TAMPER-RESISTANT ITEM TRANSPORT SYSTEMS AND METHODS

Delivery of items has long been subject to degradation through pilfery, improper handling, or exposure to excessive environmental conditions. By providing items for delivery, or a mobile locker or secure container with the item for delivery, with an identifier readable and reportable by networked devices, custody of the item can be determined along with any degradation event. As a result, the providing source for the item and the receiving customers may be assured that the item delivered is provided in acceptable condition.

BACKGROUND

Delivery systems are now available for a variety of items, such as restaurant food items, medical supplies, pharmaceuticals, intoxicants, groceries, jewelry, precious metals, money, and other valuable items. While any item may be damaged or lost, certain items are particularly sensitive to degradation due to environmental conditions imposed by time, handling, pilfery, or adulteration. Additionally, degradation may be difficult to detect and, if detected, may only be determined after the opportunity to refuse delivery has passed.

SUMMARY

In an embodiment, a system includes a vessel configured to be moved during transport of an item contained within a containment area of the vessel; a sensor configured to produce sensor data that characterizes an environment proximate to the containment area; and at least one processor configured to: determine an event occurrence based on the sensor data; and send a notification to a device over a network in response to the event occurrence.

In an embodiment, a method includes receiving, from a sensor, sensor data that characterizes an environment proximate to a containment area of a vessel, wherein the vessel is configured to be moved during transport of an item located within the containment area; determining an event occurrence based on the sensor data; determining a custodian of the vessel during the event occurrence; and sending a notification indicating the custodian to a device over a network in response to the event occurrence.

In an embodiment, a non-transitory computer readable medium having instructions stored thereon, wherein the instructions, when executed by a processor, cause a device to perform operations comprising: receiving, from a sensor, sensor data that characterizes an environment proximate to a containment area of a vessel, wherein the vessel is configured to be moved during transport of an item located within the containment area; determining an event occurrence based on the sensor data; and determining a custodian of the vessel during the event occurrence.

In an embodiment, a secure vessel includes: a containment area; a sensor configured to produce sensor data that characterizes an environment proximate to the containment area, wherein the containment area is configured to be moved during transport of an item contained within the containment area; and at least one processor configured to: determine an event occurrence based on the sensor data; and send a notification to a device over a network in response to the event occurrence.

In an embodiment, a method performed by a secure vessel includes: receiving, from a sensor at the secure vessel, sensor data that characterizes an environment proximate to a containment area of the secure vessel, wherein the vessel is configured to be moved during transport of an item located within the containment area; determining an event occurrence based on the sensor data; determining a custodian of the vessel during the event occurrence; and sending a notification indicating the custodian to a device over a network in response to the event occurrence.

In an embodiment, a customer device includes: at least one processor configured to: send an order for an item to a source; receive a notification characterizing an event occurrence, wherein the event occurrence is based on sensor data that characterizes an environment proximate to a containment area of a secure vessel configured to be moved during transport of the item contained within the containment area; present an alert via a user interface in response to receiving the notification; and receive an instruction via the user interface in response to receiving the notification.

In an embodiment, a method performed by a customer device includes: sending an order for an item to a source; receiving a notification characterizing an event occurrence, wherein the event occurrence is based on sensor data that characterizes an environment proximate to a containment area of a secure vessel configured to be moved during transport of the item contained within the containment area; presenting an alert via a user interface in response to receiving the notification; and receiving an instruction via the user interface in response to receiving the notification.

In an embodiment, a source device includes at least one processor configured to: receive an order for an item from a customer; send a message to a courier to deliver the item based on the order; receive a notification characterizing an event occurrence, wherein the event occurrence is based on sensor data that characterizes an environment proximate to a containment area of a secure vessel configured to be moved during transport of the item contained within the containment area; and receive an instruction via the user interface in response to receiving the notification.

In an embodiment, a method includes: receiving an order for an item from a customer; sending a message to a courier to deliver the item based on the order; receiving a notification characterizing an event occurrence, wherein the event occurrence is based on sensor data that characterizes an environment proximate to a containment area of a secure vessel configured to be moved during transport of the item contained within the containment area; and receiving an instruction in response to receiving the notification.

DETAILED DESCRIPTION

Any reference in the description comprising an element number, without a sub-element identifier when a sub-element identifier exists in the figures, when used in the plural, is intended to reference any two or more elements with a like element number. When such a reference is made in the singular form, it is intended to reference one of the elements with the like element number without limitation to a specific one of the elements. Any explicit usage herein to the contrary or providing further qualification or identification shall take precedence.

The exemplary systems and methods of this disclosure will also be described in relation to analysis software, modules, and associated analysis hardware. However, to avoid unnecessarily obscuring the present disclosure, the following description omits well-known structures, components, and devices, which may be omitted from or shown in a simplified form in the figures or otherwise summarized.

For purposes of explanation, numerous details are set forth in order to provide a thorough understanding of the present disclosure. It should be appreciated, however, that the present disclosure may be practiced in a variety of ways beyond the specific details set forth herein.

It is with respect to the above referenced issues and other problems that the embodiments presented herein were contemplated. Services are now available whereby items, such as food prepared by a restaurant, pharmaceuticals, intoxicants, medical supplies, groceries, jewelry, precious metals, money, and other high-value items, etc., may be picked up, transported, and delivered to the end-customer by a third party, such as Uber Eats™, DoorDash™, etc. However, problems may occur, as well as the perception of a potential problem, that hinders utilization.

If a delivery (e.g., a delivery of one or more items) is not delivered, then conventional means may be implemented, such as to notify affected parties, automatically or manually initiate a replacement, refund monies, etc. However, having an indication of who had control (e.g., custody) of the item when it became lost may be an important factor in determining fault for the missing item. Similarly, if a delivery is delivered to the end customer in a container (e.g., bag, box, etc.) and the container is damaged in such a way as to convey a reasonable impression that the contents are also damaged, the end-customer may take action, such as to require further inspection before accepting delivery or simply refusing delivery. Additionally, there may be situations where a product was improperly transported and is delivered to a customer who may not be able to readily identify (e.g., due to a lack of time for inspection) that the product was damaged due to improper transportation. Accordingly, identifying when the container, and items within, were likely damaged may be useful information for a customer to determine whether the customer should accept a delivered item, and generally for customer satisfaction with the item and the delivery. Also, identifying when the container, and items within, were likely damaged may be an important factor to ensure fault rests with only those who are at fault or who may have failed to take necessary steps to prevent the damage, hold the responsible party accountable, and/or implement remediations (e.g., discontinuing use of a particular driver or delivery service, refuse the ordered food item, drug item, or other type of item from a particular restaurant, refuse delivery beyond a certain distance, require special handling or transportation equipment, etc.).

For example, restaurant food may be received by an end-customer, who discovers that the food is in some way degraded. The temperature, size of the portion, absence of items, presence of other items, condition of the food, etc., may be the result of inappropriate handling or accidental or deliberate misrouting. The customer may express their dissatisfaction, but only knows for certain that the third-party delivered degraded food. The third-party may blame the restaurant and the restaurant may blame the third-party. It is also possible that the food arrived in as-expected condition and the customer, seeking unjust compensation, alleges some degradation. As a further example, such discovery of the degradation of the delivered food may be not be made immediately at the time of delivery, such as in situations where an end-customer may not have the time or resources to immediately inspect the delivered food at the time of delivery. Without a way to identify bad (or at least responsible) actors and/or eliminate known good actors, or to monitor integrity and facilitate the secure delivery of transported items, these transported items may continue to be subject to claims of degradation, whether or not degradation actually occurred or is merely alleged or suspected.

Accordingly, systems and methods are disclosed that describe a secure vessel delivery system for transport of an item or items such that custodianship of the secure vessel in which an item is contained may be tracked and evaluated. Examples of secure vessels may include, for example, containers and/or mobile lockers that will be discussed further below. These secure vessels may be configured to be moved during transport of an item located within a containment area of the secure vessel. Furthermore, the secure vessel delivery system may include a security sensor configured to produce sensor data that characterizes an environment proximate to the containment area (e.g., proximate to the secure vessel). In certain embodiments, a security sensor may be located directly on a secure vessel, such as when a security sensor on a vessel monitors for item degradation or unauthorized access to the item within the secure vessel. In further embodiments, a security sensor may be located off of a secure vessel. For example, the security sensor may be located on a user device (e.g., a courier device) configured to scan a tag on the secure vessel to change custodianship to and/or from a particular courier. In certain embodiments, the security sensor may be located on a source device and/or a customer device. For example, a security sensor on a source device may be an image sensor configured to take a first picture of an item immediately prior to a transfer of custody from the source device to the courier device. This first image may be sent to the customer device for verification or confirmation that the item is as expected. Also, a security sensor on a customer device (or a courier device) may be another image sensor configured to take a second picture of the item when delivered to the customer. Then, the first and second images may be compared to determine whether degradation or unauthorized access to the item within the secure vessel has occurred.

This sensor data may be evaluated to determine a status of the secure vessel and/or a custodianship of the secure vessel. For example, the sensor data may be evaluated to determine whether degradation or unauthorized access has, or is likely to have, occurred of an item under transport within the containment area. Accordingly, the sensor data may be utilized to monitor the integrity of the secure delivery of the item under transport within the containment area. The sensor data may also be utilized to identify the custodian of the secure vessel at the time when the degradation or unauthorized access may have occurred. In certain embodiments, the sensor data may be centrally processed via a data processing and storage system (e.g., a server and data store) in network communication with the security sensors of the secure vessel delivery system. However, in other embodiments, the sensor data may be locally processed, such as at a secure vessel or a user device (e.g., a customer device, courier device, and/or source device). Accordingly, tampering or degradation may be discouraged as a custodian of the secure vessel may be identified, and held responsible for any such tampering or degradation. Also, the secure vessel may be monitored for indications of such tampering and degradation during transport. These indications of such tampering and degradation may be communicated to an interested party for further processing and/or remediation.

FIG. 1Adepicts a secure vessel delivery system100in accordance with embodiments of the present disclosure. In one embodiment, a network102supports electronic communications between a plurality of devices, each equipped with a network interface. Network102may comprise one or more of wired or wireless networks, private networks (wired and/or wireless telephony), public networks (e.g., Internet), cellular mobile communication networks (e.g., the 3rd Generation Partnership Project (3GPP) 5thgeneration New Radio (5G NR) communication networks) and/or other network or combinations thereof.

The secure vessel delivery system100is described in terms of electronic components having at least one processor, memory for the storage of data and instructions (e.g., hardware, firmware, removable, networked, etc.). While human actors are illustrated and may play a role in facilitating certain actions (e.g., holding a mobile phone or user device to capture an image via a camera security sensor on the mobile phone or user device, handling item122, etc.), the role of any human is optional and provided merely as an aid to understand the figures. Furthermore, certain embodiments described herein are completely devoid of humans are involved and only automated systems are utilized in the manufacture/preparation, ordering, transporting, and receiving of item122. In other embodiments, human involvement is limited to the role of facilitator for the systems and methods described herein. For example, a human may drive a vehicle112, when vehicle112is embodied as a non-self-driving vehicle in response to navigation instructions provided by a navigation component of vehicle112to transport item122from source device114to customer device104. However, when vehicle112is embodied as an autonomous or self-driving vehicle, the human may be omitted or provided merely as a backup operator, for legal compliance, or for the performance of other operations (e.g., physically carrying item122to/from vehicle112, provide an input to a networked device, etc.). Although certain embodiments may reference the vehicle112as traversing a terrestrial path (e.g., over ground), the vehicle112may traverse any path across any medium as desired for different applications in various embodiments. For example, the vehicle112may be configured to traverse a path across air (e.g., as an airborne vehicle), water (e.g., as a waterborne or underwater vehicle), space (e.g., a space vehicle or spacecraft), or any other medium.

Customer device104, comprises a networked computing device, such as a personal computer, mobile phone, laptop, tablet computer, etc., may place an order via network102for item122originating from source device114. It should be appreciated that other techniques for customer device104to order an item122from source device114may also be utilized without departing from the scope of the disclosure. For example, item122may be a previously arranged delivery, such as a monthly subscription, gift subscription provided by another party not associated with customer device104but for delivery to the customer associated with customer device104, etc. Similarly, the recipient of an order may also vary. For example, a data processing and storage system116may comprise an order taking application that receives and forwards the order to the source device114.

Source device114is associated with a source for item122. Item122may be produced by the source associated with source device114(e.g., manufacture, grower, restaurant, etc.) or merely available from the source associated with source device114(e.g., distributer, retailer, etc.). Source device114comprises a communication device with an interface to network102. Additionally, source device114may comprise a number of networked components working in collaboration with source device114, for example, scanners, printers, encoders, etc.

A data processing and storage system116comprises a network interface to network102and may maintain records associated with the ordering, transport, and delivery of item122from the source associated with source device114to the customer, which may be associated with the current or future location of customer device104. Data processing and storage system116may be dedicated or shared hardware, such as a computer, server etc., or a plurality of equipment that may be shared by multiple parties or users (e.g., “cloud” processing/storage, software-as-a-service (SaaS), server farm, etc.).

The item122may be placed in a secure vessel. Examples of a secure vessel include a human-portable container106(e.g., a bag, box, or other container for transport) or a mobile locker120(e.g., a secure vessel that is not human portable). In various embodiments, the container106or mobile locker120may be sealed (e.g., closed or locked) and unsealed (e.g., opened or unlocked). In various embodiments, reference to sealing a secure vessel may be inclusive of any manner of closing off a secure vessel from access to a containment area, whether physical (e.g., via locking a lock) or virtual (e.g., via an indication that access to the containment area is not authorized). Accordingly, a seal may represent any apparatus configured to indicate or enforce access to a containment area. Similarly, reference to unsealing a secure vessel may be inclusive of any manner of indicating that access to the containment area is allowed, whether physical (e.g., via unlocking a lock) or virtual (e.g., an indication that access to the containment area is authorized). The container106or mobile locker120may be lockable by a lock. When lockable, the container106or mobile locker120can include any type of lock, which may be integral to or separate from the container106or mobile locker120. Additionally, the container106or mobile locker120can include at least one security sensor to monitor item122and/or the environment of item122, a memory to store sensor data, and a network interface to transmit sensor data to another component, such as customer device104and/or source device114. Security sensors may be used to monitor weight of the item122, container106or mobile locker120as a function of time, orientation of the item122, container106or mobile locker120during transportation, vibration or shock of the item122, container106or mobile locker120during transportation or the state of the container106or mobile locker120(e.g., open/closed, occupied/empty, weight of contents) during transportation. Such security sensors may include, for example, any of a temperature sensor, an orientation sensor, a humidity sensor, a vibration sensor, a shock sensor, a location sensor, a tamper sensor, an image sensor, a proximity sensor, an electromagnetic connection detector, an air pressure sensor, and a user interface sensor. In certain embodiments, the container106or mobile locker120may include a communications interface to form a node on network102and serve as relay communications for components absent their own connection to network102. In certain embodiments, a container106may be configured to be placed within a mobile locker120.

A courier device110is variously embodied. In one embodiment, courier device110comprises a communication device, such as a smart phone, comprising a processor, memory, and network interface to network102and/or other network. Courier device110may also comprise other sensing equipment (e.g., security sensors), including but not limited to, camera, microphone, Global Positioning System (GPS) (or other satellite-enabled location) receiver, orientation, physical shock, temperature, barometric pressure, etc. Courier device110may physically carry or tow item122, such as via a human using their hands or providing locomotion to a backpack, cart, wagon, etc. or a vehicle, such as vehicle112, for item122.

In various embodiments, courier device110may physically carry or tow a mobile locker120for transport of item122. In another embodiment, courier device110comprises a vehicle112(e.g., where the courier device110is physically integrated with the vehicle112and/or represents a system that includes the vehicle112). The vehicle112may be a bicycle, scooter, cart, wagon, automobile, truck, airplane, drone, boat, etc. and comprise mobile locker120. Alternatively, item122may be carried in vehicle112and/or courier device110directly, that is, where the vehicle112and/or courier device110constitutes the mobile locker120(e.g., where the functions and processes of the mobile locker are integral or shared with the vehicle112and/or the courier device110). Courier device110may also comprise a sub-network whereby two or more of mobile lockers120, vehicle112, courier device110, and/or other devices, communicate. Additionally or alternatively, one of mobile lockers120, vehicle112, courier device110, and/or other devices may form a node on network102and serve as relay communications for components absent their own connection to network102.

The container106and/or mobile locker120may contain one or more items122for transport and delivery to the customer. In an embodiment, the container106or mobile locker120may be sealed (e.g., closed or locked) by the source device114and unsealed (e.g., opened or unlocked) locally and directly by the customer device104or remotely by source device114upon delivery (e.g., via pushing a button on a customer device to instruct the secure vessel to unseal).

In another embodiment, container106may have placed thereon directly a tag that may provide an indicia or identifier of an item122and/or vessel for transport of the item. The hardware of the tag may support an identifier that is visual (e.g., printed order number, type, description, etc.), near visual (e.g., infrared, ultra violet), and/or radio frequency (e.g., Near Field Communication (NFC), WiFi, cellular, GPS, Bluetooth, etc. or combinations thereof. For example, a customer device104, source device114and/or courier device110may be configured to interact with the tag, such as by scanning or communicating with the tag via a security sensor on the customer device104, source device114and/or courier device110in order to interact with a particular secure vessel and/or to transfer custodianship of the secure vessel. For delivery services, certain forms of communication are preferred over others due to issues such as a need for a subscription (e.g., cellular network access), high power requirements (e.g., GPS), additional hardware (e.g., line-of-sight antennas, etc.). Accordingly, and in another embodiment, an identifier may be provided to the courier device110. Therefore, while the tag may communicate directly via network102, additionally or alternatively, the tag may utilize another component or a component may receive the identifier and communicate via network102or other network (e.g., a security sensor on the security sensor on the customer device104, source device114and/or courier device110.

In another embodiment, container106may be sealed, such as with a security sensor that is a tamper resistant/tamper evident seal (e.g., a tamper sensor) such that any access to container106is deterred or, at least, likely to be detected by such a security sensor. As will be described in more detail below with respect toFIG. 1B, such tamper sensors may include an electrical mesh to determine whether a surface of the secure vessel has been opened or an electrical circuit configured to monitor the vessel has been opened during transport. For example, the tamper sensor may be two electromagnetic contacts that are weakly attracted to each other when in secure mode (e.g., as a normally closed circuit), and the physical separation of which (e.g., open circuit) produces sensor data that may trigger an alert (e.g., a sensor event). As another example, the tamper sensor may include detection of a beam (e.g., an infrared, laser, or other type of detectible emission) to indicate that there is no access to the containment area (e.g., that the secure vessel is closed) or not detected to indicate that there is access to the containment area (e.g., that the secure vessel is opened).

In further embodiments, a container106may utilize a security sensor to monitor container106or item122and/or the exterior and/or interior environment of container106. For example, such a security sensor may include a sensor of temperature, orientation, vibration, shock, etc. and a memory to store and/or transmit sensor data to another component (e.g., vehicle112, courier device110) or directly or via such other components, notify source device114, customer device104, and/or data processing and storage system116, of the sensor output data and/or a particular output data (e.g., data outside the range of acceptable or nominal values). In certain embodiments, a security sensor on the container106may include the tamper evident seal (e.g., where the seal is a tamper sensor that produces sensor data from which tampering of the container may be evident.).

In another embodiment, mobile locker120on the vehicle may comprise one or more compartments to contain the item122and/or container106. The mobile locker120may comprise a network interface, memory, and a processor such that mobile locker120is required to receive a signal in order to seal (e.g., close or lock) and/or unseal (e.g., open or unlock) the mobile locker120or a particular compartment thereof. Additionally or alternatively, mobile locker120may comprise at least one security sensor to monitor container106and/or item122and/or the exterior and/or interior environment of container106. Such a security sensor may sense, for example, temperature, orientation, vibration, shock, state of mobile locker120(e.g., open/closed, occupied/empty, weight of contents). Such a security sensor may also interact with a memory to store, and a network interface to transmit, sensor data to another component (e.g., vehicle112, courier device110) or directly or via such other components, notify source device114, customer device104, and/or data processing and storage system116, of the sensor data and/or (e.g., data outside the range of acceptable values). In another embodiment, mobile locker120may have benefit of connectivity to vehicle112for communications, power, and/or data. For example, mobile locker120may be able to determine its location via a GPS signal from vehicle112or other user device (e.g., a smartphone) configured to provide a GPS signal and, if a current location matches a location associated with a delivery location (e.g., location of customer device104), mobile locker120unlocks to allow extraction of container106. When container106is implemented with a tag, mobile locker120may read/receive the identifier, such as via a camera, connectivity to another camera (e.g., a networked camera of courier device110), WiFi, NFC, etc.

FIG. 1Bdepicts a secure vessel150, in accordance with embodiments of the present disclosure. As noted above, the secure vessel150may be a human portable container in certain embodiments. In other embodiments, the secure vessel150may be a mobile locker. When the secure vessel is a mobile locker, the secure vessel may be integrated with a vehicle and/or courier device (e.g., physically attached with the vehicle and/or courier device).

In various embodiments, a secure vessel150may be physically integrated with at least one security sensor152A,152B,152C,152D. as will be described in more detail below The security sensors may be any type of sensor configured to produce sensor data that characterizes an environment proximate to a containment area of the secure vessel. The containment area may refer to an area of the secure vessel configured to contain an item during transport by the secure vessel. For example, the containment area may be an internal surface156accessible by opening a portal154(e.g., a door) of the secure vessel. The internal surface156(drawn in phantom) may contrast with an outer surface158directly exposed to an environment external to the secure vessel150. In certain embodiments, the portal154may be opened upon opening a lock160on the secure vessel150. The lock may be, for example, an electromechanical lock that produces a latch (e.g., closes the portal) via a strong electromagnet, electrically rotating a padlock-style cylinder, or electrically sliding a metal bolt to close or open the portal. In some embodiments, a lock160is configured to be sliding so as to physically secure zippers disposed on the secure vessel150while closing an electrical circuit coupled with the secure vessel150. When the latch is opened, such an electrical circuit is also triggered and/or opened to signal an event. However, in other embodiments, the secure vessel150may not include a lock160. For example, the secure vessel150may be sealed without a lock, such as where the secure vessel150may be closed or be associated with an indication (e.g., a notification in a user interface) that access to the containment area of the secure vessel is currently unauthorized. In various embodiments, components of the secure vessel150such as the security sensors152A,152B,152C,152D and the lock160may be powered by an internal power source164(e.g., a battery) that is part of the secure vessel150. In further embodiments, the secure vessel150may include at least one local processor and memory to produce and/or analyze the sensor data from the security sensors. For example, the secure vessel150may be configured to operate with a network connection to a processing and storage system in certain embodiments and without the network connection to the processing and storage system in other embodiments.

In further embodiments, the secure vessel150may include a tag162which may indicate an identifier for the secure vessel150and/or an item for transport via the secure vessel150. As noted above, the hardware of the tag may support an identifier that is visual (e.g., printed order number, type, description, etc.), near visual (e.g., infrared, ultra violet), and/or radio frequency (e.g., Near Field Communication (NFC), radio-frequency identification (RFID), WiFi, cellular, GPS, Bluetooth, etc. or combinations thereof. For example, a customer device, source device and/or courier device may be configured to interact with the tag, such as by scanning or communicating with the tag via a security sensor on the customer device, source device, and/or courier device in order to interact with the secure vessel150and/or to transfer custodianship of the secure vessel.

In certain embodiments, the security sensors152A,152B may be on an outer surface158of the secure vessel150. By being on the outer surface158, the security sensor may be directly exposed to an environment external to the secure vessel150. As will be discussed in further detail below, the security sensor may be for example a user interface sensor152B in which a user interface input may be received, for example. In further embodiments, security sensors152D may be integrated within a surface of the secure vessel150, such as a tamper sensor integrated within a surface of the secure vessel that includes an electrical mesh with a predefined pitch (e.g., 10 millimeters) that may change resistance upon being compromised. In yet further embodiments, the security sensor152C may be on an internal surface156of the secure vessel150. For example, as will be discussed further below, the security sensor152C may be a temperature sensor configured to determine whether the contents of the secure vessel150is out of a desired temperature range (e.g., if a food item, drug item, or other type of item under transport is cold and no longer warm, or warm and no longer cold). In yet further embodiments, the security sensors may be implemented in a. single integrated module that may be removably attached to the secure vessel150(e.g., may be slipped into the secure vessel) so as to be movable between secure vessels150and/or replaceable in the event of failure.

In various embodiments, the security sensors may be, for example, any of a temperature sensor, an orientation sensor, a humidity sensor, a vibration sensor, a shock sensor, a location sensor, a tamper sensor, an image sensor, an air pressure sensor, and a user interface sensor. The temperature sensor may be configured to produce temperature sensor data. For example, the temperature sensor may be on the internal surface156of the secure vessel150to produce temperature sensor data indicative of a temperature within the secure vessel150. This temperature sensor data may be utilized to determine whether the item (e.g., food, drugs, or other types of items) under transport may have become too warm or too cold during delivery.

In certain embodiments, the orientation sensor may be configured to produce orientation sensor data. For example, the orientation sensor may be an accelerometer (e.g. a 3 axis accelerometer) or a gyroscope to track orientation or movement of the secure package. This orientation sensor data may be utilized to determine that a package is mishandled, such as if the secure vessel150turns over during transport.

In certain embodiments, the humidity sensor may be configured to produce humidity sensor data. For example, the humidity sensor may be on the internal surface156of the secure vessel150to produce humidity sensor data indicative of a humidity within the secure vessel150. This humidity sensor data may be utilized to determine whether the item under transport (such as food, drugs, or other types of items), may have become insufficiently or over humid during transport.

In certain embodiments, the vibration sensor may be configured to produce vibration sensor data. For example, the vibration sensor may be an accelerometer or other sensor that is configured to characterize vibrations experienced by the secure vessel150. This vibration sensor data may be analyzed to determine whether vibrations experienced by the secure vessel150are over a threshold amount such that the item under transport by the secure vessel150was likely degraded or damaged due to excessive vibrations.

In certain embodiments, the shock sensor may be configured to produce shock sensor data. This shock sensor may be, for example, an accelerometer configured to determine whether a drop or impact (e.g., exceeding a threshold amount of acceleration or deacceleration in a set amount of time) has occurred with the secure vessel150.

In certain embodiments, the location sensor may be configured to produce location sensor data. For example, the location sensor may be a GPS configured to produce location sensor data (e.g., GPS coordinates, relative location sensor data, and the like) from where a location of the secure vessel may be determined to identify whether the secure vessel has reached, or is properly in transit to reach, its intended destination (e.g., a reference location or reference geographic location). In further examples, the location sensor may be a relative location sensor that does not necessarily determine an absolute location (e.g., an absolute geospatial location, such as GPS coordinates) but produces relative location sensor data that characterizes a location relative to other devices or landmarks, such as a reference device. For example, the relative location sensor may be a frequency sensor (e.g., Near Field Communication (NFC), WiFi, cellular, Bluetooth, and the like) which may detect whether it is able to directly (e.g., not via an intermediary) communicate with a reference frequency sensor of a reference device to determine that it is within a communication range of the reference frequency sensor. Accordingly, the relative location sensor may be utilized to determine when the relative location sensor is within a particular relative location (e.g., within a communication range) of the reference frequency sensor of the reference device that denotes a desired or intended destination. For example, the relative location sensor may be utilized to determine when a relative location sensor associated with a courier device is within a particular communication range (e.g., is close to) of a reference frequency sensor of a reference device associated with an item to be transported or a customer to whom the item is to be delivered.

In certain embodiments, the tamper sensor may be configured to produce tamper sensor data. For example, the tamper sensor may include an electrical mesh with a predefined pitch (e.g., 10 millimeters) that may change resistance upon being compromised (e.g., in order to determine whether a surface of the secure vessel has been opened). As another example, the tamper sensor may be an electrical circuit configured to monitor the portal154to determine whether the portal154has been opened (e.g., when the electrical circuit is open and not closed) during an unauthorized time period (e.g., during transport).

In certain embodiments, the image sensor may be configured to produce image sensor data. For example, the image sensor may be an infrared sensor configured to produce infrared image data within the internal surface156, which may be indicative of a temperature within the secure vessel150. As another example, the image sensor may be configured to produce image sensor data indicative of light levels within the secure vessel150, which could also be indicative of tampering.

In certain embodiments, the air pressure sensor may be configured to produce air pressure sensor data. For example, the air pressure sensor may be on the internal surface156of the secure vessel150to produce air pressure sensor data indicative of a temperature within the secure vessel150. This air pressure sensor data may be utilized to determine whether the item under transport (such as food, drugs, or another type of item) may have been exposed to an environment with air pressure that is too low or too high.

In certain embodiments, the user interface sensor152B may be configured to produce user interface sensor data. This user interface sensor data may be, for example, a keypad, biometric scanner, or other user interface that may be utilized to input an access pattern (e.g., a code of any number of digits, biometric pattern, electromagnetic pattern, and the like) to unseal (e.g., open or unlock) the portal154and/or to update custodianship of the secure vessel. In further embodiments, the portal154may be unsealed (e.g., the lock160may unlock or authorization otherwise granted to access an item within a containment area) when the input access pattern may be compared with a predetermined access pattern.

In various embodiments, the secure vessel150may include a user interface display170. This user interface display170may be configured to display content, such as a logo or mark associated with the source device, information related to the order (e.g., a listing of contents of the secure vessel or an order receipt or confirmation), advertisements (e.g., a third party logo or a promotion for the item), and the like. In particular embodiments, a user (e.g., an agent associated with the source device, courier device, and/or customer device) may provide instructions or inputs to the user interface sensor152B based on the content displayed within the user interface display170. For example, the user interface display may provide content (e.g., a manifest of the one or more items within the secure vessel) that informs an agent of the customer device as to whether to enter an instruction via the user interface sensor152of acceptance or rejection of the delivered item. In particular embodiments, the content displayed on the user interface display170may be provided by the source device to the secure vessel for display on the user interface display170. For example, the content may include third party content (e.g., an advertisement or promotion) that is provided by the source device for display on the user interface display. In some embodiments, the user interface display170may include a touch screen display, which is configured to provide notifications such as alerts, sensor data, and/or overall status, and to accept, reject, and/or inspect the orders or the contents inside the secure vessel150. The touch screen may also be used to display some or all of the data available in the mobile client applications, for example, sensor data. In further embodiments, the user interface display170may encompass the user interface sensor152B, such as where the user interface sensor is a portion of the user interface display. However, in alternative embodiments, the user interface display may be separate from the user interface sensor152B. In various embodiments, reference to a generic user interface may reference either one of, or both the user interface sensor152B and the user interface display170. In some embodiments, a courier may reject an order for a suitable reason, for example, if a customer is not present. The rejection is then logged and transmitted to a respective supplier and the respective customer.

In particular embodiments, the secure vessel150may include a docking port180. This docking port may be an external interface for data and/or power transfer. This data transfer may refer to, for example, data transferred as related to a local processor of the secure vessel150, the user interface sensor152B, user interface display170, a security sensor152A,152B,152C,152D, lock160, tag162, or any other component or part of the secure vessel150. In addition, the power transfer may be, for example, power transferred to and/or from the internal power source164(e.g., battery) that is part of the secure vessel150. In various embodiments, the docking port180may be part of a wireless external interface for data and/or power transfer to and/or from the secure vessel. For example, the docking port180may be configured to receive power from a wireless charging mat. In other embodiments, this docking port180may be part of a wired or other physical interface that may physically touch or otherwise interface (e.g., interlock) with an external device for data and/or power transfer to and/or from the secure vessel.

FIG. 2depicts an interaction200in accordance with embodiments of the present disclosure. The interaction200, or process, may be performed at a secure vessel delivery system, as introduced above. It is noted that the interaction200is merely an example, and is not intended to limit the present disclosure. Accordingly, it is understood that additional operations (e.g., steps) may be provided before, during, and after the interaction200ofFIG. 2, certain operations may be omitted, certain operations may be performed concurrently with other operations, and that some other operations may only be briefly described herein.

In one embodiment, customer device104places an order in step202to source device114. Additionally or optionally, customer device104and source device114perform steps204comprising payment and/or other terms of sale or delivery. Step206schedules delivery. Step206A comprises customer device104arranging delivery directly with courier device110. Alternatively, step206B arranges delivery between source device114and courier device110.

Step208readies the order. Step208may comprise any one or more of cooking, making, retrieving, packaging, and/or other steps to allow item122to be made ready for delivery. Step208may also comprise applying the tag to a secure vessel150(e.g., a container), which may further comprise the identifier. Step208may comprise locking the container to secure the item122from tampering.

Step210transfers the item122inside of the secure vessel150as a container or the secure vessel150as a mobile locker associated with courier device110. Step210may comprise locking the mobile locker to secure the item122from tampering. In one embodiment, the source device114scans a tag on the secure vessel or otherwise receives the identifier, such as to create a record and/or facilitate custodianship of item122transferring to the courier device110. Additionally or alternatively, the courier device110may scan the tag or otherwise receive the identifier as a record of the acceptance of the item122. Step212may further communicate acceptance to the secure vessel150(e.g., as a mobile locker). In some embodiments, one courier may have multiple secure vessels150such as bags or containers, each of which may include respective unique identification (ID) to facilitate one or more simultaneous orders, or order(s) that require additional space. One or large orders requiring two or more secure vessels150such as bags or containers may be linked together to be treated as a single order.

In some applications, the source device may retain custodianship of the item until departure of the item from a select spatial location. In this manner, the source device114(e.g., associated with a restaurant) can reopen the secure vessel150(e.g., as a container or a mobile locker) to correct an erroneous omission or inclusion of item(s). An electronic or digital custodianship token can be passed to the courier device indicating when the courier assumes custodianship for the item.

The secure vessel150(e.g., as a container or a mobile locker), as an optional portion of transfer step212, may unlock, open, or otherwise enable acceptance of the item. Step214further includes monitoring one or more of the secure vessels150(e.g., as a container or a mobile locker), the item, and/or the exterior and/or interior environment of the secure vessel150(e.g., as a container or a mobile locker) and/or the item with one or more security sensors. Step214may also include receiving a signal to unlock, open, or otherwise allow removal of the item from the secure vessel150(e.g., as a container or a mobile locker). For example, the secure vessel150(e.g., as a container or a mobile locker) itself or via the courier device110may comprise a GPS receiver and, when associated with the delivery location, such as the location of customer device104, unlocks or opens.

In another embodiment, the secure vessel150(e.g., as a container or a mobile locker) may comprise a memory and a sensor having biometric data associated with a human at the delivery location, such that when the sensor receives a compliant retina image, fingerprint, voiceprint, or other biometric data, container or mobile locker120unlocks or opens (e.g., via using a security sensor that is a user interface sensor configured to produce user interface data that is biometric data, as discussed above). In another embodiment, customer device104may initiate a signal, via network102, to cause secure vessel150(e.g., as a container or a mobile locker) to unseal (e.g., unlock or open).

In another embodiment, the customer can have an application on customer device104that scans the tag (such as a QR code, RFID, or barcode) and, if the scanned image or value matches a tag image or value received by customer device104from source device114, such as by text, email, SMS, etc., sends a message to the source device to unlock a lock or otherwise unseal to enable customer access to the contents of the secure vessel150(e.g., as a container or a mobile locker).

In another embodiment, a computational device (e.g., security sensor that is a user interface sensor) on secure vessel150(e.g., as a container or a mobile locker) can scan a tag displayed on customer device (previously provided, such as by text, email, SMS, etc., by source device114) and, if the scanned image or value matches a tag image or value stored on computational device, unlock the lock on container106or mobile locker120or otherwise unseal the container106or mobile locker120.

In another embodiment, the customer associated with the customer device104can be provided with a code, such as by text, email, SMS, etc., that when inputted by the customer into a physical or virtual lock keypad (e.g., security sensor that is a user interface sensor on the secure vessel150) unlocks the lock on container106or mobile locker120or otherwise unseals the container106or mobile locker120. It is further contemplated that unique unlock codes are provided to the customer and courier to track the person taking a certain action such as accepting or rejecting an order. Such an unlock code may be sent to related devices such as source device114and/or courier device110at the time when the order is dispatched to ensure interaction is possible even if access to network102is not possible. The events can be queued up on related devices and sent when the network connectivity is restored. In some embodiments, an application program interface (API) may be stored in the “cloud” and used to integrate with related application programs.

In another embodiment, source device114can send an unseal (e.g., unlock or open) signal to the computational device on the secure vessel150(e.g., the container or the mobile locker) when the customer confirms by text, email, SMS, etc., message transmission to the source device that the secure vessel150(e.g., the container or the mobile locker) has been delivered.

In another embodiment, the secure vessel150(e.g., the container or the mobile locker) can send an unseal (e.g., open or unlock) signal to a lock or seal on the secure vessel150(e.g., the container or the mobile locker) when the courier device110confirms by message transmission to the source device that the secure vessel150(e.g., the container or the mobile locker) has been delivered or arrived at the customer's destination. In certain embodiments, the customer's destination may be a predetermined destination, such as a set geospatial location or a location relative to an object (e.g., a customer device). As will be appreciated, other local and remote unlocking schemes can be envisioned to enable the customer to gain access to the contents of the secure vessel150(e.g., the container or the mobile locker). In further embodiments, the secure vessel150(e.g., the container or the mobile locker) can unseal when the courier device110confirms by message transmission to the source device that the secure vessel150(e.g., the container or the mobile locker) has been delivered or arrived at the customer's destination.

Unless already provided, step216signals courier device110that custodianship of item122has transferred to courier device110, which in turns transfers custodianship to the customer associated with customer device104in step218. In some embodiments, a courier may transfer custody of one order to additional couriers if needed. For example, a delivery may require ground transportation, followed by air transportation, and subsequent ground transportation before final delivery. The respective chain of custody is tracked through the entire delivery process.

In another embodiment, step214monitors item122for indications of degradation. For example, secure vessel150(e.g., as a container or a mobile locker) may be opened via other means and, if the item is within but not proximate to the delivery location associated with the customer, such access may be unauthorized. Accordingly, the secure vessel150(e.g., as a container or a mobile locker) may report the unauthorized access to a customer device, source device, and/or a data processing and storage system. This reporting may be made via network communications, as discussed above. Additionally or alternatively, step214may determine that a degradation event has occurred. For example, the vessel150has been opened during transport, an item has reached an unacceptable temperature, been subject to excessive shock, turned upside down, etc. Accordingly, customer device104may then present the event in a user interface of the customer device104, such that the recipient will have feedback about the security of the item that was transported. The customer device104can also provide the option to refuse delivery or receive other compensation if an item degradation event is detected. Furthermore, the source device114may be notified, such as to trigger re-execution of step208to prepare a replacement item122and signal the courier device110to divert from the current delivery and return to the source device114or signal a new courier device110to receive a replacement item.

FIG. 3depicts interaction300in accordance with embodiments of the present disclosure. The interaction300, or process, may be performed at a secure vessel delivery system, as introduced above. It is noted that the interaction300is merely an example, and is not intended to limit the present disclosure. Accordingly, it is understood that additional operations (e.g., steps) may be provided before, during, and after the interaction300ofFIG. 3, certain operations may be omitted, certain operations may be performed concurrently with other operations, and that some other operations may only be briefly described herein.

In one embodiment, interaction300omits utilization of a mobile locker and instead utilizes scanning by source device114of a tag on a container106, or otherwise receiving of the identifier, in step302. Source device114then reports possession of item122to a data processing and storage system116in step304. The data processing and storage system116may create or update a record therein indicating that custodianship is presently with the source associated with source device114.

Courier device110then scans the tag of container106, or otherwise receives the identifier, in step306. As noted above, this scan may be performed by a security sensor on the courier device110, such as a barcode scanner or image sensor configured to produce sensor data (e.g., the scan). Step308reports the scan to the data processing and storage system116. The data processing and storage system116may create or update a record therein indicating custodianship is presently with the courier device110. At a later time, customer device104scans a tag of item122, or otherwise receives the identifier, in step310. Customer device104then reports possession of item122to the data processing and storage system116in step312. The data processing and storage system116may create or update a record therein indicating custodianship is presently with the customer associated with customer device104.

FIG. 4depicts interaction400in accordance with embodiments of the present disclosure. The interaction400, or process, may be performed at a secure vessel delivery system, as introduced above. It is noted that the interaction400is merely an example, and is not intended to limit the present disclosure. Accordingly, it is understood that additional operations (e.g., steps) may be provided before, during, and after the interaction400ofFIG. 4, certain operations may be omitted, certain operations may be performed concurrently with other operations, and that some other operations may only be briefly described herein. Accordingly, interaction400may omit certain steps that are discussed elsewhere.

In one embodiment, interaction400utilizes for secure item transport a mobile locker120without the container106or container106without mobile locker120. Stated another way, interaction400reflects alternate embodiments where only a single type of secure vessel is utilized, whether a container106or a mobile locker120. In other embodiments, interaction400may reflect situations where both a container106and a mobile locker120are utilized. For example, the interaction400may reflect embodiments in which a container106is placed within a mobile locker120.

The interaction400may begin when source device114scans the tag on the item122, mobile locker120, or container106, or otherwise receives the identifier, in step402. In step404, a courier device110scans the tag, or otherwise receives the identifier, to indicate receipt of item122. Also, the courier device110reports receipt to data processing and storage system116in step406. A scan at step408may be implemented as a separate scanning event or combined with step404whereby mobile locker120and/or container106is/are signaled to seal (e.g., close or lock) or unseal (e.g., open or unlock) and report the seal/unseal (e.g., lock/unlock) event410to data processing and storage system116. Also, the courier device110reports the scan to data processing and storage system116in step412.

Accordingly, it should be appreciated that steps404,406,408,410, and412may occur at least twice, such as to receive an item from the source and once to remove item for final delivery. Additional iterations of step404,406,408,410, and412may also occur, however, they may be unauthorized or unexpected and cause data processing and storage system116to create an exception record and/or notify other parties, such as customer device104, courier device110, and/or source device114. For example, the courier may have hit a pothole or otherwise have reason to believe that item122may no longer be suitable for delivery. As a result, inspection of the contents of mobile locker120and/or container106is/are initiated and an exception record created or updated. Accordingly, a record is made that the courier opened the mobile locker120and/or the container106and, should pilfery or adulteration of item122have occurred, the courier of the courier device may be investigated as the agent for the pilfery or adulteration. Similarly, if the receiving customer claims the item, when delivered, was pilfered or adulterated, it may be considered as more probable upon determining mobile locker120and/or container106was/were opened at an additional time in accordance with the exception record.

In another embodiment, a courier associated with the courier device110may not have authorization to open/unlock or close/lock the mobile locker120or container106. For example, a signal may be required to open/unlock the mobile locker120or the container106. As a result, the source associated with the source device may place the item122within the mobile locker120or the container106, seal it (e.g., close it or lock it), and the customer associated with the customer device104may send a signal to cause the mobile locker120or container106to be unsealed (e.g., opened or unlocked) and constituent item retrieved therefrom. Accordingly, a claim of pilfery or adulteration would likely avoid suspicion falling on a courier associated with the courier device110when the mobile locker120or container106is enabled to detect opening events and none were detected.

The opening/closing or locking/unlocking as well as other conditions, such as those that may indicate the degradation of item122, may be detected in monitoring step414. For example, security sensors in a mobile locker120, container106, or courier device110may monitor one or more conditions that may indicate degradation of item122. One or more of steps416and418may then report the output values of the sensor (e.g., raw values) and/or exceptions notification (e.g., when a raw value output by a sensor is outside an acceptable range). The results of monitoring step414may be reported to a courier device110in step416and/or to the data processing and storage system116in step418, which can also report the results of the monitoring step to customer device104

Optional step420occurs when customer device104scans a tag of mobile locker120or container106, which may then allow mobile locker120or container106to open to enable retrieval of item122therein. Optionally or alternatively, the tag may be scannable (or the identifier otherwise obtainable) while within mobile locker120or container106while closed/locked (e.g., via a visible port enabling observation of a written identifier, transparent to radio transmissions, etc.). Also, upon the scanning event, the mobile locker120or container106may be unlocked, such as in step426. Step424may monitor signals in addition, in alternate, or in coordination with step414, such as to receive GPS signals, signals from the customer device104(e.g., step422), or to receive other signals that may signal the mobile locker120or container106to unlock/open in step426. In certain embodiments, the customer device104, may scan tag or otherwise receive the identifier in step428and report receipt in step430to the data processing and storage system116.

FIG. 5Adepicts an order process500in accordance with embodiments of the present disclosure. The order process500may be performed at a secure vessel delivery system, as introduced above. More specifically, the order process500may be executed by one or more microprocessors, such as those of a data processing and storage system, source device, courier device, secure vessel, and/or customer device or a combination thereof. It is noted that the order process500is merely an example, and is not intended to limit the present disclosure. Accordingly, it is understood that additional operations (e.g., steps) may be provided before, during, and after the order process500ofFIG. 5, certain operations may be omitted, certain operations may be performed concurrently with other operations, and that some other operations may only be briefly described herein.

The order process500may begin at step502with processing an initial order for an item to be delivered. Step502may comprise an electronic data structure being communicated between devices, such as between a data processing and storage system, source device, courier device, secure vessel, and/or customer device. At step504, a data structure may be created and/or modified that indicates the custodian of item is the source, such as an entity associated with source device. Step506transfers custody of the item to the courier, such as by a courier device scanning a tag on a secure vessel. In response, a data structure is created or modified to indicate custody has transferred to the courier in step508. As noted above, in certain embodiments steps506and508may be repeated for respective couriers when custody is transferred among the multiple couriers. Step510transfers custody of the item to the customer, such as a party or agent associated with customer device104. Step510may be provided by customer device104scanning a tag on the secure vessel. In response, a data structure is created or modified to indicate custody has transferred to the customer device in step512.

FIG. 5Bdepicts a delivery process in accordance with embodiments of the present disclosure. The delivery process550may be performed at a secure vessel delivery system, as introduced above. More specifically, the delivery process550may be executed by one or more microprocessors, such as those of a data processing and storage system, source device, courier device, secure vessel, and/or customer device or a combination thereof. It is noted that the delivery process550is merely an example, and is not intended to limit the present disclosure. Accordingly, it is understood that additional operations (e.g., steps) may be provided before, during, and after the delivery process550ofFIG. 5B, certain operations may be omitted, certain operations may be performed concurrently with other operations, and that some other operations may only be briefly described herein.

The delivery process550may begin at step552. At step552, transport of an item is initiated. This transport may be initiated by, for example, a customer device contracting with a source device for delivery of an item to a customer associated with the customer device. As part of this initiation, a courier associated with a courier device may be brought to receive the item from the source associated with the source device. Furthermore, to initiate delivery, the item may be deposited in a secure receptacle/vessel by either the courier associated with the courier device or the source associated with the source device and custodianship transferred from the source device to the courier device, as discussed above.

At step554, sensor data may begin to be collected as the delivery process550is underway. For example, as soon as the courier receives the item and closes/locks the secure receptacle, a sensor signal indicating a sealed state (e.g., a closed state or locked state) of the secure receptacle may be collected. Additionally, the sensor data may characterize an environment proximate to a containment area of a secure. receptacle/vessel This containment area may be where an item under transport is secured or rests while undergoing transport via the secure receptacle. In certain embodiments, this sensor data may be produced by a security sensor that is part of a secure receptacle and/or is part of a courier device, source device, and/or a customer device. This sensor data may, for example, characterize a state of the item under transport (e.g., as image data of the item during transport or upon a transition of custodianship), characterize a change in custodianship (e.g., where a new custodian may, via a security sensor, scan a tag or otherwise indicate that the new custodian has taken over custodianship of the secure vessel), and/or characterize the transport of the item (e.g., where the sensor data may characterize how the item is being transported, such as the trajectory, handling, or state of the item under transport).

At step555, a custodian may be associated with the collected sensor data. At least one custodian may be associated with every time period under which an item is being transported (e.g., via a continuous or semi-continuous series of timestamps). For example, this custodian may be a particular courier, associated with a courier device, that is undertaking the task of transporting the item within a secure vessel at a particular time. As noted above, the custodianship of a secure vessel may be handed off from a source device to a courier device once the item is placed within the secure vessel and the courier device confirms receipt of the item (e.g., by scanning a tag on a particular secure vessel or by otherwise updating a processing and storage system that custodianship has passed to a particular courier associated with a courier device). Also, there may be multiple custodians that facilitate delivery of a secure vessel containing an item from a source associated with a source device to a customer associated with a customer device. A more detailed discussion of how custodianship is changed and updated is provided above and is not repeated here for brevity.

At step556, the sensor data may be evaluated to determine whether an event has occurred. In various embodiments, the event may be a predetermined pattern of sensor data that triggers an action. As noted above, the security sensors may be, for example, any of a temperature sensor, an orientation sensor, a humidity sensor, a vibration sensor, a shock sensor, a location sensor, a tamper sensor, an image sensor, an air pressure sensor, and a user interface sensor. Each of these sensors may produce respective sensor data that may be analyzed to determine whether a particular pattern in the sensor data triggers an event. The event may be detecting a signal from a tamper sensor that indicates that the seal of the secure receptacle has been opened or breached prior to delivery of the item or acknowledgment of receipt from a customer device or arrival at a GPS location matching the destination of the delivery of the item. Other events may be, for example, threshold values or patterns reached by sensor data values produced by respective security sensors. In certain embodiments, this sensor data may be further processed into a parameter value which may be evaluated against a threshold value (e.g., a predetermined pattern). For example, the threshold values may represent an outlier determined from aggregated sensor data of a respective type of security sensor, which when passed, may define an event. These outliers may be determined in accordance with conventional machine learning or statistical analysis for outliers. Accordingly, the event occurrence may be when the parameter value meets the threshold value. Additionally, each event may be cross referenced with a custodian associated with a time that the event has occurred (e.g., as there is a custodian associated with each time interval of item transport). Further discussion of exemplary events will be provided below. If an event has occurred, the process550may process to step558. If no event has occurred, the process550may return to step554.

At step558, a corresponding action triggered by an event may be performed. For example, the action may be production of an unauthorized access alert in response to an event (e.g., of step556) of unauthorized access to a secure vessel (e.g., sensor data meeting a pattern indicative of an unauthorized access, such as an unauthorized opening of a portal or breakage of a surface of the secure vessel during transport). This alert may be communicated to, for example, a user interface of a source device, courier device and/or a customer device that an unauthorized access has occurred to the secure vessel.

As another example, the action may be production of an item spoliation alert in response to an event (e.g., of step556) of likely item spoliation in a secure receptacle (e.g., sensor data meeting a pattern indicative of an environment that would cause item spoliation, such as a temperature, humidity, or air pressure reading that is too high, too low, or otherwise outside of a nominal range). This alert or notification may be communicated to, for example, a user interface of a source device, courier device and/or a customer device that item spoliation has occurred at the secure receptacle.

As yet another example, the action may be production of an item mishandling alert in response to an event (e.g., of step556) of item mishandling in a secure vessel (e.g., sensor data meeting a pattern indicative of item or secure vessel mishandling, such as a shock sensor indicating that an impact has occurred to the secure vessel or an orientation sensor indicating that the secure vessel is upside down or otherwise in an improper orientation). This alert may be communicated to, for example, a user interface of a source device, courier device, and/or a customer device that item mishandling has occurred at the secure vessel.

Although certain embodiments may reference an action to be an alert, further types of actions may be taken as desired for different applications in various embodiments. For example, the action may be an association of an alert with a custodian (e.g., a custodian's account in a centralized processing and storage system) of the secure vessel. In certain embodiments, this association may be due to being triggered at a time of a particular custodian's care (e.g., as associated with a particular custodian device) so as to easily identify which custodian is answerable to causing a particular alert. As a further example, the action may be using a data processing and storage system to associate an alert with an order, or account associated with a customer device, source device, and/or courier device. Additional actions may further be taken at the data processing and storage system, such as demeriting or crediting an account associated with a customer device, source device, and/or courier device should an event occur.

FIG. 6depicts data structure600in accordance with embodiments of the present disclosure. In one embodiment, data structure600comprises a number of fields, which may themselves be data structures. Data structure600illustrate at least some of the data fields that may be maintained by a party, such as by a data processing and storage system. Data associated with the customer (party ordering item, party who will receive item, billing party and billing information, etc.) may comprise a customer identification field602(name and contact information of the customer), order time/date field604, delivery address or location606, receipt of item date/time field608, and/or additional fields610as may selected as a matter of design choice.

Item field612may identify the item122(e.g., catalog number, item identifier, etc.), the source identifier field514, description515, order received date/time field618, order ready for pickup date/time620, seal identifier622(e.g., encoded description of a visual identifier, such as a QR code, RFID tag identifier, seal number, etc.), and other fields624as may be selected as a matter of design choice.

Courier identification field616may identify the courier for item122which was retrieved for pickup at the value of pickup date/time field628. Locker630may identify the particular mobile locker and/or container and associated lock/unlock date time field632. One or more sensor data structures634may be provided. Sensor data structure634may comprise a sensor identifier field636(e.g., for a security sensor), a sensor type field638(e.g., temperature, vibration, open-detection, etc.), and sensor data field640may maintain raw output values provided by a sensor (e.g., for a security sensor) and/or exception data (e.g., a temperature above a preset limit). Other fields642may also be implemented as a matter of design choice. Mobile locker or container106unseal (e.g., unlock or open) data/time644maintains the delivery time/date for item. Other fields646may be added for other purposes as a matter of design choice.

Data structure600may be utilized to identify issues associated with the delivery of item or a collection of items. For example, when sensor type field638is a GPS and the sensor data field640identifies a particular location on a route and another sensor type field638indicates a shock, the location may have potholes or other issues and an action taken to enable couriers to avoid such a location (e.g., via an alert to other courier devices to avoid a particular location). As noted above, in certain embodiments, the number or occurrences of the shocks (or other representation of sensor data indicative of the shock) may be compared with a threshold value to determine whether the event has occurred to trigger an associated action (e.g., production of an alert). This threshold value may represent an outlier determined from aggregated sensor data associated with shocks, which when passed, may define the event. These outliers may be determined in accordance with conventional machine learning or statistical analysis for outliers. In various embodiments, certain couriers and/or items may be determined to be problematic. For example, a restaurant providing item, such as soup, may arrive cold for customers beyond a certain distance. Accordingly, data structure600may determine what customers/items should be refused or at least notified and required to agree to the likely arrival condition of the particular item and/or additional precautions that may be required (e.g., heated compartment, heat packs, etc.). In some embodiments, data structure600, containing aggregated sensor or customer data, may be utilized to perform trend analysis and provide marketing information.

FIG. 7depicts a block diagram of an order to delivery process700, in accordance with embodiments of the present disclosure. The order to delivery process700may be performed at a secure vessel delivery system, as introduced above. More specifically, the order to delivery process700may be executed by one or more microprocessors, such as those of a data processing and storage system, source device, courier device, secure vessel, and/or customer device or a combination thereof. It is noted that the order to delivery process700is merely an example, and is not intended to limit the present disclosure. Accordingly, it is understood that additional operations (e.g., blocks) may be provided before, during, and after the order to delivery process700ofFIG. 7, certain operations may be omitted, certain operations may be performed concurrently with other operations, and that some other operations may only be briefly described herein.

The order to delivery process700may begin at block702. At block702, a customer device may place an order on behalf of a customer. As noted above, this order may be for a particular item to be delivered to the customer. At block704, a source device may receive the order placed by the customer device. As noted above, this order may be received at a source device from the customer device over a network.

At block706, the source device may prepare the ordered item. By beginning to prepare the ordered item, the source device may make or send the appropriate instructions for a source (e.g., a restaurant) to prepare the order. As noted above, this may include preparing the item (e.g., food, drugs, or another type of item) to be delivered in accordance with the order. At block708, the source device may note that the order is complete (e.g., the food, drug, or other type of item is ready for pickup).

At block710, the source device may send a shipment request to a courier device. This shipment request may be a request for the courier device to transport the ordered item. This shipment request may be made based on the initiation of ordered item preparation in block706.

At block712, the courier device may receive and accept the shipment request from the source device. As noted above, the courier device may receive the shipment request via network communications with the source device. This shipment request may include information such as a source location for pickup of the ordered item and a customer location for delivery of the ordered item. In certain embodiments, the customer location may be a predetermined location, such as a set geospatial location or a location relative to an object (e.g., a customer device).

At block714, the courier device may arrive at the source location. At block716, the source device (e.g., via an agent of the source device) may load the item, whose preparation was completed in block708, to a secure vessel/receptacle and seal/close/lock the secure vessel Secure vessels are discussed above and will not be further described here for brevity. In certain embodiments, the secure vessel may be provided by the courier device (e.g., by a courier associated with the courier device) to the source device (e.g., to an agent of the source device). In other embodiments, the secure vessel may be provided by the source such that the source device may be able to utilize the secure vessel (e.g., instruct an agent of the source to load the prepared item in the secure vessel) without having the secure vessel be provided by the courier device.

At block718, the source device may commission the courier device to begin transport. This may entail the source device handing over custody of the secure vessel, inclusive of the ordered item, to the courier device for transport. In certain embodiments, the commissioning of the courier device may include instructing the courier device as to the customer location for delivery (e.g., as a confirmation of or instead of the customer location provided with the shipment request). At block720, the courier device may begin transport of the secure vessel as commissioned by the source device and in accordance with the placed order. This transport may be from the source location to a customer location.

At block730, sensor data may be collected from one or more security sensors during delivery or transport of the item. Details of sensor data collection are discussed further above and will not be repeated here for brevity. At block732, a decision may be made as to whether an event has occurred based on the collected sensor data. Details of an event and/or whether an event has occurred are discussed further above and will not be repeated here for brevity. The order to delivery process700may proceed to block722if no event has occurred. Also, the order to delivery process700may proceed to blocks734A and734B in response to an event occurrence. In certain embodiments, the order to delivery process700may proceed to either one of block734A or block734B in response to an event occurrence.

At block734A, a source device may receive an alert that the event has occurred. As noted above, this alert may be an action based on the event, such as an alert for presentation within a user interface of the source device. At block736A, a decision may be made as to whether an instruction to cancel the order has been produced (e.g., made or input via the source device user interface) in response to the alert. The order to delivery process700may proceed to block738when an instruction to cancel the order is produced in response to the alert. The order to delivery process700may return to block730when an instruction to cancel the order is not produced in response to the alert.

At block734B, a customer device may receive an alert that the event has occurred. As noted above, this alert may be an action based on the event, such as an alert for presentation within a user interface of the customer device. At block736B, a decision may be made as to whether an instruction to cancel the order has been produced (e.g., made or input via the customer device user interface) in response to the alert. The order to delivery process700may proceed to block738when an instruction to cancel the order is produced in response to the alert. The order to delivery process700may return to block730when an instruction to cancel the order is not produced in response to the alert. At block738, the order may be canceled. In certain embodiments, cancellation of the order may nullify the instruction for the courier device to transport the item to the customer location.

At block722, the courier device may arrive at the customer location. By arriving at the customer location, the courier device may also bring or have transported the secure vessel with the ordered item to the customer location. Also, the arrival at the customer location may include a notification to the source device or the customer device as an alert that the courier device has arrived at the customer location. At block724, the source device may optionally provide a delivery alert to the customer device indicating that the courier device has arrived at the customer location.

At block726, the customer device may receive the alert that the courier device has arrived at the customer location. Then, at block728, the customer device may note that the item has been retrieved (e.g., that the customer has retrieved the ordered item via the secure vessel at the customer location). Also, the customer device may note that custody of the item and/or secure vessel had passed to the customer device.

FIG. 8depicts a block diagram of a customer process800, in accordance with embodiments of the present disclosure. The customer process800may be performed at a secure vessel delivery system, as introduced above. More specifically, the customer process800may be executed by one or more microprocessors, such as those of a data processing and storage system, source device, courier device, secure vessel, and/or customer device or a combination thereof. It is noted that the customer process800is merely an example, and is not intended to limit the present disclosure. Accordingly, it is understood that additional operations (e.g., blocks) may be provided before, during, and after the customer process800ofFIG. 8, certain operations may be omitted, certain operations may be performed concurrently with other operations, and that some other operations may only be briefly described herein.

The customer process800may begin at block802. At block802, a courier device may arrive at a customer location. In certain embodiments, block802may represent a continuation of the order to delivery process700, such as from block722. Returning toFIG. 8, at block804, the customer device may receive a delivery alert that the ordered item is ready for pickup. As noted above, the ordered item may be within a secure vessel. Also, the secure vessel may include a tag that includes an identifier for the item, order, and/or secure vessel brought to the customer location. Details of secure vessels and tags are discussed further above and will not be repeated here for brevity. At block806, the customer device may scan the tag. By scanning the tag, the customer device may receive the identifier for the item, order, and/or secure vessel brought to the customer location. At block808, a decision may be made at the customer device as to whether the identifier from the tag matches an expected identifier for the item, order, and/or secure vessel brought to the customer location in accordance with the order. If there is a match, the process800may proceed to block810. If not, the process800may proceed to block814.

At block810, the courier device may check delivery information. This check may set up providing the delivery information to the source device, as will be discussed further below. This check may also, or alternatively, be to make sure that the courier device's delivery of an ordered item to the customer location and/or to the customer device was not erroneous. At block812, the courier device may contact the source device to remedy any issues from the delivery. For example, the courier device may contact the source device to remedy the issue of the identifier from the tag not matching an expected identifier for the item, order, and/or secure vessel brought to the customer location in accordance with the order. As another example, the courier device may contact the source device to remedy an issue of a lock on the secure vessel not unlocking.

At block814, a decision may be made as to whether a first attempt to unseal (e.g., open or unlock) the secure vessel is successful. This first attempt may be made based on a confirmation that the identifier from the tag matches an expected identifier for the order item, order, or secure vessel brought to the customer location. For example, this first attempt may be automatic based on the match, referenced above in block808. If the first attempt to unseal (e.g., open or unlock) the secure vessel is not successful, the process800may proceed to block816. If the first attempt to unseal (e.g., open or unlock) the secure vessel is successful, the process800may proceed to block818.

At block816, the customer device may retrieve access information for manually unlocking the secure vessel. For example, this manual unlocking may entail entering access information (e.g., an access code of any number of digits (e.g., 6 digits) or any other unique information configured to grant selective access) on a user interface security sensor on the secure vessel itself, as discussed above. In certain embodiments, this access information may be received at the customer device in response to an unsuccessful first attempt to unseal (e.g., open or unlock) the security vessel. For example, this access information may be received via a text message from another component of the secure vessel delivery system (e.g., from a data processing and storage system, secure vessel, or source device via a network connection).

At block820, a decision may be made as to whether a second attempt to unseal (e.g., unlock or open) the secure vessel is successful. This second attempt may be made based on the manual unlocking via provided access information discussed in block816. If the second attempt to unseal (e.g., unlock or open) the secure vessel is not successful, the process800may proceed to block812. If the second attempt to unseal (e.g., unlock or open) the secure vessel is successful, the process800may proceed to block818. At block818, the customer device may note that the item has been retrieved (e.g., that the customer has retrieved the ordered item via the unlocked secure vessel at the customer location). Also, the customer device may note that custody of the item and/or secure vessel had passed to the customer device.

In various embodiments, a secure vessel delivery system can enable courier tracking and characterization. For example, the routes taken by various couriers associated with respective courier devices from a given item source to a selected destination over multiple item orders can be used to identify and select, from among multiple courier devices, the more effective and timely couriers for a given item delivery to the selected destination. Ratings can be assigned to the courier devices based on his or her relative or comparative performance or customer satisfaction levels. A customer device associated with a customer or a source device associated with a source can select a higher rated courier device, from among multiple courier devices, for a given item order. Customer devices can be charged higher amounts for the use of a higher rated courier. More effective or faster routes from a given source to the selected destination can be identified based on the tracking of the various courier devices carrying item orders to the selected destination.

In various embodiments, the secure vessel delivery system can enable item tracking and characterization. For example, the handling or opening/closing history of a secure vessel holding the item can be tracked using feedback from the security sensors. For instance, the weight of the item can be tracked as a function of time to ensure that nothing has been removed from or added to the secure vessel during transportation.

The secure vessel delivery system can provide novel methods to charge customers for the courier service. A data processing and storage system could communicate with a secure vessel (e.g., the mobile locker or container) and be in control of the locking and unlocking functions at a secure vessel. The mobile locker or container could be provided to a source associated with the source device at little or no charge with a transaction charge being made to the source for each instance of locking or unlocking or on a locking/unlocking transaction-by-transaction basis. Due to the secure custodianship of the item, the source device (e.g., the source associated with the source device) could receive a reduced insurance charge from an insurance company for insuring the item delivery by a courier associated with the courier device. As will be appreciated, the reduced charge is the result of the lower item tampering or theft or loss risk resulting from more secure custodianship arising from the measures taken by the secure vessel delivery system. Although certain embodiments may have described delivery of items in the context of delivery of food items, any type of item may be delivered as desired for different applications in various embodiments. For example, further embodiments contemplate the delivery of items such as pharmaceuticals, intoxicants, medical supplies, groceries, jewelry, precious metals, money, and the like.

Embodiments herein comprising software are executed, or stored for subsequent execution, by one or more microprocessors and are executed as executable code. The executable code being selected to execute instructions that comprise the particular embodiment. The instructions executed being a constrained set of instructions selected from the discrete set of native instructions understood by the microprocessor and, prior to execution, committed to microprocessor-accessible memory. In another embodiment, human-readable “source code” software, prior to execution by the one or more microprocessors, is first converted to system software to comprise a platform (e.g., computer, microprocessor, database, datastore etc.) specific set of instructions selected from the platform's native instruction set.

The term “computer-readable medium,” as used herein, refers to any tangible storage that participates in providing instructions to a microprocessor for execution. Such a medium may take many forms, including, but not limited to, non-volatile media, volatile media, and transmission media. Non-volatile media includes, for example, NVRAM, or magnetic or optical disks. Volatile media includes dynamic memory, such as main memory. Common forms of computer-readable media include, for example, a floppy disk, a flexible disk, hard disk, magnetic tape, or any other magnetic medium, magneto-optical medium, a CD-ROM, any other optical medium, punch cards, paper tape, any other physical medium with patterns of holes, a RAM, a PROM, an EPROM, a FLASH-EPROM, a solid-state medium like a memory card, any other memory chip or cartridge, or any other medium from which a computer can read. When the computer-readable media is configured as a database, it is to be understood that the database may be any type of database, such as relational, hierarchical, object-oriented, and/or the like. Accordingly, the disclosure is considered to include a tangible storage medium and prior art-recognized equivalents and successor media, in which the software implementations of the present disclosure are stored.

While machine-executable instructions may be stored and executed locally to a particular machine (e.g., personal computer, mobile computing device, laptop, etc.), it should be appreciated that the storage of data and/or instructions and/or the execution of at least a portion of the instructions may be provided via connectivity to a remote data storage and/or processing device or collection of devices, commonly known to as “the cloud,” but may include a public, private, dedicated, shared and/or other service bureau, computing service, and/or “server farm.”

A “lock” is a mechanical or electronic or electromechanical fastening device that can be released by a physical object (such as a key, keycard, fingerprint, RFD card, security token, coin etc.), by supplying secret information (such as a number or letter permutation or password), or by a combination thereof.

The term “module,” as used herein, refers to any known or later-developed hardware, software, firmware, artificial intelligence, fuzzy logic, or combination of hardware and software that is capable of performing the functionality associated with that element. Also, while the disclosure is described in terms of exemplary embodiments, it should be appreciated that other aspects of the disclosure can be separately claimed.

The term “Quick Response code” or “QR code” refers to a matrix barcode (or two-dimensional barcode) that is a machine-readable optical label containing information about with an item to which it is attached or on which it is displayed or associated with a person having the item. A QR code uses four standardized encoding modes (numeric, alphanumeric, byte/binary, and kanji) to store data efficiently; extensions may also be used. For example, QR codes may store personal information, URL's, product pricing, bank account information, credit card information, website login information, and WiFi login information.

The term “Radio-Frequency identification” or “RFID” refers to an identifier that uses electromagnetic fields to automatically identify and track tags attached to objects. The tags contain electronically-stored information. Passive tags collect energy from a nearby RFID reader's interrogating radio waves. Active tags have a local power source (such as a battery) and may operate hundreds of meters from the RFID reader. Unlike a barcode, the tag need not be within the line of sight of the reader, so it may be embedded in the tracked object. RFID is one method of automatic identification and data capture (AIDC). Tags may either be read-only, having a factory-assigned serial number that is used as a key into a database, or may be read/write, where object-specific data can be written into the tag by the system user. Field programmable tags may be write-once, read-multiple; “blank” tags may be written with an electronic product code by the user. RFID tags contain at least three parts: an integrated circuit that stores and processes information and that modulates and demodulates radio-frequency (RF) signals; a means of collecting DC power from the incident reader signal; and an antenna for receiving and transmitting the signal. The tag information is stored in a non-volatile memory. The RFID tag includes either fixed or programmable logic for processing the transmission and sensor data, respectively. An RFID reader transmits an encoded radio signal to interrogate the tag. The RFID tag receives the message and then responds with its identification and other information. This may be only a unique tag serial number, or may be product-related information such as a stock number, lot or batch number, production date or other specific information. Since tags have individual serial numbers, the RFID system design can discriminate among several tags that might be within the range of the RFID reader and read them simultaneously.

The term “barcode” refers to an optical, machine-readable representation of data; the data usually describes something about the object that carries or displays the barcode or a person associated with the object. Traditional barcodes systematically represent data by varying the widths and spacings of parallel lines and may be referred to as linear or one-dimensional (1D). Two-dimensional (2D) barcodes use rectangles, dots, hexagons and other geometric patterns, (also called matrix codes). Barcodes can be scanned by special optical scanners called barcode readers or by application software that can read images, such as smartphones with cameras.

The terms “configured for,” “configured to” and conjugations thereof, as used herein with respect to a specified operation or function, refer to a device, component, circuit, structure, machine, signal, etc., that is physically or virtually constructed, programmed, formatted and/or arranged to perform the specified operation or function.