Control device comprising a housing and a circuit board assembly

Abstract

The invention relates to a control device (1) comprising a housing (2) and a circuit board assembly (3). The invention provides that the circuit board assembly (3) has two switching devices which are connected by a locking mechanism (11) in a release position (15) into a release switching combination in which the switching devices are switched to respective release switching states (19), and the circuit board assembly (3) has a fault detection device (20) which is configured to detect the switching states of the switching devices and to detect a fault if a switching combination of the switching devices does not correspond to either the locking switching combination or the release switching combination.

Description

[0001] The invention relates to a control device comprising a housing and a circuit board assembly.

[0002] For certain control devices, it may be desirable to prevent the opening of the housing containing a circuit board or to document any opening of the housing. These control devices can include, for example, digital tachographs. With digital tachographs, it is particularly desirable to be able to document unauthorized opening of the housing in order to prove tampering with the control device. For other control devices, documentation of the opening of the housing may be necessary to verify the validity of a warranty claim.

[0003] German patent application DE 10 2008 047 449 A1 discloses an enclosure with a detachable bottom and an electrical detection device for detecting the removal of the bottom, thus enabling the detection of tampering attempts on the enclosure. US patent application 2018 / 0 260 588 A1 discloses an electronic device comprising an enclosure and an electronic card arrangement located within the enclosure.

[0004] According to current technology, it is common practice to affix seals or tamper-evident seals to the housings of the control devices in question, which are damaged when the housing is opened. However, the application of seals or tamper-evident seals is insufficient for certain control devices.

[0005] It is an object of the invention to provide a solution that makes it possible to detect an opening in the housing of a control device.

[0006] This problem is solved by the subject matter of the independent patent claims. Advantageous embodiments and further developments of the invention are the subject matter of the dependent patent claims, the description, and the figures.

[0007] The present invention relates to a control device comprising a housing and a circuit board assembly. The control device can, in particular, be a digital tachograph, a toll collection device, or a logging device intended for installation in a vehicle. The circuit board assembly can comprise a circuit board on which electronic components for operating the control device can be arranged. The circuit board assembly can include a housing element designed to enclose the circuit board together with the housing.

[0008] The circuit board assembly is held in a final assembly position within the housing by the housing. Thus, after assembly of the control device, the circuit board assembly is located in the predetermined final assembly position within the housing. During assembly, the circuit board assembly can be moved into this position through an opening in one direction. The housing may include fastening elements that correspond to the circuit board assembly to secure it within the housing.

[0009] The circuit board assembly includes a receiving device designed to receive a module of the control device and hold it in a predetermined final assembly position. The receiving device is therefore configured to receive and hold the module in this predetermined final assembly position. The module can be, for example, a card reader or a storage device that can be inserted into the receiving device.

[0010] The receiving device has a locking mechanism designed to mechanically lock the module assembly in its final assembly position within the receiving device when the locking mechanism is in its locked position. Conversely, when the locking mechanism is in its released position, it mechanically releases the module assembly in its final assembly position within the receiving device. In other words, the locking mechanism is designed to either lock the module assembly, depending on its position, to prevent its removal from the receiving device, or to release it to allow its removal.The locking mechanism can, for example, be designed to limit movement of the module assembly in the locked position, preventing it from being removed from the module assembly's final mounting position in the receiving device. The locking mechanism can, for example, include features that correspond to a shape of the module assembly.

[0011] The circuit board assembly is designed to have two switching devices. A first switching device is arranged at a first switching position, while a second switching device is arranged at a second switching position. The first and second switching devices are arranged with respect to the locking mechanism such that, in the locking position of the locking mechanism, they are connected in a locking switching combination in which the switching devices are in their respective locking states.The switching devices are arranged with respect to the interlocking mechanism such that the first switching device and the second switching device are connected by the interlocking mechanism in the enable position to an enable switching combination in which the switching devices are in their respective enable states. In other words, the switching devices are arranged with respect to the interlocking mechanism such that the interlocking mechanism connects the switching devices to the interlock switching combination when the mechanism is in the interlocking position. Furthermore, the switching devices are arranged such that the interlocking mechanism connects them to the enable switching combination when the interlocking mechanism is in the enable position. It is provided that both the first and the second switching devices are switched.Consequently, switching between the two switching combinations involves switching both the first and the second switching device.

[0012] The circuit board assembly includes a fault detection device configured to monitor the switching states of the switching devices and to detect a fault if a switching combination of the switching devices does not match either the interlock switching combination or the enable switching combination. The fault detection device is therefore equipped to identify the switching combination of the switching devices that does not match either the interlock switching combination or the enable switching combination.

[0013] For example, a situation may arise in which one of the switching devices is tampered with to allow unauthorized opening of the control device's housing. This tampering can cause the manipulated switching device to remain in the locked state, even though the locking mechanism has been moved to the unlocked position. In this case, however, the switching states of the other switching devices change. This can result in a switching combination that is neither the locked nor the unlocked switching combination. By detecting the occurrence of this switching combination, the fault detection device can identify the tampering.

[0014] The invention is characterized by the fact that unauthorized, undetectable opening of the control device for manipulation purposes is made more difficult. This is because both switching devices must be manipulated to open the device in a way that is not traceable.

[0015] The resulting increased effort required for any manipulations and / or the easier detection of such manipulations or attempts thereof thus contributes to increased security.

[0016] The invention also includes further developments that result in additional advantages.

[0017] A further development of the invention provides that the locking mechanism has an actuating element configured to switch the second switching device from the release state to the locked state when the locking mechanism is moved from the release position to the locked position. The actuating element is configured to hold the second switching device in the locked state when the locking mechanism is in the locked position. In other words, the locking mechanism has the actuating element configured to mechanically interact with the second switching device to adjust the switching state of the second switching device depending on the position of the locking mechanism.The actuating element can be, for example, a latch that assumes a corresponding position depending on the position of the locking mechanism and moves relative to the second switching device when transitioning between positions. This movement can include translational and / or rotational motion. Through this movement, the actuating element can act on a lever element of the second switching device to move it, thereby changing the switching state of the second switching device. The actuating element can also be configured to block movement of the lever element of the switching device in order to hold the lever element in the locked switching state. This can be provided, for example, if the second switching device has a return element, such as a spring, which is configured to move the lever element towards the unlocked switching state.

[0018] A further development of the invention provides that the housing has a rib which, in the circuit board final assembly position, is arranged between the locking mechanism and the second switching device. An opening is formed in the rib. At least in the locked position of the locking mechanism, the actuating element projects through the opening. In other words, the locking mechanism and the second switching device are spatially separated by the rib. The rib can, for example, run between the locking mechanism and the second switching device. The rib has the opening. The opening is arranged such that the actuating element projects through the opening at least when the locking mechanism is in the locked position.

[0019] A further development of the invention provides that the second switching device has a lever element, wherein the lever element projects through the opening at least in the enable switching state. The rib is configured to move the lever element of the second switching device into the enable switching state or a fault switching state when the circuit board assembly is moved from the predetermined circuit board end-assembly position against the assembly direction. In other words, the lever element is located in the opening at least when the second switching device is switched into the enable switching state or the fault switching state. The lever element and the opening are coordinated such that when the circuit board assembly is moved from the circuit board end-assembly position against the assembly direction, the lever element interacts with the rib in such a way that the lever element is irreversibly switched.For example, it can be designed so that the lever element is pressed against an edge of the opening by the movement of the circuit board assembly against the mounting direction, thereby switching the position. The lever element can also have a hook that can engage with the edge. The lever element and the opening can be aligned in such a way that the lever element is irreversibly switched. The lever element can, for example, be broken off or pulled out of the second switching device in the enable or fault switching state. The fault detection device can detect the fault by sensing the fault switching state or by setting the second switching device to the enable switching state, which can lead to the deviating switching combination. This improved design has the advantage that it detects when the control device is opened by moving the circuit board assembly against the mounting direction.

[0020] A further development of the invention provides that the actuating element is configured to block further movement of the circuit board assembly when it is moved against the assembly direction from the predetermined circuit board end assembly position. In other words, the actuating element of the locking mechanism is configured to prevent further movement of the circuit board assembly against the assembly direction. For example, it can be provided that, when the circuit board assembly moves against the assembly direction, the actuating element rests on an edge of the opening and thus prevents further movement of the circuit board assembly.

[0021] According to a further embodiment of the invention, the control device is designed as a digital tachograph. The control device can be a digital tachograph that complies with Commission Implementing Regulation (EU) 2016 / 799 of 18 March 2016 implementing Regulation (EU) No 165 / 2014 of the European Parliament and of the Council laying down requirements for the construction, testing, installation, operation and repair of tachographs and their components, digital tachographs.

[0022] A further development of the invention provides that the module device is a card reader. In other words, the module device is a device for reading electronic cards, in particular chip cards. The card reader device can have a slot that can protrude through the housing element of the circuit board device.

[0023] To record the switching states and log the fault, the fault detection device may be provided with a processor circuit containing programming or software that includes program instructions. The processor circuit may include at least one microprocessor and / or microcontroller. The program instructions may be stored in a data memory of the processor circuit.

[0024] The invention also includes combinations of the features of the described embodiments.

[0025] An embodiment of the invention is described below. The following is shown: Fig. 1 a schematic representation of a control device in which the locking mechanism is in a locked position; and Fig. 2 a schematic representation of a control device in which the locking mechanism is in a release position.

[0026] The embodiment described below is a preferred embodiment of the invention. In this embodiment, the described components each represent individual features of the invention that can be considered independently of one another. Each of these features further develops the invention independently and can therefore be considered part of the invention individually or in a combination other than that shown. Furthermore, the described embodiment can also be supplemented by other features of the invention already described.

[0027] In the figures, functionally identical elements are each provided with the same reference symbols.

[0028] Fig. Figure 1 shows a schematic representation of a control device in which the locking mechanism is in a locked position.

[0029] The control device 1 can be in an assembled state. The control device 1 can have a housing 2. The housing 2 can be designed to hold a circuit board assembly 3 of the control device 1 in a predetermined circuit board final assembly position 4 within the interior 5 of the housing 2. The circuit board assembly 3 can comprise a housing element 7 and a circuit board 6. The circuit board 6 can have components 8 for operating the control device 1. The housing element 7 can be a front panel of the housing 2. The circuit board assembly 3 can have a receiving device 9. The receiving device 9 can be designed to receive a module assembly 10. The module assembly 10 can, for example, be inserted into or removed from the receiving device 9 via the housing element 7.

[0030] The control device 1 can have a locking mechanism 11. The locking mechanism 11 can be designed to mechanically lock the module assembly 10 in the receiving device 9 depending on its position, in order to block removal of the module assembly 10 from the receiving device 9, or to release the module assembly 10 in the receiving device 9, in order to allow removal of the module assembly 10 from the receiving device 9.

[0031] The position of the locking mechanism 11 can be adjusted by a locking lever 12. When the locking mechanism 11 is in a locked position 14, the module assembly 10 can be held in its final module assembly position 13. In this position, a form element of the locking mechanism 11 can engage with a corresponding form of the module assembly 10 to block movement of the module assembly 10 out of the receiving device 9.

[0032] Actuation of the locking lever 12 can move the locking mechanism 11 into a release position 15, in which the module assembly 10 can be removed from the receiving device 9. The mold element can then be guided out of the mold of the module assembly 10, so that it no longer blocks the movement of the module assembly 10.

[0033] The control device 1 can have a protection mechanism to log any manipulation of the control device 1 for traceability purposes. The protection mechanism comprises two switching devices and a fault detection device 20. Manipulation typically occurs through unauthorized opening of the control device 1, whereby the circuit board assembly 3 can be led out of the housing 2 contrary to the mounting direction 25.

[0034] The circuit board assembly 3 can have a first switching device 16 and a second switching device 17. The switching devices can be arranged with respect to the locking mechanism 11 such that the switching devices are in a locking switching state 18 when the locking mechanism 11 is in the locking position 14. In the shown locking position 14, the locking mechanism 11 can, for example, press against the lever element 24 of the second switching device 17, thereby holding it in its locking switching state 18. The first switching device 16 can have a lever element that, by means of a return mechanism, can move the first switching device 16 into its locking switching state, because in the locking position 14 there is no limitation of the travel path by the locking mechanism 11.If both switching devices are in their interlock switching state 18, an interlock switching combination exists.

[0035] Likewise, the switching devices can be switched to enable states 19 when the locking mechanism 11 is in the enable position 15. The enable position 15 is in Fig. 2 shown.

[0036] The control device 1 can include the fault detection device 20, which can determine the respective switching states of the switching devices. If the position of the locking mechanism 11 changes, the switching states of the two switching devices change as described. Consequently, the switching combination changes. The fault detection device 20 is configured to determine whether a locking switching combination or an enabling switching combination is present.

[0037] If one of the switching devices is tampered with by affixing adhesive tape, it can remain in its current switching state despite a change in the position of the locking mechanism 11. In this case, the switching devices can therefore have different switching states, meaning that the switching combination does not correspond to either the locking switching combination or the enabling switching combination. The fault detection device 20 can be configured to detect this switching combination as a fault and store it in a memory unit of the fault detection device 20.

[0038] To prevent the circuit board assembly 3 from being removed from the housing 2 in this position, the housing 2 may be provided with a rib 22, which can be arranged between the locking mechanism 11 and the second switching device 17. The rib 22 may have an opening 23 through which the actuating element 21 can protrude and press against the lever element 24 of the second switching device 17 to hold the second switching device 17 in the locked switching state. If the circuit board assembly 3 is moved against the mounting direction 25, the actuating element 21 can be moved against an edge of the rib 22 that limits the opening 23. This prevents further movement of the circuit board assembly 3.

[0039] Fig. Figure 2 shows a schematic representation of a control device 1 in which the locking mechanism 11 is in a release position 15.

[0040] In the release position 15, the locking mechanism 11 can press against the first switching device 16 and switch it into the release switching state. In the release position 15, the actuating element 21 can be spaced apart from the lever element 24 of the second switching device 17, which can cause the second switching device 17 to be in the release switching state. The lever element 24 can thus project into the opening 23. The lever element 24 can be designed such that, when the circuit board assembly 3 moves against the mounting direction 25, it moves against the edge of the rib 22 that delimits the opening 23. This allows the lever element 24 to be irreversibly switched to a specific switching state. The switching state can be detected and logged as an error by the fault detection device 20.

[0041] The opening and closing mechanism of the control device 1 can therefore be modified such that the locking lever 12, which is used for opening and closing, has an actuating element 21 that can extend through the opening 23 of the rib 22 and actuate the lever element 24 of the second switching device 17. This ensures that one of the switching devices is always pressed. This can be stored as a safety feature. In other words, the fault detection device 20 can be configured to require that the switching devices be in either the locking switching combination or the enabling switching combination.Should the housing 2 be opened for manipulation, or should one of the switching devices be glued shut, this will be detected at the latest when the receiving device 9, in which the module device 10 is located, is opened next time and recorded as manipulation in software of the fault detection device 20 and / or a storage unit of the fault detection device 20.

[0042] Opening the housing 2 inevitably leads to the destruction of the second switching device 17 if it is not glued in place. The destruction is caused by the shape of the opening 23, which is a recess in the rib 22, and makes it impossible to press the lever element 24 of the second switching device 17.

[0043] Both events are detected as errors by the fault detection device 20. For the installation of the chip card slot, the gripper must be modified so that it presses the second switching device 17 at the rib 22. Otherwise, the second switching device 17 may be damaged during installation.

[0044] Overall, this example shows how the detection of an opening in a housing 2 of a control device 1 can be made possible. Reference symbol list 1 Control device 2 cases 3 Circuit board setup 4 Circuit board end assembly position 5 Interior 6 circuit boards 7 Housing element 8 components 9. Reception facility 10 Module setup 11 Locking mechanism 12 locking levers 13 Module final assembly position 14 Locking position 15 Release position 16 first switching device 17 second switching device 18 locking switching states 19 enabling states 20 Fault detection device 21 Actuator 22nd rib 23 Opening 24 Lever element 25 Mounting direction

Claims

[1] Control device (1) comprising a housing (2) and a circuit board assembly (3), wherein, - the circuit board assembly (3) is held by the housing (2) in a predetermined circuit board final assembly position (4) in an interior (5) of the housing (2), - the circuit board assembly (3) has a receiving device (9) which is configured to receive a module assembly (10) of the control device (1) and to hold it in a predetermined final assembly position of the module assembly (10); - the receiving device (9) has a locking mechanism (11), wherein the locking mechanism (11) is configured to mechanically lock the module device (10) in the final assembly position in the receiving device (9) in a locking position (14) of the locking mechanism (11), and to mechanically release the module device (10) in the final assembly position in the receiving device (9) in a release position (15) of the locking mechanism (11), characterized by , that - the circuit board assembly (3) has two switching devices (16, 17), wherein a first switching device (16) of the switching devices (16, 17) is arranged at a first switching position, a second switching device (17) of the switching devices (16, 17) is arranged at a second switching position; - the first switching device (16) and the second switching device (17) are arranged with respect to the locking mechanism (11) such that the first switching device (16) and the second switching device (17) are switched by the locking mechanism (11) in the locking position (14) into a locking switching combination in which the switching devices (16, 17) are switched into respective locking switching states (18); - the first switching device (16) and the second switching device (17) are switched by the locking mechanism (11) in the release position (15) into a release switching combination in which the switching devices (16, 17) are switched to their respective release switching states (19); and - the circuit board device (3) has a fault detection device (20) which is configured to detect the switching states of the switching devices (16, 17) and to detect a fault if a switching combination of the switching devices (16, 17) does not match either the interlock switching combination or the enable switching combination. [2] Control device (1) according to claim 1, characterized by , that the locking mechanism (11) has an actuating element (21) which is configured to switch the second switching device (17) from the release switching state to the locking switching state when the locking mechanism (11) is changed from the release position (15) to the locking position (14), and to keep the second switching device (17) in the locking switching state when the locking mechanism (11) is in the locking position (14). [3] Control device (1) according to claim 2, characterized by , that - the housing (2) has a rib (22) which, in the circuit board final assembly position (4), is arranged between the locking mechanism (11) and the second switching device (17), wherein the rib (22) forms an opening (23), and - the actuating element (21) protrudes through the opening (23) at least in the locking position (14) of the locking mechanism (11). [4] Control device (1) according to claim 3, characterized by , that - the second switching device (17) has a lever element (24), wherein the lever element (24) protrudes through the opening (23) at least in the enable switching state, wherein the rib (22) is configured to irreversibly place the lever element (24) of the second switching device (17) into the enable switching state or a fault switching state when the circuit board device (3) is guided against the mounting direction (25) from the predetermined circuit board end mounting position (4). [5] Control device (1) according to any one of the preceding claims 2 to 4, characterized by , that the actuating element (21) is designed to block further movement of the circuit board assembly (3) when the circuit board assembly (3) is guided against the assembly direction (25) from the specified circuit board end assembly position (4). [6] Control device (1) according to any one of the preceding claims, characterized by , that the control device (1) is set up as a tachograph. [7] Control device (1) according to any one of the preceding claims, characterized by , that the module device (10) is a card reader device.

Images