For the purpose of facilitating an understanding of the subject matter sought to be protected, there are illustrated in the accompanying drawings embodiments thereof, from an inspection of which, when considered in connection with the following description, the subject matter sought to be protected, its construction and operation, and many of its advantages should be readily understood and appreciated.
Turning now to the drawings, and more particularly,
The Master Controller 9 controls the operation of all security devices (14, 15), making sure that all of them are in positions requested by the controlling software algorithm. In one embodiment, the control software may require the slave security devices (14, 15) to always follow the main security device 1. The Master Controller 9 keeps track of the multiple door positions and sends the appropriate signal for all the locks. In a preferred embodiment, if any of the doors is a swing out type, the door needs to be fully closed before its lock can operate. The electronic control system does not send driving signals to the motor 4, until the door sensor 3 confirms the door closure. Since both the Master Controller 9 and the slave controllers 12, have the door position information available, either one could be programmed to confirm that the door is closed before the motor signal is sent. Any of them can also record the lock position error condition and automatically correct the error condition when the door is closed.
The multiple lock system may use a sound-creating device 8, such as a buzzer, to communicate to a user the current system condition, request acknowledgements, and diagnostic information. In one embodiment, the system utilizes a battery backup 7 to operate all security devices when the main power is disconnected, or not sufficient. The system can be designed to operate from the main power source even if its voltage is lower than the backup battery voltage, to extend the backup battery useful life. The Master Controller 9 is designed to control the charging of the backup battery, if the main power source voltage meets an appropriate threshold. If below a certain threshold, no charging occurs, and if above charging is enabled.
The Master Controller 9 is designed to communicate with a computing device 11, such as a personal computer, a modem, a wireless link, a PDA or the like. In a preferred embodiment, the computing device uses a serial link, such as RS-232, RS-485, USB, or any other available communication link. The user may need to obtain a software license to be able to establish communication between the Master Controller 9 and the computing device 11. A typical PC software communication program and licensing process is described in the U.S. patent application Ser. No. 10/777,876 and is hereby incorporated herein by reference.
The second and third security devices 14 and 15 are designed to function as independent locks, in certain applications, however in a preferred application they follow directions from the Master Controller 9. This provides the advantage of allowing control of multiple locks working in one system. They are usually built with similar components as described with respect to the first security device, such as, they include position sensors 2, a motor 4, a latch 5, and a door sensor 3. Additionally, they use the slave controllers 12 to process position sensor inputs, measure temperature, and to drive the motor 4. Special wiring harnesses 13 are used to exchange information between Master Controller 9 and slave controllers 12. In one embodiment, the special wiring harness includes a three conductor wire for control, feedback, and temperature and door position information, respectively.
The multiple lock security system may contain one, two, or more slave locks, or may also contain one or more electronic devices to measure temperature and sense a door position. Examples of different system configurations are shown in
The third communication line is used to provide the temperature and door position information. In one embodiment, the third communication line is a shared line, with analog voltage between 0 and 5 V proportional to measured temperature value. If this line indicates zero voltage, that means the door is open and the temperature is not measured. Measuring temperature when the door is open may not be accurate, anyway. Once the door is closed, the temperature is again measured, and is designed to be proportional to the voltage.
A control pulse causes an action request, and a feedback signal acknowledges this request and the slave controller acts accordingly. In one embodiment the feedback line can be directly connected to a buzzer, or other sound generating device.
The temperature/door sensor only control module uses the same principle to communicate with the Master Controller 9. The control signal and the feedback line provide different numbers of pulses, to assure that this module is not confused with the slave lock, but the third line works exactly the same, that is, showing the temperature when the door is closed.
The multiple lock system could be calibrated by the Master Controller software to make sure that all temperature sensors read the same temperature prior to shipping and installation in a container. The control software can use any of the sensors for alarm conditions.
The advantage of the three wire interface is that if any wire is broken, the system promptly (within one locking or unlocking cycle) records an error condition. In a stand-alone application of the slave controller 12, a keypad, or an RF receiver is connected to the control line, and the feedback line is connected to a buzzer, or a warning light. In this case, a pulse from a keypad initiates a lock position change, and a buzzer may sound to confirm the successful completion.
In one embodiment, the slave controller is fully integrated with the security device to physically protect the electronics and minimize the potential of failure due to broken wires. In order to improve its reliability even further, a short locking pulse can be generated by the slave controller before each unlocking motor drive signal. This action helps in clearing any debris or ice accumulated in the latch area, and aids in a successful unlocking process. In a preferred embodiment, the short pulse helps to clear debris or ice by jarring and moving the ice or debris, to allow the latch to complete its later movement, only when moving from the locked to unlocked positions. As should be understood by those skilled in the art, the duration of the pulse can vary, and in a preferred embodiment the pulse can range in duration from 100 msec to one second. In more detail, since the temperature is being measured in a preferred embodiment, a longer pulse can be created if below freezing. For example, if below freezing it is more likely that there could be ice formation around the aperature (header retaining hole) through which the latch traverses.
Although any contamination appears less likely to occur in an unlocked position, the slave controller can also generate a short unlocking pulse before sending a full duration locking signal. That will clear any debris affecting the lock in the unlocked position.
The slave lock is designed to operate if one or both position sensors fail and the control signal is sent by the Master Controller 9. Sensors can fail shorted or open. If the lock position sensor fails, the unlocking still works normally with the appropriate feedback provided. Locking, however does not work properly. In case of the sensor failing open, the latch will not stop at the right spot, and no feedback is provided. In case of the shorted sensor, the latch will stay in an unlocked position, because the controller sees it already locked. Because there is no feedback, the Master Controller will record an error condition and will try to correct it by sending another request to lock. After a pre-programmed number of attempts to lock, the slave controller recognizes the failure and sends a five second locking pulse if the lock sensor is shorted, and sends the appropriate feedback to the Master Controller. A similar process occurs, in case of the unlocking sensor failure. In this case, the locking process works correctly, but unlocking does not work (either the latch overshoots if the sensor fails open, or it will not move if the sensor fails shorted). The slave controller is capable of recognizing the sensor failure, correcting it, and sending the appropriate feedback to the Master controller.
The feedback may consist of sending a number of pulses on the feedback line to indicate the specific failure and the current security device's position.
In case of both position sensor failures, several different algorithms could be implemented. If both sensors fail, the latch could change its position from unlocked to locked, or vice versa, by implementing a five second motor control pulses and ignoring the sensors. It is desirable though, to stop the operation of the security device, since the reason for failure is unknown, and the latch position cannot be positively confirmed, and therefore, the device could become permanently damaged.
The software control algorithm in the Master Controller 9 may choose to continue operating the slave locks in case of the position sensor failure, or it may disable it until the problem is fixed. The choice may be given to an end customer, to select the failure response mode using the PC software program which communicates with the Master Controller via the communication link.
Those skilled in the art will recognize that a wide variety of modifications, alterations and combinations can be made with respect to the above described embodiments without departing from the spirit and scope of the invention, and that such modifications etc. are to be viewed as being within the ambit of this invention.