Vending machines with field-programmable electronic locks

Abstract

A vending machine uses a field-programmable electronic lock that learns a key code from a corresponding electronic key. The electronic lock has a learning process activation device that is accessible when the door of the vending machine is in the open position. Using the learning process activation device, a service person activates the electronic lock to perform a key code learning operation, in which the electronic lock receives a key code transmitted from an electronic key and stores the key code in a non-volatile memory for future access control of the vending machine. Data encryption is employed in the communications between the key and the lock to ensure the security of the communications. A communication device installed in the vending machine for communicating with a home base computer allows the operation of the electronic lock to be remotely controlled for access control and auditing purposes.

1 . An access control system for a plurality of vending machines wherein each vending machine has a door openable for accessing contents of each vending machine and an electronic lock for unlocking the door of each vending machine, the access control system comprising: 
 at least one electronic key comprising:    a microcomputer;    a wireless communication interface for transmitting and receiving communications over a wireless band;    a non-volatile memory having stored therein at least one operation limit parameter, and computer executable instructions for performing an encryption operation based on an encryption code; and    an activation device connected to the microcomputer and operable for generating an activation signal for triggering the microcomputer to initiate an access code transmission operation in which the microprocessor performs the encryption operation to encrypt a value including an access code, and the wireless communication interface is used to transmit the encrypted value,    wherein the microcomputer is programmed to perform a bi-directional challenge-response process during a key transmission operation with an electronic lock on a vending machine using encrypted communications through the wireless communication interface; and    at least one key management system for management of electronic keys used to access electronic locks of vending machines, comprising:    a computer having a software program for key management functionality;    a memory containing key management data; and    a key reader communicating with the computer for interfacing the computer with an electronic key; the software program having computer-executable instructions for performing an key programming operation with the steps of:    retrieving from the memory information of a user of the key and at least one operation limit parameters for said key;    sending the at least one operation limit parameter through the key reader to the key for writing into a memory of the key; and    each electronic lock comprising an electronic control circuit including a microprocessor, a memory and a wireless communication interface for transmitting and receiving wireless communications, the microcomputer being programmed to perform a bi-directional challenge-response process with an electronic key using encrypted communications through the wireless communication interface, wherein during the challenge-response process the microcomputer receives an encrypted value including an access code transmitted from the electronic key, decrypts the received value and compares the received access code with a code stored in the memory of the electronic lock, and unlocks the door of the vending machine if the received access code matches code stored in the memory.    
   
   
       2 . The access control system of  claim 1  wherein said electronic lock memory contains computer-executable instructions for performing a decryption operation based on an encryption code and performs a decryption operation to decrypt a received access code.  
   
   
       3 . The access control system of  claim 1  wherein said operation limits are retrieved from the memory based on an identification number or a name associated to the key.  
   
   
       4 . The access control system of  claim 3  wherein the operation limits can be modified at a docking station to either be equal or unique for a plurality of electronic keys.  
   
   
       5 . The access control system of  claim 1  wherein the operation limit parameters in the key include at least one of the following parameters: number of days, days of the week, hours of the day, number of vending machine accesses, at least one vendor identification number.  
   
   
       6 . The access control system of  claim 1  wherein the electronic lock memory contains identification codes of a plurality of electronic keys that attempted to access the lock.  
   
   
       7 . The access control system of  claim 6  wherein said memory of key identification codes in the electronic lock is transmitted to the key during the lock access event.  
   
   
       8 . The access control system of  claim 1  wherein the electronic key contains a memory consisting of a plurality of key identification codes of electronic keys that attempt to access at least one vending machine.  
   
   
       9 . The access control system of  claim 8  wherein said key identification codes are transferred to the docking station during a key download operation.  
   
   
       10 . The access control system of  claim 9  wherein said key identification codes are transferred to a memory accessible by the docking station.  
   
   
       11 . The access control system of  claim 9  wherein said key identification codes are displayed at the docking station.  
   
   
       12 . The access control system of  claim 1  wherein a plurality of vending machine lock identification numbers are transferred to the electronic key memory during the key programming operation.  
   
   
       13 . The access control system of  claim 1  wherein the communication between the key and the lock during an access control event is initiated by wireless signal by the key.  
   
   
       14 . The access control system of  claim 1  wherein the key and the lock are powered by individual non-common power sources.  
   
   
       15 . The access control system of  claim 1  wherein the electronic lock controller receives commands through a communication port to enable or disable the electronic lock.  
   
   
       16 . The access control system of  claim 15  wherein the vending machine contains a controller separate from the electronic lock and sends the enable or disable commands to the electronic lock.  
   
   
       17 . The access control system of  claim 1  wherein the electronic key includes an enunciator to display key operation messages to the user of the key.  
   
   
       18 . The access control system of  claim 17  wherein said messages are annunciated visually to the user during operation of the key with a lock.  
   
   
       19 . The access control system of  claim 1  wherein a lock reader tool comprises a communication port to communicate with an electronic lock to receive and annunciate lock operation messages to the user.  
   
   
       20 . The access control system of  claim 1  wherein the access code is a lock identification number.  
   
   
       21 . A vending machine comprising: 
 a door openable to access contents of the vending machine;    an electronic lock for unlocking the door of each vending machine; and an electronic key comprising:    a microcomputer;    a wireless communication interface for transmitting and receiving communications over a wireless band;    a non-volatile memory having stored therein an access code, and computer executable instructions for performing an encryption operation based on an encryption code; and    an activation device connected to the microcomputer and operable for generating an activation signal for triggering the microcomputer to initiate an access code transmission operation in which the microprocessor performs the encryption operation to encrypt the access code stored in the non-volatile memory, and the wireless communication interface is used to transmit the encrypted access code;    wherein the microcomputer is programmed to perform a bi-directional challenge-response process during a key transmission operation with an electronic lock on a vending machine using encrypted communications through the wireless communication interface; and,    an electronic lock for unlocking the door of the vending machine, the electronic lock comprising a control circuit including a microcomputer, a non-volatile memory, a wireless communication interface for receiving wireless-communications, and a learning mode activation device, the microcomputer being programmed to perform steps of receiving a learning mode activation signal from the learning mode activation device and, in response to the learning mode activation signal, receiving a first access code in an encrypted form via the wireless communication interface, and store the first access code in the non-volatile memory.    
   
   
       22 . The vending machine of  claim 21  wherein each electronic lock comprising an electronic control circuit including a microprocessor, a non-volatile memory containing computer-executable instructions for performing a decryption operation based on an encryption code, and a wireless communication interface for transmitting and receiving wireless communications, the microcomputer being programmed to perform a bi-directional challenge-response process with an electronic key using encrypted communications through the wireless communication interface, wherein during the challenge-response process the microcomputer receives a key code transmitted from the electronic key in an encrypted form, performs the decryption operation to decrypt the received key code, compares the decrypted received key code with a key code stored in the non-volatile memory of the electronic lock, and unlocks the door of the vending machine if the decrypted received key code matches the key code stored in the non-volatile memory.  
   
   
       23 . The vending machine of  claim 21  wherein at least one key management system for management of electronic keys used to access electronic locks of vending machines, comprising: 
 a computer having a software program for key management functionality;    a memory containing key management data; and    a key reader communicating with the computer for interfacing the computer with an electronic key;    the software program having computer-executable instructions for performing an key programming operation with the steps of:    retrieving from the memory information of a user of the key and operation limit parameters for said user; and,    sending the operation limit parameters through the key reader to the key for writing into a memory of the key.    
   
   
       24 . The vending machine of  claim 23  whereby the operation limits can be modified at a docking station to either be equal or unique for a plurality of electronic keys.  
   
   
       25 . The vending machine of  claim 23  wherein said operation limits are retrieved from the memory based on an identification number or a name associated to the key.  
   
   
       26 . The vending machine of  claim 23  wherein the operation limit parameters in the key include at least one of the following parameters: number of days, days of the week, hours of the day, number of accesses, at least one vendor identification number.  
   
   
       27 . The vending machine of  claim 21  wherein the electronic lock memory contains identification codes of a plurality of electronic keys that attempted to access the lock.  
   
   
       28 . The vending machine of  claim 27  wherein said memory of key identification codes in the electronic lock is transmitted to the key during the lock access event.  
   
   
       29 . The vending machine of  claim 21  wherein the electronic key contains a memory consisting of a plurality of key identification codes of electronic keys that attempt to access at least one vending machine.  
   
   
       30 . The vending machine of  claim 29  wherein said key identification codes are transferred to the docking station during a key download operation.  
   
   
       31 . The vending machine of  claim 30  wherein said key identification codes are transferred to a memory accessible by the docking station.  
   
   
       32 . The vending machine of  claim 30  wherein said key identification codes are displayed at the docking station.  
   
   
       33 . The vending machine of  claim 21  wherein a plurality of vending machine lock identification numbers are transferred to the electronic key memory during the key programming operation.  
   
   
       34 . The vending machine of  claim 21  wherein the communication between the key and the lock during an access control event is initiated by wireless signal by the key.  
   
   
       35 . The vending machine of  claim 21  wherein the key and the lock are powered by individual non-common power sources.  
   
   
       36 . The vending machine of  claim 21  wherein the electronic lock controller receives commands through a communication port to enable or disable the electronic lock.  
   
   
       37 . The vending machine of  claim 36  wherein the vending machine contains a controller separate from the electronic lock and sends the enable or disable commands to the electronic lock.  
   
   
       38 . The vending machine of  claim 21  wherein the electronic key includes an enunciator to display key operation messages to the user of the key.  
   
   
       39 . The vending machine of  claim 37  wherein said messages are annunciated visually to the user during operation of the key with a lock.  
   
   
       40 . The vending machine of  claim 21  wherein a lock reader tool comprises a communication port to communicate with an electronic lock to receive and annunciate lock operation messages to the user.  
   
   
       41 . The vending machine of  claim 21  wherein during the learn procedure the lock will store the access code only if the encryption code in the key is equal to the encryption code in the lock.  
   
   
       42 . The vending machine of  claim 21  wherein the lock will enter into the learn mode of operation if the vending machine door is unlocked.