container is re-placed in the correct position in good time the alarm procedure is automatically cancelled and the danger of unintended destruction of the contents of the container passes.

At the moment that the container for the relevant, thus entered, destination is removed from the rack there starts therein the pavement time set therein of for instance a few minutes. This pavement time is related precisely to the route which must then be covered by a security officer on foot and which, normally speaking, will give him the opportunity to reach a base station at the place of destination in good time. The security officer sees from a LED 5 with a continuous red light on the front side of the container that the pavement time is counting down and must deliver the container to the destination before it has elapsed. Expiry of the pavement time is herein signalled by an intermittent sound signal and red flashing of the LED 5, which the officer will not fail to notice. If for whatever reason the security officer runs short of time, for instance as a result of an unforeseen obstacle on his path, he can then avert the approaching destruction of the contents of the container by inserting an electronic key in a lock 70 arranged on the outside of the container. The electronic lock 70 is coupled to the clock means, either with or without interposing of the central processing unit 11. The key forms part of the equipment of the vehicle and comprises a bypass chip in which a second delay time is stored which can be added once only to the counting down pavement time. As soon as the key is introduced into the lock of the container this second delay time will be generated to the clock means as addition to the meanwhile counting down pavement time and extends the available pavement time once only. In this case this second delay time amounts at the very most to the initially set pavement time so that the officer, even if it were not possible to reach the final destination within the extension, must in any case be deemed able to return to the secured vehicle and there re-place the container in the transport rack. At that moment the clock means of the container stop and the contents of the container are safeguarded. The security officer can therefore avert an unintended destruction of the contents of the container in such cases.

At the place of destination the container is placed in a non-secured area on a base station of the type shown in figure 2 and therein optionally exchanged for an armed return container. The return container must then be carried back to the vehicle within the same pavement time in order to be placed there in an open position of the transport rack.

The base station comprises a repeatedly programmable memory unit which is incorporated in the integrated circuit thereof and which is able, when a container is placed on the platform, to co-act with the integrated circuit of the device in order to determine and store the identity thereof. In this example the memory unit comprises a shift register functioning in accordance with the so-called First-In-First-Out principle, which entails the most recent transactions being stored therein, since when the memory is completely full the oldest transaction is always erased to make room for a new transaction. In addition to the container identification, the time and date of delivery, the thus stored data comprises for instance the status of the container (armed/disarmed/pavement time activated/stopped) and action carried out with the container.

The delivered container will also communicate with the base station to establish and store in its internal log book the identity thereof. Only if this identity corresponds with the delivery address pre-programmed in the container does the pavement time of the container stop, which can be seen from a red flashing of the LED on the front side thereof. If the container is subsequently removed from the base station, the LED will begin to display a continuous red light while an intermittent sound signal will be audible, both an indication that in the container a pre-set internal transfer time is counting down within which the container must be transferred to a similar base station in a secured area of the delivery address or must be re-placed. This has meanwhile become the responsibility of the recipient and no longer of the security officer. The volume and frequency of the sound signal increase as the end of the set transfer time approaches, for instance during the last 30 seconds, in order to draw the attention of an official to the approaching destruction of the contents of the container. The internal transfer time stops as soon as the container is placed in the secured area on the base station present there or is re-placed on the previous base station. All other manipulations with the container result irreversibly in destruction of its contents, so that in the case of unauthorized removal of the container from the non-secured area the contents will lose their value within a short time.

The identity of the base station in the secured area is also determined by the container for comparison with a pre-programmed identity. Only when these match will the container allow a disarm command to be given. This takes place via the control button on the front part of the container. A moment in time or a time period is herein optionally entered beforehand which is also stored in the container, whereby the disarm option is limited to after this moment in time or to within this time period. Only after the container determines, once again in fully autonomous manner, that disarming is allowed will a disarming procedure be started. This entails the integrated security system of the container being rendered inoperative, which may or may not be after a pre-programmed delay time has elapsed. The locking means will moreover release the access cover to the compartment of the container. If during the disarming procedure the container is lifted from the base station, disarming will be halted immediately and the internal transfer time re-started, so that here also attempted unauthorized removal of the container is pointless. Once the disarming procedure has been completed fully and without error the LED will change colour from red to green and the message DISARMED or a message to that effect appears on the display screen as an indication that the access cover can be opened and the contents removed. These procedures are otherwise stored in the memory unit of the container so that they can later be verified.

The device according to the invention thus provides in interaction with the base stations according to the invention a fully autonomous security against theft and robberies which is so hermetic that an unauthorized appropriation of the contents of the container is virtually precluded. Robbery or theft is thereby discouraged such that not even an attempt thereto will be considered. The invention moreover provides therewith an autonomy and user-friendliness such that the pavement transport can be undertaken without problem by only a single security officer. A second security officer, as required in such cases in conventional security transport, is thereby no longer necessary. The invention thus not only provides a better security but also an economic advantage.

Although the invention has been elucidated above solely with reference to a single embodiment, it will be apparent that the invention is in no way limited to the given example. On the contrary, many other variations and embodiments are possible for the average skilled person without requiring him to go beyond the scope of the invention. The invention generally provides a portable device for security transport which in fully autonomous manner monitors its own integrity and the progress of the transport and thus forms an effective means against the ever-increasing criminality in this field.

Claims

Device for securing valuable goods, in particular securities and documents, comprising a portable container with a closable compartment for receiving the goods therein and destruction means for destroying the goods in the case of wrongful use of the device, characterized in that the device comprises connection means which are capable of establishing a connection with a base station related thereto, that the device is further provided with clock means and with detection means which are capable of co-acting such that when the connection of the connection means to the base station is broken the destruction means will be activated after a pre-determined delay time has elapsed.
Device as claimed in claim 1, characterized in that the clock means and the detection means in the device are coupled to a central processing unit which is further coupled to a repeatedly programmable memory unit for storing therein and reading therefrom of the delay time.
Device as claimed in claim 2, characterized in that the memory unit is suitable for storing therein different pre-determined delay times related to different part-routes to be covered by the device between a point of departure and a final destination in order that during operation one thereof be read in each case by the processing unit subject to a part-route to be covered.
Device as claimed in one or more of the claims 2 and 3, characterized in that reading means are accommodated therein which, at least during the connection of the device to the base station, are capable of co-acting with identification means of the base station in order to establish an identity thereof.
Device as claimed in one or more of the claims 2-4, characterized in that the connection means, detection means, destruction means and the central processing unit form part of an integrated security system in the device which also comprises an electrical power supply unit and electrical locking means of an access cover to the compartment, which locking means can be actuated by the central processing unit during operation.
Device as claimed in claim 5, characterized in that the memory unit is able to store a number of operating parameters which enable the processing unit to actuate the locking means therewith.
Device as claimed in claim 6, characterized in that the operating parameters comprise one or more parameters from a group including a point in time, a time period and an identity of a base station.
Device as claimed in one or more of the claims 5-7, characterized in that the security system is also provided with one or more further detection means from a group comprising liquid detection means, voltage detection means of the electrical power supply, temperature detection means, perimeter detection means and other sabotage detection means, and that these further detection means are able to generate a signal to the central processing unit in the case of disturbance in order to cause the destruction means to be set into at least almost immediate operation.
Device as claimed in one or more of the foregoing claims, characterized in that the device comprises input means to generate a specific location along the route in coded or non-coded form to the central processing unit of the device.
Device as claimed in one or more of the claims 2-9, characterized in that the device comprises a unit for wireless data transmission which is able to co-act with a unit associated therewith outside the device for entering data from outside into the memory unit of the device.
Device as claimed in one or more of the claims 2-10, characterized in that data is stored in the memory unit in coded form.
Device as claimed in one or more of the foregoing claims, characterized in that the clock means are coupled to an external lock for receiving therein an electrical or non-electrical key which is capable during operation of generating a second delay time to the clock means whereby the first delay time is extended once only.
Device as claimed in claim 12, characterized in that the second delay time is at most equal to the first delay time.
Device as claimed in one or more of the foregoing claims, characterized in that auditive and/or visual signalling means are provided to make known the status of the device.
Device as claimed in claim 14, characterized in that the signalling means are capable of generating distinguishable signals to designate an activation of the clock means and subsequently of the destruction means.
Device as claimed in one or more of the foregoing claims, characterized in that the connection means comprise at least one electrical contact on an outer shell of the device which is able to co-act with at least one electrical contact associated therewith of the base station in order to realize said connection.
Device as claimed in claim 16, characterized in that the connection means comprise a set of contacts on an underside of the device which is able to co-act with a set of contacts associated therewith in a central control panel of the base station in order to realize said connection when the device is placed on the central control panel.
Device as claimed in claim 16, characterized in that the at least one electrical contact is able to co-act with at least one electrical contact from a set of similar electrical contacts distributed over different shelves of a storage rack, which storage rack is equipped with a collective plug for all shelves which is able to co-act with a complementary plug coupled to the base station in order to thus effect the above stated connection by means of a plug connection and interposing of the storage rack.
Storage rack for use with one or more devices as claimed in claim 18, comprising a frame with beams which are subdivided into shelves for receiving the devices thereon in separate shelves, that each shelf comprises connection means for co-action with the connection means of a device when this device is placed in the shelf in order to effect an electrical connection, and that the connection means of the shelves of the storage rack are coupled to a collective plug for the storage rack which can be coupled to a complementary plug which is connected to one or more base stations.
Storage rack as claimed in claim 19, characterized in that the diverse shelves of the storage rack can be coupled via the plug connection to an individual base station for each shelf.
Storage rack as claimed in one or more of the claims 19 and 20, characterized in that the storage rack comprises a mobile undercarriage.
Base station for use with the device as claimed in one or more of the foregoing claims.
Base station as claimed in claim 22, characterized in that a repeatedly programmable memory unit is incorporated therein which is able, at least during the connection of the device to the base station, to co-act with the device in order to store therein an identity of the device.
Base station as claimed in claim 23, characterized in that the memory unit in the base station comprises a shift register for storing therein in accordance with a First-In-First-Out principle the identities of devices successively connected to the base station.
Base station as claimed in one or more of the claims 22, 23 and 24, characterized in that electrical contacts are provided therein which, when the device is connected to the base station, are able to co-act with corresponding electrical contacts of the device in order to supply a charging current to a rechargeable power unit of the device.