Systems and methods for providing access to a secured container

Systems and methods are described that provide access to secured containers in a facility. The systems and methods unlock a lock securing the container in response to receiving identifying information for an individual seeking access to the secured container. If objects are removed from the secured container by the individual, the systems and methods can determine whether an authorization was received for the removed objects within a time period. If the authorization is not received, the systems and methods can issue an alert including the identifying information using an alert system.

BACKGROUND

High-value objects in a facility are often held in secure containers to prevent theft.

DETAILED DESCRIPTION

Described in detail herein are methods and systems for providing access to a secured container. The methods and systems obtain identifying information for an individual seeking access to the secured container. For example, the identifying information can be an image of the individual or biometric information such as fingerprints. The systems and methods can provide the individual access to the secured container and determine whether the individual has removed an object from the secured container. The systems and methods can determine whether an authorization has subsequently been received for the removed objects and if not, can issue an alert including the identifying information using an alert system.

As used herein, a “secured container” is an enclosure enclosing an interior volume and having means to control access to the interior volume. For example, the secured container can be a container having a lock that prevents or allows opening of a door. In some embodiments, the secured container can be a locked display case in a retail environment. The locked display case can have one or more transparent panels or windows to allow an individual to see objects inside the locked display case from one or more directions.

To limit access to high-value objects in a facility, the high-value objects may be placed in secured containers, for example, a container with a lock. Although this arrangement allows the objects to be displayed to individuals and provides a deterrent to theft, an employee or other entity associated with the facility generally must be present to retrieve an object from the secured container for an individual. Thus, placement of objects in secured containers requires additional manpower to retrieve objects for individuals. In addition, this arrangement sometimes provides a sufficient impediment to the individual that the individual may choose to forego retrieving the object in light of the time and interaction needed to do so. In some instances, this can lead to reduced sales of objects held in secured containers. Systems and methods described herein can provide access to secured containers directly to the individual without the need for employee intervention.

Conventional systems that provide access to containers or lockers have required individuals to register personal information with the system in advance before access will be granted. For example, the individual may have been required to download and register a smartphone application. As part of the registration process, the individual would often be asked to provide biographical information or information related to methods of purchasing. The step of pre-registration can be inconvenient for individuals, require that users supply devices such as smartphones, or raise privacy concerns. These considerations can lead to low rates of pre-registration. In accordance with various embodiments, systems and methods described herein advantageously do not require pre-registration of the individual.

The systems and methods described herein provide a balance between the level of interaction imposed on the individual and protection of the facility's interests in preventing theft. By receiving identifying information associated with the individual before allowing access to secured containers, the facility has high assurance that they can directly identify a responsible individual should the object be stolen from the facility. The systems and methods described herein can issue an alert including the identifying information if the removal of the object is not authorized (e.g., by receipt of payment) within a period of time.

FIG. 1illustrates a block diagram of a system100for providing access to a secured container110in a facility in accordance with various embodiments of the present application. The system100can include a container110secured by a lock112that encloses one or more objects105. In some embodiments, each of the one or more objects105can include a unique identifying code103. The system can also include a first computing device150communicatively coupled to the lock112and including a processor155a. In some embodiments, the system100can include a second computing device170. In some embodiments, the system100can include a mobile computing device160. In other embodiments, the system can communicate with the mobile computing device160provided by the individual or a third-party. The system100can provide access to the secured container110in exchange for identifying information for the individual seeking access. The identifying information can be received by the first computing device150through communication with the mobile computing device160. The first computing device150can also communicate with a second computing device170to determine if an authorization was received within a time period for objects removed from the secured container110. In addition, the first computing device150can provide the identifying information as part of an alert using an alert system152if an authorization is not subsequently received within a time period.

The processor155acan be configured to execute instructions to communicate with the mobile computing device160to receive identifying information for the individual seeking access to the secured container110and a computing device identifier. After receiving the identifying information and computing device identifier, the processor155acan execute instructions to determine whether the individual has removed at least one of the objects105from the secured container. If the individual has taken at least one of the objects105, the processor155acan execute instructions to communicate with the second computing device170to determine whether an authorization associated with the computing device identifier was received for the removed objects within a time period. If the authorization was not received within the time period, the processor155acan execute instructions to issue an alert including the identifying information using an alert system152.

The secured container110can be different sizes in different embodiments. In some embodiments, the secured container110can be an enclosed box. In other embodiments, the secured container110can include a portion or all of a room. The lock112that secures the container110can include a mechanical, magnetic, or other suitable locking mechanism. The first computing device150can communicate with the lock112to cause the locking mechanism to lock or unlock. For example, the processor155aof the first computing device150can execute instructions to lock the lock securing the container110after determining that one or more objects105have been placed into the secured container, after determining that one or more objects105have been removed from the secured container, or after a time period has passed since an instruction to unlock the lock was executed.

The exemplary first computing device150is described in greater detail below with reference toFIG. 4. The processor155aof the first computing device150can execute instructions to communicate with the mobile computing device160to receive identifying information for the individual seeking access to the container110. For example, the first computing device150and the mobile computing device160can communicate using wireless transmissions conforming to one or more communications standards including, but not limited to, BlueTooth™, Wi-Fi (e.g., various 802.11x standards), near-field communication, or any other suitable standard. In some embodiments, the identifying information can be received by the first computing device150via short message service (SMS). In some embodiments, communications between the first computing device150and the mobile computing device160can be direct or can be mediated through a network as described in greater detail below with reference toFIG. 5.

In some embodiments, the mobile computing device160can be a smartphone, tablet, or laptop computer. In various embodiments, the mobile computing device160can be provided by the individual or the facility. In accordance with various embodiments, the mobile computing device160can include an application that facilitates communication with the first computing device150. The mobile computing device160can include a display. In some embodiments, the processor155aof the first computing device150can execute instructions to provide navigation information to the mobile computing device160to guide the individual to the secured container110within the facility. For example, the navigation information can include turn-by-turn directional data based upon the individual's location within the facility, a store map, or GPS coordinates corresponding to a location of the secured container110.

In various embodiments, the identifying information received from the mobile computing device160by the first computing device150can include images or biometric data related to the individual. For example, the identifying information can include an image of, or image related to, the individual obtained using an imaging device of the mobile computing device160. As another example, the identifying information can include fingerprint information obtained using a fingerprint scanner of the mobile computing device160. In some embodiments, the processor155aof the first computing device150can execute instructions to validate the identifying information upon receipt. For example, the processor155acan execute an image analytics module to verify that the image includes features associated with a human. If the image does not pass validation, the processor155acan communicate with the mobile computing device160to request additional identifying information such as a new image. In some embodiments, the first computing device150and the mobile computing device160do not require pre-registration of the individual.

In some embodiments, the processor155acan execute instructions to communicate with the mobile computing device160to receive the computing device identifier. In various embodiments, the computing device identifier can be a unique identifier associated with the mobile computing device160. For example, the computing device identifier can be an international mobile equipment identity (IMEI) number, a media access control (MAC) address, or a serial number associated with the mobile computing device160. In other embodiments, the computing device identifier can be generated uniquely on a per-session basis by the mobile computing device160. In some embodiments, the first computing device150can store the identifying information or computing device identifier in a database158a.

The processor155acan execute instructions to unlock the lock112securing the container110after receiving the identifying information and the computing device identifier. In some embodiments, the first computing device150can include a proximity module154to detect the presence of the mobile computing device160. For example, the proximity module154can include short-range communications capability based on BlueTooth™ or near-field communication technology. In such embodiments, communication between the proximity module154and the mobile computing device160can establish that the individual is in close physical proximity to the secured container. In some embodiments, the first computing device150can use the proximity module154to unlock the lock112as the individual physically approaches the secured container110.

The processor155acan execute instructions to determine whether the individual has removed at least one of the objects105from the secured container110. In some embodiments, the secured container110can include one or more sensors107to detect the presence or absence of objects105within the secured container110. For example, the one or more sensors107can include a visual sensor such as an imaging device, a physical sensor such as a weight scale, or an electronic sensor such as a radio-frequency identification reader. In some embodiments, the first computing device150can use the one or more sensors107, at least in part, to determine whether the individual has removed one or more objects105from the secured container110.

In some embodiments, each object105within the secured container110can be associated with a unique identifying code103. In some embodiments, the unique identifying code103can be a serialized barcode or a radio-frequency identification device (RFID). In some embodiments, the unique identifying code103of the object105being removed by the individual from the secured container110can be identified by the secured container110, for example, using the one or more sensors107. For example, the one or more sensors107can include a barcode reader suitable to scan the serialized barcode on the object105being removed from the secured container110. In some embodiments, the object105being removed by the individual can include wireless communication capability. For example, the object105can include WiFi or BlueTooth™ communication devices. In such embodiments, the object105can wirelessly communicate with the one or more sensors105or computing devices directly or by using a communication network560as described in greater detail below. In some embodiments, the object105can self-report its location in relation to the secured container110(e.g., inside or outside the secured container110).

In some embodiments, the unique identifying code103can be a standard Universal Product Code (UPC) supplied by the manufacturer, such as a two-dimensional barcode, or the unique identifying code103can be an individualized barcode provided by the facility for each individual item.

The processor155acan execute instructions to communicate with the second computing device170to determine whether an authorization associated with the computing device identifier was received for the removed objects within the time period. In some embodiments, the communication can occur in response to determining that the individual has taken at least one of the objects105from the secured container110. In some embodiments, the second computing device170can generate the authorization associated with the computing device identifier. For example, the second computing device170can generate the authorization in response to receiving payment for the object105during a transaction where the computing device identifier is provided. As another example, the second computing device170can generate the authorization in response to receiving payment for the object105during a transaction where the unique identifying code for the object105is provided. In a further example, the second computing device170can generate the authorization in response to receiving payment for the object105during a transaction where the object105self-reports a location proximate to the second computing device.

In some embodiments, the second computing device170can be a point-of-sale terminal, payment terminal, or cash register. In some embodiments, the mobile computing device160can provide the computing device identifier to the second computing device170during a procedure for procuring payment for the removed object105. For example, the mobile computing device160can provide the computing device identifier to the second computing device170through wireless communication such as near-field communication. In another embodiment, the mobile computing device160can display information related to the computing device identifier on the display, and the second computing device170can use an imaging device to read the displayed information. The second computing device170can then extract the computing device identifier from the displayed information. In some embodiments, the second computing device170can store the computing device identifier in a database158c. In some embodiments, the second computing device170can include a sensor to identify the unique identifying code103associated with the object105. In some embodiments, the mobile computing device160and the second computing device170do not require pre-registration of the individual.

In some embodiments, the mobile computing device160can provide the computing device identifier to the second computing device170in association with an indication that the individual does not wish to purchase the object105. For example, the individual may wish to cancel a transaction associated with the object105and leave the object105within the facility. As a result, the second computing device170can generate the authorization associated with the computing device identifier and communicate the authorization to the first computing device150. In some embodiments, the second computing device170can store the authorization in the database158c.

The time period during which the authorization was or was not received can be static or variable in various embodiments. In some embodiments, the time period can be 30 minutes, 1 hour, 2 hours, 4 hours, 8 hours, or another suitable time period. In some embodiments, the time period can be longer than 8 hours. In accordance with various embodiments, the time period for one object105amay be different than the time period for another object105b. For example, the length of the time period may be inversely proportional to the value of the object. In some embodiments, the time period can begin at the moment the determination is made that one or more objects105have been removed. In some embodiments, the time period can begin at the moment the secured container110is re-secured by the lock after access had been granted to the individual.

In some embodiments, the first computing device150includes the alert system152. The first computing device150can use the alert system152to issue an alert including the identifying information. In some embodiments, the first computing device150can issue the alert in response to determining that the authorization associated with the computing device identifier has not been received within the time period. In some embodiments, the alert system152provides the identifying information, such as the image or fingerprint information, to private security, law enforcement, or both.

In some embodiments, the alert system152can be separate from the first computing device150and the first computing device150and the alert system152can be communicatively coupled. For example, the first computing device150and the alert system152can communicate through a network environment as described in greater detail below with reference toFIG. 5.

In some embodiments, the first computing device150, the mobile computing device160, and the second computing device170can be communicatively coupled through a wired or wireless connection. In some embodiments, the first computing device150and the second computing device170can be portable or mobile.

FIG. 2illustrates a block diagram of a system200to provide access to a secured container according to various embodiments of the present disclosure. The system200can include the container110secured by the lock112and the first computing device150communicatively coupled to the lock. In some embodiments, the system200can include the second computing device170. The first computing device150can include the processor155a, an information gathering device156a, and the database158a. In some embodiments, the first computing device150can include the alert system152. The system200can provide access to the secured container110in exchange for receiving identifying information for the individual requesting access. The first computing device150can use the information gathering device156ato obtain the identifying information for the individual. Thus, the first computing device150of system200does not need to communicate with the mobile computing device160to receive the identifying information as in the system100described above with reference toFIG. 1. The first computing device150can communicate with the second computing device170to determine if an authorization was received within a time period for objects105removed from the secured container110. The system200can relay the identifying information as part of an alert if an authorization was not received within the time period.

In some embodiments, the secured container110encloses one or more objects105. The secured container110may be substantially similar to that described above with reference toFIG. 1.

The processor155aof the first computing device150can be configured to execute instructions to obtain identifying information for an individual seeking access to the secured container110using the information gathering device156a. In some embodiments, the information gathering device156acan include an imaging device or a biometric device. The imaging device can acquire identifying information in the form of an image of, or an image related to, the individual. The biometric device can include a fingerprint scanner, retinal scanner, or other suitable sensor to obtain biometric identifying information for the individual. In some embodiments, the processor155acan execute instructions to validate the identifying information. For example, the processor155ain some embodiments can execute an image analytics module to verify that the image includes features associated with a human. If the image does not pass validation, the processor155acan notify the individual that additional identifying information is required.

The processor155acan execute instructions to unlock the lock105securing the container110and to determine whether the individual has removed at least one of the objects105from the secured container110. Execution of these instructions can be performed substantially in accordance with the description above with reference toFIG. 1.

The processor155acan execute instructions to communicate with the second computing device170to determine whether an authorization associated with the individual was received for the removed objects105within the time period. In some embodiments, the instructions to communicate with the second computing device170can be executed upon determining that the individual has taken at least one of the objects105from the secured container110. In some embodiments, the second computing device170can generate the authorization. For example, the second computing device can determine that payment has been received for the removed objects105.

In accordance with various embodiments, the authorization can be associated with the individual by the first computing device150or the second computing device170. For example, the second computing device170of some embodiments of the present disclosure can include an information gathering device156b. In some embodiments, the information gathering device156bcan include an imaging device or a biometric device. The imaging device can acquire identifying information in the form of an image of, or an image related to, the individual. The biometric device can include a fingerprint scanner, retinal scanner, or other suitable sensor to obtain biometric identifying information for the individual.

In some embodiments, the information gathering device156bcan collect corroborating information for the individual. In some embodiments, the first computing device156bcan communicate with the second computing device170to receive the corroborating information and the authorization. In such embodiments, the processor155aof the first computing device150can execute instructions to compare the identifying information with the corroborating information to corroborate that the individual at the second computing device170is the same individual associated with the identifying information. For example, the processor155acan compare the identifying information and corroborating information to calculate a similarity score that represents a likelihood that the two sets of information correspond to the same individual. If the information is corroborated, the first computing device150can associate the individual with the authorization and determine that the authorization associated with the individual was received. If the information is not corroborated, the first computing device150can determine that the authorization associated with the individual was not received. In some embodiments, the first computing device150can then await the remainder of the time period to see if an authorization has been received. In some embodiments, the first computing device150can communicate that the authorization was not received to the second computing device170. The second computing device170may then request additional corroborating information for the individual.

In some embodiments, the information comparison can be performed instead by a processor155cof the second computing device170. For example, the second computing device170can receive the identifying information from the first computing device150, compare the identifying information and corroborating information as described above, and communicate the results of the comparison to the first computing device150. Alternatively, if the information is corroborated, the second computing device170can associate the authorization with the individual, and communicate the authorization to the first computing device150. If the information is not corroborated, the second computing device170can request additional corroborating information for the individual.

As an example for when the identifying information and corroborating information are fingerprints, the first computing device150or second computing device170can identify points on one or both of the identifying fingerprint and the corroborating fingerprint to identify swirls and loops. A comparison of these points on the fingerprint can verify whether the identifying information and the corroborating information were provided by the same person. When the identifying information and corroborating information are images, the first computing device150or the second computing device170can perform image analysis on one or both of the images. For example, a small section of each image can be selected that contains the face of the individual. Segments of the face can be selected such as the lips, nose, or jaw line. The shape of each of these segments and the distances therebetween can be analyzed. This analysis can be performed on the identifying information and the corroborating information and the results can be compared to verify that the same individual is depicted in the identifying information and the corroborating information.

The processor155acan execute instructions to issue an alert including the identifying information using the alert system152. In some embodiments, the alert can be issued upon determining that the authorization associated with the individual was not received within the time period. Execution of this instruction can be performed substantially in accordance with that described above in relation toFIG. 1. In various embodiments, the first computing system150can include the alert system152or the first computing system150can communicate with the alert system152through a networked environment as described in greater detail below with reference toFIG. 5.

FIG. 3illustrates an exemplary flowchart of a method300for providing access to a secured container according to embodiments of the present disclosure. The method includes receiving, at a first computing device communicatively coupled to a lock securing a container enclosing one or more objects, identifying information for an individual and a computing device identifier by communicating with a mobile computing device (step302). In some embodiments, the first computing system150can receive the identifying information and computing device identifier from the mobile computing device160as described above with reference toFIG. 1. The method includes unlocking the lock securing the container after receiving the identifying information and the computing device identifier (step304). For example, the first computing device150can unlock the lock112securing the container110as described above with reference toFIG. 1.

The method also includes determining whether the individual has removed at least one of the objects from the secured container (step306). For example, the first computing device150can use one or more sensors included in the secured container110to detect removal of an object105as described above with reference toFIG. 1. The method includes communicating with a second computing device to determine whether an authorization associated with the computing device identifier was received for the removed objects within a time period upon determining that the individual has taken at least one of the objects (step308). For example, the first computing device150can communicate with the second computing device170to determine whether an authorization associated with the computing device identifier was received as described above with reference toFIG. 1.

The method includes issuing an alert including the identifying information using an alert system upon determining that the authorization associated with the computing device identifier was not received within the time period (step310). For example, the first computing device110can issue an alert including the identifying information using the alert system152as described above with reference toFIG. 1.

FIG. 4is a block diagram of the example computing device150,170for implementing exemplary embodiments of the present disclosure. The computing device150,170includes one or more non-transitory computer-readable media for storing one or more computer-executable instructions or software for implementing exemplary embodiments. The non-transitory computer-readable media may include, but are not limited to, one or more types of hardware memory, non-transitory tangible media (for example, one or more magnetic storage disks, one or more optical disks, one or more flash drives, one or more solid state disks), and the like. For example, memory406included in the computing device150,170may store computer-readable and computer-executable instructions or software430for implementing exemplary operations of the computing device150,170. For example, the software430can include executable instructions to perform the operations as described above with reference toFIGS. 1, 2 and 3. The software430can also be stored in a storage system426as described below. The computing device150,170also includes configurable and/or programmable processor155and associated core(s)404, and optionally, one or more additional configurable and/or programmable processor(s)402′ and associated core(s)404′ (for example, in the case of computer systems having multiple processors/cores), for executing computer-readable and computer-executable instructions or software stored in the memory406and other programs for implementing exemplary embodiments of the present disclosure. Processor155and processor(s)402′ may each be a single core processor or multiple core (404and404′) processor. Either or both of processor155and processor(s)402′ may be configured to execute one or more of the instructions described in connection with first computing device150,170. In some embodiments, the processor155or processor402′ can be the processors155a,155cdescribed above with reference toFIGS. 1 and 2.

Virtualization may be employed in the computing device150,170so that infrastructure and resources in the computing device150,170may be shared dynamically. A virtual machine412may be provided to handle a process running on multiple processors so that the process appears to be using only one computing resource rather than multiple computing resources. Multiple virtual machines may also be used with one processor.

Memory406may include a computer system memory or random access memory, such as DRAM, SRAM, EDO RAM, and the like. Memory406may include other types of memory as well, or combinations thereof.

A user may interact with the computing device150,170through a visual display device414, such as a computer monitor, which may display one or more graphical user interfaces416, a multi touch interface420or a pointing device418.

The computing device150,170may also include one or more storage devices426, such as a hard-drive, CD-ROM, or other computer readable media, for storing data and computer-readable instructions and/or software430that implement exemplary embodiments of the present disclosure. For example, exemplary storage device426can include databases158a,158cas described above with reference toFIGS. 1 and 2. The databases158a,158cmay be updated manually or automatically at any suitable time to add, delete, and/or update one or more data items in the databases.

The computing device150,170can include a network interface408configured to interface via one or more network devices424with one or more networks, for example, Local Area Network (LAN), Wide Area Network (WAN) or the Internet through a variety of connections including, but not limited to, standard telephone lines, LAN or WAN links (for example, 802.11, T1, T3, 56 kb, X.25), broadband connections (for example, ISDN, Frame Relay, ATM), wireless connections, controller area network (CAN), or some combination of any or all of the above. In exemplary embodiments, the computing device150,170can include one or more antennas422to facilitate wireless communication (e.g., via the network interface) between the computing device150,170and a network and/or between the computing device150,170and the secured container110, the mobile computing device160, or other computing devices. The network interface408may include a built-in network adapter, network interface card, PCMCIA network card, card bus network adapter, wireless network adapter, USB network adapter, modem or any other device suitable for interfacing the computing device150,170to any type of network capable of communication and performing the operations described herein.

The computing device150,170may run any operating system410, such as any of the versions of the Microsoft® Windows® operating systems, the different releases of the Unix and Linux operating systems, any version of the MacOS® for Macintosh computers, any embedded operating system, any real-time operating system, any open source operating system, any proprietary operating system, or any other operating system capable of running on the computing device150,170and performing the operations described herein. In exemplary embodiments, the operating system410may be run in native mode or emulated mode. In an exemplary embodiment, the operating system410may be run on one or more cloud machine instances.

FIG. 5is a block diagram of an exemplary distributed secured container access environment550in accordance with exemplary embodiments of the present disclosure. The environment550can include computing devices562,564configured to be in communication with the secured container110via a communication network560, which can be any network over which information can be transmitted between devices communicatively coupled to the network. For example, the communication network560can be the Internet, Intranet, virtual private network (VPN), wide area network (WAN), local area network (LAN), and the like. In some embodiments, the communication network560can be part of a cloud environment. In some embodiments, the environment550can include one or more mobile computing devices160that can be in communication with the secured container110and the computing devices562,564via the communication network560. The environment550can include at least one repository or database558, which can be in communication with the secured container110, the mobile computing device160, and the computing devices562,564via the communications network560.

In exemplary embodiments, the one or more computing devices562,564and one or more databases558can be implemented as computing devices (e.g., first computing device150or second computing device170) or mobile devices (i.e., mobile computing device160). In some embodiments, the one or more databases558can be the database158aincluded in the first computing device150or the database158cincluded in the second computing device170. Those skilled in the art will recognize that the one or more databases558can be incorporated into the computing systems562,564such that the computing devices562,564can include one or more of the databases558. In some embodiments, the database558can include computer-executable instructions or automated scripts that describe a technique for providing access to a secured container.