Abstract:
A self-service kiosk apparatus is presented that has a plurality of secure service areas. Access to the plurality of secure service areas and the components of the kiosk system contained within each area is controlled. Authorization to access each secure service area is based on a person&#39;s level of training and security level.

Description:
BACKGROUND 
       [0001]    Self-service kiosk systems have replaced assisted-service systems in many business environments today. For example, self-service kiosk systems may be found in retail, hospitality, travel, entertainment, medical, pharmaceutical and other environments. 
         [0002]    Certain types of self-service kiosk systems dispense and in some cases receive items such as DVDs, rental car keys, hotel room keys, prescription drugs and more. In addition, these types of self-service kiosk systems typically have one or more consumable items such as receipt paper and/or envelopes. The consumable items and dispensable items are maintained securely inside the self-service kiosk system. 
         [0003]    The consumable items require periodic replenishing or servicing should a jam occur. Personnel that perform this type of function or service have limited training. The kiosk system is typically opened to allow access to the consumable items. Opening the kiosk system on current systems allows access to the disposable items along with access to other components of the kiosk system. Having access to other items and system components creates an increased security risk plus increases the risk of harm as a result of an untrained person having contact with certain electrical and/or mechanical components within the kiosk system. 
         [0004]    Therefore, it would be desirable to provide a self-service kiosk system that provides multiple secure service areas each providing physical access to different areas, items and components inside the self-service kiosk system. 
       SUMMARY 
       [0005]    A self-service kiosk apparatus and method with a plurality of secure service areas is provided. 
         [0006]    The self-service kiosk includes a computer that executes software that controls the components and operation of the kiosk. The kiosk has a plurality of secure service areas each containing or providing access to certain items and components of the kiosk. Lockable security devices are used to restrict access to each secure service area. 
         [0007]    A method is provided using a computer to input an electronic key with encoded information used to determine which secure service areas can be accessed. The computer powers down components in the accessed secure service areas to reduce the risk of injury. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0008]      FIG. 1  illustrates a block diagram of an example self-service kiosk apparatus. 
           [0009]      FIG. 2  illustrates a high level drawing of an example self-service kiosk apparatus depicting one of the secure service areas. 
           [0010]      FIG. 3  illustrates a high level drawing of an example self-service kiosk apparatus depicting another of the secure service areas. 
           [0011]      FIG. 4  illustrates a high level drawing of an example self-service kiosk apparatus depicting another of the secure service areas. 
           [0012]      FIG. 5  illustrates a high-level flow diagram for using an electronic lock to access secure service areas. 
       
    
    
     DETAILED DESCRIPTION 
       [0013]    Referring now to  FIG. 1 , there is provided an example DVD media rental kiosk system  100 . The kiosk system  100  comprises a computer  110  and a number of peripherals and devices controlled by the computer  110  that together with software applications running on the computer  110  implement and control the features and functions of the kiosk system  100 . 
         [0014]    The computer  110  comprises a memory  125  that stores instructions and data and a processor  115  that executes the instructions and manipulates the data stored in the memory  125 . The computer  110  further comprises a data storage device  130 , a communication controller  135  and a hardware controller  120 . The data storage device  130  is a permanent or long-term storage that stores instructions and data used by the computer  110 . The data storage device  130  can be comprised of solid state devices, i.e., flash memory, or rotating memory, i.e., disk drives or any other suitable device that provides for the non-volatile storing instructions and data. The instructions stored on the data storage device  130  are organized into software applications and programs that control and implement the functions and features of the kiosk system  100 . These applications and programs are loaded into the memory  125  and executed by the processor  115 . The communication controller  135  provides hardware and software necessary to communicate with peripherals attached to the computer  110  and one or more communication networks. The communication controller  135  can support multiple networks such as Ethernet, WIFI and cellular based networks. The hardware controller  120  controls certain peripherals attached to the computer  110 . 
         [0015]    The kiosk system  100  also comprises a number of peripherals devices. These include a imager/scanner  140 , an magnetic stripe reader (MSR)  160 , an LCD display with a touch-screen  145 , a robotic device  165 , a receipt printer  150 , a DVD transport mechanism  170 , a envelope printer  155  and a speaker  175 . All of these peripherals are controlled by one or more applications executing on the computer  110 . 
         [0016]    The imager/scanner  140  captures an image of a DVD or scans a bar code on a DVD being dispensed or returned in order to identify the DVD and determine if it is the correct DVD for the requested operation. The imager/scanner can also scan a barcode on a driver&#39;s license to verify age, which is required in some states for renting ‘R’ rated or age restricted content. The imager/scanner can further scan barcodes on promotional coupons. In some embodiments, an RFID reader is used in place of or in addition to the imager/scanner to read an RFID tag attached to a DVD or other items e.g., a driver&#39;s license. 
         [0017]    The LCD display/touch-screen device  145  is comprised of an LCD display for communicating information to a customer and touch-screen for receiving input from the customer. 
         [0018]    The MSR  160  reads a customer&#39;s loyalty card or credit card to identify a customer or to perform a transaction e.g., payment fulfillment for renting a DVD. A pin pad maybe included with the MSR  160  or a pin pad can be created virtually on the LCD/touch-screen  145 . In some embodiments, the MSR  160  is used to read ID cards used by service personnel. Each ID card contains information that identifies the person and what areas of the kiosk system  100  they are allowed to access. The kiosk system  100  also keeps a record of the access and the person&#39;s information. In some embodiments the kiosk system  100  requests conformation for the access from security computer in communication with the kiosk system  100 . 
         [0019]    The DVD transport mechanism  170  performs two main functions. It receives a DVD from a customer, transports the DVD past the imager/scanner  140  for identification and then delivers the DVD to the robotic device  165  for storage. It can also receive a DVD from the robotic device  165 , transport the DVD past the imager/scanner  140  for identification and then deliver it to a customer using the kiosk system  100 . Numerous other variations of these functions are also performed by the DVD transport mechanism  170 , i.e., returning a DVD to a customer when the DVD cannot be identified. 
         [0020]    The robotic device  165  retrieves a DVD from or deposits a DVD into one of multiple secure DVD storage locations located inside the kiosk system  100 . The robotic device  165  is also connected to the DVD transport mechanism  170  and either receives a DVD from or delivers a DVD to the DVD transport mechanism  170 . An application executed by the computer  110  maintains a record of each DVD stored in the Kiosk system  100  and which storage locations it is stored in. The computer  110 , controlled by the application, also causes the robotic device  165  to retrieve a DVD from or store a DVD into the proper storage location. 
         [0021]    The receipt printer  150  prints a receipt with details of any transaction that occurs. The receipt printer  150  consumes receipt paper during operation. Periodically, the receipt paper must be replenished which requires internal access to the kiosk system  100 . In addition, the receipt paper can become jammed. Clearing the jam can require calling service personnel, which must access the receipt printer  150  to clear the jam. 
         [0022]    In some embodiments, an envelope printer  155  is used. The envelope printer  155  prints information on an envelope that is delivered to a customer. Periodically, the envelopes must be replenished which requires internal access to the kiosk system  100 . In these embodiments, a customer uses an envelope to transport and protect bare disc delivered by the kiosk system  100 . 
         [0023]    The speaker  175  provides audio communications to a customer and sounds an alarm when unauthorized entry to a secured area is detected. 
         [0024]    In addition to the components depicted in  FIG. 1 , the kiosk system  100  can house more that a hundred DVDs waiting to be rented or sold. At anytime, there could be thousands of dollars worth of DVDs in the kiosk system  100  in addition to the value of the components that make up the kiosk system  100 . The components also present a potential electrical and/or mechanical hazard to anyone accessing the internal areas of the kiosk system  100 . Furthermore, a person that has access to the internal area of the kiosk system  100  may only be trained to perform limited functions, such as replacing the consumables, and thus could either be injured and/or cause damage to the components or items if they accessed areas they are not trained for. Finally, not all persons that have access to the kiosk system  100  have the same level of security or truth. There is usually a cost associated with higher levels of security or higher levels of training. Therefore access to different areas of the kiosk system  100  is based on the person&#39;s level of security and/or training. This allows a person with a lower level of security and/or training to access only the areas that match their security and/or training and thus lowers the operating cost of the kiosk system  100 . It also better protects the person and kiosk system  100  from harm. 
         [0025]    The kiosk system  100  has three separate internal secure service areas located within a housing  225  ( FIG. 2 ). Human access to each of the secure service areas is controlled. Kiosk system  100  components accessible from each area all have a similar requirement for a certain level of security and training. 
         [0026]    Turning now to  FIG. 2 , there is provided a drawing of the kiosk system  100  depicting a first secure service area  220 . The first secure service area  220  is located behind a lower door assembly  200 . Access to the first secure service area  220  is gained by unlocking mechanical key lock  215  and opening the lower door assembly  200 . The first secure service area  220  requires the lowest level of security and training for a person accessing the area. The first secure service area  220  permits access to and replacement of the consumables items used by the kiosk system  100 . These items include receipt paper and envelopes. If a jam involving a consumable occurs, the jam can be accessed and cleared from the first secure service area  220 . The jam may involve the receipt printer  150  or envelope printer  155  which are accessible from the first secure service area  220 . In some embodiments, a removable media storage bin  205 , used for quick DVD returns, is also accessible from the first area  220 . 
         [0027]    Turning now to  FIG. 3 , there is provided a drawing of the kiosk system  100  depicting a second secure service area  325 . It is typical to require a person that has access to the second secure service area  325  to have a higher level of security and training than what is required for the first secure service area  220 . This is because the components in the second secure service area  220  are more complex, expensive and pose a higher risk of harm to the person. The second secure service area  325  permits access to the computer  110  and most of the peripherals with the exception of the robotic device  160 , DVD storage area and the DVDs. Access to the second secure service area  325  also allows access to the MSR  160  connections and potentially to payment information so a higher level of trust is required. In some embodiments, additional power suppliers and adapters  310  are also accessible from the second service area  325 . 
         [0028]    The second secure service area  325  is located behind a front panel door assembly  300 . Access to the second secure service area  325  is gained by unlocking two mechanical key locks  315  and opening the front panel door assembly  300 . The front panel door assembly  300  has a door hinge  320  on the left side that is attached to the housing  225  and the door assembly  300  opens on its right side. The two key locks  315  are keyed to use the same individual key. However, the two key locks  315  for the door assembly  300  and the key lock  215  for the lower door assembly  200  use different individual keys. 
         [0029]    In some embodiments, the individual key used for the two key locks  315  on the front panel door assembly  300  will also work to open the key lock  215  on the lower door assembly  200 . However, the individual key for the key lock  215  on the lower door assembly  200  will not work to open the two key locks  315  on the front panel door assembly  300 . 
         [0030]    Turning now to  FIG. 4 , there is provided a drawing of the kiosk system  100  depicting a third secure service area  400 . In general, access to the third service area  400  requires a different, usually higher, level of security and training because access to this area usually implies access to the above described areas plus the components and items in the third secure service area  400 . The third secure service area  400  is located behind a media storage door  415 . Access to the third secure service area  400  is gained by unlocking two key locks  405  located on the media storage door  415  and opening the media storage door  415 . The media storage door  415  has a hinge  410  on the right side that is attached to the housing  225  and opens from the left side. The two key locks  405  are keyed to use the same individual key. The individual key for the two key locks  405  is different from the individual keys that open the locks for access to the other two secure service areas. 
         [0031]    In some embodiments, the individual key used for the two key locks  405  on the media storage door  415  will also work to open the two key locks  315  on the front panel door assembly  300  and the key lock  215  on the lower door assembly  200 . However, the individual key for the two key locks  315  on the front panel door assembly  300  and for the key lock  215  on the lower door assembly  200  will not work to open the two key locks  405  on the media storage door  415 . 
         [0032]    The third secure service area  400  includes media storage racks  425 , the robotic device  165  (not shown) and when populated, DVDs. The media storage racks  425  have individual bins where each bin stores one or more DVDs or bare discs. The robotic device  165  is used to move the DVDs or discs to and from the individual bins of the media storage racks  425 . Access to the third secure service area  400  permits the servicing of the robotic device  165  and the adding or removing DVDs from the media storage racks  425 . 
         [0033]    In some embodiments, an electronic lock is used in place of one or more of the mechanical locks.  FIG. 5  illustrates a high-level flow diagram for using an electronic lock to access secure service areas. In step  500 , an electronic key is received by the kiosk system  100  from a person at the kiosk system  100  requesting access to a secure area of the kiosk system  100 . The electronic locks maybe operated with an electronic key that is entered on a keypad (e.g., the MSR card reader typically has a pin pad) or encoded on an ID or key card that is read by the kiosk system  100 . In some embodiments, an RFID device is used to store the electronic key and the kiosk system  100  is able to read the RFID device to obtain the electronic key. 
         [0034]    The computer  110  after reading the electronic key authenticates the key and uses the information encoded in the key to determine which electronic locks to open so the person may gain access to authorized secure service areas (step  505 ). For authentication, the computer  110  may require that a user enter a pin number. The electronic key is encoded with information that the computer  100  uses to determine which of the secure service areas can be accessed (step  510 ). After the electronic key is authenticated, the computer  110  sends commands to the proper electronic locks to unlock the doors to the authorized secure service areas (step  515 ). 
         [0035]    In some embodiments, the computer  110  will turn off power to or deactivate components in the authorized secure service areas being accessed to reduce the risk of electrical shock or mechanical injury. This may include turning off power to the entire kiosk system  100 . Servicing certain components or diagnosing problems with components may require moving a component under power through normal operating limits or performing normal functions. This may not be possible if the computer  110  turns off power to the component. A service person can enter a code into the computer  110  that instructs the computer  110  override the normal power down features. Additional codes will cause the computer  110  to move components for the purpose of diagnosing problems, testing new components or calibrating components. 
         [0036]    The above embodiments and drawings disclose a kiosk system  100  for renting DVDs. In other embodiments, the kiosk systems stores and dispenses other items such as pharmaceuticals, hotel keys, SD cards, USB drives or vehicle keys. In some embodiments, such as a check-in kiosk for renting a car, the vehicle keys are stored in a standard sized carrier to make it easier for the devices within the kiosk that handle the items and move them within the kiosk. In some embodiments, the kiosk will separate the vehicle keys from the carrier prior to delivering the keys external to the kiosk. The carrier is retained internally for reuse. 
         [0037]    Although particular reference has been made to certain embodiments, variations and modifications are also envisioned within the spirit and scope of the following claims.