Patent Grant
8628006
This invention relates to banking systems that are controlled responsive to data read from data bearing records, including user cards, and may be classified in U.S. Class 235, Subclass 379.
Safety deposit boxes may be used by banking customers to store valuables. Banks commonly provide a plurality of safety deposit boxes in a vault or other secure area. Customers of the bank may rent the safety deposit box for a fee. Banking customers may store valuable documents and other items in their safety deposit box and may access them when desired at times when the bank is open. An example of an embodiment of a safety deposit box is shown in U.S. Pat. No. 4,608,932 the disclosure of which is incorporated herein by reference.
Safety deposit boxes commonly include two key locks. Each of the two key locks must be opened by a corresponding respective key in order for the safety deposit box to be opened. One of the key locks is actuated by a guard key. The guard key is held by the bank. The same guard key may be operative to open the guard lock on some or all of a plurality of safety deposit boxes in the bank.
A second key lock on a safety deposit box is the customer lock. The customer lock can only be opened by a unique key which is given to the particular customer who has leased the safety deposit box.
Commonly a customer wishing to access their safety deposit box will travel to the bank at a time when the bank is open. During normal business hours it is common for the main vault door to be either open or capable of being unlocked. In cases where the vault door is open, access to the interior of the vault may nonetheless be controlled by a locked day gate or other structure, which can be unlocked with a key or other device. A teller or other bank employee is informed by the customer that they wish to access their safety deposit box. The bank employee then verifies the identity of the customer and that they have leased a safety deposit box with the bank. Upon verifying this information the bank employee then escorts the customer into the vault. The bank employee unlocks and opens the day gate to provide access if such a day gate is being used.
Once in the vault the bank employee then uses the appropriate guard key to place the guard lock on the customer's safety deposit box in an unlocked condition. This often involves extending the guard key in the key opening of the guard lock and turning the lock to the open position. The bank employee then typically observes the customer place their key in the customer lock. The customer then inserts the key in the key opening and turns it, thereby opening the lock. When the guard lock and the customer lock are both placed in the unlocked position, the safety deposit box door is enabled to be opened.
Typically once the customer has opened the safety deposit box, they remove a container held therein which holds the customer's items. The bank employee then escorts the safety deposit box customer to an appropriate area where the customer may privately access the contents of the container. Once the customer has finished, they will return to their safety deposit box, reinsert the container, close the safety deposit box door and lock the customer lock. This returns the safety deposit box to the locked condition. The customer then takes their key from the customer lock. The bank employee then returns the guard lock to the locked position, removes the guard key from the guard lock, and escorts the customer from the vault.
While this process for accessing a safety deposit box is effective, it is also labor intensive for the bank. As a result systems have been devised in which a customer is enabled to access the contents of their safety deposit box with less involvement of the bank's employees. These systems involve placing a guard key of each guard lock in connection with the lock in a fixed unlocked condition. In this way each safety deposit box door can be opened using only the customer key for the corresponding customer lock. The bank may manually or electronically limit access to the vault to those persons who have leased safety deposit boxes. Such persons may then act unsupervised to open their respective box, access the contents and close it when they are finished. This can sometimes be accomplished without involvement of bank employees.
A potential drawback associated with such an approach is that the unescorted user within the vault may engage in improper activities. This may include for example, attempting to open other safety deposit boxes that are not those of the user. This may be done through the use of one or more keys that have been fabricated and/or modified for this purpose. If the unscrupulous user is able to open a safety deposit box without authorization, they may take the valuable contents thereof without being detected. In addition it may be many months before the rightful owner of the safety deposit box has occasion to check the contents and discover that items have been taken. This long time period between when the crime is committed and when it is discovered, further makes it difficult to determine who is responsible for the criminal activity.
As a result improved systems may be beneficial.
It is an object of an exemplary embodiment to provide a banking system that is operated responsive to data that is included on data bearing records.
It is an object of an exemplary embodiment to provide a system that limits access to certain items or areas to authorized users.
It is a further object of an exemplary embodiment to provide a safety deposit box system that limits access to a particular safety deposit box only to the authorized user.
It is a further object of an exemplary embodiment to provide a system for controlling access to safety deposit boxes which can be retrofit to existing safety deposit boxes.
It is an object of an exemplary embodiment to provide a system for providing access to safety deposit boxes that may be operated on a self-service basis.
It is an object of an exemplary embodiment to provide a safety deposit box system that provides enhanced security.
It is an object of an exemplary embodiment to provide a method of operation for a safety deposit box system.
Further objects of exemplary embodiments will be made apparent in the following Detailed Description of Exemplary Embodiments and the appended claims.
The foregoing objects are accomplished in an exemplary embodiment by a system and method which is used in conjunction with the pre-existing safety deposit box system. The pre-existing system includes safety deposit boxes each of which has a door which controls access to an interior area of the safety deposit box. Each door of a safety deposit box has thereon a customer key lock and a guard key lock. In the exemplary embodiment a guard key common to multiple safety deposit boxes is required to unlock the guard key lock, and then a customer key which is unique to the particular safety deposit box is required to open the customer key lock.
In the exemplary embodiment an assembly is mounted in permanent relation to the door of each safety deposit box. The assembly includes a base and a body which is mounted in movable hinged relation relative to the base. The base includes a pair of apertures, each aperture corresponding to the area of the key locks on the respective door. The apertures provide respective key access to each of the customer key opening and guard key opening.
In the exemplary embodiment the body is positionable in a blocking position in which it overlies each of the key openings. The assembly further includes a cover lock which is operative to hold the body in a latched condition. In the latched condition the cover lock holds the body so that the key openings of the locks are inaccessible to a user.
In the exemplary embodiment the assembly further includes a wireless indicator. The wireless indicator, which in the exemplary embodiment is a radio frequency identification (RFID) indicator, is operative to provide signals that correspond to data that uniquely identifies a particular safety deposit box on which the assembly is mounted relative to the plurality of other safety deposit boxes housed in the particular vault.
In the exemplary embodiment a data bearing record in the form of an electronic key module is used to change the condition of the cover lock from the latched condition to an unlatched condition. Once in the unlatched condition, the body may be moved to expose at least one of the key openings of the particular safety deposit box. Once the body has been moved from the blocking position to the exposing position, a holder of the appropriate key for the safety deposit box may then unlock the customer lock. Further in some exemplary embodiments the guard lock may be held generally in the unlocked condition. This may be done using a bent key or other mechanism suitable for holding the guard lock in the unlocked condition.
The exemplary electronic key module includes a reader that is operative to read the RFID indicators on assemblies that are attached to safety deposit boxes. The electronic key module further includes at least one processor and at least one data store in operative connection with the processor. The exemplary electronic key module further includes an actuator in operative connection with the at least one processor. The actuator is operative to move at least one movable portion on the electronic key module.
In the exemplary embodiment a safety deposit box user wishing to access their safety deposit box operates a user terminal located at the bank and positioned externally of the vault. The user provides inputs through one or more input devices in operative connection with the user terminal. The user terminal is operative responsive to the one or more inputs provided by the user to verify that the user is an authorized holder of rights to a safety deposit box, and to determine the particular safety deposit box that the user is authorized to access. The at least one computer that is part of the user terminal is also operative to determine data corresponding to the RFID indicator on the particular assembly attached to the safety deposit box that the user is authorized to access. The at least one computer operates to include data in the at least one data store of the electronic key module that corresponds to the data that the electronic key module can read from the RFID indicator. The programming of this data into the at least one data store of the electronic key module is operative to enable the electronic key module to change the cover lock on the assembly attached to the door of the user's safety deposit box to an unlatched condition.
Responsive to the user identifying themselves in a satisfactory manner in accordance with the programming of the user terminal, the user is directed by at least one output device to take an electronic key module from a docking station adjacent to the user terminal. The user may be guided to the particular electronic key module through lights or other indicators. In the exemplary embodiment a locked day gate controlling access to the vault, is opened responsive to the user taking the electronic key module from the docking station. Of course in alternative embodiments the day gate may be controlled by an electronic lock or other means which the specific authorized user may open using the electronic key module or one or more other inputs that were used to identify themself to the user terminal. Of course these approaches are exemplary.
In the exemplary embodiment once the user has accessed the vault, the user is enabled to insert an extending portion of the electronic key module into an opening in the cover of the assembly attached to the door of the user's respective safety deposit box. In the exemplary embodiment the electronic key module includes a display thereon. The display operates responsive to the processor to output identifying numbers and/or letters which correspond to the user's safety deposit box. In the exemplary embodiment the safety deposit boxes are labeled with identifying indicia to facilitate the user finding their particular safety deposit box.
Upon insertion of the extended portion of the electronic key module into the opening in the body of the assembly, a reader of the electronic key module is operative to read signals from the RFID indicator included in the assembly. The at least one processor in the electronic key module is operative to produce data corresponding to the signals from the RFID indicator and compare the read data to data stored in the at least one data store. The at least one processor is operative to make a determination if the data read by the electronic key module corresponds to the stored data programmed into the at least one data store which corresponds to the safety deposit box that the user is authorized to access.
If the processor in the electronic key module makes a determination that the data read from the RFID indicator is the appropriate data for the safety deposit box the user is authorized to open, the actuator of the electronic key module moves a movable portion on the extending portion of the electronic key module. Movement of this movable portion in the exemplary embodiment is operative to engage a bolt of the cover lock as the electronic key module is being moved relative to the body. Movement of the bolt is operative to change the condition of the cover lock from the latched condition to the unlatched condition. Changing the condition of the cover lock enables the body to move relative to the base portion and the safety deposit box door. Movement of the body enables access to the customer key opening. The customer is then enabled to insert their key into the customer key opening and open the lock on their safety deposit box.
In the exemplary embodiment the assembly includes a catch. The catch is operative to hold the extending portion of the electronic key module in the opening of the body while the cover lock is in the unlatched position. This helps to minimize the risk that the electronic key module will be misplaced by the user or inadvertently placed in the interior of the user's safety deposit box.
In the exemplary embodiment the at least one processor in the electronic key module is operative to carry out a timing function. The timing function is operative to determine a time that the cover lock is opened. The timing function is also operative to determine the length of time that the electronic key module is engaged with the assembly. Data corresponding to this information is stored in the at least one data store of the electronic key module. Further in the exemplary embodiment, if the user places the electronic key module in an opening of an assembly, that the electronic key module is not programmed to open, the at least one processor records this information and the time thereof in the at least one data store. In this manner the exemplary electronic key module maintains a record of the use of the electronic key module as well as any potentially improper activity that the user has attempted to engage in.
In the exemplary embodiment the user who has completed their activity returns the container to their safety deposit box, closes the safety deposit box door, and turns and removes their key from the customer key lock. In the exemplary embodiment the customer's key is held in the key opening when the customer key lock is in the open position. This prevents the body from being moved to the blocking position at any time while the safety deposit box door is open. However, once the safety deposit box door has been re-secured and the customer key removed, the body may be moved relative to the base into the blocking position overlying the customer key opening. A member in operative connection with the catch is moved responsive to the body moving to the blocking condition and releases the catch. In addition moving the body to the blocking position is operative to engage the bolt which holds the base and the body in operatively engaged relation in the blocking position.
In the exemplary embodiment once the body is in the blocking position the user may remove the electronic key module from the assembly, and exit the vault. The user then returns the electronic key module to the docking station. The at least one computer connected to the user terminal communicates with the electronic key module to recover the data stored in the at least one data store therein. The at least one computer is operative to record information about the time that the user accessed their safety deposit box and how long the module was engaged with the assembly as well as other information recorded in the data store, such as data associated with attempts to improperly open other boxes. Of course these approaches are exemplary.
The exemplary system further includes other features which may be used to help assure proper operation of the system. For example the at least one processor in the electronic key module is operative to carry out a program that determines conditions that are likely indicative of a failure to return the electronic key module after use. For example the processor may execute a timing function which is operative to cause an audio output device in the electronic key module to begin providing an audible output if the electronic key module is not returned to the docking station within a particular time after it is disengaged from the assembly. Alternatively or in addition, wireless signal output devices may be provided in the area of the safety deposit boxes. These output signals may be received by the electronic key module and used by the processor to determine that its current position is within an authorized area of use. Upon the failure of the electronic key module to sense these wireless signals, the at least one processor may cause the electronic key module to output audible signals. Alternatively or in addition, a wireless signal generator may be positioned in an area through which bank customers must pass to exit the bank or other area within the bank. The electronic key module may operate in response to sensing such signals to output audible or other signals. Therefore if a user has failed to return the electronic key module to its docking station and attempts to exit the bank, the electronic key module provides an audible reminder to return the electronic key module to its docking station. Of course these approaches are exemplary.
In still other exemplary embodiments the computer operatively connected to the user terminal may be in operative connection with one or more surveillance systems. The surveillance systems may be operative to observe and record user activities when operating the system. Recording images and other data related to such operation may minimize the risk of improper activities.
In still other exemplary embodiments the system may be connected to at least one computer which is operative to maintain data regarding authorized users of the system and the regular activities related to safety deposit boxes. Such exemplary systems may be operative to determine payments owed by users of the system. Such a computer may be operative to assess charges for use of the system, such as by sending invoices deducting rental amounts from user accounts or other activities as appropriate.
In still other exemplary embodiments the system includes a hand held device that is operatively connected to a computer. The computer is operative to cause a vault gate lock to change from a locked condition to an unlocked condition in response to receiving an input associated with an authorized individual from the hand held device.
It should be understood that the features and methods described are exemplary, and in other embodiments other approaches may be used within the scope of the claimed invention.
Referring now to the drawings and particularly
In the exemplary embodiment each safety deposit box door has attached thereto an assembly 26 which is described in greater detail hereafter. The assembly is selectively operative to block access to at least one of the key lock openings of the guard lock and the customer lock. The assembly is operatively engageable with an electronic key module 28, also described in greater detail hereafter. The electronic key module is operative to enable the assembly to change condition so as to enable an authorized user to have key access to a key lock opening of the respective safety deposit box lock.
The assembly 26 of the exemplary embodiment includes as shown in
In the exemplary embodiment the base 30 further includes a shroud 42. Shroud 42 generally overlies the base. A fastener 44 extends through the shroud and engages a fastener opening 46 of the plate. In the exemplary embodiment the shroud includes a customer key access area 48 which provides access to the key opening of the customer lock 24. In the exemplary embodiment the shroud overlies the guard key lock 22 and the bent key 40. Of course this approach is exemplary and in other embodiments other approaches may be used.
The exemplary shroud 42 further includes hinge pins 50. Hinge pins 50 engage corresponding recesses in body 32. The hinge pins are made such that they generally permanently attach the body 32 to the shroud 42 in movably mounted relation. As can be appreciated, the hinge formed by the hinge pins in engagement with the body enable the body to be rotationally moved relative to the base. Such movement enables the body to be moved between a blocking position in which the body overlies the key opening of the customer lock and an exposing position wherein the body is disposed from the customer key opening. In the exposing position of the body the customer is enabled access to the customer lock by inserting their key in the key lock opening. Of course it should be understood that this approach is exemplary and that other approaches can be used in other embodiments.
As shown in
The exemplary body portion further includes a catch. The exemplary catch is operative to hold the extending portion of the electronic key module in the opening when the key module has been used to place the assembly and cover lock in an unlocked position. The exemplary catch includes a member 64. Exemplary member 64 is rotatably movable about a pivot 66 on each side as best shown in
The exemplary form of the member 64 includes an extending surface 68. The extending surface 68 is operative to engage the bolt 56 and hold it in the retracted position once the bolt has been moved to such position and the body has been moved away from the blocking position. This is represented in
In the exemplary embodiment the member 64 further includes internally extending projections 72 best shown in
In the exemplary embodiment of the electronic key module 28, the housing 74 includes an opening 80 therein. Opening 80 provides visual access to a display 82 as later discussed. Further and as best shown in
The electronic key module 28 further includes a rechargeable battery 90 which is operative to provide a suitable source of power to the circuitry including the processor 86, the reader 88, and the module display 82.
The exemplary electronic key module further includes a movable portion 92. The movable portion 92 is in operative connection with an actuator 94. The actuator 94 is operative to change the position of the movable portion so that it extends outward in an actuating position from the extending portion. In the exemplary embodiment springs 96 operate to bias the movable portion to maintain the movable portion in a retracted position within the extending portion of the module. However, at appropriate times as the extending portion engages a body within the opening, the at least one processor is operative responsive to data read by the reader, to cause the movable portion to move so as to engage the bolt 56. As a result, the extending portion operates to change the condition of the cover lock from a latched condition in which the body is held in overlying relation of the customer key opening, to an unlatched condition in which the body can be moved relative to the base and the customer key lock opening may be accessed by inserting a key therein. Of course it should be understood that this approach is exemplary and that other approaches can be used in other embodiments.
The exemplary form of the electronic key module 28 further includes an audio output device 98. The audio output device may be operative in a manner like that subsequently discussed herein. In the exemplary embodiment the audio output device is operative to indicate that the electronic key module is operative to change the condition of the cover lock. The audio output device may also indicate that the electronic key module is not inserted in an assembly that it is programmed to unlatch. Alternatively in some embodiments the audio output device may be operative to indicate when the electronic key module has been taken out of its authorized area of operation. Of course these functions are exemplary.
Further in the exemplary embodiment circuitry 86 may also include a plurality of sensors, such as represented by sensor 100. Such sensors may include contact sensors, level sensors, inductance sensors or other suitable sensors that provide information that is usable by the at least one processor in the electronic key module. In the exemplary embodiment the sensors include at least one orientation sensor that is operative to sense the orientation of the key module relative to vertical. Such sensors may be operative to provide information to the at least one processor which causes the processor to output indicia through a display. For example the at least one processor may operate responsive to program data stored in the at least one data store, to cause the output of messages to a user to indicate that they have the key module in a proper (or improper) orientation. Such messages may be helpful in facilitating the user's operation of the system. Of course these approaches are exemplary and in other embodiments other approaches may be used.
As shown in
In the configuration of the systems of the exemplary embodiment, each body 32 has included thereon a corresponding wireless indicator schematically indicated 114 in
In alternative embodiments the RFID indicators may include programmable RFID or other programmably changeable indicators. Such programmable indicators may be programmed to output distinctive signals responsive to initial programming that is carried out either before or after the indicators have been installed on the corresponding safety deposit boxes. This may be done through a suitable programming device which is operatively engageable with the indicators. In some embodiments the electronic key module may be operative to operatively engage the wireless indicators and to carry out such programming functions.
Of course it should also be understood that in other embodiments other forms of indicators may be used to identify the particular safety deposit box. These indicators may include various types of wireless or contact type indicators. The nature of the indicators, however, in embodiments would be operative to indicate the identity of a particular safety deposit box such that access to the customer key opening on such box are restricted to an authorized user.
In operation of a system including features of the exemplary embodiment, each of a plurality of safety deposit boxes is fitted with an assembly 26 of the type previously described. Such assemblies may be fitted on the safety deposit boxes by attaching the base to the door through the use of an adhesive or other suitable permanent fastening mechanism. For each door a bent key or other suitable device for holding the guard lock 22 in an open condition is installed in the guard lock opening. A shroud 42 is then installed over each bent key or other device.
The body of each assembly has included therein a wireless indicator which is operative to provide signals which correspond to the identity of the particular respective safety deposit box. The programming of the wireless indicators of the exemplary embodiment enables the respective cover lock to change between the latched and unlatched conditions responsive to insertion of an appropriately programmed electronic key module in the opening of the body.
It should be appreciated that the exemplary embodiment can be used in connection with existing safety deposit boxes. Because the assemblies are installed externally of the box door, the financial institution can install the system without having to open the safety deposit boxes. As a result, the system can be installed without contacting the current users of the safety deposit boxes or requiring them to come to the bank and open their safety deposit boxes. Instead the system may be installed by the bank without any disruption or contact with the safety deposit box users. When a user next visits the bank they will be able to use the system and adapt from the prior approach which may have involved being escorted by bank personnel, and to access their safety deposit box on a self-service basis.
The operation of the exemplary embodiment is now further described with reference to a system which is schematically shown in
In the exemplary embodiment the setup of a system involves including in the at least one data store 118, data corresponding to persons who have rented safety deposit boxes, corresponding safety deposit box information and data corresponding to the wireless indicators installed or programmed on each respective safety deposit box. The setup of the exemplary system also includes storing in the at least one data store for each respective user, identifying information which uniquely identifies the respective user. This may include for example, storing data which is encoded on the customer's debit card which is used by the customer for accessing accounts with the bank. The data stored for the respective customer may also include a secret number such as a personal identification number (PIN). This secret number may be the number that the customer uses in connection with their debit card, to debit their account for purchases of goods or to get cash from an automated banking machine, or may be a secret number or set of alphanumeric characters selected by the customer solely for banking purposes such as online banking activities. Of course this approach is exemplary and other approaches can be used in other embodiments. Customer identifying data in exemplary embodiments may also or alternatively include other data such as the customer's social security number, the customer's mother's maiden name, digits of the customer's phone number or other data which can be generally uniquely associated with the customer. Alternatively or in addition, customer identifying data may include the signature of the customer and/or customer biometric data. Such biometric data may include fingerprint data, iris scan data, retina scan data, facial appearance data or other data that can be used through operation of a computer to identify the customer. Of course as can be appreciated, other items of data may be used as well as combinations of certain items of data, for identification purposes.
In the exemplary embodiment input devices 120 are used to receive data from the customer that is usable to identify the particular customer. As shown in
As shown in
Further as shown in the exemplary embodiment, computer 116 is in operative connection with the docking station 102. This enables the computer 116 to communicate with the electronic key modules that are engaged with the docking station. The computer is enabled to selectively program the data stores in the electronic key modules. In addition the communication between the docking stations and the computer enables the electronic key modules to download information that is stored in their respective data stores to the computer. This may include information of the type previously discussed. Such information may include for example, a time that a particular safety deposit box assembly is accessed and/or a time period that the safety deposit box door was accessible. Alternatively or in addition the data may include safety deposit boxes that were attempted to be accessed unsuccessfully by the electronic key module. Other information may include data related to the time period between when the electronic key module was disengaged from the safety deposit box, and when it was returned to the docking station. Of course other embodiments may include other data which is stored and retrieved from electronic key modules.
The at least one computer of the exemplary customer terminal 126 is in operative connection with one or more networks schematically indicated 128. In the exemplary embodiment the network is a local area network within the bank or other entity which operates the system. Of course it should be understood that in other embodiments wide area networks or other types of network connections may be used.
Connected in the exemplary network is a gate lock 130. Gate lock 130 is operative to control the locked or unlocked condition of a gate 132. In an exemplary embodiment the gate lock 130 is electronically controllable.
In an exemplary embodiment the gate 132 comprises a day gate that is used to control access to a vault 134 when the main vault door is open. As previously discussed, some embodiments may also include an input device 136. The input device 136 may be actuated by customers in order to unlock the vault gate 132. Input device 136 may operate in some embodiments in response to the electronic key module. Other embodiments may operate in response to card, personal identification number (PIN), biometric or other inputs provided by the user that are operative to enable the system to verify that the person unlocking the day gate is an authorized user. Of course these approaches are exemplary and in other embodiments other approaches may be used.
In the exemplary embodiment the network 128 is also in operative connection with a computer 138. Computer 138 operates as a digital video recording device. In the exemplary embodiment the computer 138 is in operative connection with a plurality of cameras 140. In an exemplary embodiment computer 138 may operate in a manner described in U.S. Pat. No. 6,583,813 the disclosure of which is incorporated herein by reference.
In the exemplary embodiment, the computer 138 may be programmed in the manner of the incorporated disclosure to operate each of the plurality of cameras as part of programmed sequences. This may include for example capturing images from cameras having a field of view that includes users operating the customer terminal 126. Alternatively or in addition the computer may operate to cause the capture of images of individuals opening the gate and/or closing the gate. Embodiments may provide for the capture of images of the user in the vault accessing the safety deposit boxes. In some embodiments the electronic key modules may include cameras. Data corresponding to images captured by the camera may be stored in the data store of the module, and then uploaded to the computer 138 when the module is engaged with the docking station. Of course capturing images in these circumstances are exemplary, and in other embodiments other approaches may be used.
In some exemplary embodiments the electronic key module may include one or more wireless output devices. Such wireless output devices may provide signals which are operative to cause images to be captured from separate cameras. Such an output device may include an RF signal transmitter, for example. Such signals may include for example, signals which are indicative of the electronic key module having been operated to open an assembly. In other embodiments the electronic key module may provide an output to indicate that the module has been used to attempt to open an assembly which it is not currently programmed to open. In still other embodiments the electronic key module may provide a position signal which causes the computer 138 to operate to capture images from cameras in the locale of the key module wherever it moves throughout the bank or other institution. In still other embodiments the electronic key module may include an alarm button or other input device which the user can actuate. The alarm button may be used to send a wireless signal which causes bank employees to provide assistance to the user, to sound an alarm or to take other actions. In some embodiments the alarm signal may also operate to cause the computer 138 to capture numerous images of the user, the vault area, the area of the electronic key module or other programmed areas. Of course it should be understood that these approaches are exemplary.
As represented in
For example in some exemplary embodiments computers 142 may be used in conjunction with appropriate input and output devices to establish the necessary set up for new users of safety deposit boxes. For example an operator may review stored data to determine what safety deposit boxes are available for rental from the bank. The user may also provide input information related to the new user, including identifying information that can be used to identify the user at a later time when they wish to access their safety deposit box. The information may also include the term of the rental, the charges, arrangements for invoicing the user, and other information that is appropriate. The information established through the operation of computer 142 may be downloaded through the network to the database 118 in the customer station 126.
In still other embodiments one or more computers operatively connected to computer 142 may be operative to invoice safety deposit box users for use of their box. This may include for example causing the generation of a periodic invoice to the user which the user is required to pay to maintain their safety deposit box. Further the at least one computer may be used in conjunction with other devices to track the receipt of payments by the user for their safety deposit box. Further if the user has failed to make payment under their rental agreement for the box, the at least one computer may operate in accordance with its programming to generate the appropriate notices to the user that their box is going to be accessed, the contents removed, and the box rented to another person. Further in some exemplary embodiments the at least one computer may operate to make automatic payment deductions for the rental of the safety deposit box from a selected account of a user. Of course these approaches are exemplary and in other embodiments other approaches may be used.
It should be understood that the system schematically shown in
The operation of the exemplary system with regard to a user session is now described. A user who has rented a safety deposit box and wishes to access the contents, will enter the bank or other institution operating the system. In some cases, the system including the exemplary key access assemblies may have been installed since the last time the user has accessed their safety deposit box. In this situation the user may not be familiar with the ability to operate the system and access their safety deposit box on a self-service basis. In this case, the user will approach a bank employee and inquire about accessing their safety deposit box. Such a first time user will generally be taken by the employee to the customer station and the operation of the system demonstrated to them. Further in the initial session the bank may operate the system to gather additional identifying information that the user may want to have stored in the system. This information will be used in the future for purposes of enabling the user to access their safety deposit box. Of course a user who has previously used the system will not require such attention, and may operate the system by proceeding directly to the customer terminal upon entry into the bank.
In an exemplary embodiment, for the first time user there will often be explained to the user that they can now access their safety deposit box on an unattended basis without the involvement of bank personnel. At the customer terminal the user can provide one or more inputs which cause the system to provide outputs which explain the system. In an exemplary embodiment the at least one computer 116 can provide video and audio outputs to the user that explain the operation of the system. Once a first time user has been explained the operation of the system they are asked to provide one or more inputs that will identify them to the system. This may include in exemplary embodiments, the user typing their name using a keyboard, touch screen, touchpad or other input device in operation connection with the computer 116. Alternatively such inputs may include instructing the user to swipe their ATM card in a card reader in operative connection with the computer. Alternatively or in addition, the user may be asked to input their personal identification number (PIN) through an input device.
In still other embodiments the user may be requested to provide additional inputs or alternative inputs. These may include for example input of the customer's mother's maiden name, the last four digits of their phone number or other inputs. If the bank has previously captured a thumbprint or fingerprint scan of the user, the user may be requested to provide such an input by placing their thumb or finger on a scanning device. In still other embodiments the user may be requested to place their customer key onto a scanning device. The computer may operate to scan the customer key and determine information concerning the user based on the configuration of the key that can be used to open the safety deposit box. In still other embodiments the customer may include speech recognition software that enables the computer to receive and recognize verbal inputs. Of course these approaches are exemplary.
In some embodiments the programming associated with the computer 116 may operate to capture additional inputs from the user when the user operates the system for the first time. These inputs may be used in the future to identify the authorized user. These may include additional numbers, values, biometric data or other information. The computer in the future would then ask the user to input these items through at least one input device in order to access their safety deposit box.
Once the user has identified themself at the customer terminal 126, the computer 116 is operative to determine the safety deposit box associated with the user. The computer also determines the data associated with the wireless indicator that has been applied to the assembly on the door of that box. The computer is operative to program one of the electronic key modules 28 in the docking station 102 with the data that is necessary to cause that electronic key module to open the cover lock 54 of that particular assembly.
In exemplary embodiments the at least one computer 116 will also be operative to store information about the user's request and the fact that they have initiated a session, as well as the time and date thereof. Other pertinent information may also be stored through operation of the at least one computer. Of course these approaches are exemplary.
After the computer 116 has operated to cause the at least one data store in the electronic key module to be programmed with the appropriate data, at least one output is provided to the user through the display 124 or other output device of the customer terminal instructing the user to remove the appropriate electronic key module from the docking station. The computer may also cause the indicator 106 associated with the appropriately programmed electronic key module to change color, flash or otherwise indicate the electronic key module that the user is supposed to take. The user is also instructed through outputs from the customer terminal to proceed to the day gate 132.
In some exemplary embodiments the at least one computer 116 is operative to sense the taking of the electronic key module from the docking station. Responsive to sensing the taking of the electronic key module the at least one computer is operative to change the condition of the vault gate lock 130 from the locked to the unlocked condition. This enables the user to open the gate 132 and enter the vault.
In other embodiments the system may operate to require the user to provide an appropriate input through input device 136 adjacent to the gate to open the gate. This may include insertion of the electronic key module into an appropriate opening in a device. Alternatively it may include requiring the user to input a card, input a PIN, provide a thumbprint, provide a verbal input, or otherwise provide another input that the computer 116 can verify is associated with the authorized user. Such an input upon being verified through operation of the computer, causes the gate lock to change to the unlocked condition. Of course it should be understood that this approach is exemplary and that other approaches can be used in other embodiments.
Also in the exemplary embodiments as previously discussed, the activities carried out by the computer, the day gate, the electronic key module or other components of the system may provide triggering events which are operative to cause the computer 138 to cause the capture of images from one or more cameras that have a field of view that includes of activities that are ongoing in the course of the transaction.
In the exemplary embodiment once the user has entered the vault they may proceed to their safety deposit box. In some embodiments the electronic key module may facilitate finding their box by providing one or more outputs through the display which correspond to the identifying indicia on the body which overlies the key openings. In some exemplary embodiments the output is provided in an orientation which corresponds to the indicia on the box. As can be appreciated, in the exemplary embodiment the extending portion of the electronic key module can be inserted into openings in either a left-hand or right-hand orientation. The programming of the at least one processor of the exemplary embodiment is operative to cause the display to output the visual indicia in an orientation that corresponds to that presented on the safety deposit box. Further in exemplary embodiments the at least one sensor that senses the orientation of the electronic key module is in operative connection with the at least one processor and causes the processor to output through the display instructions to the user which may facilitate the user's use of the electronic key module. For example if the user has the electronic key module in an improper orientation for purposes of insertion into the corresponding opening, the at least one processor is operative to cause the display to output instructions, arrows or other indicia. This directs the user to place the electronic key module in the proper orientation.
In still other embodiments the at least one sensor may operate to cause the display of the electronic key module to reverse the orientation of the indicia being output based on the current orientation of the electronic key module.
In still other embodiments the at least one processor of the electronic key module may cause the audio output device to provide outputs which facilitate the use of the electronic key module. These may include for example simulated speech outputs. These simulated speech outputs may be used to help the user locate their safety deposit box and to insert the extending portion into the assembly. Such simulated speech outputs may include not only directions on how to insert the extending portion of the electronic key module, but may also include instructions on locating the user's box. This may include for example directions on where the box is located within the array of safety deposit boxes. It may also indicate other identifying features associated with the safety deposit box.
In still other embodiments additional provisions may be made for guiding the user to the box. For example in some embodiments the at least one computer 138 may include data corresponding to positions of all of the plurality of safety deposit boxes within the vault. The at least one computer may have in operative connection with a camera or separately, a selectively movable pointing device which may be used to help guide a user to their particular safety deposit box. This may include for example, a laser pointing device that is mounted on a camera mount or similar device that is operative to pan and tilt the laser pointing device. Such a device may then be operative to project a laser dot or other appropriate indicator onto the specific safety deposit box which the user is to access. Such an approach may be useful in guiding the user specifically to the particular box of the user. Further in the exemplary embodiment once the user has accessed the body, the at least one computer may operate to cease pointing to the box. This may be done responsive to wireless signals output through operation of the electronic key module. Such wireless signals may be of any convenient type that can be sensed in the vault area. These may include radio signals, IR signals, other wireless signals or other suitable signals that may be output from the electronic key module.
Once the user has reached their particular safety deposit box, they extend the extending portion of the electronic key module into the associated opening. As this is done the reader 88 in conjunction with the at least one processor in the electronic key module is operative to cause output RF radiation to be applied to the wireless indicator 114 in the assembly 26. The reader is then operative to receive one or more signals produced by the wireless indicator. The at least one processor is operative to analyze the signals, and to make a determination that the signals that are being received by the reader correspond to the data that has been programmed in the at least one data store of the electronic key module. In some embodiments such determination may include a direct comparison of data read from the wireless indicator to data stored in the data store. In other embodiments the at least one processor may analyze the data to determine other mathematical relationships. In still other embodiments encryption and decryption of signals may be associated with making the determination. Of course these approaches are exemplary and in other embodiments other approaches may be used.
If the wireless indicator associated with the particular assembly in which the extending portion has been inserted does not correspond to the programming of the electronic key module, the cover lock of the assembly in which the key module has been inserted does not unlock. Further in an exemplary embodiment, the electronic key module is operative to output an audible output which is indicative that the electronic key module has been inserted in an incorrect assembly. This may include appropriate tones, simulated speech or other appropriate outputs. Further in the exemplary embodiment, the at least one processor is operative to record the information concerning the wireless indicator associated with the box that was attempted to be opened. In exemplary embodiments other information may also be stored such as the time of such insertion, the duration of such insertion or other information that may be useful to the system.
As can be appreciated, in the exemplary embodiment insertion of the extending portion of the electronic key module in an assembly it is not currently programmed to open, does not change the condition of a cover lock. This is because the extending portion is enabled to pass through the leg portions 58 of the bolt 56 as well as between the projecting portions 70 of the member 64. Of course because in the exemplary embodiment the electronic key module is not effective to unlock the cover lock of an assembly for which it has not been programmed, the catch does not engage the extending portion the user is free to remove the extending portion from that assembly and attempt to open the correct assembly. Of course this approach is exemplary and in other embodiments other approaches may be used.
In an exemplary embodiment even after a user has inserted the extending portion of the electronic key module into an incorrect assembly, the user is enabled to remove the electronic key module and insert it into another assembly. Of course users will generally not have attempted to open an improper assembly before proceeding to the safety deposit box for which the unit has been programmed. However, in the exemplary embodiment if the user happens to make a mistake it will not preclude them from using the electronic key module to open the correct assembly. However, in other embodiments the at least one processor in the electronic key module may be programmed to disable further use of the module after an improper attempt is made, or another form of improper activity is determined as possibly occurring through operation of the at least one processor in the module.
In the exemplary embodiment when the user inserts the extending portion 76 into the opening 54 of the proper assembly, the reader is operative to read the signals produced by the wireless indicator 114 of the assembly. In this example the signals from the indicator correspond to data stored in the at least one data store of the electronic key module. The processor is operative to make a determination that the read data corresponds to the stored data and that the extending portion is being inserted into an assembly that should be opened.
In the exemplary embodiment the at least one processor is operative to cause the actuator 94 in the electronic key module to cause the movable portion 92 to extend outward from the extending portion 76. This occurs at a time when the extending portion is extended within the opening and the movable portion 92 is operative to engage a projection or other feature on an interior surface of bolt 56. Such engagement is operative to cause the bolt 56 to move to the left as shown in
Further, in the exemplary embodiment as the bolt 56 moves to change the condition of the lock, the member 64 pivots counterclockwise as shown in
Of course it should be understood that the structures described are exemplary and in other embodiments other structures for the cover lock and catch may be used. These may include for example, numerous types of projections, recesses, transmitting devices, engaging devices and structures or other types of devices that cooperatively act to change a lock operatively connected to the body from a position where the body blocks access to the key opening to a condition in which the key opening can be accessed. For example some embodiments may include structures which carry out one or more lock opening actions while a key module is stationary as opposed to moving. Likewise rather than projections and recesses of the type described in the exemplary embodiment, alternative arrangements of members may be used to provide the functions of opening a lock and providing a catch that is operative to hold the assembly and an electronic key module in engaged relation. Further as can be appreciated, numerous different types of configurations of electronic key modules, locks, openings, actuators and the like may be used. These may include electronic key modules that operate without physical contact or that provide other forms of engagement from those described in connection with the exemplary embodiment. Those having skill in the art may devise numerous other embodiments that employ the principles described herein.
In the exemplary embodiment the movement of the cover lock from the latched to the unlatched condition and the engagement of the catch with the extending portion of the electronic key module, enables the body 32 to be moved relative to the base about the hinge connection associated with pins 50. Body 32 is rotated relative to the base 30 so that the key opening of the customer lock 24 is accessible through the customer key access area 48 of the base portion. As can be appreciated in the exemplary embodiment the shroud 42 of the base portion overlies the guard lock 22 and associated bent key or other structure so that the user cannot tamper with the status of the guard lock which remains in the open position.
In the exemplary embodiment the customer is enabled to use their customer key and insert it in the customer key lock 24. Turning the key in the customer key lock changes the condition of lock 20 so as to retract a bolt therein that holds the door 16 of the safety deposit box in the closed condition. The retraction of the bolt enables the customer to open the door and access the interior area of the safety deposit box. Generally upon accessing the interior of the safety deposit box the user removes a container therefrom which holds the user's valuable articles. The user can then take the container and perform their activities in another area of the vault such as on a table or in a connected private room. Of course these approaches are exemplary.
It should be understood that as previously discussed, embodiments of the electronic key module may provide audible or other wireless signals at times during the box opening activity. Such signals may include an appropriate signal when the electronic key module has determined that it is engaged with the safety deposit box that it is programmed to open. Alternatively and in addition, the signals of the audible or RF type from the electronic key module may be received by a suitable receiver and cause various other actions such as the capturing of images through cameras positioned in the vault area. Likewise such signals may be used to turn off systems like those previously described, which are operative to guide the user to their particular safety deposit box. Additionally the electronic key module may operate to generate wireless signals when it is operatively disengaged from a safety deposit box it has been used to open. Exemplary electronic key modules may also output signals when they are operatively engaged with a safety deposit box that the module is not currently programmed to open. A recording device may capture one or more images in response to such signals from cameras that have a field of view that includes the module at the time such signals are output. Of course these approaches are exemplary.
Also as previously discussed, in the exemplary embodiment the at least one processor of the electronic key module is operative to cause to be recorded in the at least one data store, data corresponding to certain parameters, values and other data that the electronic key module has been programmed to record. These may include for example, the time that the electronic key module is engaged with the assembly. The electronic key module may also record an elapsed time that the electronic key module is engaged so as to maintain the body in an exposing position. Of course in other embodiments other parameters or information may be recorded depending on the programming of the system.
In the exemplary embodiment the hinged nature of the body relative to the base as well as the hinged character of the safety deposit box doors, enable the electronic key module to remain engaged with the catch while not restricting access to the interior of the safety deposit box. This can be seen for example with regard to
In the exemplary embodiment after the user has completed the activities related to the contents of their safety deposit box, the user returns the container to the interior area. The user may then close the door 16 and secure the door by turning the customer key in the customer key lock. This causes the bolt to extend from the lock 20 and hold the door in the closed position.
With lock 20 again in the locked condition, the customer is able to remove their key from the key opening. The customer may then move the body relative to the door from the exposing position to the blocking position in which the body overlies the customer key opening. In the exemplary embodiment as this occurs the projecting portions 70 engage the base and then move upward as shown in
Further in the exemplary embodiment movement of the member 64 causes the projections 72 to disengage from the recesses 78 in the extending portion 76 of the electronic key module. As a result the catch no longer holds the electronic key module engaged in the opening. The electronic key module can thereafter be removed by retracting the extending portion 76 out of the opening 54.
In some embodiments as the electronic key module is disengaged from the assembly, outputs may be provided by the module to accomplish certain functions. For example in some embodiments audio outputs may be provided to indicate to the user the disengagement of the electronic key module. Further RF or other signals may be operative to cause the computer 138 to capture images from various cameras. Additional actions may occur as a result of such disengagement depending on the configuration and operation of the particular system.
Some exemplary embodiments of the system may enable the user to open the cover lock again after it has been resecured without returning the electronic key module to the docking station. This may enable a user to reopen their safety deposit box in the event they forgot to perform some activity. Other embodiments may operate in accordance with the programming of the at least one processor in the electronic key module, to only enable the opening of the assembly once. As a result in this circumstance if a user wishes to reopen their safety deposit box, they need to complete the current session and start another. Embodiments may operate in either manner depending on the programming associated with the electronic key module. In exemplary embodiments where a subsequent opening of the cover latch is permitted during a session, the at least one processor in the module may be operative to record information concerning each such opening, as well as the time and/or duration thereof. Of course it should be understood that these approaches are exemplary.
In some embodiments the disengagement of the electronic key module from the assembly is also operative to cause the at least one processor in the electronic key module to begin determining whether the conditions are such that the electronic key module has been removed from the proper area of operation. This might occur for example, if a user forgets to return the electronic key module to the docking station. In some embodiments the at least one processor operates at least one timing function therein to determine a time period that has elapsed since the electronic key module was disengaged from the assembly. For example in some embodiments the at least one processor may begin to give audible outputs or other signals in the event that the electronic key module has not been engaged with the docking station within a particular time after being disengaged from the assembly.
In other embodiments the at least one processor of the electronic key module may operate to provide indications that it has been removed from its area of use based on other factors. For example in some embodiments a wireless signal may be provided in the area of the safety deposit boxes. The electronic key module circuitry and the processor therein is operative to receive the signal. If the electronic key module is taken from the area of operation so that the signal is no longer detected at an adequate strength, the electronic key module may provide audible or other outputs to indicate its position and that it needs to be returned to the docking station.
In still other exemplary embodiments a facility may provide signals in other areas such as near the facility exit. In such embodiments the electronic key module may operate responsive to the processor therein to cause outputs to be provided in the event a user attempts to move the electronic key module into an area adjacent to the exit of the facility. Further in still other embodiments the electronic key module itself may output signals which are detected by detectors throughout the facility. In the event the detectors in the facility and/or signals caused to be output from the electronic key module indicate that there has been a determination by the at least one processor, that the electronic key module is being removed from its area of use, appropriate signals can be given. Of course it should be understood that these approaches are exemplary.
In the course of a normal transaction of the type previously described, the user having disengaged the electronic key module from the assembly will exit the vault area through the gate. Generally the gate will not need to be separately unlocked by a user wishing to exit the vault, however an unlocking mechanism for this purpose may be provided in some embodiments. The user having exited the vault will then return the module to one of the slots in the docking station 102. The return of the electronic key module to the docking station is sensed in the operation of the at least one computer 116, and the computer then operates in accordance with its programming to communicate with th electronic key module through the connectors and mating connectors which are engaged when the module has been returned to its docking station. In exemplary embodiments this communication may include retrieving from the electronic key module information about unsuccessful attempts to open assemblies, successful opening of assemblies, time periods associated with opening and closing of assemblies and other information that the at least one processor in the module has been programmed to store in the at least one data store.
In the exemplary embodiment the at least one computer 116 is operative to record this information along with information about the particular user and the session involved. Further in the exemplary embodiment the computer 116 may operate to cause the computer 138 to capture images related to the return of the electronic key module to the docking station.
In some embodiments the user returning the electronic key module may also be requested to provide other inputs through the input devices 120 of the customer terminal 126. These inputs may be operative to close the session. However, in other alternative embodiments the return of the electronic key module itself may be operative to close the session.
It should be understood that in the embodiment described, data is stored with regard to each session so that more careful tracking may be accomplished. This may be desirable for example if at a future date a safety deposit box user discovers that items are missing from their safety deposit box. In such circumstances the bank using the stored data, images and other information may determine when each safety deposit box was accessed or was attempted to be accessed. Through the use of this information the bank may be able to determine each instance of access as well as the identity of persons involved. Further as can be appreciated from the incorporated disclosures, such information and images may be accessed from locations disposed from the particular financial institution at which the system is installed. This may enable law enforcement officials or others to determine instances of activity related to particular safety deposit boxes. Of course these approaches are exemplary and in other embodiments other approaches may be used.
For purposes of illustration of the exemplary embodiment, the hand held device 150 (e.g., cell phone, smart phone, etc.) will be referred to as a phone. However, it should be understood that other types of hand held devices could be used as well. For example, the hand held device 150 can be any of a personal device, portable computing device, personal digital assistant (PDA), pager, notebook computer, laptop computer, Blackberry device, BlueTooth device, a mobile communication device, iPod®, iPhone®, iPad®, tablet device, slate device, e-reader, MP3 device, electronic wallet, GPS device, RFID device, or other suitable hand held device. The hand held device 150 can also be viewed as a mobile device or a portable device.
The hand held device 150 can have a display screen on which user data can be provided (displayed) in the form of an image. For example, an encrypted image can be displayed in the form of machine-readable data, such as a bar code (e.g., a two-dimensional or three-dimensional bar code). The customer terminal 126 can include at least one reader that is operable to read image data displayed by the hand held device 150. A (bar code) image read from the hand held device 150 can constitute user input of customer-identifying data which causes the user to be recognized by the system and/or causes the gate lock 130 to be unlocked.
An RFID device can be used to input data to the customer terminal 126. The customer terminal 126 can include an RFID reader. The hand held device 150 can include the RFID device. The RFID device can include a programmable RFID tag that includes user identification data and/or gate-unlocking data. For example, the hand held device 150 can be an RFID card.
The customer terminal 126 can also include a facial appearance (image) reader (e.g., a camera) that is operable to read (e.g., capture) user data that is provided in the form of facial image data. Facial recognition software can be used to to identify/verify a person as an authorized user of a safety deposit box. That is, facial appearance data can comprise user identification data and/or gate-unlocking data which is input to the terminal by the user by allowing their face to be imaged at the terminal. The facial recognition software can be on the computer 116 of the customer terminal 126 or on a remote computer that is in operative connection with the computer 116. The computer 116 is operable to access authorized user facial data that is stored in at least one data store. Alternatively, facial image data corresponding to the user's face can be stored in the phone 150. An image reader of the terminal 126 is operable to read facial image data that is output through the phone display 152. Of course other user data may be required to be provided before the user is recognized as an authorized user.
The customer terminal 126 can also include a reader operable to read user data (e.g., text data, image data, magnetic, RFID, etc.) from a card, such as a driver's license. The driver's license data can comprise information that allows the user to access their safety deposit box. Again, the user data can include user ID data, gate-unlocking data, and/or other data needed to permit the customer to access the safety deposit box.
The set up of the exemplary system includes storing in the data store 118 data corresponding to persons who have rented safety deposit boxes, data corresponding safety deposit box information, and data corresponding to the wireless indicators installed or programmed on each respective safety deposit box. The data store 118 may also include data corresponding to personnel of the financial institution in which the vault is located and/or who are authorized to enter or access the vault. The data store 118 can be local or remotely located.
The setup of the exemplary system also includes storing in the data store 118 for each respective authorized user, identifying information which uniquely identifies the respective user. This may include for example, storing data related to a select value such as a secret value such as a personal identification number (PIN), which is associated with an account number on the customer's debit card which is used by the customer for accessing accounts with the bank. This secret number may be the number that the customer uses in connection with their debit card, to debit their account for purchases of goods or to get cash from an automated banking machine, or may be a secret number or set of alphanumeric characters selected by the customer solely for banking purposes such as online banking activities. Of course this approach is exemplary and other approaches can be used in other embodiments. Customer identifying data in exemplary embodiments may also or alternatively include other data such as all or a portion of the customer's social security number, the customer's mother's maiden name, digits of the customer's phone number, date of birth, or other data which can be generally associated with the customer for identification purposes.
Referring to
The exemplary network 128 has the capability to send messages to the cell phone 150 regarding notices, as previously mentioned. This includes for example, data in the data store 143 of the computer 142 which corresponds to user data, messages, or other actions to be presented and/or taken. This can include for example presenting certain specific determined messages to the particular user based on stored information and/or criteria associated with that particular user. For example, the at least one computer 142 can operate in accordance with its programming to generate the appropriate messages to the cell phone 150 of the user.
An appropriate message can notify a customer via a text message that their safety deposit box is about to be accessed by a person. This security message can be sent to the customer's phone 150 in response to the terminal 126 receiving user input which corresponds to the customer's safety deposit box. The arrangement allows the customer to inform the bank that access to their safety deposit box should be denied. Thus, the arrangement reduces fraud. Alternatively, a verification message can be sent to the customer's phone 150 every time the terminal receives user input corresponding to the customer's box. The customer will then have to provide further data (e.g., a PIN or password) via their phone 150 in order for the computer 116 to allow the safety deposit box access process to continue. This arrangement allows an associate of the customer (e.g., a family member) to access the box on behalf of the customer.
Operation of an exemplary system with regard to a user session will now be described. A user who has rented an assigned safety deposit box and wishes to access its contents, will enter the banking facility or other institution operating the self-service safety deposit box accessing system (or vault accessing system). In some cases, the system including the exemplary key access assemblies may have been installed since the last time the user has accessed their safety deposit box. In this situation the user may not be familiar with the ability to operate the system and access their safety deposit box on a self-service basis using their cell phone. In this case, the user will approach a bank employee and inquire about accessing their safety deposit box. Such a first time user will generally be taken by the employee to the customer station where the operation of the system using their cell phone 150 will be demonstrated to them. Further, in the initial session the bank can operate the system to gather additional identifying information that the user may want to have stored in the system. This user information can be used in the future for purposes of enabling the user to access their safety deposit box using their cell phone 150.
In an exemplary embodiment, for the first time (new) user there will often be explained to the user that they can now access their safety deposit box on an unattended basis without the involvement of bank personnel. At the customer terminal 126 the user can provide one or more inputs which cause the system to provide outputs which explain the system. In an exemplary embodiment the at least one computer 116 can provide informative video and audio outputs to the user via the display 124 that explain the operation of the system. Once a first time user has been explained the operation of the system using their cell phone 150, they are asked to provide one or more inputs that will identify them to the system.
The new user can be prompted to input initial user data via the terminal display 124 or alternatively, via the display 152 or other input devices of the hand held device 150. For example, phone number data can be input by typing their phone number using the key buttons 154 on their phone or typing the phone number using the virtual keyboard 156 displayed on the touch screen display of the cell phone, if their phone is equipped with a touch screen display. Alternatively, the user can provide verbal inputs using the phone 150. Inputs can also include the user swiping a user card (e.g., an ATM card) in a card reader associated with the computer 116. Alternatively or in addition, the user/customer can be asked to input a personal identification number (PIN) through the terminal, their cell phone, or some other input device.
In still other embodiments the user can be requested to provide additional inputs or alternative inputs. For example, when the cell phone is in the vicinity of the port 158, the computer 116 can instruct the user via the terminal display 124 or the cell phone display 152 to utilize their phone to provide one or more user verification inputs. Such inputs can alternatively or additionally include other data that only the authorized account holder would readily know and which can be verified as accurate based on data stored in at least one data store that is accessible to the computer associated with the account holding entity. These (personal data) inputs can include for example input of personal data corresponding to the customer's mother's maiden name, the last four digits of their phone number, city of birth, date of birth, favorite school subject, name of pet, and/or other identifying data.
Alternatively or in addition, the terminal 126 and cell phone 150 of the user can operate to directly communicate with the port 158 via the NFC, Bluetooth, RFID, or other suitable communication methodology so that the identity of the user's cell phone can additionally be verified as being physically in proximity to the terminal. The cell phone can provide identifying data associated with a chip set, system address, or other data that uniquely identifies the cell phone. Using this Bluetooth, NFC, or RFID technology, the computer 116 can identify an authorized user of the safety box and recover their safe deposit box information stored in the system for quicker system response when they authenticate themself to the system.
Alternatively and/or in addition, GPS tracking information related to the user's cell phone 150, the terminal 126, and/or both devices can be received and compared through operation of the computer 116 to further verify the identity of the user/phone at the terminal. GPS tracking of the position of the cell phone 150 also helps assure, based on the phone being in GPS proximity to the terminal, that the messages exchanged are from the user's cell phone 150. This may be done for example using features like those described in U.S. patent application Ser. No. 12/806,276 filed Aug. 9, 2010, the disclosure of which is herein incorporated by reference in its entirety.
In some exemplary embodiments the programming associated with the computer 116 can operate to capture additional inputs from the user or the user's hand held device 150 when the user registers their data in the system and operates the system for the first time. These inputs can be used in the future to identify the authorized user. These can include numbers, values, passwords, codes, or other information that is stored in at least one data store. The computer in the future can then ask the user to input these (user data) items through the cell phone 150 or other input device in order for the customer to be allowed to access their safety deposit box.
Of course a registered user who has previously used the system with their hand held device 150 will not be provided such first time user instructions or be asked to provide the initial registering identifying data into the system. Rather, a user who is already familiar with the system can proceed directly to the customer terminal 126 upon entering the financial institution.
Continuing with the description of an operation in a user session, once the user has provided the customer terminal 126 with sufficient user data (e.g., authorized user identifying data) that properly identifies himself or herself as an authorized user of the system, the computer 116 can then operate to determine from a data store, the particular safety deposit box 10 which is assigned to the identified user. The computer can also determine the data that is associated with the wireless indicator 114 of the assembly 26 on the door 16 of that particular safety deposit box. The computer operates to program one of the electronic key modules 28 in the docking station 102 with appropriate unlocking data that enables the key module 28 to open the cover lock 54 of that particular door assembly 26.
The arrangement allows for all data (input) that the user is required to provide to the system (in order to be able to access the vault interior and access the user's safety deposit box), to be wirelessly provided to the system through the user's hand held device (e.g., mobile phone). That is, in an exemplary embodiment no user data is needed to be manually input to the terminal. Furthermore, the safety deposit box accessing system allows an individual to access the contents of their safety deposit box on a self-service basis, without requiring any assistance (or need) from another person (e.g., a service employee of the banking facility). As previously discussed, the total user data needed can comprise various forms and amounts of inputted data, including (but not limited to) customer account data, a PIN, personal user data, user image data, biometric data, phone identifying data, data which verifies the phone as proximate the terminal, and/or other data which is usable to verify system authorization of the customer and/or their phone.
In exemplary embodiments the at least one computer 116 will also operate to store information about the user's request, the fact that they have initiated a session, as well as the time and date thereof. Other pertinent information can also be stored through operation of the at least one computer 116. Of course these approaches are exemplary and in other embodiments other approaches can be used.
Continuing with the description of the operation in a user session, after the computer 116 has operated to cause the data store in the electronic key module 28 to be programmed with the appropriate unlocking data, then at least one output is provided to the user through the terminal display 124 instructing the user to remove the appropriate electronic key module from the docking station 102. Alternatively or in addition, the instructional output can be provided to the user through the hand held device display 152. The computer can also cause the indicator 106 associated with the appropriately programmed electronic key module 28 to change color, flash, or otherwise indicate (or differentiate) the electronic key module that the user is supposed to take from the other electronic key modules at the docking station. The user is also instructed through outputs (display output or verbal output) from the customer terminal 126 (or the hand held device 150) to proceed to the vault gate 132.
In some exemplary embodiments the at least one computer 116 is operative to sense the taking of the electronic key module 28 from the docking station. Responsive to this sensing of the taking of the electronic key module, the at least one computer is operative to change the condition of the gate lock 130 from the locked condition to the unlocked condition. Alternatively or in addition, the computer 116 can operate to change the condition of the gate lock 130 from the locked to unlocked in response to input from the cell phone 150. The unlocking of the gate 132 enables the user to swing open the gate and enter the vault.
In other embodiments the system can operate to require the user to provide an appropriate (additional) input through an input device 136 adjacent to the gate 132 in order to unlock the gate. This can include insertion of the electronic key module 28 (or portion thereof) into an appropriate opening in a device (e.g., reader device) adjacent to the gate 132. Alternatively, it can include requiring the user to input a card, input a PIN, provide a thumbprint (biometric input), provide a verbal input, or otherwise provide another user input that the computer 116 can use to verify that the customer is associated as an authorized user of the vault. Such additional input, upon being verified through operation of the computer, causes the gate lock to change to the unlocked condition. Of course it should be understood that this approach is exemplary and that other approaches can be used in other exemplary embodiments.
Also, in the exemplary embodiments as previously discussed, the activities carried out by the computer 116, the gate 132, the electronic key module 28, or other components of the system can provide triggering events which are operative to cause the computer 138 to cause capture of images from one or more cameras that have a field of view that includes activities ongoing in the course of the user session.
Continuing with the description of an operation in a user session, once the user has entered the vault he or she may proceed to their safety deposit box. After the user has located their specific box, then they can extend the extending portion 76 of the electronic key module 28 into the associated opening 54 in the assembly body 32. Signals are exchanged between the electronic key module 28 and the assembly 26. At least one processor operates to analyze the signals to determine that the signals correspond to matching data. The at least one processor then operates to cause the cover lock 56 to change from a latched condition to an unlatched condition. The assembly body 32 can then be rotated so that the key hole to the customer lock 24 is accessible to the user. The user is then able to insert their mechanical customer key into the customer lock 24. Turning the customer key enables the user to swing open the safety deposit box door 16 and access the interior area thereof.
In some embodiments the electronic key module 28 can facilitate finding their box by providing one or more outputs through the key module display 82 which correspond to the identifying indicia on the body 32 which overlies the key opening 54. In other embodiments, the phone 150 can facilitate finding the specific box by providing one or more outputs through the phone display 152. In some embodiments the displayed output is provided in an orientation which corresponds to the orientation of (identifying) indicia on the safety deposit box.
Also, the electronic key module 28 (or the phone 150) can include software (or firmware) that causes the display to output an arrow that points toward the appropriate (correct) safety deposit box. The pointing direction of the arrow can accordingly change as the position and orientation of the electronic key module (or the phone) changes. Other software can cause the electronic key module (or the phone) to produce an audible sound output having a decibel level based on its nearness to the user's safety deposit box. For example, the audible output can become louder the closer the key module gets to the box. Similarly, an audible output that emits a beep can cause the beep to be output at a faster rate as the key module gets closer to the box. Likewise, a light on the electronic key module (or the phone) can be used to flash at a faster rate as the module (or the phone) gets closer to the user's box. Proximity sensors, wireless signals, etc. can be used by a processor in determining the relative distance between the box and the electronic key module (or the phone), where the processor is in operative to control output of a pointing arrow, audible sound, flashing light, or other indicator of user nearness to their box.
As can be appreciated, in an exemplary embodiment the extending portion 76 of the electronic key module 28 can be inserted into openings 54 in either a left-hand or right-hand orientation. The programming of the at least one processor of the exemplary embodiment is operative to cause the terminal display 124 or the display 152 of the hand held apparatus 150 to output visual indicia in an aligning orientation that corresponds to that indicia presented on the safety deposit box.
Further, the at least one sensor that senses geometric orientation of the electronic key module and is in operative connection with the at least one processor, causes the processor to output through the either of the displays 124, 152 user instructions which can facilitate the user's use of the electronic key module. For example, if the user has the electronic key module in an improper orientation (e.g., upside down) for purposes of insertion into a corresponding opening, the at least one processor is operative to cause at least one of the displays 124, 152 to output correcting instructions, arrows, other indicia, etc. This instructional output directs the user to place (rotate, flip, etc.) the electronic key module into its proper orientation to enable the key module to be properly inserted into the opening.
In still other embodiments the at least one sensor can operate to cause the display of the electronic key module to reverse the orientation of the indicia being output based on the current orientation of the electronic key module. This allows the user to more easily read the indicia.
In still other embodiments the at least one processor of the electronic key module 28 can cause a speaker or other audio output device of the hand held system 150 to provide outputs which facilitate the use of the electronic key module 28. These can include for example simulated speech outputs. These simulated speech outputs can be used to help the user locate their safety deposit box and then to insert the extending portion of the electronic key module into the assembly. Such simulated speech outputs can include not only directions on how to insert the extending portion of the electronic key module, but also instructions on locating the user's box. These instructions can include for example, directions on where the box is located within a large array of safety deposit boxes. The simulated speech outputs can also indicate other identifying features associated with the user's safety deposit box.
In still other embodiments the hand held device 150 can be used lieu of a separate electronic key module 28. That is, the hand held device 150, in addition to the capabilities already available, can also be used to change a safety deposit box cover lock 56 from a locked condition to an unlocked condition. In an exemplary embodiment the hand held device 150 includes a data store that can be modified by the system (e.g., the terminal). After the user is recognized as an authorized user, the terminal can cause the hand held device's data store to be provided with unlocking data that enables the tag to unlock the cover lock 56 associated with the user's safety deposit box. The hand held device's data store can also to be provided with unlocking data that enables the tag to unlock the vault gate. Communication of unlocking data from the terminal to the hand held device's data store can occur while the hand held device 150 is connected to the docking station. Alternatively, wireless communication of the unlocking data to the hand held device can occur.
For example, the hand held device 150 can include a programmable RFID tag. After the user is recognized as an authorized user, the terminal can cause the RFID tag to be wirelessly programmed with the appropriate unlocking data. The hand held device having the programmed RFID tag is then able to be used by the user to unlock their deposit box cover lock and/or the vault gate.
The arrangement that allows the hand held device to replace an electronic key module, also allows for a system computer to change the unlocking data (codes) for the deposit box cover lock (and/or the vault gate) every time a user access thereof occurs. This prevents the hand held device from continually holding current data that unlocks the vault gate. Thus, the RFID tag would need to be reprogrammed after every use. With the frequent changing of unlocking data, the arrangement can enhance security of the vault and its safety deposit boxes.
In all other aspects, an exemplary system operates similar to that of the system previously discussed and illustrated with regards to
Thus the apparatus, system, and methods of the exemplary embodiments described may achieve one or more of the above stated objectives, eliminate difficulties encountered in the use of prior devices and systems, solve problems and attain desirable results as described herein.
In the foregoing description certain terms have been used for brevity, clarity and understanding, however no unnecessary limitations are to be implied therefrom because such terms are for descriptive purposes and are intended to be broadly construed. Moreover, the descriptions and illustrations given herein are by way of examples and the invention is not limited to the details shown and described.
In the following claims any feature described as a means for performing a function shall be construed as encompassing any means known to those skilled in the art as being capable of performing the recited function, and shall not be limited to the features shown in the foregoing description or mere equivalents thereof.
Having described the features, discoveries and principles of the invention, the manner in which it is constructed and operated, and the advantages and useful results attained, the new and useful structures, devices, elements, arrangements, parts, combinations, systems, equipment, operations, methods, and relationships are set forth in the appended claims.
| Number | Name | Date | Kind |
|---|---|---|---|
| 8360311 | Gromley et al. | Jan 2013 | B1 |
| 20090179735 | Van Rysselberghe | Jul 2009 | A1 |
| Number | Date | Country | |
|---|---|---|---|
| 61459123 | Dec 2010 | US | |
| 60878287 | Jan 2007 | US | |
| 60878284 | Jan 2007 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 12006551 | Jan 2008 | US |
| Child | 13134642 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 13134642 | Jun 2011 | US |
| Child | 13317154 | US | |
| Parent | 12006549 | Jan 2008 | US |
| Child | 12006551 | US |
