The present invention relates to a system and method for controlling access to a programming mode for a fuel dispenser (FD) in a fueling environment via an authorization to access programming mode (AAPM) signal.
Fuel dispenser fraud is a problem that can result in significant lost revenues annually within retail fueling environments. One method of fraud occurs when persons wishing to perpetrate fraud place a fuel dispenser into a programming mode of operation and program the fuel dispenser to alter metrological functions or other associated parameters related to fuel dispensing. Once altered, the person may dispense fuel either at a reduced cost or by drive-off without any payment since an attendant will not be alerted to the dispensing activity.
In order to access a programming mode of operation for a fuel dispenser and make these changes, the perpetrator need only have keys to access the dispenser electronics cabinet and/or a hand held or other programming device with an associated security code. Once the fuel dispenser is placed into a programming mode, the perpetrator can either change price per volume (e.g., liter or gallon), place the dispenser in an operating mode that does not require point-of-sale (POS) authorization to dispense fuel, calibrate the meters, or change other metrological functions. For example, a perpetrator may arrive at a fuel dispenser and place the dispenser into a programming mode without an attendant being aware of this activity. The perpetrator may then alter the price per gallon/liter for fuel, dispense fuel at a reduced cost, and pay the attendant the reduced amount for the fuel. Alternatively, the perpetrator may place the fuel dispenser into a mode of operation that does not alert the attendant to a request to dispense fuel. In this scenario, the perpetrator may dispense fuel without the attendant even realizing that fuel has been dispensed.
Accordingly, there exists a need to provide fraud protection in a retail fueling environment including preventing a fuel dispenser from being placed into a programming mode of operation prior to it receiving an authorization from authorized personnel to access programming mode (AAPM) signal from a POS device.
The present invention provides fraud protection within a retail fueling environment by preventing a fuel dispenser (FD) from being placed into a programming mode of operation (PMO) prior to it receiving an authorization to access programming mode (AAPM) signal from authorized personnel via an authorization terminal. In one embodiment, the authorization terminal includes a point-of-sale (POS) device and an attendant or technician issues the AAPM signal from the (POS) device when programming of the FD is to be performed. Upon receipt of the AAPM signal, the FD starts a timer. If the timer expires or a fueling transaction is initiated prior to the FD being placed into the programming mode, the FD will prevent entry into the programming mode. When the programming mode has been entered, the timer may be restarted. If the programming mode is not exited prior to expiration of the timer or if a transaction is initiated, the programming mode of operation will be exited if the unit is programmed for a minimum access time.
In another embodiment, the authorization terminal includes a remote system and the AAPM signal is generated at a remote location, such as a site controller or a remote system coupled to the retail fueling environment via a network.
In third embodiment, the authorization terminal includes a site controller and the AAPM signal is generated via the site controller.
In a fourth embodiment, the authorization terminal includes a wireless device and the AAPM signal is generated via the wireless device.
In a fifth embodiment, an augmented protocol may be associated with the AAPM signal to further enhance security and to verify that the AAPM signal was actually generated by authorized personnel via one of the POS device, the site controller, or the remote system. The augmented protocol may be developed such that the AAPM signal is either led and/or followed by additional signaling from the generating device that originated the AAPM signal. For example, a certain number (e.g., three) of pump stop signals (not described in detail herein) may be generated after the AAPM signal to further distinguish and identify the AAPM signal generated at one of the POS device, the site controller, or the remote system.
In a sixth embodiment, biometrics associated with the authorized personnel may be maintained, for example within a database, and used for authorizing generation of the AAPM signal. This biometric authorization may also be documented on a per-authorization basis to record which of the authorized personnel changed the programming. Programming changes that were made may also be recorded and associated with the biometric authorization. Further, authorization requests may also be recorded when no changes are made to the programming.
Those skilled in the art will appreciate the scope of the present invention and realize additional aspects thereof after reading the following detailed description of the preferred embodiments in association with the accompanying drawing figures.
The accompanying drawing figures incorporated in and forming a part of this specification illustrate several aspects of the invention, and together with the description serve to explain the principles of the invention.
The embodiments set forth below represent the necessary information to enable those skilled in the art to practice the invention and illustrate the best mode of practicing the invention. Upon reading the following description in light of the accompanying drawing figures, those skilled in the art will understand the concepts of the invention and will recognize applications of these concepts not particularly addressed herein. It should be understood that these concepts and applications fall within the scope of the disclosure and the accompanying claims.
The present invention provides fraud protection within a retail fueling environment by preventing a fuel dispenser (FD) from being placed into a programming mode of operation prior to it receiving an authorization to access programming mode (AAPM) signal from authorized personnel via an authorization terminal. In one embodiment, the authorization terminal includes a point-of-sale (POS) device and an attendant or technician issues the AAPM signal from the (POS) device when programming of the FD is to be performed. Upon receipt of the AAPM signal, the FD starts a timer. If the timer expires or a fueling transaction is initiated prior to the FD being placed into the programming mode, the FD will prevent entry into the programming mode. When the programming mode has been entered, the timer is restarted. If the programming mode is not exited prior to expiration of the timer or if a transaction is initiated, the programming mode of operation will be exited.
In another embodiment, the authorization terminal includes a remote system and the AAPM signal is generated at a remote location, such as a site controller or a remote system coupled to the retail fueling environment via a network.
In third embodiment, the authorization terminal includes a site controller and the AAPM signal is generated via the site controller.
In a fourth embodiment, the authorization terminal includes a wireless device and the AAPM signal is generated via the wireless device.
In a fifth embodiment, an augmented protocol may be associated with the AAPM signal to further enhance security and to verify that the AAPM signal was actually generated by authorized personnel via one of the POS device, the site controller, or the remote system. The augmented protocol may be developed such that the AAPM signal is either led and/or followed by additional signaling from the generating device that originated the AAPM signal. For example, a certain number (e.g., three) of pump stop signals (not described in detail herein) may be generated after the AAPM signal to further distinguish and identify the AAPM signal generated at one of the POS device, the site controller, or the remote system.
A wireless device 23 is illustrated within the retail fueling environment 10. The wireless device 23 may be used by an attendant, technician, or other authorized personnel as an authorization terminal to generate the AAPM signal and any related signaling from a location proximate to the FDs 16 to allow any of the FDs 16 to be placed into the programming mode of operation without the authorized person having to repeatedly travel between the central building 12 and the FDs 16 or to repeatedly request that a remote system generate the signaling, as will be described in more detail below.
The central building 12 need not be centrally located within the retail fueling environment 10, but rather is the focus of the retail fueling environment 10, and may house a convenience store 24 and/or a quick serve restaurant (QSR) 26 therein. Both the convenience store 24 and the QSR 26 may include point-of-sale (POS) devices 28 and 30, respectively. In addition to POS transaction processing, the POS devices 28 and 30 are used to generate the AAPM signal upon appropriate authorization and to send that signal to the FDs 16 to allow the FDs 16 to be placed into a programming mode of operation.
The central building 12 further includes a site controller (SC) 32, which in an exemplary embodiment may be the G-SITE® sold by Gilbarco Inc. of Greensboro, N.C. or other third party site controller. The SC 32 may control the authorization of fueling transactions and other conventional activities, as is well understood. The SC 32 may be incorporated into a POS device, such as the POS devices 28 and 30, if needed or desired, such that the SC 32 also acts as a POS device.
The SC 32 includes a database (DB) 34 capable of storing identification and authorization indicia. This identification and authorization indicia may be used to identify an individual making a programming request at any POS device, such as the POS devices 28 and 30, within the retail fueling environment 10. This identification of the individual may include use of biometric information or other data. The identification and authorization indicia may also be used to authenticate the programming request from that individual by use of passwords or other information, such as an employee identification number or fingerprint, that may be entered at the POS terminal during a programming request sequence. The identification and authentication indicia, such as the fingerprint or employee identification number, may also be documented on a per-authorization basis to record which of the authorized personnel changed the programming. Programming changes that were made may also be recorded and associated with the programming request. Further, authorization requests may also be recorded when no changes are made to the programming.
Further, the SC 32 may have an off-site communication link 36 allowing communication with a remote location for credit/debit card authorization via a host processing system 38, an identification database 40, and/or a remote system 42. The identification database 40 can be used to remotely store the information described above in association with the DB 34. The remote system 42 represents another computer, system, or device that can be used to access identification information, such as credit card and/or fingerprint data. The off-site communication link 36 may be routed through the Public Switched Telephone Network (PSTN), the Internet, both, or the like, as needed or desired.
It should be noted that the car wash 22, the convenience store 24, and the QSR 26 are all optional and need not be present in a given retail fueling environment.
As described above, the plurality of fueling islands 14 may have one or more FDs 16 positioned thereon. The FDs 16 and the POS terminals 28 and 30 are in electronic communication with one another and with the SC 32 through a Local Area Network (LAN), pump communication loop, or other communication channel or line, or the like.
The retail fueling environment 10 also has one or more underground storage tanks (USTs) 44 adapted to hold fuel therein. As such, the USTs 44 may be double-walled USTs. Further, each UST 44 may include a liquid level sensor or other sensor (not shown) positioned therein. The sensors may report to a tank monitor (TM) 46 associated therewith. The TM 46 may communicate with the FDs 16 (either through the SC 32 or directly, as needed or desired) to determine amounts of fuel dispensed, and compare fuel dispensed to current levels of fuel within the USTs 44 to determine if the USTs 44 are leaking. In a typical installation, the TM 46 is also positioned in the central building 12, and may be proximate to the SC 32. The TM 46 may communicate with the SC 32 for leak detection reporting, inventory reporting, or the like.
The FD 16 has a base 60 and a top 62, with a canopy 64 supported by two side panels 66. The FD 16 is subdivided into multiple compartments. A hydraulic area 68 is used to enclose hydraulic components and an electronic area 70 is used to enclose electronic components. A vapor barrier (not shown) may be used to separate the hydraulic area 68 from the electronic area 70.
Several components used to control fuel flow may be housed within the hydraulic area 68. Fuel from USTs 44 (
When fuel is dispensed, fuel begins to travel through a meter 74, which is responsive to flow rate or volume. A pulser 76 is employed to generate a signal in response to fuel movement through the meter 74. Control/data lines 78 provide a signaling path from the pulser 76 to the control system 18. The control/data lines 78 provide signals to the control system 18 indicative of the flow rate or volume of fuel being dispensed within the meter 74. The control/data lines 78 may provide control signaling to a valve 80 that may be opened and closed to dispense and terminate dispensing of fuel, respectively.
The control system 18 includes a controller and control circuitry (not shown) for controlling access to a programming mode of operation, as will be described in more detail below. The control system 18 also controls transaction-level and functional processing within the FD 16 by collecting meter flow measurements from the pulser 76, performing calibration operations associated with the meter 74, and performing calculations such as cost associated with a fuel dispensing transaction. Additionally, the control system 18 controls transactional processing at the FD 16, as will be described in more detail below.
As fuel is dispensed from the FD 16, the control system 18 receives signaling from the pulser 76 associated with the meter 74 described above during the dispensing transaction. In response to receipt of signaling from the pulser 76, the control system 18 provides transaction-level functionality within the FD 16. The control system 18 collects, either directly or indirectly, meter flow measurements associated with the meter 74.
As a dispensing transaction progresses, fuel is then delivered to a hose 82 and through a nozzle 84 into the customer's vehicle (not shown). The FD 16 includes a nozzle boot 86, which may be used to hold and retain the nozzle 84 when not in use. The nozzle boot 86 may include a mechanical or electronic switch (not shown) to indicate when the nozzle 84 has been removed for a fuel dispensing request and when the nozzle 84 has been replaced, signifying the end of a fueling transaction. A control line (not shown) provides a signaling path from the electronic switch to the control system 18. The control system 18 uses signaling received via the control line in order to make a determination as to when a transaction has been initiated or completed.
The control system 18 uses control/data lines 88 to interface to a user interface 90 that includes various combinations of subsystems to facilitate customer interaction with the FD 16. The user interface 90 may include a keypad 92. The keypad 92 may be used for selection of different types of purchase transactions available to the customer or to enter an authentication code. The keypad 92 may also be used for entry of a personal identification number (PIN) if the customer is using a debit card for payment of fuel or other goods or services.
The user interface 90 may also contain a magnetic strip card reader 94 for insertion of credit, debit or other magnetic strip cards for payment. Additionally, the magnetic strip card reader 94 may accept loyalty or program-specific cards that entitle the customer to a fixed credit or percentage discount or other favorable pricing on fuel or other goods/services.
The user interface 90 may also include a radio-frequency (RF) antenna 96. The RF antenna 96 is coupled to an RF interrogator (not shown). If the customer is tendering a radio frequency identifier (RFID) for payment of a car wash, the RF antenna 96, as controlled by the RF interrogator, will generate a field to interrogate the customer's RFID. The RFID and the RF antenna 96 will communicate using RF communications to identify the customer's account or other payment information. For more information on RFID payments and interaction at a FD, see U.S. Pat. No. 6,073,840, entitled “Fuel Dispensing and Retail System Providing for Transponder Prepayment,” issued Jun. 13, 2000, which is incorporated herein by reference in its entirety.
The user interface 90 may also include other payment or transactional devices to receive payment information for transaction processing associated with transactions, including a bill acceptor 98, an optical reader 100, a smart card reader 102, and a biometric reader 104. The user interface 90 also includes a receipt printer 106 so that a receipt with a recording of the transaction carried out at the FD 16 may be generated and presented to the customer. A change delivery device 108 may also be used to deliver change for overpayment to a customer. A display 110 is used to provide information, such as transaction-related prompts and advertising, to the customer. Soft keys 112 are used by the customer to respond to information requests presented to the user via the display 110. An intercom 114 is provided to generate audible cues for the customer and to allow the customer to interact with an operator or attendant.
In addition, the FD 16 includes a transaction price total display 116 that may be used to present the customer with the price to be charged to the customer for fuel that is dispensed. A transaction gallon total display 118 may be used to present the customer with the measurement of fuel dispensed in units of gallons or liters as a volume of fuel dispensed from the FD 16. Octane selection buttons 120 are provided for the customer to select which grade of fuel is to be dispensed before dispensing is initiated. Price per unit (PPU) displays 122 are provided to show the price per unit of fuel dispensed in either gallons or liters, depending upon the programming of the FD 16. As will be described in more detail below, a perpetrator attempting to commit fraud may attempt to reprogram the FD 16 to associate a lower or zero PPU than what is the actual cost of fuel.
The elements of the FD 16 that are depicted within
A memory 132 is connected to the system controller 130. The memory 132 may be used to store user transaction information that is associated with transactions within the retail fueling environment 10, such as identification card data and/or fingerprint identification data associated with an active transaction. The memory 132 may also include a read only memory (ROM) 134, a random access memory (RAM) 136, and a non-volatile memory 138.
Additionally, a configuration storage area 140 is illustrated within the memory 132. The configuration storage area 140 is further illustrated as a magnified area on the lower right side of
Exemplary fields that are illustrated within the configuration storage area 140 of
As will be described in more detail below, upon receipt of an AAPM signal at the FD 16 from one of the POS devices 28 and 30, the SC 32, or the remote system 42, the AAPM field 162 is set to authorize access to the programming mode of operation for the FD 16. Additionally, a timer 166 is started to allow a duration of time to be measured from receipt of the AAPM signal until a request is issued to enter the programming mode at the FD 16. This request to enter the programming mode of operation may be initiated, for example, via the manager's keypad 20 by any appropriate sequence of keystrokes.
The timer 166 may be an up-counting or down-counting timer, and may further be interrupt driven such that an interrupt is generated to the system controller 130 upon expiration of the timer 166. Alternatively, the timer 166 may be polled without departure from the scope of the subject matter described herein. If a request to enter the programming mode of operation is not received prior to expiration of the timer 166, as will be described in more detail below in association with
Additionally, if a transaction is started by a customer at the FD 16 during the window of time delineated by the timer period associated with the authorization to enter the programming mode of operation, the FD 16 will thereafter also be prevented from entering the programming mode of operation until a new AAPM signal is received. This will prevent the FD 16 from maintaining a state of authorization to enter the programming mode of operation, as will be described in more detail in association with
As described above, an augmented protocol may be associated with the AAPM signal to further enhance security and to verify that the AAPM signal was actually generated by authorized personnel via one of the POS devices 28 and 30, the SC 32, or the remote system 42. The augmented protocol may be developed such that the AAPM signal is either led and/or followed by additional signaling from the generating device that originated the AAPM signal. For example, a certain number (e.g., three) of pump stop signals (not described in detail herein) may be generated after the AAPM signal to further distinguish and identify the AAPM signal generated at one of the POS devices 28 and 30, the SC 32, or the remote system 42. In this way, verification of the AAPM signal may also be performed upon receipt of the AAPM signal and associated signaling, referred to as AAPM signaling, by the system controller 130 by verifying that the additional signaling associated with the augmented protocol is present. This augmented protocol may be altered from time to time to further increase security. Furthermore, the augmented protocol may be stored within the AAPM protocol field 164 and may be entered via the manager's keypad or downloaded to the FD 16 from one of the POS devices 28 and 30, the SC 32, or the remote system 42.
The configuration storage area 140 may include any form of storage medium, either alone or in combination, that is capable of storing configuration data for the FD 16, and may further be included within ROM 134, RAM 136, and the non-volatile memory 138. For example, the configuration storage area 140 may include a variety of registers, RAM, non-volatile memory, or any combination of these types of storage. The configuration storage area 140 may also include disk storage and may further be remote from the FD 16 and accessible, for example, via the SC 32. Furthermore, the configuration storage area 140 may be included within the system controller 130 without departure from the scope of the subject matter described herein.
Regarding the fields within the configuration storage area 140, the operating mode field 150 may be used to place the FD 16 into the programming mode of operation. The operating mode field 150 may also be used to place the FD 16 into a stand-alone mode of operation that would not need any authorization to dispense fuel. A perpetrator that is attempting to commit fraud would likely attempt to change the operating mode field 150 via the manager's keypad or a hand-held programming device to place the FD 16 into the programming mode of operation and then to place the FD 16 into the stand-alone mode of operation. If successful, the perpetrator would be able to dispense fuel by causing the fuel dispenser to open the valve 80. In this scenario, the PPU displays 122 would remain unchanged. The pulser 76 would generate pulses based upon fuel flow and the display 110, the transaction price total display 116, and the transaction gallon total display 118 would update as initially programmed by the attendant or technician.
However, when coupled with the AAPM signaling as described herein generated by one of the POS devices 28 and 30 or the SC 32, the perpetrator would be unable to cause the FD 16 to enter the programming mode of operation by conventional means. Accordingly, fraud may be prevented at the FD 16 by use of the AAPM signaling.
Other exemplary problems with conventional fuel dispensers that are solved by use of the description herein include preventing changes to other fields within the configuration storage area 140. For a convention fuel dispenser, once placed into the programming mode of operation, the perpetrator may further conceal fraud by performing other configuration changes to the conventional fuel dispenser. For example, the perpetrator could turn the drive off warning field 152 to an “off” state, thereby disabling any drive off warning indication that the attendant may otherwise receive. Additionally, the transaction log enable field 154 that stores records of transactions at the conventional fuel dispenser could be altered or disabled when in the programming mode of operation. Calibration values field 156 and or PPU values field 160 could be altered which would result in different values being displayed on PPU displays 122, the display 110, the transaction price total display 116, and the transaction gallon total display 118. As another example, the zero PPU field 158 may be set to cause the price per unit of fuel to be zero. All of these types of fraud may be prevented within the FD 16 by use of the AAPM signaling described herein.
Upon receipt of a request to send the AAPM signal to a FD 16, the process retrieves the current AAPM protocol from storage (step 404). As described above with respect to
The process determines, based upon the current protocol that has been retrieved, whether signaling is to be generated prior to the AAPM signal (decision point 406). When signaling is to be generated prior to the AAPM signal, the process performs the appropriate pre-signaling (step 408). As described above, this may include sending additional signals, such as fuel dispenser “stop” signals, to the FD 16. Other signaling options are possible. Additionally, any number of additional signals, such as three (3) stop signals, may be sent to the FD 16. The FD 16 may monitor the incoming signaling and activate a process to receive the AAPM signal, as described in more detail below in association with
When pre-signaling is not to be generated prior to the AAPM signal or after the appropriate signaling is generated, the process sends the AAPM signal to the FD 16 (step 410). The process then determines, based upon the current protocol that has been retrieved, whether signaling is to be generated after the AAPM signal (decision point 412). When signaling is to be generated after the AAPM signal, the process performs the appropriate post-signaling (step 414). As described above, this may include sending additional signals, such as fuel dispenser “stop” signals, to the FD 16. Other signaling options are possible. Additionally, any number of additional signals, such as three (3) stop signals, may be sent to the FD 16. The FD 16 may monitor the incoming signaling and ensure that proper post-signaling is received, as described in more detail below in association with
As described above in association with
When the AAPM signal is received, the process will determine whether post-signaling is used with the current AAPM protocol (decision point 510). When post-signaling is used in the current AAPM protocol, the process will wait for appropriate post-signaling to be received (decision point 512). When either appropriate post-signaling is received or when post-signaling is not used for the current AAPM protocol, the process will enable access into the programming mode of operation by setting the AAPM field 162 (step 514). The process will also set a timer, such as the timer 166, to measure an amount of time after receipt of the AAPM signal (step 516). It should be noted that the AAPM field 162 and the timer 166 may be set at another point during the process, such as after receipt of the AAPM signal (decision point 508), without departure from the scope of the subject matter described herein.
As described above, this timer may be an up-counting timer, a down-counting timer, interrupt driven or polled without departure from the scope of the subject matter described herein. The timer effectively creates a window of opportunity for the attendant or technician to place the FD 16 into a programming mode of operation. After expiration of the timer or upon initiation of a transaction by a customer, as will be described in more detail below, the FD 16 will no longer be authorized to be placed into a programming mode of operation without a new AAPM signal being received.
The present description assumes that the attendant or technician has observed that there is not an ongoing transaction at the FD 16 prior to issuing the AAPM signaling. However, if an active transaction is in process at the FD 16 when the AAPM signal is issued, appropriate error signaling may be generated and issued to the AAPM signaling source to alert the attendant or technician that a transaction is currently in process at the FD 16.
After setting the AAPM field 162 (step 514) and the timer 166 (step 516), the process then determines whether the timer has expired (decision point 518). When the process has determined that the timer has not expired, the process determines whether a transaction has been initiated at the FD 16 (decision point 520). When a transaction has not been initiated at the FD 16, the process determines whether a request to enter the programming mode of operation has been initiated by the attendant or technician (decision point 522). As described above, the manager's keypad 20 may be used to initiate a request to enter the programming mode of operation by any suitable key combination. The code used to enter the programming mode of operation may also be altered when the FD 16 is in the programming mode of operation by any suitable means, such as entry of programming information via the manager's keypad 20.
When a request to enter the programming mode of operation has not been initiated (decision point 522), the process iterates to determine whether the timer has expired (decision point 518), whether a transaction has been initiated (decision point 520), and whether a request to enter the programming mode of operation has been received (decision point 522). When a determination is made that the timer has expired (decision point 518), the process will clear the AAPM field 162 (step 524) and return to retrieve the current protocol (step 502) and continue as described above. Likewise, when a determination is made that a transaction has been initiated (decision point 520), the process will also clear the AAPM field 162 (step 524) and return to retrieve the current protocol (step 502) and continue as described above.
When a request to enter the programming mode of operation has been received (decision point 522) and the timer 166 has not expired and a transaction has not been initiated at the FD 16, the process will determine whether authorization to enter the programming mode has been received (decision point 526). Should there be a system malfunction or other problem with the FD 16, such as a memory problem, the AAPM field 162 may not be set. Accordingly, if it is determined that the authorized to enter programming mode field 162 is not set or is corrupted, the process will perform an action to clear the AAPM field 162 (step 524) and return to retrieve the current protocol (step 502) and continue as described above. When a determination is made that the AAPM field 162 is set and that programming has been authorized and is still allowed (decision point 526), the process will reset the timer 166 (step 528). The timer 166 may be used and set in this situation to an amount of time sufficient to allow most programming operations to be completed at the FD 16. Accordingly, the timer 166 may be used, as will be described in more detail below, to remove the FD 16 from the programming mode of operation should the attendant or technician fail to remove the FD 16 from the programming mode of operation during the programming sequence. The process will then enter the programming mode of operation (step 530).
It should be noted that use of the AAPM field 162 may be optional for purposes of the functionality with respect to controlling access to the programming mode of operation for the FD 16. The timer 166 may be used as described above to manage entry into and exit from the programming mode of operation for the FD 16 without use or maintenance of the AAPM field 162. Use of the AAPM field 162 is described to demarcate the window of opportunity within which programming may be performed. Accordingly, additional uses for the AAPM field 162 are envisioned. For example, a flag may be either logged with a time stamp and/or polled from an remote source, such as the SC 32 or one of the POS devices 28 and 30, for maintenance and/or troubleshooting purposes when one of the remote sources has been used to issued a request to enter the programming mode of operation. Furthermore, the AAPM field 162 may be used by the attendant or technician while at the FD 16 to verify that the FD 16 was placed into the programming mode of operation by a previously-issued request.
For ease of illustration, detailed representations of programming operations will not be described herein.
The process may use a determination that the timer 166 has expired or that a transaction has been initiated to signal that the attendant or technician did not properly exit the programming mode of operation. Furthermore, if a transaction is initiated while the FD 16 is in the programming mode of operation, an appropriate error or alarm condition may be signaled to the attendant or technician and logging may be used to capture information associated with the transaction, such as price per unit, quantity dispensed and related information.
The process will iterate between determining whether programming is complete (decision point 532), whether the timer 166 has expired (decision point 534), and whether a transaction has been started (decision point 536) until one of the three conditions is true.
When the timer 166 has expired, the programming is complete, or a transaction is started, the process will exit the programming mode (step 538), clear the AAPM field 162 (step 524), return to retrieve the current AAPM protocol (step 502), and continue as described above. Because the current AAPM protocol field 164 is one field that may be programmed during the programming mode of operation, retrieving the current AAPM protocol will ensure that the most recently programmed AAPM protocol is used.
As described above, the wireless device 23 may be used by an attendant, technician, or other authorized personnel as an authorization terminal to generate the AAPM signal and any associated signaling included within an AAPM protocol from a location proximate to the FDs 16 to allow the authorized person to place any of the FDs 16 into the programming mode of operation without having to repeatedly travel between the central building 12 and the FDs 16 to generate the AAPM signaling from one of the POS devices 28 and 30 or the SC 32, or to repeatedly request that the remote system 42 generate the AAPM signaling.
Those skilled in the art will recognize improvements and modifications to the preferred embodiments of the present invention. All such improvements and modifications are considered within the scope of the concepts disclosed herein and the claims that follow.
Number | Name | Date | Kind |
---|---|---|---|
4627552 | Yoshida et al. | Dec 1986 | A |
5299135 | Lieto et al. | Mar 1994 | A |
5369401 | Haines | Nov 1994 | A |
5663887 | Warn et al. | Sep 1997 | A |
5831861 | Warn et al. | Nov 1998 | A |
6360138 | Coppola et al. | Mar 2002 | B1 |
6360141 | Jensen | Mar 2002 | B1 |
6374208 | Ferris et al. | Apr 2002 | B1 |
6525644 | Stillwagon | Feb 2003 | B1 |
6536664 | Nordqvist et al. | Mar 2003 | B2 |
6688342 | Lewis | Feb 2004 | B2 |
6845907 | Enright | Jan 2005 | B1 |
6850816 | Garratt | Feb 2005 | B2 |
6857505 | Mason et al. | Feb 2005 | B1 |
RE39234 | Ostendorf et al. | Aug 2006 | E |
7565307 | Pinkus | Jul 2009 | B1 |
7597252 | Dewitt | Oct 2009 | B1 |
20030028285 | Zura et al. | Feb 2003 | A1 |
20030195655 | Spano, Jr. et al. | Oct 2003 | A1 |
20040011621 | Olbrich | Jan 2004 | A1 |
20040020744 | Blum | Feb 2004 | A1 |
20040249718 | Kuroda et al. | Dec 2004 | A1 |
20050182681 | Bruskotter et al. | Aug 2005 | A1 |
20050262027 | Hutchinson et al. | Nov 2005 | A1 |
20060040603 | Nishimura et al. | Feb 2006 | A1 |
20060190129 | DeLine et al. | Aug 2006 | A1 |
20080040287 | Harrell et al. | Feb 2008 | A1 |
Number | Date | Country | |
---|---|---|---|
20080154427 A1 | Jun 2008 | US |