Geo-secure access to container controllers

Abstract

An illustrative example embodiment of a controller associated with a container includes a processor and a memory. The controller is configured to generate a derived key based on global positioning system information corresponding to a location of the controller. The controller uses the derived key to authorize a user device.

Description

[Technical field]

[0001] Intermodal shipping containers are widely used to transport a variety of goods. The advantage of such containers is that they can be used by various carriers without unloading the container's contents. For example, the same container can be loaded, placed on a truck, taken to a shipping port, removed from the truck, and placed on a ship that will take the container, still loaded, to another location. Other transportation scenarios are possible with such containers. [Background technology]

[0002] Some shipping containers, such as those mentioned above, include systems for preserving perishable goods. For example, some containers include refrigeration circuits for providing air conditioning or cooling within the container. Depending on the details of the shipment, it may be necessary to adjust the operation of such systems one or more times between when the container is first loaded and when it arrives at its final destination. Often, multiple containers are stacked on top of each other, with multiple stacks arranged in close proximity to each other, making direct access to at least some of the containers impractical or impossible. There is a need for an alternative method of adjusting or controlling the operation of in-container systems, such as refrigeration systems, without direct access to the container.

[0003] One challenge associated with providing such control is maintaining security over access to and control of the system to ensure proper conditions for the container's contents. Another challenge is providing appropriate access to different authorized individuals at various times and locations along the container's travel route. What is needed is an efficient and secure method for monitoring and coordinating the operation of such on-board or in-container systems. Summary of the Invention [Means for solving the problem]

[0004] An illustrative example controller associated with the container includes a processor and a memory associated with the processor. The controller is configured to determine a derived key based on global positioning system information corresponding to a location of the controller. The controller is configured to determine a predicted communications passkey based on the derived key. The controller is configured to determine whether the user device is authorized based on a communications passkey received from the user device that corresponds to the predicted communications passkey. The controller is configured to allow the user device access to at least one function of the controller when the user device is authorized.

[0005] In an example embodiment having one or more of the features of the previous paragraph, the global positioning system information includes a current time and a current location of the controller, and the derived key is based on the current time and the current location.

[0006] In an exemplary embodiment having one or more features of the controller of any of the preceding paragraphs, the controller is configured to generate a communication session token having an expiration time. The communication session token is used by a user device to communicate with the controller. The derived key is valid for a predetermined period of time, and the expiration time is before the end of the predetermined period.

[0007] In an exemplary embodiment having one or more features of the controller of any of the preceding paragraphs, at least one function includes setting a target temperature for at least a portion of the interior of the container.

[0008] In an exemplary embodiment having one or more features of the controller of any of the previous paragraphs, the controller is configured to control a display to provide a visual indication of the derivative keys.

[0009] In an exemplary embodiment having one or more features of the controller of any of the preceding paragraphs, at least one of the controller or the container has a serial number, and the controller is configured to determine whether the user device is authorized based on receiving the serial number of at least one of the controller or the container from the user device.

[0010] In an example embodiment having one or more features of any of the controllers in the previous paragraph, the controller is configured to determine whether the user device is authorized based on receiving a user certificate from the user device.

[0011] An illustrative example method for managing communications between controllers associated with container devices includes determining a derived key based on global positioning system information corresponding to the locations of the controllers, determining a predicted communications passkey based on the derived key, determining whether the user device is authorized based on a communications passkey received from the user device that corresponds to the predicted communications passkey, and allowing the user device access to at least one function of the controller when the user device is authorized.

[0012] In an example embodiment having one or more features of the method of any of the preceding paragraphs, the global positioning system information includes a current time and a current location of the controller, and the derived key is based on the current time and the current location.

[0013] An example embodiment having one or more features of the method of any of the preceding paragraphs includes generating a communication session token for use by a user device to communicate with the controller, the communication session token having an expiration time, the derived key being valid for a predetermined period of time, the expiration time being prior to the end of the predetermined period.

[0014] In an exemplary embodiment having one or more features of the method of any of the preceding paragraphs, at least one function includes setting a target temperature for at least a portion of the interior of the container.

[0015] In an example embodiment having one or more features of the method of any of the previous paragraphs, at least one of the controller or the container has a serial number, and the method includes determining whether the user device is authorized based on receiving the serial number of at least one of the controller or the container from the user device.

[0016] An example embodiment having one or more features of the method of any of the preceding paragraphs includes determining whether the user device is authorized based on receiving a user certificate from the user device.

[0017] An illustrative example system includes, among other things, a plurality of containers, a plurality of controllers, each of the controllers associated with a respective one of the containers, and a plurality of cooling circuits, each of the cooling circuits associated with a respective one of the containers, each of the cooling circuits being controllable by a controller provided with each of the containers. A user device is configured to wirelessly communicate with each of the plurality of controllers. Each of the controllers is configured to determine a derived key based on global positioning system information corresponding to a location of the plurality of containers, determine a predicted communications passkey based on the derived key, determine whether the user device is authorized based on receiving a communications passkey corresponding to the predicted communications passkey from the user device, and permit the user device to access at least one function of the controller when the user device is authorized.

[0018] In an exemplary embodiment having one or more features of the system of the previous paragraph, the global positioning system information includes a current time and a current location of the controller, and the derived key is based on the current time and the current location.

[0019] In an exemplary embodiment having one or more features of the system of any of the previous paragraphs, at least one function includes setting a target temperature for at least a portion of the interior of each container.

[0020] In an exemplary embodiment having one or more features of the system of any of the preceding paragraphs, a display is supported on at least one of the containers, the display being controllable by a controller of each container, and the display providing a visual indication of the derived key.

[0021] In an example embodiment having one or more features of the system of any of the previous paragraphs, each of the controllers is configured to generate a communication session token having an expiration time, the communication session token being used by the user device to communicate with each controller, the derived key being valid for a predetermined period of time, and the expiration time being before or after the predetermined period.

[0022] In an example embodiment having one or more features of the system of any of the previous paragraphs, each controller is configured to determine whether a user device is authorized based on receiving at least one of the controller's serial number or the serial number of each container associated with the controller from the user device, or each controller is configured to determine whether a user device is authorized based on receiving a user certificate from the user device.

[0023] The various features and advantages of at least one disclosed exemplary embodiment will become apparent to those skilled in the art from the following detailed description. The drawings that accompany the detailed description can be briefly described as follows. [Brief description of the drawings]

[0024] [Figure 1]1 illustrates a schematic diagram of selected portions of a system designed in accordance with an embodiment of the present invention, including a controller associated with a container. [Diagram 2] 1 illustrates a schematic of a controller designed according to an embodiment of the present invention. [Diagram 3] FIG. 2 is a flow chart diagram summarizing an exemplary communication control policy designed in accordance with an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0025] 1 illustrates a container 20 that is part of a system 22 for communicating with and selectively controlling devices associated with the container 20. The illustrated exemplary container 20 is an intermodal container that is capable of being loaded and transferred between different carriers during a transportation cycle. Other types of containers may also be used in the system 22.

[0026] The exemplary container 20 has an associated refrigeration circuit 24 that provides cooling or temperature control to at least a portion of the interior of the container 20. The refrigeration circuit 24 operates in a generally known manner.

[0027] A controller 26 associated with the container 20 is configured to control operation of the cooling circuit 24, such as by setting a target temperature for the space within the container 20 where temperature control is desired. The controller 26 controls a display 28 supported by the container 20. In this embodiment, the display 28 is viewable from outside the container 20.

[0028] The controller 26 is configured to communicate with a user device 30, which allows an authorized individual to access at least one function of the controller 26. For example, the user device 30 may be used by an authorized individual to set a target temperature within the container 20, whereupon the controller 26 controls the operation of the cooling circuit 24 to achieve that temperature within the container 20. The user device 30 may also obtain information from the controller 26 regarding conditions within the container 20. Depending on the type of container 20 and any controllable devices supported by the container 20, the functions of the controller 26 accessible or controllable through the user device 30 will vary. Those skilled in the art having the benefit of this description will understand how to configure the controller 26 and user device 30 to provide the appropriate control functions to meet their particular needs.

[0029] The exemplary controller 26 is configured to communicate with the user devices 30 via a wireless link. Exemplary implementations include short-range wireless communication, such as Wi-Fi, Bluetooth, or Zigbee communication. In some implementations, the controller 26 and the user devices 30 communicate directly with each other. In other embodiments, such as the example shown in FIG. 1, each of the controller 26 and the user devices 30 is configured to communicate over a wireless local area network 32. Each of the user devices 30 and the controller 26 may communicate with an access point of the local area network 32 using known communication protocols.

[0030] One feature of the controller 26 is that it utilizes Global Positioning System (GPS) information for purposes of controlling communications with the user device 30 to maintain the functionality of the controller 26, the operation of the cooling circuit 24, and the safety of the state of the contents within the container 20. In the example of FIG. 1, the controller 26 has the ability to communicate with a GPS system 34 to obtain information regarding the location of the controller 26, which corresponds to the location of the container 20. The controller 26 in this example also uses information regarding the current time from the GPS system 34. For situations in which the controller 26 cannot directly obtain a GPS signal, a wireless local area network includes a GPS receiver 36 located in a location where access to a GPS signal is expected. The controller 26 may obtain GPS location and time information through the local area network in this embodiment.

[0031] Although not specifically shown, the system 22 includes a number of containers 20, each of which has its own associated controller 26. A user device 30 may communicate with each of those controllers to individually control each cooling circuit 24 or other device mounted on each container 20.

[0032] 2, the controller 26 includes a processor 40 and a memory 42 associated with the processor 40. In the illustrated embodiment, the processor 40 includes at least one hardware device. The memory 42 may be part of the same hardware device or may be a separate component. The memory 42 includes software code or instructions that cause the processor 40 to perform the functions of the controller 26 mentioned in this description.

[0033] The high entropy security token (HEST) or derived key (DK) generator module 44 includes software, firmware, or both that, when executed by the processor 40, generates derived keys that facilitate secure communication with the user device 30. The controller 26 also includes a security module 46, for example, to maintain secure access to the functions of the controller 26 and secure communication with the user device 30. The transceiver 48 allows the controller 26 to communicate with the user device 30, for example, via a local area network or a wireless link. In this embodiment, the controller 26 includes a GPS module 50 that allows the controller 26 to receive GPS information, such as the current time and current location. In this embodiment, the GPS module 50 includes a GPS receiver that can receive GPS signals directly from the GPS system 34. If the GPS receiver is unable to receive GPS signals directly, the controller 26 obtains GPS information through a local area network that includes another GPS receiver 36, such as the one described above.

[0034] FIG. 3 is a flow chart diagram 60 summarizing an exemplary approach for maintaining security for communications with the controller 26 and for maintaining security for the operation or functions of the controller 26. In FIG. 3, the functions or operations shown on the left side are performed by the controller 26, while the functions or operations shown on the right side are performed by the user device 30. In this example, an authorized individual initiates an access attempt using the user device 30 because the individual wishes to obtain information from the controller 26 about the interior of the container 20 or otherwise control some functions of the controller 26. At 64, the controller 26 obtains GPS time and location information. In some embodiments, the controller 26 obtains GPS time and location information continuously. In other embodiments, the user's access attempt results in a wake-up signal to the controller 26. The controller 26 then responds by obtaining GPS time and location information at 64.

[0035] At 66, the controller 26 generates a derived key based on the GPS information. In some embodiments, known derivation algorithms are used. For example, the derived key generator module 44 includes the Argon2 algorithm. The generated derived key has a time limit during which the derived key is valid. Generating a derived key based on the GPS information provides added security against the condition of the controller 26 and any contents within the container 20. Such a derived key is more secure than a password that remains constant over long periods of time.

[0036] At 68, the controller 26 provides the derived key to the user device 30. This may be done through direct communication with the user device 30 over a wireless link or through a wireless local area network accessible to both the controller 26 and the user device 30. In the embodiment of FIG. 1, the controller 26 controls the display 28 to show the derived key. An authorized individual may view the derived key and enter it into the user device 30.

[0037] The security module 46 determines a predicted communications passkey based on the derived key at 70. The user device 30 obtains the derived key from the controller 26 at 72. The user device 30 generates a communications passkey based on the derived key at 74. For example, the user device 30 is provided with a software application having appropriate derivation programming for generating the communications passkey based on the derived key. The user device 30 transmits the communications passkey to the controller 26 at 76.

[0038] At 78, the transceiver 48 of the controller 26 receives the communications passkey from the user device 30. At 80, the security module 46 verifies that the received communications passkey corresponds to the expected communications passkey determined at 70. Once verification of the communications passkey is complete, the security module 46 determines that the individual utilizing the user device 30 is allowed to access the controller 26. In other words, the controller 26 determines whether the individual using the user device 30 is authorized to access the controller 26 for purposes of obtaining information from the controller 26 or to access at least one function of the controller 26 for purposes of maintaining control over the environment within the container 20.

[0039] In the example of FIG. 3, the controller 26 generates an expiring session token at 82. At 84, the transceiver 48 communicates the expiring session token to the user device 30. At 86, the user device 30 communicates with the controller 26 utilizing the expiring session token. In some embodiments, the session token has an expiration date that occurs before the derived key expires. This allows an authorized user to communicate with a controller 26 in one container 20 and then use the same derived key to communicate with another controller 26 in another container 20 at the same location. By keeping the derived key active or authorized for a period longer than a typical expected communication session of any individual controller 26, an authorized individual can conveniently access multiple controllers 26 associated with each container 20 at a particular location without having to obtain another derived key. In some embodiments, the derived key is valid for several hours.

[0040] In the illustrated exemplary embodiment, the controller 26 controls the display 28 to provide a visual display of the derived key that is visible from outside the container 20. This allows an authorized individual to, for example, look at the derived key and enter it into an appropriate application on the user device 30. In a situation where multiple containers 20 are stacked on top of each other and in close proximity to each other, an authorized user need only look at a single display 28 at a particular location to obtain a derived key that serves to communicate with all the controllers 26 at that location. When the container 20 is within a secure location, such as on board a cargo ship or within a storage facility, the derived key that is visible on the display 28 is only available to individuals who have access to such secure location.

[0041] By utilizing GPS information to generate a derived key, time and location information can be utilized for token generation. This combination of information provides more secure and reliable token generation compared to, for example, configurations that rely on the internal clock of controller 26. Whenever a GPS signal is available, the types of secure communications described above are possible.

[0042] Additionally, because the derived key is at least partially location based, for example, an individual at one location cannot obtain a derived key and then share it with another individual at a remote location or outside of the secure location. The location based derived key is unique to a container 20 or set of containers 20 at a particular location. This provides additional security for access to controllers that may be distributed over a wide geographic area.

[0043] The disclosed exemplary embodiments facilitate maintaining safety and control over the operation of a system or device, such as the cooling circuit 24, to ensure desired conditions inside a container under a variety of circumstances. Even in situations where multiple containers are stacked on top of each other and in close proximity, an authorized individual may obtain a derivative key from one controller 26 or display 28 at the location and use the derivative key to communicate with multiple controllers located on different containers at the location.

[0044] In some embodiments, the user device 30 includes a user certificate that is obtained when an authorized individual downloads or otherwise installs an appropriate application on the device 30. This enables the user device 30 to facilitate communication with one or more controllers 26. There are a variety of known methods for obtaining or generating a user certificate indicative of an authorized user device. In such an embodiment, the controller 26 determines whether an appropriate user certificate has been received from a particular user device 30 attempting to access or otherwise communicate with the controller 26.

[0045] In some embodiments, each container 20 has a serial number and each controller 26 has a serial number. Authorized individuals are provided with information regarding such serial numbers. During an attempted communication session with a controller 26, the user device 30 provides an indication of the controller serial number, the container serial number, or both, as part of the authorization process. Including this functionality ensures that individuals are not only required to obtain a valid derived key, but are also pre-authorized for access to a particular controller or container.

[0046] The foregoing description is exemplary rather than limiting in nature. Variations and modifications to the disclosed examples may become apparent to those skilled in the art that do not necessarily depart from the essence of this invention. The scope of legal protection given to this invention can only be determined by studying the following claims.

Claims

1. A container having a controller, the controller including a processor and a memory associated with the processor, the controller comprising: determining a derived key based on global positioning system information corresponding to a location of the controller; providing the derived key to a user device; determining a predicted communication passkey based on the derived key; determining whether the user device is authorized by verifying that a communications passkey received from the user device and generated based on the derived key corresponds to the expected communications passkey; configured to allow the user device access to at least one function of the controller when the user device is authorized; the global positioning system information includes a current time and a current location of the controller; the derived key is based on the current time and the current location; the controller is configured to generate a communication session token having an expiration time; the communications session token is used by the user device to communicate with the controller; the derived key is valid for a predetermined period of time; The expiration date is before the end of the predetermined period.

2. The container of claim 1 , wherein the at least one function includes setting a target temperature for at least a portion of an interior of the container.

3. The container of claim 1 , wherein the controller is configured to control a display to provide a visual representation of the derived key.

4. at least one of the controller or the container has a serial number; 2. The container of claim 1, wherein the controller is configured to determine whether the user device is authorized based further on receiving the serial number of the at least one of the controller or the container from the user device.

5. 1. A method for managing communications between a controller of a container and a user device, comprising: determining a derived key based on global positioning system information corresponding to a location of the controller; providing the derived key to the user device; determining a predicted communications passkey based on the derived key; determining whether the user device is authorized by verifying that a communications passkey received from the user device and generated based on the derived key corresponds to the expected communications passkey; when the user device is authorized, allowing the user device access to at least one function of the controller; Including, the global positioning system information includes a current time and a current location of the controller; the derived key is based on the current time and the current location; generating a communication session token for use by the user device to communicate with the controller, the communication session token having an expiration date; the derived key is valid for a predetermined period of time; The method, wherein the expiration date is before the end of the predetermined period.

6. The method of claim 5 , wherein the at least one function includes setting a target temperature for at least a portion of an interior of the container.

7. 6. The method of claim 5, wherein at least one of the controller or the container has a serial number, the method further comprising determining whether the user device is authorized based on receiving the serial number of the at least one of the controller or the container from the user device.

8. 1. A system comprising: Multiple containers and a plurality of controllers, each of the containers comprising a respective one of the controllers; a plurality of cooling circuits, each of the cooling circuits associated with a respective one of the containers, each of the cooling circuits being controllable by the controller provided in each of the containers; a user device configured to wirelessly communicate with each of the plurality of controllers; each of the controllers is configured to determine a derived key based on global positioning system information corresponding to locations of the plurality of containers; provide the derived key to the user device; determine a predicted communications passkey based on the derived key; determine whether the user device is authorized by verifying that a communications passkey received from the user device and generated based on the derived key corresponds to the predicted communications passkey; and permit the user device to access at least one function of the controller when the user device is authorized; the global positioning system information includes a current time and a current location of the controller; the derived key is based on the current time and the current location; each of the controllers is configured to generate a communication session token having an expiration time; the communication session token is used by the user device to communicate with each controller; the derived key is valid for a predetermined period of time; The expiration date is before the end of the predetermined period.

9. The system of claim 8 , wherein the at least one function includes setting a target temperature for at least a portion of an interior of each of the containers.

10. 9. The system of claim 8, including a display supported on at least one of the containers, the display being controllable by the controller of each of the containers, the display providing a visual indication of the derived key.

11. 9. The system of claim 8, wherein each controller is configured to determine whether the user device is authorized based further on receiving from the user device at least one of a serial number of the controller or a serial number of each of the containers associated with the controller.

Images