The invention relates to a card receiving device, in particular for a tachograph in a motor vehicle of a flat construction, with a receiving opening for receiving a card, which has a memory for data, with a closure for closing the receiving opening, with a locking unit, which has at least one locking element, which can be moved into a locked position in which the locking element locks the closure. In addition, a method for receiving a card by means of a card receiving device in which the card is inserted into the card receiving device during an insertion phase is also the subject of the invention.
The main focus of application of the device according to the invention and the method according to the invention lies in the area of tachographs or devices for recording the working periods and rest periods of commercial vehicle drivers. However, other applications are likewise feasible, for example in the area of banking and for making payments, or locking systems. The invention is advantageously used in combination with all types of card-like data storage media. On account of the great commercial and legal importance of the data which can be acquired with tachographs, the recordings have to be reliably secured against manipulation. The security measures relate both to data acquisition and data transmission and to the transmission and storage of the acquired data in the memory of the card. Relevant standards place strict requirements on the security standard to be achieved by the measures. It is therefore stipulated that the card should be entirely held by the card receiving device during the reading and writing operations and be isolated from the surroundings by means of suitable closure devices. The closure devices have to be locked in the closed position during the reading and writing operations. Additional difficulties arise on account of operational failures in conventional devices caused by contamination, in particular by contact being interrupted or even when the card is being drawn in. It is problematical to draw in the card and position it exactly on the contacts of the device because the cards have high manufacturing tolerances in relation to the required positional accuracy with respect to the contacts of the device. Since the cards are predominantly perceived by the user to be distinguished by a high degree of robustness, said cards are generally not handled with the care that is actually required, so that, in addition to the tolerances caused by manufacture, deformation and damage impair the way in which the card operates when interacting with the card receiving devices. Furthermore, the operating conditions in motor vehicles place increased requirements on functional reliability on account of the pronounced vibrations and countless bumps and the wide-ranging temperature fluctuations. Implementing security against manipulation and the desired handling convenience mean it is necessary to draw in the card fully automatically. However, in order to meet this requirement, great difficulties are faced in terms of construction because the installation space available in a tachograph, which is the size of a car radio, provides only approximately a height of 10 mm for the fully automatic drawing-in process.
Great technical difficulties arising from the need for a fully automatic card insertion necessitate a requirement for a robust, space-saving, manipulation-proof mechanical and electronic system that can be operated without incurring damage. The requirement for robustness is especially put to the test when the device is improperly operated. In addition, allowance must be made for the often inadequate precision of human dexterity when operating the device in relation to the acquired accuracy of the precision engineering of the device by taking correspondingly compensatory precautions.
DE 101 53 995 already discloses a chip-card receiving device of the generic type with locking means. However, it has been found that, in the case of the proposed embodiment, insufficient allowance is made for the previously mentioned problems, since there has been in particular a high incidence of damage to the device caused by misplaced positioning of the card to be received.
On the basis of the problems caused by disadvantages of the prior art, it is the object of the invention to provide a card receiving device and a method for receiving a card in a corresponding device that are not affected by the great mechanical loads during operation, in particular during improper handling.
To achieve the object, the invention proposes a card receiving device mentioned at the beginning which has at least one first sensor, by means of which the position of the locking element can be sensed. Also proposed is a method mentioned at the beginning in which, after the insertion phase of the card, a locking unit moves into a locked position, in which a closure of a receiving opening for the card is locked by means of the locking unit, a sensor senses the locked position of the locking unit and signals it to the central control system.
With the sensory monitoring of the locking unit, the invention has recognized the key role of the locking in the matter of receiving the card. This recognition is based on the experience that many instances of damage, in particular in the form of jamming of the card to be received in the device, are attributable to incorrect positioning in relation to the locking elements of the locking unit. Since the entire device is operated in a relatively confined space, the leeway available between the card transported into the interior of the device, the closure and the locking unit is relatively small, so that even minor positioning errors can lead to blockages of the device with serious implications. Consequently, on account of the key function of the mechanical components to be monitored, the sensory monitoring has special advantages.
An advantageous development of the card receiving device according to the invention provides that the card receiving device has a central control system, which is in connection with the first sensor. The central control system can advantageously inquire the status of the locking unit permanently or situation-dependently and make allowance for this information in the functionally appropriate control of all the elements to be activated, such as drives or display units for example.
Increased immunity to malfunctions is obtained if the card receiving device has at least one second sensor, the second sensor senses at. least one phase of the reception of the card and, at the beginning and/or end of the phase, sends at least one signal to the central control system.
Security against manipulation is additionally increased if the card receiving device has an arresting unit, which can be moved into an arrested position and, in the arrested position, arrests the locking unit located in the locked position.
In order that the locking unit and the arresting unit are not damaged, it is expedient if the second sensor senses the beginning or the end of the arrestment of the locking unit in the locked position of the card and sends at least one signal to the central control system at the beginning and/or the end of the arrestment of the locking unit. In this way, the central control system advantageously receives information on the status of the arresting unit and, dependent on this, can control the initiation of further steps for receiving the card or for data transmission. At the same time, by means of the sensor system, possibly in combination with the first sensor, the proper locking and arrestment of the closure can be monitored, so that no manipulation can take place unnoticed during data transmissions between the card and the device. The central control system expediently only initiates a data transmission operation to the card being received, or maintains it, only if the first sensor signals that the locking unit is in the locked position and the second sensor signals that the arresting unit is in the arrested position.
Instead of direct monitoring or in addition to a directly monitoring sensor, it may on the one hand be less costly and on the other hand be functionally more appropriate if the card receiving device has at least one movable gear element, which is formed and coupled into the kinetic mechanism of the card receiving device in such a way that each position of this gear element during the transport of the card into an end position can be uniquely assigned a movement phase of the drawing-in, locking and/or arrestment of the locking. If the gear mechanism has such a gear element, there is the possibility that, for example, the second sensor or a further sensor is coupled to the gear element in a sensory manner, at least one position of the gear element can be sensed by means of the sensor and in this way the beginning and/or the end of the movement phase can be sensed by means of the kinetic assignment. Conceivable here in particular as movement phases are the points in time at the beginning and end of the closing, locking or arresting or else a clamping or gripping and transporting of the card to be received, possibly also a fine positioning of the card.
Depending on the installation situation and intended use, the individual sensors are advantageously optical, inductive, capacitive and/or mechanical in their operating mode. The functioning is often achieved by an optical sensor for the sensing of the position of the movable components, in particular with forked light barriers, which interact with lugs attached to the components to be monitored.
Reliable security against manipulation can often be achieved if the card can be drawn completely into the interior of the card receiving device. Additional security against attempted manipulations is obtained if the locking element not only locks a closure closing the receiving opening in a locked position but also at least partially blocks the clear cross section of the receiving opening in the locked position. Even if the closure closing the receiving opening happens to be damaged, access to the card located in the card receiving device is still prevented because of the locking element.
In order that the high security requirements are met even during the data transmission between the memory of the card and the card receiving device for the tachograph, it is expedient if the position of the locking element in the locked position can be permanently inquired by means of the first sensor and the first sensor permanently signals the sensed position to the central control system by means of signals transmitted to the central control system. In this way, loss of the locked position during a data transmission can also be stored in the memory of the card, whereby attempted manipulations are correspondingly demonstrable.
In order to reduce further the susceptibility to faults of the device according to the invention, it is expedient if the card receiving device has a third sensor, which senses the presence in the device of the card to be received. In this way, a manipulative or inadvertently initiated drawing-in operation without the card can be terminated after detection of the absence of the card, and the system can be reset to the original state. It is advisable in this respect if the third sensor is formed in such a way that it can be actuated by the card to be received itself or by a card receiving unit that is movable in the inward direction. A mechanical operating mode is particularly advantageous here, since sensors of this type generally do not require auxiliary power and are therefore energy-saving and particularly fail-safe devices. The independence of the sensors from a power supply also gives rise to the further advantage that the power supply to the card receiving device or individual modules of this device can be switched on by means of such a sensor. An advantageous development of the invention provides that a third sensor is formed in such a way that it can be actuated in response to actuation of opened switches, or normally closed contacts and by a card receiving unit that moves with the card in the inward direction, so that, if there is no card in the card receiving device, it is actuated and the switch is open, if there is a drawing-in movement of the card receiving device, it is no longer actuated and the switch changes into a closed position. Being formed in this way provides the special advantage that no slotted link has to be provided for the actuation of the third sensor, bringing the sensor of the switch into the closed position in dependence on the movement phase of the card, but instead the inactive position in the absence of a card is used for the actuation of the switch or for the interruption of a power circuit.
In order to sense the readiness for data transmission between the card and the tachograph in an end position of the card, it is expedient if the card receiving device has a fourth sensor, by means of which it can be sensed whether the card has reached the end position in the card receiving device. On account of the relatively narrow dimensional tolerances of the contacts arranged on the standardized card, it is advisable if the fourth sensor is integrally formed with a set of contacts provided for the contacting of the card. Here, too, the use of a switch provided with mechanical elements is suitable. The advantages of the invention come fully to bear if the card can be automatically drawn in and/or withdrawn.
An advantageous development of the method according to the invention provides that, during the insertion phase, the card inserted into the card receiving device is sensed by means of the third sensor, the insertion is signaled to a central control system and the central control system switches on the power supply to a drive. Apart from the drive, further electrical components, in particular with intensive power consumption, that have been disconnected from the power supply can also be switched on by the central control system, for example display lighting systems. This helps to conserve the available energy resources.
The device according to the invention and the associated method according to the invention are particularly space-saving if, after the insertion phase, a clamping unit clamps the card during a gripping phase and the card is transported into the receiving device during a transporting phase. By contrast with transport by means of rubber rollers, the use of a clamping unit has the advantage that the clamping unit permits a particularly flat construction, whereas the function of a drive by means of rollers requires a certain minimum diameter of the individual rollers and, dependent on the length of the transporting distance, a certain number of rollers. To ensure a high degree of functionality and security, it is expedient if, after the insertion phase, transporting phase and/or gripping phase, the clamping of the clamping unit is released from the card during a prepositioning phase and the second sensor senses the end of the prepositioning phase and signals it to the central control system. Only once the clamping unit is released is it possible to correct the manual inaccuracies of insertion of the card into the clamping unit, and the signal of the second sensor provides the central control system with information feedback on how the receiving operation is proceeding.
For correction of the inaccurate manual insertion of the card to be received into the card receiving device, an advantageous development of the method according to the invention provides that, after the insertion phase, transporting phase, gripping phase and/or prepositioning phase, the locking unit moves into the locked position in a fine positioning phase and the card is thereby transported into the end position, in which first contacts of a set of contacts are in connection with second contacts of the card. Dividing the transport of the card into an insertion phase, in which the card is initially transported into the interior of the card receiving device, and a fine positioning phase, allows error-free data transmission in spite of the often inaccurate manual insertion of the card and the relatively narrow dimensional tolerances of the contacts on the card. For monitoring the successful fine positioning of the card, it is expedient if the fourth sensor senses the end position of the card and signals it to the central control system.
A refinement of the method according to the invention that conforms entirely to the statutory regulations provides that, after the insertion phase, transporting phase, gripping phase, prepositioning phase and/or fine positioning phase, an arresting unit is moved into the arrested position, in which the locking unit is arrested by means of the arresting unit, in a securing phase. A manipulation attempted on the closure with fraudulent intent is prevented with dual security, since first the locking and then the arrestment have to be overcome.
The security against manipulation and functional reliability are additionally increased if the second sensor senses the arrested position of the arresting unit and signals it to the central control system. Permanent monitoring of the signal makes it possible to demonstrate an unforeseen movement of the arresting unit from the arrested position. At the same time, the central control system can switch off the drive of the card receiving device. To save energy, switching off the drive expediently takes place only when the time period between the signal which signals the end of the prepositioning phase and the signal which signals the reaching of the locked position of the locking device does not exceed a predetermined value, since otherwise the probability of a malfunction is increased. If the time value is exceeded, it is expedient if the central control system initiates an operation for the card to be withdrawn.
A data transmission phase, which follows the insertion phase, transporting phase, gripping phase, prepositioning phase, fine positioning phase and/or securing phase and in which information is transmitted between the memory of the card and the card receiving device or the tachograph, should be interrupted if the second sensor no longer signals the arrested position of the arresting unit or the first sensor no longer signals the locked position or if one of the two sensors indicates leaving of the position to be monitored.
A specific exemplary embodiment of the card receiving device according to the invention and of the method according to the invention is described in more detail below to illustrate the invention, with reference to drawings, in which:
FIGS. 6 to 10 each show a view from below of a card receiving device according to the invention in different phases of the reception of a card,
The card receiving device 3, represented in a simplified form in
The slide 36 interacts with a clamping element (not represented), so that a card 2 to be received (not represented) is clamped in the manner of tongs by the card receiving unit 3. For this purpose, a card 2 (not represented) is pushed over run-in slopes 38 on the input side along the slide 36 as far as two stops 35, so that continued pressure against the inserted card 2 moves the card receiving unit 3 in the inward direction 14. A third sensor 23, formed in FIGS. 6 to 10 as a normally closed contact, is relieved by a projection 25, moving with the card receiving unit 3 in the inward direction 14, so that the third sensor 23, formed as a switch, is no longer actuated and changes into the closed position.
Represented in
Represented in
Represented in
In
Before the fine positioning phase, represented in
During the securing phase, represented in
During the further course of the securing phase, represented in
In the flow diagram represented in
During a subsequent securing phase 96, an arresting element 61 of an arresting unit 60 moves into an arrested position, in which the locking unit 50 is arrested, at the beginning of which the second sensor 22 senses the passing by of the first projection 47 of the gear element 40 and signals it to the central control system. The signal caused at the second sensor 22 as the securing phase 96 proceeds further, on account of the passing by of the second projection 48, indicates to the central control system the end of the securing phase 96, and the drive 27 is switched off.
If the time period between the two successive signals of the second sensor 22 exceeds a certain value, the case represented in
If it proceeds without any errors, the securing phase 96 is followed by a data transmission phase 97, during which information is transmitted between the memory of the card 2 and the card receiving device 1. During the entire data transmission, the arrested position is monitored by means of the second sensor 22 and the locked position is monitored by means of the first sensor 21.
Number | Date | Country | Kind |
---|---|---|---|
103 21 251.5 | May 2003 | DE | national |
Filing Document | Filing Date | Country | Kind | 371c Date |
---|---|---|---|---|
PCT/EP04/04293 | 4/22/2004 | WO | 12/20/2006 |