WO2014094739A1

WO2014094739A1 - Device for authenticating persons at a filling point, more particularly at the fuel dispenser of a filling station

Info

Publication number: WO2014094739A1
Application number: PCT/DE2013/100432
Authority: WO
Inventors: Dorothea ECKENDÖRFER
Original assignee: AHE GmbH & Co. KG
Priority date: 2012-12-21
Filing date: 2013-12-18
Publication date: 2014-06-26
Also published as: DE202012105033U1

Abstract

The invention relates to an authentication device for a filling point (T), which has at least one operable filling device (AA) for a fluid in a self-service area (TA) and an acknowledgment device (B) for a filling operation in a secure area (TI). A first sensor (A1) for biometric data (11) having a first controller (A2) for input monitoring is present at the filling device (AA) and a second sensor (B1) for biometric data (21) having a second controller (B2) for input monitoring is present at the acknowledgment device (B). A first transfer section (T1) at least for biometric data is located between the controls (A2; B2). The first controller activates the operable filling device after detecting a first set of biometric data (11) from the first sensor for a fluid fill, and transmits the detected biometric data record to the second control. The second controller compares the transmitted biometric data record from the first sensor to a second biometric data record (22) detected at the second sensor and activates the acknowledgment device if the two biometric data records match. The invention offers the advantage that the use of the technical components, e.g. the gasoline pump of a filling station arranged, for example, in an outdoor area of a fueling point, can be distinctly associated with a certain person at the technical components, e.g. the cashier system of a filling station, arranged for example in the indoor area of the fueling point.

Description

Device for the authentication of persons at a filling station, in particular the petrol pump of a filling station

The invention relates to an authentication device for a filling station, which has at least one operable filling device for a liquid in a self-service area and an acknowledgment device for a filling process in a securing area.

From US 5,359,522 and EP 0 456 425 A1 devices for monitoring the delivery of a liquid are known, for. B. of fuel. In this case, a data storage is assigned to a liquid tank and a liquid dispenser, which can be coupled by means of a bidirectional data transmission device. In this case, a liquid dispensing is released by the monitoring device only when an authentication signal has been transmitted from the tank via a communication connection to the dispensing device and has been released by a safety device. In addition, data relating to a filling process can be stored in the data memory of the tank. Finally, a filling process is interrupted by the safety device if the tank can not permanently receive a chain of authentication signals.

In WO 2004/01 1 364 A1 a device for dispensing flammable liquids is described, for. As oil or gas. In this case, the tank of a customer can be connected via a line and a dispensing device provided with a main tank. The dispensing device is furthermore equipped with an operating device for the customer, by means of which the latter can specify the quantity of combustible liquid to be dispensed from the main tank.

In practice, one is often one-person operated and in one

Self-service area filling station for a liquid separated from those premises, hereinafter called security area, in which the filling process can be completed by acknowledgments to be paid by the respective person. Such a spatial separation can have different causes.

Is it the liquids z. For example, for dangerous goods such as chemicals, fuels, etc., their removal or refilling is usually removed for safety reasons in open and adjacent buildings. ordered outdoor areas made. A removal of liquid in a free area arranged away from a securing area can already be necessary due to the amount of a respective liquid to be removed. For example, if a tanker loaded with a raw material for food production, eg with milk or liquid chocolate, is transferred to local tank facilities in an open area. After completion of the unloading process, the acknowledgments to be paid by the driver of the lorry, such as the handover and completion of freight documents and much more, are often done in the offices of an adjacent building.

On the other hand, it may be desirable in other cases that the acknowledgments are not vorgenom also in the self-service area, but in a purpose specifically delimited security area. Such a situation is often the case if payments have to be made during the confirmation process. It is often desired by the acknowledging persons for reasons of data and personal safety, that for the execution of such payments in addition to the often publicly accessible self-service area a delimited security area is available. This may be an e. G. act with a video room surveillance and devices for cashless payment transactions, specially designated payment area. In addition, the security area may also have sanitary facilities or an additional sales area.

In these cases, in order to avoid confusion or manipulation, it is necessary that the person operating in the security area and operating the acknowledgment device or carrying out an acknowledgment be the same person who previously made a certain liquid filling in the self-service area remote from it.

The safeguarding and logging of such a personal identity may, for example, be required in the context of quality assurance at premises in which products are manufactured. However, even in filling processes in which end consumers are involved, it is necessary to ensure a personal identity when carrying out a liquid filling in a self-service area and the subsequent processing of the acknowledgments relating to the respective filling process. As one of many examples, a gas station is to be mentioned as a possible filling point for fuel as a liquid medium. There can easily be confusion between the person in a serving as a security area cashier area in the context of an acknowledgment z. As a payment, and a previously performed by another person fuel filling occur. Since both the filling quantities and the types of fuel and, as a consequence, the associated payment amounts are subject to considerable fluctuations, a personal identity is required. Such is also helpful in order to detect or prevent occasional manipulations or deliberate delusions.

The invention has for its object to provide a device, which can be ensured at a filling point of the type shown above, that was active with respect to a liquid filling operation both in the self-service area as well as in the security area the same person.

The object is achieved with the authentication device specified in claim 1. Advantageous further embodiments of the invention are specified in the subclaims.

The invention offers the advantage that the use of e.g. in an outdoor area of a filling station arranged technical components, e.g. the petrol pumps of a gas station, the z. For example, technical components arranged in an inner region of the filling point, e.g. the cash register system of a gas station, clearly assigned to a specific person. It is thus an authentication when using the located in a first, in particular unmonitored self-service area of a filling point components with the components located in a second security area, for. As a supervised operating, personnel, service or cash register area, possible. If such an authentication fails or can not be carried out successfully within a predetermined period of time, the invention enables an immediate initiation of further measures, e.g. a control of the self-service area or the triggering of an alarm.

Contactless fingerprint sensors are particularly suitable as sensors for detecting the respective sets of biometric data. However, the sensors can also evaluate other biological parameters that uniquely characterize a person, eg the fundus of the eye, the facial form, and much more. In the case of the invention, the two sets of biometric data detected by the sensors are checked only for conformity. Identification of a particular individual with the aid of the biometric data collected is neither foreseen nor necessary.

In addition, the collected sets of biometric data can be deleted even if their comparison fails, the desired authentication fails and thus the activation of the acknowledgment device is blocked. In such a case, it is the responsibility of operators to take appropriate action. On the other hand, in the event of an oversight, blocking may also be eliminated by the persons involved themselves, e.g. the "right" person repeats the input of biometric data on the second sensor in the acknowledgment device.

The invention and further advantageous embodiments thereof are explained in more detail with the examples shown in the figures. Show

Fig. 1 is a block diagram of an exemplary filling point for fuel as

Liquid, which is equipped with an advantageous embodiment of an authentication device according to the invention,

2 shows a flow chart for visualizing the processes when using the device according to the invention in the self-service area of a gas station as an exemplary filling point, and

3 shows a further flowchart in which the sequences of the authentication device occurring in a security area belonging to the flowchart m of FIG. 2 are visualized using the example of a filling station.

1 shows the block diagram of an exemplary filling point T. It has a self-service area TA, which is equipped with at least one operable filling device AA for a liquid. The exemplary filling point T furthermore has a securing region T1. This is equipped with an acknowledgment device B, at the conclusion of a filling process acknowledgments can be made, ie, for example, the confirmation of the respectively withdrawn or supplied amount or type of liquid, the issue of written documents, the making of bookings or payments, etc.. The block diagram in Fig. 1 and the flowchart me in Figures 2, 3 relate to an example of a gas station as Befüllstelle T. Their self-service area TA is usually located in an au ßen lying, passable free field. On this dispensers for dispensing liquid or gaseous fuels as operable filling devices AA, AB are arranged. The security area Tl of the gas station T is usually a closed and optionally monitored room in a adjacent to the self-service area TA building. There are as acknowledgment devices B z. B. a cash register unit or an electronic device for executing cashless transactions available.

The invention can also be used in other types of filling points and in filling with other substances. Thus, the invention z. B. in the agricultural sector in a filling of tank trucks with liquid fertilizers, or z. B. in the removal of liquid precast concrete from a mixer and the filling of a corresponding transport vehicle for authentication of the active persons used. Furthermore, not only the delivery of a liquid substance, e.g. from a stationary tank to a tanker. Rather, this is also the reverse process, i. the delivery of a substance with a mobile tanker and its delivery into a stationary tank using a local filling device comprises. So z. B. the delivery area of a dairy represent a filling point in the context of the invention. With the local operating filling devices can, for. For example, raw milk from tanker trucks can be transferred to local tank farms.

As is shown by way of example in the block diagram of FIG. 1, the authentication device according to the invention has at a filling device AA a first sensor A1 for receiving biometric data 11 of a person. Furthermore, a first controller A2 for monitoring the input of biometric data 1 1 in the first sensor A1 is present. According to the invention, a corresponding second sensor B1 for receiving biometric data 21 of a person is also present on the acknowledgment device B. Finally, there is also a second controller B2 for monitoring the input of biometric data 21 into the second sensor B1. Both controllers are A2 and B2 are coupled via a first transmission path T1 for the transfer of data between the operable filling device AA and the acknowledgment device B. According to the invention, an authentication is started when the detection of a first set 1 1 of biometric data from the first sensor A1 has been completely detected by the first controller A2. Since there is now a generally tamper-proof data-technical identification of the person located in the self-service area TA in the first control A2, the operator A2 activates the operable filling device AA for carrying out a liquid filling by the person. Furthermore, the first controller A2 transmits the detected set of biometric data 1 1 of the first sensor A1 via the first transmission link T1 from the first controller A2 to the second controller B2, in order to enable authentication to be carried out in the local security area T1.

As has already been described in detail above, an authentication of the respective active person is required if this is a filling in the

Self-service area has completed, d. H. by means of the filling device AA z. B. a desired amount of fuel entnom men and has pumped into a vehicle tank, or by means of the filling device AA, for. taken a certain amount of a liquid recyclable material from a tanker truck and pumped it into a local silo. To carry out the now necessary acknowledgments, the active person changes over from the self-service area TA to the security area T1. In order to ensure that the acknowledgments are made by or with respect to the same person, the invention makes it possible to authenticate the person active in the self-service area.

According to the invention, there is likewise a sensor B1 for detecting biometric data and monitored by the second controller B2. If it is possible to detect this data input at the second sensor B1, the second controller B2 compares the transmitted set of biometric data 11 of the first sensor A1 with the second set of biometric data 22 detected by the second sensor B1. If a correspondence between the two sets of biometric data can be ascertained, the acknowledgment device B can also be unlocked to carry out the respectively desired or necessary actions. In the example of FIG. 1, z. B. via an interface 22 a cash register or an electronic billing system K released and billing data are displayed.

Otherwise, the acknowledgment device B remains locked, z. Until the respective ge situation could be clarified by the operator. Optionally, an alarm and / or alarm unit M can also be activated via an interface 23. In another, already shown in the example of FIG. 1 embodiment, another transmission link T3 for biometric data from or to a central database D z. B. in a data center available. This can be used, for example, in the case of a lack of reconciliation of sentences 1 1, 22 biometric data from the second controller B2 to the set of biometric data 1 1 of the first sensor A1 and / or detected at the second sensor B1 set of biometric data 22 to the central database D to forward. This allows a collection of biometric data that has experienced irregularities in an attempted authentication in a filling station. On the other hand, such biometric data can also be forwarded via the transmission path T3 to other filling points, z. B. to avoid the occurrence of possible further irregularities.

As already shown in the example of FIG. 1, the self-service area TA of the filling point T can be equipped with further filling devices. This is symbolized in FIG. 1 by a transmission path T2 at least for the biometric data of a biometric sensor connected to another operable filling device AB. Depending on the design and construction of the respective filling point T, further data and control signals can be exchanged via the transmission links T1, T2 in addition to the biometric data of the biometric sensors respectively connected to the local controllers of the filling devices there.

Thus, in the example of Fig. 1 a dispenser performing operable filling device AA is equipped with a pump A3. This can be done by means of a connected to a hose A31 nozzle A4 fuel z. B. pumped from an underground tank in a vehicle tank. Furthermore, the filling device AA may be equipped with a display unit A5 z. For the current state of the filling device, e.g. a release or inhibit signal. Finally, current data of the respective filling process, for. B. column number, filling quantity, fuel type, etc .., Exchanged via an interface 14 with the associated controller A2, and are passed from this over the transmission path T1 to the acknowledgment device B.

On the other hand, in the course of activating the Filling device AA z. B. a control signal 1 2 issued to activate the pump A3 and a magnetic locking device A42 of the fuel nozzle A4 are deactivated as soon as the detection of a first set 1 1 biometric data from the first sensor A1 was detected. The completion of a filling can z. B. via a sensor A41 at the fuel nozzle A4, forwarded via a signal 1 3 to the controller A2 and reported via the transmission path T2 to the acknowledgment device B.

Possible operating sequences of this type are explained in more detail below using the flowcharts of FIGS. 2 and 3 as an example.

Thus, FIG. 2 shows a flow diagram m for visualizing the possible sequences when using the authentication device according to the invention in the self-service area TA of a gas station as an exemplary filling point. FIG. 3 shows a flowchart m in which the processes possible in a security area T1 belonging to the flowchart m of FIG. 2 are visualized using the example of a filling station when using an authentication device designed according to the invention. The individual logical action elements in the flowcharts are provided with numbers from 100 to 132 for ease of explanation.

The processes in the self-service area TA of the filling station are essentially determined by dispensers arranged there distributed. 2, this is visualized using the example of a petrol pump, which is initially blocked by the element 1 00 "lock fuel dispenser" at the beginning of an authentication. <br /> <br /> An initial operation via the element 1101 "Start dispensing process" sets the successful completion of a preceding dispensing operation ahead. This is signaled by the acknowledgment Tl on the element 131 "end tapping" in Fig. 3 below and the return 1 17.

If the input of a valid set of biometric data is now detected by a user of the filling station via the element 102 "first sensor acquisition of biometric data", these are read in by the first controller A2, which is represented by a dashed block in FIG In the normal case, activation of the operable filling device AA can take place after the query "enable dispenser" via the element 1 07. Otherwise, the dispenser remains blocked, which is symbolized by an arrow on the element 100 in FIG Such a lock can be generated, for example, by an upstream element 104 "Data Matching". if it is found to match the biometric data acquired at the first sensor with an entry in the database "biometric data", this may be due to a possible irregularity observed in another place in the past biometric data, but such data reconciliation is optional.

In this phase of an authentication is an essential task of the controller A2 in addition to a detection of biometric data from the first sensor in the transmission of this data over the first transmission path T1 to the acknowledgment Tl. This is symbolized in Fig. 2 by the element 1 03 "transfer biometric data to second controller" and in Fig. 3 by the element 121 "data adjustment". If required, further data can be transmitted, in the present case a petrol pump in a filling station as an exemplary filling device of a filling station, e.g. a petrol station number, timestamp, fuel type or nozzle number, etc. "

Prior to the activation of a liquid filling, it is advantageous if a re-input of biometric data on the first sensor A1 is prevented by the controller A2 on the element 1 08 "blocking first sensor" and in this way confusion or manipulation attempts can be excluded the operable filling device AA via the elements 1 09 "unlocking fuel nozzle" and 1 10 "fuel pump turn on." The person whose biometric data for the purpose of subsequent authentication have already been sent to the second controller B2 of the acknowledgment Tl in the security area Tl can The parameters that are required in each case, in particular the respective filling quantity, are measured by means of the element 1 1 1 "acquisition of data tapping process" and after completion of the filling, which can be detected via the element 1 12 "sensor fuel nozzle" k ann, from the element 1 13 "transfer data tapping to acknowledgment device" forwarded by means of the transmission path T1 to the second controller B2 and a cash register unit K. This is symbolized in FIG. 2 by an element 1 14 branching onto FIG. 3, and in FIG. 3 by a branching element 1 1 5 of FIG.

3, the authentication at the acknowledgment device B is continued with the element 1 16 "second sensor acquisition of biometric data." In the element 121 "data comparison", the actual procedure takes place Comparison of the biometric data of the first sensor in the self-service area with the biometric data of the second sensor in the security area. If a match of the data can be determined in the element 123 "I denticity?", The acknowledgment device B is released in the example shown with the element 126 "Enable cash register system". Otherwise, the activation of a reporting and / or alarm unit M takes place via the element 1 24 "Alarm". In this case, the affected biometric data, ie non-authenticatable biometric data or those in whose authentication irregularities have occurred, can additionally be provided via a data interface S for further processing to the element 1 20 "database biometric data" D be submitted.

3, a timely availability of the biometric data of the second sensor can also be ascertained via the element 1 "8" Time Monitoring. "If the exceeding of a time period is determined within which the presence of biometric data is detected Data is expected at the second sensor, so can also be done via the element 1 1 9 "alarm" the activation of the alarm and / or alarm unit M.

In the example of FIG. 3, a "processing data tapping process" is carried out in the cash register system K with the element 1 27 and concluded with a "payment process" 1 28. Via the elements 1 29 "Reset pump" and 130 "Release first sensor", the end 1 31 of a tapping process is reached. With the aid of the authentication device according to the invention, either the identity of the person active in the self-service area TA and in the acknowledgment area B can be determined, or appropriate measures can be initiated in the event of a problem, in particular the activation of a reporting and / or alarm unit and the blocking of the acknowledgment device.

LIST OF REFERENCES

T filling point, e.g. Gas station with at least one dispenser in one

Free field for dispensing liquid or gaseous fuels

TA self-service area e.g. the outer, drivable free field one

Gas station with petrol pumps

AA is an operable filling device in the self-service area

AB other operable filling device in the self-service area eg dispensers in the free field of a gas station A1 first biometric sensor, eg non-contact fingerprint sensor

1 1 first set of biometric data from the first sensor

A2 first control, z. B. for a gas pump

A3 pump

A31 hose

1 2 Control signals for pump

A4 fuel nozzle

A41 sensor for fuel nozzle

A42 magnetic locking device for fuel nozzle

1 3 Signal from the PTO sensor

A5 display unit

14 filling data z. B. column number, filling capacity

T1 first transmission path at least for biometric data of the first operable Befüllvorrichtung_AA

T2 second transmission path at least for biometric data of the second operable Befüllvorrichtung_AB

Tl fuse area, e.g. Shielded room in the gas station with a cash register unit

B acknowledgment device

B1 second biometric sensor, e.g. non-contact fingerprint sensor

21 second set of biometric data from the second sensor

B2 second control, z. B. for a cash register unit

M alarm and / or alarm unit

23 interface

K cash register unit and / or electronic billing system for cashless payment transactions

22 interface

S Data interface with data buffer for non-authenticatable biometric data

24 interface

T3 further transmission link (satellite, internet, telephone)

R data center

D database server, clearing body

1 00 - 1 31 elements in the flowcharts of FIGS. 2 and 3

Claims

claims

1 . Authentication device for a filling point (T), with at least one operable filling device (AA) for a liquid in a self-service area (TA) and with an acknowledgment device (B) for a filling operation in a security area (T1), with a) a first sensor (A1 ) for biometric data (1 1) at the filling device (AA) and a first controller (A2) for monitoring the input of biometric data (1 1) at the first sensor, b) a second sensor (B1) for biometric data (21) the acknowledgment device (B) and a second controller (B2) for monitoring the input of biometric data (21) at the second sensor, c) a first transmission path (T1) at least for biometric data between the first and second controllers (A2, B2) d) the first controller (A2) the operable filling device (AA) after detection of a first set of biometric data (1 1) from the first sensor (A1) for a liquid filling is enabled, and the detected set of biometric data (1 1) of the first sensor (A1) via the first transmission path (T1) from the first to the second controller (A2; B2), and e) the second controller (B2) compares the transmitted set of biometric data (1 1) of the first sensor (A1) with a second set of biometric data (22) detected by the second sensor (B1), and the acknowledgment device (B) unlocks if the two sets of biometric data (1 1, 21) match.

2. An authentication device according to claim 1, comprising a) a reporting and / or alarm unit (M), which is activated by b) the second controller (B2), if the transmitted set of biometric data (11) of the first sensor (A1) not coincides with the set of biometric data (21) detected at the second sensor (B1).

3. An authentication device according to claim 1, comprising a reporting and / or alarm unit (M), and wherein the first controller (A2) provides the first sensor (A1) detected set of biometric data (11) with a time stamp, the detected biometric data (11) of the first sensor (A1) with the time stamp via the first transmission path (T1) to the second controller (B2), and the second controller (B2) monitors the expiry of a time stamp following the time period, and the message and / or alarm unit (M) is activated if no entry of biometric data (21) at the second sensor (B1) is detected after the expiration of the period.

4. An authentication device according to claim 1 or 2, comprising a) a further transmission path (T3) for biometric data (11, 21) from and / or to a central database (D), and wherein b) the second controller (B2) the transmitted set of biometric data (1 1) of the first sensor (A1) and / or the second sensor (B1) detected set of biometric data (22) over the further transmission path (T3) to the central Database (D) sends if the sets of biometric data (1 1, 22) do not match.

5. Authentication device according to one of the preceding claims, wherein the acknowledgment device (B2) comprises a cash register unit (K) and / or an electronic billing system.

6. Authentication device according to one of the preceding claims, with a contactless fingerprint sensor as the first and / or second sensor (A1; B1) for detecting biometric data (1 1, 21).