Authentication at mail machines

Abstract

Method for loading and / or unloading a mailing machine (2) with mail (6) by a user (5) with a vehicle (3) or for preparing therefor, wherein the user is a deliverer and the vehicle is a delivery vehicle, the method comprising: - Authenticating the user (5) on the vehicle (2); - bringing the vehicle (2) into communication range for communication with the automatic transmission device (3); - Authenticating the vehicle (2) at the automatic shipment machine (3); - detecting, at the automatic mailing machine (3), the presence of the user (5) at the automatic mailing machine (3) to carry out a loading and / or unloading activity; - activating a delivery operating mode of the automatic mailing machine (3); and - Authenticating the user (5) at the mailing machine (3) in the delivery operator operating mode, wherein the presence of the user (5) is detected by a specific interaction of the user (5) with a user interface of the mailing machine (3), and wherein the delivery operator operating mode comprises further services or functions that are not intended for the customer.

Description

FIELD OF THE INVENTION

[0001] The present invention relates, inter alia, to methods and devices which are used in the context of loading and / or unloading a mailing machine or the preparation thereof, in particular during authentication at the mailing machine. BACKGROUND OF THE INVENTION

[0002] Shipments, such as small items (e.g., parcels), that are addressed to specific individuals are usually handed over personally to authorized individuals, which may, in some circumstances, be another household member or a neighbor, to ensure that the shipment does not fall into unauthorized hands. However, it is possible that the addressee or a person authorized to receive the shipment cannot be found, meaning that the delivery cannot be made, and another attempt must be made at the same or another location. This significantly increases the logistical effort and can result in the addressee of the shipment or the person authorized to receive the shipment only receiving it very late.If the recipient of the shipment or the person authorized to receive it picks up the shipment from a collection point, such as a branch of a company transporting the shipment, this is often time-consuming and laborious. This is especially true if the shipment is handed over in person, as there is often a waiting period until the recipient of the shipment or the person authorized to receive the shipment can accept it.

[0003] For this reason, shipments can be deposited in automated mail handling systems, such as packing stations, upon request. These may, for example, have storage units, particularly lockers, and the shipments can be opened at a later or any time by an authorized person using an access card, code, or other means to remove the shipment from the corresponding storage unit. Such automated mail handling systems can also be used to send shipments, with a customer depositing a shipment to be sent in a storage unit or locker of the automated mail handling system.

[0004] However, the shipment machines must be loaded with the shipment to be delivered by the company transporting and delivering the shipment, or shipments stored therein must be removed from the shipment machine by the transport company.

[0005] Various methods for loading and / or unloading mail machines, into which mail items must be loaded by a deliverer or from which mail items must be unloaded by a deliverer, or for preparing this process in different designs, are known from the state of the art.

[0006] For example, it's possible that the delivery person has an identification card and also knows a PIN (linked to the card). When the delivery person then reaches a mail handling machine, they must first insert their card into the machine or at least hold it in a reading area so that the card, or identification information on it, can be electronically or optically recorded. The delivery person is then asked to enter the PIN. Finally, the delivery person can load or remove mail items from the mail handling machine.

[0007] One disadvantage of the described method is that it is comparatively time-consuming, and the delivery person loses valuable time simply by completing the two-step authentication process. While it would be conceivable to limit the delivery person's authentication to using only the ID card or PIN, for example, this would compromise security.

[0008] However, even with the described two-step authentication process, the procedure still requires improvements in terms of security. For example, the ID card can easily be lost or left behind by the delivery person at the mailing machine. This is particularly critical if a delivery person also writes their PIN on the ID card or on a piece of paper attached to the card.

[0009] While it would be conceivable to increase security by requiring additional authentication steps for the delivery person, this would take time and have a negative impact on the speed of the process.

[0010] DE 10 2014 105241 A1 describes a locking unit for a parcel box or a parcel mailbox for receiving letters and parcels to be delivered, with at least two doors for locking the respective housing openings.

[0011] "Data Protection in the Car. The Car as a Large Smartphone with Wheels. Parts 1 and 2," Thilo Weichert, ROAD TRAFFIC LAW 14.6&7, December 3, 2018, describes the use of mobile information technology in motor vehicles.

[0012] DE 10 2016 209 380 A1 describes a method by which a vehicle can automatically carry out payment transactions with a payment device after a user has authenticated himself on the vehicle.

[0013] The present invention therefore has the object of providing a particularly time-saving, safe and customer-friendly method for loading and / or unloading a mailing machine or for preparing the same. GENERAL DESCRIPTION OF SOME EXEMPLARY EMBODIMENTS OF THE INVENTION

[0014] According to a first aspect, a method for loading and / or unloading a mailing machine with mail items by a user with a vehicle or for preparing therefor is described according to patent claim 1 or alternatively according to patent claim 15.

[0015] A parcel machine is understood, for example, to be a parcel station, a parcel machine and / or a parcel box. A parcel station is generally understood to be an (at least partially automated) collection and / or delivery point for parcel shipments, such as a parcel machine or a parcel box. A parcel machine is understood, for example, to be a Packstation. A parcel box is understood, in particular, to be a (private) house mailbox through which the customer can receive and / or post parcels and / or packages. The parcel machine can therefore, in particular, enable the receipt and / or postage of parcels and packages for a customer.

[0016] The shipment machine can, for example, have one or more (especially a plurality of) storage units (e.g., lockers). A storage unit can, for example, hold a shipment. Opening a storage unit within a process is only possible, for example, by the user (delivery agent) and the respective recipient or sender.

[0017] In this context, a shipment is preferably understood to mean a small consignment. A small consignment is, for example, a book shipment, a small parcel, a package, or a consignment of goods. However, a shipment can also be a bulky consignment. Small consignments and bulky consignments usually do not fit into standard mailboxes and must therefore be regularly delivered or picked up using the described automated delivery systems. Nevertheless, the shipment can also be a letter, for example, a letter or a postcard.

[0018] In this case, the user is a delivery person, meaning, in particular, an employee of the transport company transporting the shipment. Even if the delivery person not only loads shipments to be delivered into the delivery machine but also unloads shipments to be sent from the delivery machine, the term "delivery person" is always used in this case. The user is, in particular, also the driver or passenger of the vehicle.

[0019] The vehicle can also be configured for autonomous driving or can drive autonomously. The user can be present in the vehicle without having to drive it. Alternatively, the user can also be absent from the vehicle or even ride along.

[0020] The mailing machine can also be used by customers, i.e. the persons to whom the respective mail is addressed (recipients) or who wish to send a mail item (senders).

[0021] The user (delivery agent) must load the automatic mailing machine if a shipment is to be deposited in the automatic mailing machine and delivered to a recipient via the automatic mailing machine. The user (delivery agent) must unload the automatic mailing machine if a shipment is to be removed from the automatic mailing machine and sent by a sender via the automatic mailing machine.

[0022] The vehicle is particularly designed to transport a large number of corresponding shipments (delivery vehicle). For example, the vehicle is a freight vehicle, in particular a delivery van. For example, the vehicle is a motor vehicle. For example, the vehicle is a partially or fully electrically powered vehicle (electric vehicle).

[0023] By authenticating the user (delivery person) on the vehicle, it can initially be ensured that an authorized person is using the vehicle for the purpose of loading and / or unloading a shipment vending machine. For example, starting the vehicle is not possible without authentication. For example, authentication of the user on the vehicle is an action independent of starting the vehicle and can occur before or after starting. For example, authentication is typically only necessary once during a delivery tour or over the course of a day. For example, the user authenticates themselves (once) at the start of their delivery tour. Authentication can comprise an action by the user, the vehicle, or both. For example, authentication can comprise the user providing authentication information.Authentication can, for example, involve the vehicle receiving authentication information (from the user). For example, authenticating the user on the vehicle associates the delivery person and the vehicle with each other.

[0024] For example, authentication takes place using an object belonging to the user which carries or stores corresponding authentication information, knowledge of the user, or a characteristic of the user. Examples of objects belonging to the user are a (physical) personalized ignition key or an identification card (e.g. an employee ID card) belonging to the user. Authentication can take place using a portable electronic device, for example a Radio Frequency Identification Tag (RFID tag), in particular a Near Field Communication Tag (NFC tag), but also a card on which corresponding authentication information is stored, for example in a chip or a magnetic strip. Alternatively or additionally, authentication can take place using an optically readable code, for example a barcode, in particular a two-dimensional barcode, which is generated by the vehicle (ora device connected to or integrated into it). Examples of user knowledge include a password, a PIN, or an answer to a security question. Authentication is then performed by the user, for example, at an input field or an interface in the vehicle. An example of a user characteristic that can be used for authentication is a biometric characteristic of the user, such as a fingerprint, face, behavior, voice, or iris.

[0025] In any case, the vehicle or a corresponding device considered as part of the vehicle may have appropriate means to carry out such authentication.

[0026] If the vehicle is brought within communication range for communication with the mailing machine, the vehicle and the mailing machine can receive mutually sent signals and in particular establish a communication connection. Communication between the vehicle and the mailing machine is carried out in particular on the basis of local radio technology, such as in accordance with Radio Frequency Identification (RFID) technology, in accordance with the Near Field Communication (NFC) standard, in accordance with the Bluetooth (Bluetooth LE) standard and / or in accordance with a Wireless Local Area Network (WLAN), for example in accordance with the IEEE 802.11 standard. For this purpose, the vehicle and the mailing machine can each have corresponding communication interfaces for sending and / or receiving corresponding signals. Bringing the vehicle within communication range of the mailing machine typically occurs when approaching a corresponding mailing machine.

[0027] If the vehicle and the automatic mailing machine are within communication range, the vehicle can be authenticated to the automatic mailing machine. In this case, too, authentication can involve an action by the vehicle, the automatic mailing machine, or both. For example, authentication can involve the vehicle providing authentication information. Authentication can include, for example, the automatic mailing machine receiving authentication information (from the vehicle).

[0028] For example, authentication establishes a secure, particularly encrypted, connection between the vehicle and the automated mail system. Authentication involves the (encrypted) transmission of a nonce. For example, a challenge-response procedure is used, as described further below.

[0029] By authenticating the vehicle at the automated mailing machine, it is possible to eliminate actions and steps that the user must perform at the automated mailing machine, such as the manual use of an identification card by the user at the automated mailing machine, as described above. This not only results in advantageous time savings, but also has security-related implications. With a vehicle, the risk of loss, which exists with an identification card that can be used at every automated mailing machine, is eliminated. Furthermore, the problem of a PIN recorded on the identification card, as described above, can be advantageously circumvented.

[0030] The vehicle can thus be viewed as a (hardware) token that serves for authentication at the mailing machine. A particularly advantageous aspect is that the vehicle used is not just any hardware token. This is because the user must first authenticate themselves at the vehicle before the vehicle can be authenticated at the mailing machine. The vehicle and user can therefore be viewed as a logical unit, of which only the vehicle then needs to authenticate itself at the mailing machine. In other words, by authenticating the vehicle at the mailing machine, the user is also indirectly or implicitly authenticated at the mailing machine due to the fact that the user has first authenticated themselves at the vehicle.

[0031] Authenticating the vehicle at the shipment machine can represent one factor of multi-factor authentication (e.g. two-factor authentication).

[0032] Furthermore, an optional (explicit) authentication of the user can take place at the mailing machine. The authentication of the user can take place, for example, as already described in connection with the authentication of the user at the vehicle, to which reference is made here, i.e. in particular by means of an object, knowledge, or a property of the user. As also already described, the authentication can comprise an action of the user, the mailing machine, or both. For example, the authentication can comprise the user providing authentication information. Authentication can comprise, for example, the mailing machine receiving authentication information (from the user). The authentication of the user at the mailing machine can represent one factor of multi-factor authentication (e.g., two-factor authentication).

[0033] The authentication of the user at the mailing machine can be dispensed with, in particular, if the vehicle is an autonomous vehicle and the user is not present in the vehicle.

[0034] As a result, a faster and at the same time safer method for loading and / or unloading a mailing machine or for preparing for such loading and / or unloading can be specified compared to the state of the art.

[0035] According to a second aspect, a device is also described, configured for carrying out or comprising means for carrying out the method according to the first aspect. The device can, in particular, be the mailing machine or a part thereof.

[0036] According to a third aspect, a system is also described comprising: - a mailing machine and - a vehicle, wherein the system is arranged to carry out the method according to the first aspect or comprises corresponding means.

[0037] For example, a corresponding device (that is, in particular, the mailing machine and / or the vehicle) comprises at least one processor and at least one memory, wherein a program comprising program instructions is stored in the memory, wherein the memory and the program are configured to, with the processor, at least cause the device to execute one or more of the exemplary methods according to the first aspect when the program is executed on the processor. A processor is to be understood, for example, as a control unit, a microprocessor, a microcontrol unit such as a microcontroller, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), or a field-programmable gate array (FPGA).

[0038] For example, an exemplary device further comprises means for storing information, such as a program memory and / or a main memory. For example, an exemplary device according to the invention further comprises means for receiving and / or transmitting information via a network, such as a network interface. For example, exemplary devices according to the invention are connected and / or connectable to one another via one or more networks.

[0039] An exemplary device is configured, for example, in software and / or hardware, to be able to carry out individual or all steps of an exemplary method according to the first aspect.

[0040] According to a fourth aspect, a computer program product is also described, comprising program instructions for carrying out a method according to the first aspect when the program is executed on a processor.

[0041] An exemplary program according to the invention can be stored in or on a computer-readable storage medium which contains one or more exemplary programs and is designed, for example, as a magnetic, electrical, electromagnetic, optical and / or other type of storage medium. Such a computer-readable storage medium is preferably tangible (i.e. “touchable”), for example, it is designed as a data carrier device. Such a data carrier device is, for example, portable or permanently installed in a device. Examples of such a data carrier device are volatile or non-volatile random access memories (RAM), such as NOR flash memories, or sequential access memories, such as NAND flash memories, and / or read-only or read-write memories (ROM). Computer-readable should be understood, for example, to mean that the storage medium can be read by a computer orcan be read and / or written by a data processing system, for example by a processor.

[0042] According to an exemplary embodiment of the aspects, the user is authenticated at the mailing machine using an authentication method independent of the vehicle. This can further increase the security of the method. This is because possession of the vehicle (on which the user has already authenticated, for example) is then not sufficient, for example, to obtain full access to the mailing machine. As already explained, while the vehicle can be viewed as one factor of multi-factor authentication, the user's authentication at the mailing machine can in particular be viewed as a further (e.g., second) factor of a multi-factor authentication method (e.g., two-factor authentication).As already explained, the authentication method can be designed in different ways and can, for example, involve the user entering a PIN at the mailing machine.

[0043] According to a further exemplary embodiment of the aspects, for the authentication of the user at the vehicle, authentication information of the user is obtained at the vehicle; and / or for the authentication of the vehicle at the automatic shipment machine, authentication information of the vehicle is obtained at the automatic shipment machine; and / or for the authentication of the user at the automatic shipment machine, authentication information of the user is obtained at the automatic shipment machine.

[0044] Accordingly, to authenticate the user at the vehicle, authentication information may be provided from the user to the vehicle; and / or to authenticate the vehicle at the mailing machine, authentication information may be provided from the vehicle to the mailing machine; and / or to authenticate the user at the mailing machine, authentication information may be provided from the user to the mailing machine.

[0045] Authentication information may depend on the particular authentication method used. The respective authentication information may be appropriate for the respective authentication method.

[0046] Authentication information may include, for example, a password, a digital key and / or a digital certificate.

[0047] In one example, the authentication information provided by the vehicle to and received from the mailing machine is based at least in part on the user's authentication information received at the vehicle. That is, the vehicle's authentication information may depend on, for example, be generated based on, or include the user's authentication information.

[0048] According to a further exemplary embodiment of the aspects, the authentication of the user at the vehicle, the authentication of the vehicle at the mailing machine, and / or the authentication of the user at the mailing machine comprises a challenge-response process. The respective authentication can therefore be regarded as challenge-response authentication. Challenge-response authentication is understood in particular to be a secure authentication process in which one party transmits a corresponding challenge and the other party transmits a response, thereby proving that it knows certain information, but in particular without transmitting this information itself. For example, the challenge-response process comprises the transmission of a nonce. For example, the challenge-response process is based on the use of a hash function.

[0049] According to a further exemplary embodiment of the aspects, the authentication of the vehicle at the automatic shipment machine takes place exclusively and / or automatically when the vehicle is within communication range with and / or closer than a predetermined spatial distance to the automatic shipment machine.

[0050] If the vehicle is within communication range of and / or closer than a specified spatial distance to a mailing machine, this typically also applies the other way around, meaning the mailing machine is then within communication range of the vehicle and / or closer than a specified spatial distance to the vehicle. For example, a mailing machine is within communication range of the vehicle if a reachability test from the vehicle to the mailing machine (and / or vice versa) is successful. A reachability test is, for example, a ping request. If the reachability test is successful, it can be assumed that a communication connection can be established and, in particular, authentication can be performed.The spatial distance between the vehicle and the delivery machine can be determined, for example, by knowing the current spatial position of the vehicle (e.g., based on a satellite navigation system or another source) and the spatial position of the delivery machine, and by comparing these positions. The spatial distance can also be determined using the round-trip time or round-trip delay of messages or data packets exchanged between the vehicle and the delivery machine. The spatial distance can also be determined using the reachability test by measuring the ping time or ping duration. The spatial distance can, for example, be the direct distance (as the crow flies). Alternatively, the spatial distance can also be understood as the distance that must be covered in the corresponding transport network.A predefined spatial distance is, for example, 1km, 500m, 100m or 50m, so that authentication only occurs if the vehicle is closer than this distance to the shipment machine.

[0051] This way, no further user interaction is required. Instead, the vehicle is automatically authenticated at the shipping machine when the user approaches the shipping machine, saving even more time.

[0052] According to a further exemplary embodiment of the aspects, the method further comprises: - repeated automatic checking by the vehicle whether a transmission device is within communication range and / or closer than a specified spatial distance; and - Establish a communication connection with the automatic dispatcher if the check shows that the automatic dispatcher is within communication range and / or closer than a specified spatial distance.

[0053] As already explained, checking whether a mailing machine is within communication range and / or closer than a specified spatial distance can be determined, for example, by comparing the determined or known spatial positions of the vehicle and the mailing machine, or preferably by measuring the round-trip time or the round-trip delay of a ping (preferably sent by the vehicle). Establishing the communication connection between the vehicle and the mailing machine can, in particular, include or consist of the authentication already described.

[0054] According to a further exemplary embodiment of the aspects, the vehicle is registered with the mailing machine upon or after the vehicle has been authenticated at the mailing machine, and / or the user is registered with the mailing machine upon or after the user has been authenticated at the mailing machine. The registration can thus occur through the authentication or comprise a separate step. By registering, the user can, for example, use certain services of the mailing machine, in particular services of the mailing machine specifically intended for deliverers (and not for customers).

[0055] Since the user has initially authenticated themselves to the vehicle, as already explained, a registration of the vehicle at the mailing machine can also be implicitly considered a registration of the user. However, it is possible that after this (implicit) registration of the user, a further (explicit) authentication by the user at the mailing machine is required.

[0056] According to a further exemplary embodiment of the aspects, the vehicle repeatedly automatically checks whether a mailing machine is within communication range and / or closer than a predetermined spatial distance, even if the vehicle has been authenticated at a mailing machine. In this way, it can be determined quickly and without further action by the user that the vehicle has moved to another (now closer) mailing machine (for example, because the ping time is now the shortest), and the vehicle can be authenticated accordingly at the now nearest mailing machine.

[0057] According to a further exemplary embodiment of the aspects, the authentication of the vehicle at the mailing machine is maintained as long as the vehicle is within communication range for communication with the mailing machine and / or a communication connection exists between the mailing machine and the vehicle and / or no other authentication takes place at the mailing machine. Accordingly, the authentication of the vehicle at the mailing machine can be revoked if the vehicle is outside of communication range for communication with the mailing machine and / or a communication connection between the mailing machine and the vehicle is interrupted and / or another authentication takes place at the mailing machine. Another authentication can, for example, be authentication by another user (delivery person) or by a customer.This also helps to make the process of loading and / or unloading a mailing machine or the preparation thereof as time-saving and safe as possible for the user.

[0058] According to a further exemplary embodiment of the aspects, if multiple mailing machines are within communication range of the vehicle, the vehicle is preferably authenticated at the mailing machine that is spatially closest. Typically, loading and / or unloading is desired at the mailing machine that is spatially closest to the vehicle. By performing authentication at the corresponding mailing machine, the user can further save time, since this typically results in the vehicle being authenticated at the desired mailing machine.

[0059] The procedure also includes: - detecting, at the consignment machine, the presence of the user at the consignment machine to carry out a loading and / or unloading activity; and - Activating a delivery operating mode of the shipment machine.

[0060] The user (delivery person) can generally access different services or functions of the mailing machine than a customer. To prevent, for example, a customer who is currently present at the mailing machine from gaining access to services or functions that are not intended for them because the user's (delivery person) vehicle is en route and nearby, it is recorded whether the user is even present. Only then is a delivery person operating mode activated. As explained, the delivery person operating mode includes, for example, additional services or functions that are not intended for the customer and to which a customer does not normally have access. The delivery person operating mode is characterized, for example, by the fact that precisely this access to the services or functions is possible.For example, the delivery mode also includes a different graphical user interface (if the delivery machine has a corresponding graphical user interface).

[0061] The user's presence is detected through a specific interaction of the user with a user interface of the mailing machine. The user interface can be an input device, such as a switch, or a combined input / output device, for example a touch screen. The input device can advantageously also be the input device used by the customer. The specific interaction is preferably a non-obvious action. For example, the user interface is already hidden or not easily recognizable. In the event that the user interface is, for example, the touch screen also used by the customer, it can be the actuation of a graphical user element that is not obviously intended to be actuated.

[0062] The user is authenticated at the mailing machine in the delivery mode. For example, the user can only be authenticated at the mailing machine in the delivery mode. For example, the user must first activate the delivery mode, for example, through a specific interaction described above, before the user can be authenticated at the mailing machine. For example, only after activating the delivery mode will a user element become accessible to the user, via which the user can enter appropriate authentication information, such as a PIN.

[0063] According to a further exemplary embodiment of the aspects, re-authentication of the user and / or the vehicle at the automatic shipment machine and / or registration of the user and / or the vehicle at the automatic shipment machine is not required as long as communication between the vehicle and the automatic shipment machine is not interrupted or is not interrupted for longer than a predetermined period of time. The predetermined period of time is, for example, in the range of seconds or minutes. This can prevent, for example, brief connection disruptions from leading to repeated authentications and thus to a loss of time for the user.

[0064] According to a further exemplary embodiment of the aspects, the method further comprises: - Recording, at the automatic mailing machine, of mailing information of mail items to be loaded or loaded into or from the automatic mailing machine; and / or - Loading shipments into the shipment machine; and / or - Loading shipments from the shipment machine.

[0065] The shipment information is, for example, information associated with the respective shipment (to be loaded into or out of the shipment machine). For example, the shipment information includes a reference number, a shipment number, sender information, and / or recipient information. For example, the shipment information is applied (optically) to the respective shipment, for example, using human- or machine-readable writing (e.g., a barcode). Alternatively or additionally, the shipment information can also be read electronically from the shipments, for example, via a local radio connection, such as RFID (e.g., NFC) technology.

[0066] To load shipments into or out of the automated shipment machine, for example, a storage unit of the automated shipment machine is opened. The user can then place the shipment into or remove it from the storage unit. The storage unit is then closed again.

[0067] Alternatively, especially if the vehicle is autonomous, loading and / or unloading, i.e., loading shipments into the automated mailing machine or unloading shipments from the automated mailing machine, can also be carried out automatically, i.e., by the vehicle and / or the automated mailing machine. This can be done, for example, by means of a loading device, for example, comprising a gripper arm and / or a conveyor belt.

[0068] According to a further exemplary embodiment of the aspects, the user is a delivery person and the vehicle is a delivery vehicle. As already explained, the described method is particularly advantageous for a delivery person with a delivery vehicle, since the method allows the delivery person to load and / or unload the automatic mailing machine in a safe yet time-saving manner.

[0069] According to a further exemplary embodiment of the aspects, the parcel delivery machine is a parcel station, a parcel machine, and / or a parcel box. As already explained, a parcel station is a (at least partially automated) collection and / or delivery point for parcel shipments, such as a parcel machine or a parcel box.

[0070] The exemplary embodiments of the present invention described in this description are also to be understood as disclosed in all combinations with one another. In particular, the disclosure of a method step is intended to also disclose corresponding means for carrying out the corresponding method step. Likewise, a means for carrying out a method step is also intended to disclose the corresponding method step.

[0071] Further advantageous exemplary embodiments of the invention can be found in the following detailed description of some exemplary embodiments of the present invention, particularly in conjunction with the figures. However, the figures are intended only for the purpose of illustration and not to define the scope of the invention. The figures are not to scale and are intended merely to reflect the general concept of the present invention by way of example. In particular, features contained in the figures should in no way be considered a necessary part of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS Fig. 1 is a block diagram of an embodiment of a device, exemplary of devices according to the invention; Fig. 2a-c an embodiment of a system according to the invention comprising a vehicle and a mailing machine; and Fig. 3 a flowchart of an embodiment of a method according to the invention. DETAILED DESCRIPTION OF SOME EXEMPLARY EMBODIMENTS OF THE INVENTION

[0072] Fig. Figure 1 initially shows a block diagram of an exemplary embodiment of a device 1 according to the invention, which can carry out an exemplary method according to the invention. The device shown can in particular be a module or part of a vehicle or a mailing machine, such as vehicle 2 or mailing machine 3 from Fig. 2). For example, the device 1 is permanently integrated into a vehicle or a mailing machine.

[0073] Processor 10 of the device 1 is designed in particular as a microprocessor, microcontrol unit, microcontroller, digital signal processor (DSP), application-specific integrated circuit (ASIC) or field-programmable gate array (FPGA).

[0074] Processor 10 executes program instructions stored in program memory 12 and stores, for example, intermediate results or the like in working or main memory 11. For example, program memory 120 is a non-volatile memory such as flash memory, magnetic memory, EEPROM (electrically erasable programmable read-only memory), and / or optical memory. Main memory 11 is, for example, a volatile or non-volatile memory, in particular a random access memory (RAM) such as static random access memory (SRAM), dynamic random access memory (DRAM), ferroelectric random access memory (FeRAM), and / or magnetic random access memory (MRAM).

[0075] Program memory 12 is preferably a local data storage medium permanently connected to the device 1. Data storage media permanently connected to the device 1 include, for example, hard disks built into the device 1. Alternatively, the data storage medium can also be, for example, a data storage medium that can be detachably connected to the device 1, such as a memory stick, a removable storage medium, a portable hard disk, a CD, a DVD, and / or a floppy disk.

[0076] Program memory 12 contains, for example, the operating system of device 1, which is at least partially loaded into main memory 11 upon startup of device 1 and executed by processor 10. In particular, upon startup of device 1, at least a portion of the core of the operating system is loaded into main memory 11 and executed by processor 10. The operating system of device 1 is, for example, a Windows, UNIX, Linux, Android, Apple iOS, and / or MAC operating system.

[0077] The operating system enables, in particular, the use of device 1 for data processing. It manages, for example, resources such as main memory 11 and program memory 12, network interface 13, and input and output device 14, provides basic functions to other programs through programming interfaces, among other things, and controls the execution of programs.

[0078] Processor 10 controls the communication interface 13, which can be a network interface, for example, and can be designed as a network card, network module, and / or modem. The communication interface 13 is particularly designed to establish a connection between the device 1 and other devices, in particular via a (wireless) communication system, for example a network, and to communicate with them. The communication interface 13 can, for example, receive data (via the communication system) and forward it to processor 10 and / or receive data from processor 10 and send it (via the communication system). Examples of a communication system are a local area network (LAN), a wide area network (WAN), a wireless network (for example according to IEEE 802.11a).11 standard, the Bluetooth (LE) standard and / or the NFC standard), a wired network, a cellular network, a telephone network and / or the Internet.

[0079] Communication interface 13 (e.g. as a communication interface of the vehicle 2 or the automatic transmission device 3, cf. Fig. 2) can be used in particular to provide and / or receive authentication information as described.

[0080] Furthermore, processor 10 can control at least one input / output device 14. Input / output device 14 is, for example, a keyboard, a mouse, a display unit, a microphone, a touch-sensitive display unit (touch screen), a speaker, a reader, a drive, and / or a camera. Input / output device 14 can, for example, receive inputs from a user and forward them to processor 10 and / or receive and output information for the user from processor 10.

[0081] Also input / output device 13 (e.g. as input / output device of the vehicle 2 or the automatic mailing machine 3, cf. Fig. 2) can be used in particular to provide and / or receive authentication information as described.

[0082] Fig. 2a - 2c now show an embodiment of a system according to the invention comprising a vehicle 2 and a mailing machine 3. Also shown is a user, here a deliverer 5, who also drives the vehicle 2.

[0083] Vehicle 2 is a delivery vehicle capable of transporting a plurality of shipments. Delivery vehicle 2 includes, in particular, at least one communication interface or input device for receiving authentication information from the delivery person 5. The vehicle also has a communication interface for sending authentication information to the automatic shipment machine 3.

[0084] In this case, the automatic shipment machine 3 is designed as a packing station. The automatic shipment machine comprises a plurality of storage units in the form of lockers 4 in which respective shipments can be deposited. The automatic shipment machine 3 has at least one communication interface for receiving authentication information from the vehicle 2. Furthermore, the automatic shipment machine 3 has an input / output device via which both customers and the delivery person 5 can interact with the automatic shipment machine. The automatic shipment machine is designed, in particular, to detect the presence of the delivery person 5 and to receive authentication information from the delivery person 5 using the input / output device.

[0085] The Fig. 2a-c depicted loading process of the automatic shipment machine 3 with parcels 6 (see Fig. 2c) will now be discussed in connection with Fig. 3 described in more detail. Fig. 3 shows a flowchart 300 of an embodiment of a method according to the invention.

[0086] In a first step, delivery person 5 authenticates himself on the vehicle, action 301. For example, at the start of his delivery route, delivery person 5 authenticates himself once on delivery vehicle 2 to verify his identity. This can be done, for example, using a personalized ignition key or by reading the employee ID card on a permanently installed card reader.

[0087] Then the delivery person 5 starts his delivery tour and takes the vehicle 2 to the delivery machine 3 and finally comes within communication range of the delivery machine 3, action 302, as well as in Fig. 2a.

[0088] In this case, vehicle 2 repeatedly and automatically checks (using a ping procedure) whether a transmission device is within communication range and / or closer than a specified spatial distance (e.g., 100 m), action 303.

[0089] When the vehicle comes close to the automatic shipment machine 3, a connection is established, for example via Bluetooth, (semi-active) RFID or WLAN, as indicated by arrow 7 in Fig. 2a. Authentication of vehicle 2 at the mailing machine 3 takes place via a secure connection, action 304. The delivery agent 5 assigned to vehicle 2 remains logged on to the mailing machine 3 via connection 7, provided that vehicle 2 has successfully authenticated itself to the mailing machine 3 using a sufficiently secure authentication method (e.g., an encrypted transmission using the challenge-response method, with the nonce also being transmitted in encrypted form), as long as the connection is (essentially) uninterrupted, and no other user authenticates or logs on to the mailing machine.

[0090] In any case, if the connection between the vehicle and the automatic transmission device is (permanently) interrupted, a check is carried out again to determine whether a automatic transmission device is within communication range or closer than the specified spatial distance (action 303).

[0091] If several delivery machines are within communication range at the same time or closer than the specified spatial distance, a connection is always established with the nearest delivery machine (determined, for example, by the shortest ping time).

[0092] The ping procedure can still be carried out even if authentication or registration at a mail machine is already in place.

[0093] As long as the vehicle is authenticated at the automated mailing machine, but the delivery person 5 has not yet confirmed their loading or unloading activity through an active action that is not readily recognizable (i.e., hidden) for normal customers (e.g., a specific action on the input / output device), the automated mailing machine 3 or the display of the automated mailing machine 3 does not switch to the delivery mode, but rather continues to run in the customer mode (normal operating screen). This ensures that customer registrations at the automated mailing machine are treated with priority and that no one can misuse the delivery mode.

[0094] If the presence of the deliverer 5 at the shipment machine 3 for carrying out a loading and / or unloading activity has now been detected (through the specific action or interaction of the deliverer 5), action 305, a deliverer operating mode of the shipment machine is activated, action 306.

[0095] Now, by means of an authentication method independent of the vehicle, the deliverer 5 can be authenticated at the consignment machine 3, action 307, as in Fig. 2b is shown with arrow 8. This can be done, for example, by entering a PIN or scanning a barcode on the employee ID card, to name just two examples.

[0096] If the connection between vehicle 2 and the automatic shipment machine 3 has been temporarily disconnected, no further authentication is necessary as long as the disconnection does not last longer than a specified period of time.

[0097] The deliverer 5 can now, with an existing connection between vehicle 2 and shipment machine 3, after his presence for loading or unloading has been confirmed by actions 305, 307, immediately begin to have shipment information recorded by the shipment machine without further authentication, action 308.

[0098] By the user 5 or alternatively also automatically by the vehicle 2 or the consignment machine 3, a loading of consignments 6 into the consignment machine 3 (shown as an example in Fig. 2c) or loading of shipments from the shipment machine 3, action 309.

[0099] At the end of the delivery route, delivery person 5 logs off from vehicle 2, thereby also terminating the authentication or association between delivery person 5 and vehicle 2. Should delivery person 5 forget to do so, this connection can be automatically terminated, for example, after a predetermined period of inactivity (e.g., at the vehicle), such as after several hours (e.g., after 6 hours).

[0100] The embodiments of the present invention described in this specification and the optional features and properties cited in relation to them are to be understood as disclosed in all combinations with one another. In particular, the description of a feature included in an embodiment - unless explicitly stated otherwise - should not be understood in this case to mean that the feature is essential or essential for the function of the embodiment. The sequence of the method steps described in this specification in the individual flow diagrams is not mandatory; alternative sequences of the method steps are conceivable. The method steps can be implemented in various ways; for example, an implementation in software (by program instructions), hardware, or a combination of both is conceivable for implementing the method steps.Terms used in the claims such as "comprise," "have," "include," "contain," and the like do not exclude further elements or steps. The phrase "at least partially" encompasses both "partially" and "completely." The phrase "and / or" is intended to indicate that both the alternative and the combination are disclosed; thus, "A and / or B" means "(A) or (B) or (A and B)." The use of the indefinite article does not exclude a plurality. A single device can perform the functions of several units or devices recited in the claims. Reference symbols specified in the claims are not to be construed as limitations on the means and steps employed. List of reference symbols 1 device 2 vehicles 3 shipment machine 4 lockers 5 users 6 broadcast 7 Connection 8 Authenticating the user 10 processor 11 Main memory 12 program memories 13 Communication interface 14 Output device 300 Flowchart

Claims

[1] Method for loading and / or unloading a mailing machine (2) with mail (6) by a user (5) with a vehicle (3) or for preparing therefor, wherein the user is a deliverer and the vehicle is a delivery vehicle, the method comprising: - Authenticating the user (5) on the vehicle (2); - bringing the vehicle (2) into communication range for communication with the automatic transmission device (3); - Authenticating the vehicle (2) at the automatic shipment machine (3); - detecting, at the automatic mailing machine (3), the presence of the user (5) at the automatic mailing machine (3) to carry out a loading and / or unloading activity; - activating a delivery operating mode of the automatic mailing machine (3); and - Authenticating the user (5) at the mailing machine (3) in the delivery operator operating mode, wherein the presence of the user (5) is detected by a specific interaction of the user (5) with a user interface of the mailing machine (3), and wherein the delivery operator operating mode comprises further services or functions that are not intended for the customer. [2] Method according to claim 1, wherein the authentication of the user (5) at the automatic mailing machine (3) is carried out by means of an authentication method independent of the vehicle (2). [3] Method according to claim 1 or 2, wherein - for the authentication of the user (5) on the vehicle (2), authentication information of the user (5) is obtained on the vehicle (2); and / or - for the authentication of the vehicle (2) at the automatic mailing machine (3), authentication information of the vehicle (2) is obtained at the automatic mailing machine (3); and / or - for the authentication of the user (5) at the mailing machine (3), authentication information of the user (5) is obtained at the mailing machine (3). [4] Method according to one of the preceding claims, wherein the authentication of the user (5) on the vehicle (2), the authentication of the vehicle (2) on the automatic mailing machine (3) and / or the authentication of the user (5) on the automatic mailing machine (3) comprises a challenge-response method. [5] Method according to one of the preceding claims, wherein the authentication of the vehicle (2) at the automatic mailing machine (3) takes place exclusively and / or automatically when the vehicle (2) is within communication range with and / or is closer than a predetermined spatial distance to the automatic mailing machine (3). [6] Method according to one of the preceding claims, further comprising: - repeated automatic checking by the vehicle (2) as to whether a transmission device (3) is within communication range and / or closer than a predetermined spatial distance; and - Establishing a communication connection with the automatic transmission device (3) if the check shows that the automatic transmission device (3) is within communication range and / or closer than a predetermined spatial distance. [7] Method according to one of the preceding claims, wherein by or after the authentication of the vehicle (2) at the automatic mailing machine (3) a registration of the vehicle (2) at the automatic mailing machine (3) takes place and / or by or after the authentication of the user (5) at the automatic mailing machine (3) a registration of the user (5) at the automatic mailing machine (3) takes place. [8] Method according to claim 6 and 7, wherein the repeated automatic checking by the vehicle (2) as to whether a mailing machine (3) is within communication range and / or closer than a predetermined spatial distance is carried out even if there is an authentication of the vehicle (2) at a mailing machine (3). [9] Method according to one of the preceding claims, wherein the authentication of the vehicle (2) at the automatic mailing machine (3) is maintained as long as the vehicle (2) is within communication range for communication with the automatic mailing machine (3) and / or a communication connection exists between the automatic mailing machine (3) and the vehicle (2) and / or no other authentication takes place at the automatic mailing machine (3). [10] Method according to one of the preceding claims, wherein, in the event that several automatic mailing machines (3) are located within communication range of the vehicle (2), authentication of the vehicle (2) preferably takes place at the automatic mailing machine (3) which is spatially closest. [11] Method according to one of the preceding claims, wherein a renewed authentication of the user (5) and / or the vehicle (2) at the automatic mailing machine (3) and / or registration of the user (5) and / or the vehicle (2) at the automatic mailing machine (3) is not required as long as the communication between the vehicle (2) and the automatic mailing machine (3) is not interrupted or is not interrupted for longer than a predetermined period of time. [12] A method according to any one of the preceding claims, wherein the method further comprises: - Recording, at the automatic mailing machine (3), of mailing information of mail items (6) to be loaded or loaded into or from the automatic mailing machine (3); and / or - Loading mail items (6) into the mail machine (3); and / or - Loading shipments (6) from the shipment machine (3). [13] Method according to one of the preceding claims, wherein the user (5) is a delivery person and the vehicle (2) is a delivery vehicle. [14] Method according to one of the preceding claims, wherein the automatic mailing machine (3) is a parcel station, a parcel machine and / or a parcel box. [15] Method for loading and / or unloading a mailing machine (3) with mail items (6) by a user (5) with a vehicle (2) or for preparing the same, wherein the user is a deliverer and the vehicle is a delivery vehicle, at least carried out by the mailing machine (3), the method comprising: - Authenticating the vehicle (2) at the automatic mailing machine (3) when the vehicle (2) is within communication range for communication with the automatic mailing machine (3), wherein the authentication of the vehicle (2) at the automatic mailing machine (3) requires a prior authentication of the user (5) at the vehicle (2); - detecting, at the automatic mailing machine (3), the presence of the user (5) at the automatic mailing machine (3) to carry out a loading and / or unloading activity; and - activating a delivery operating mode of the automatic mailing machine (3); and - Authenticating the user (5) at the mailing machine (3) in the delivery operator operating mode, wherein the presence of the user (5) is detected by a specific interaction of the user (5) with a user interface of the mailing machine (3), and wherein the delivery operator operating mode comprises further services or functions that are not intended for the customer. [16] Apparatus arranged to carry out or comprising means for carrying out the method according to one of claims 1 to 15. [17] System comprising: - a mailing machine (3) and - a vehicle (2), wherein the system is arranged to carry out the method according to one of claims 1 to 15 or comprises corresponding means. [18] A computer program product comprising program instructions for carrying out a method according to any one of claims 1 to 15 when the program is executed on a processor (10).

Images