Patent Description:
Prior to pay-at-the-pump technology, gasoline service stations were typically equipped with an attendant-operated terminal for manually transacting fuel purchases. This type of terminal was ordinarily situated in a central location, normally the sales office, and self-service customers were required to pay for gasoline at this location. So long as each fuel dispensing pump was "enabled," i.e., ready for pumping without attendant intervention, a customer merely had to park his car at one of the fuel islands, pump the gasoline and then walk to the central location to pay for the gasoline purchase.

However, the problem of "drive-offs" often required service station operators to avoid leaving the fuel dispensers in a normally enabled state. A "drive-off' occurred whenever a car refueling at a remote, enabled fuel dispenser drove off without paying for the gasoline. This situation led to the installation of equipment to remotely enable the fuel dispensers from the central location. It also led to requiring the customer to make a pre-payment for gasoline before the attendant enabled the fuel dispenser. However, such pre-payment could only be made at the central location, requiring the customer to park his car at one of the fuel islands and walk to the central location to tender pre-payment by cash, debit card, credit card and the like. After making the pre-payment, the customer would walk back to the fuel island and dispense the gasoline. After the fuel dispensing was done, the customer would return to the central location to complete the sales transaction by obtaining any change due, picking up a cash receipt, signing a credit card slip or performing any similar action. The procedure was time consuming and inconvenient to the customer and frequently resulted in lost sales to the service station operator.

Consequently, the option for paying for fuel purchases at the pump without the need to walk to the central location for pre-payment or post-pumping wrap-up has become increasingly popular to the motoring public. Such a point of sale system allows for payment using a customer credit card or cash or other known payment means, and can automatically enable fuel dispensers directly from a fuel island. While pay-at-the-pump systems are convenient for the customer, there is a risk of theft of fuel and payment card data. Thieves will open the fuel dispenser door and can either manipulate the pump to dispense fuel without requiring payment, or can steel confidential customer payment information.

To combat this theft, many dispensers are manufactured or retro-fit with a door alarm and monitoring system to help protect against unauthorized fuel dispenser entry. The door alarm will sound an alarm and shut down the pump when the dispenser door is opened without proper authorization. In order to service the fuel dispenser, a two step access process must be following. First, the door must be unlocked using a key. Second, a password must be input into the outdoor payment terminal. These are separate processes that must be performed in the correct order to prevent the dispenser from being locked. Additionally, once service is complete, the authorized service agent or the clerk must remember to reactivate the door alarm so as to ensure that the dispenser is protected against unauthorized access. This can be burdensome, particularly with dispensers that are retro-fit with a door alarm kit, as these dispensers often require the door to be opened every time the printer paper needs to be changed.

The US patent application <CIT> explains an electronic door lock for a fuel dispenser. The US patent application <CIT> explains a door entry security device with electronic lock.

Accordingly, there remains a need for improved methods and devices for maintaining security on a fuel dispenser, while also enabling ease of access for an authorized service agent or station owner/employee.

Various fuel dispensers, fuel dispensers components and kits, and methods are disclosed having means for controlling access to one or more doors of the fuel dispenser.

A fuel dispenser is provided and includes a housing having a base module with fuel dispensing components disposed therein, and an electronics module with electronics for controlling the fuel dispensing components. At least one door is coupled to the housing and is associated with at least one locking mechanism configured to lock and unlock the at least one door to control access to components within the housing. The dispenser also includes a door alarm sensor configured to sense when the at least one door is locked and unlocked, and an alarm/lock controller disposed in the housing and coupled to the at least one locking mechanism and the door alarm sensor. The alarm/lock controller is configured to control the at least one locking mechanism and the door alarm sensor. A reader is operatively coupled to the controller such that the controller is configured to unlock the at least one locking mechanism and to de-activate the door alarm sensor in response to the reader receiving and authenticating a first input.

While the dispenser can have a variety of configurations, the alarm/lock controller is configured to lock the at least one locking mechanism and to activate the door alarm sensor in response to the successful authentication of a second input. For example, in response to the first input, the alarm/lock controller transmits at least one first signal to cause the at least one locking mechanism to unlock and to cause the door alarm to de-activate, and, in response to the second input, the alarm/lock controller transmits at least one second signal to cause the at least one locking mechanism to lock and to cause the door alarm to activate.

In an embodiment, the reader is configured to obtain information stored on a portable access device. For example, the reader can be a contactless near field communication reader. As another example, the reader can be configured to obtain at least one type of biometrics information from a user. The door alarm sensor can also have various configurations and can be, for example, a magnetic sensor.

In another embodiment, when the at least one locking mechanism is unlocked and the door alarm sensor is de-activated, the fuel dispenser provides an indication indicating that the at least one locking mechanism is unlocked and door alarm sensor is de-activated.

The at least one door can be at least one of a first door on the base module controlling access to the fuel dispensing components, a second door on the electronics module controlling access to the electronics module, and a third door on the electronics module controlling access to a printer of the electronics module.

The fuel dispenser also includes a fuel controller coupled to the fuel dispensing components in the base module. The reader can be configured to instruct the fuel controller to disallow use of the fuel dispensing components when the at least one locking mechanism is unlocked and the door alarm sensor is de-activated.

The at least one locking mechanism can have various configurations, and can be an electronic locking mechanism having a latch movable between a locked position in which the latches engages the at least one door to prevent movement of the door, and an unlocked position in which the latches is disengaged from the at least one door to allow the door to be opened.

The fuel dispenser also includes a wireless communication module coupled to the reader and configured to receive the first input from reader and to wirelessly transmit the first input received to a network cloud to authenticate the first input. The dispenser can also include an alarm coupled to the alarm/lock controller and configured to transmit an audible signal.

There is further disclosed a door lock and alarm control kit for use with a fuel dispenser. The kit can include an alarm/lock controller configured to be mounted within a housing in a fuel dispenser, and at least one electronic door locking mechanism electrically coupled to alarm/lock controller such that the alarm/lock controller is configured to cause the at least one electronic door locking mechanism to switch between a locked configuration, in which a latch on the electronic door locking mechanism is closed, and an unlocked configuration, in which the latch on the electronic door locking mechanism is open. The kit can also include at least one door alarm sensor coupled to the alarm/lock controller and having a first component configured to be mounted in a fuel dispenser and a second component configured to be mounted on a door of a fuel dispenser such that the at least one door alarm sensor can detect open and closed positions of the door.

The kit can include a reader configured to receive information from a portable access device. The reader can be, for example, a near field communication reader. The kit can also include a portable access device configured to store information to be transmitted to the reader. The alarm/lock controller can be configured to switch the at least one locking mechanism to the unlocked configuration and to de-activate the door alarm sensor in response to the reader obtaining information from a portable access device. The alarm/lock controller can also be configured to cause the at least one locking mechanism to move to the locked configuration and to activate the door alarm sensor in response to the reader reading obtaining information from a portable access device.

The kit can also include an alarm configured to emit an audible signal if the at least one door alarm sensor detects an open position of the door and the at least one reader has not obtained information from a portable access device.

In other aspects, the kit can include a wireless communication module coupled to the reader and configured to wirelessly communicate with a network cloud to authenticate information obtained by the reader from a portable access device.

Methods for controlling a door alarm and lock on a fuel dispenser are also disclosed, but not claimed and can include receiving a first input from a portable access device, and authenticating the first input. If the first input is authenticated, at least one door locking mechanism on a door of a fuel dispenser can be unlocked thereby allowing the door to be opened, and a door alarm sensor coupled to the door and to an alarm can be de-activated. The method can also include receiving a second input from a portable access device and authenticating the second input. If the second input is authenticated, the at least one door locking mechanism on the door can be locked thereby preventing the door from opening, and the door alarm sensor coupled to the door and to an alarm can be activated such that the alarm will sound if the door is opened. In one embodiment, an alarm/lock controller can cause the at least one door locking mechanism on the door to lock and unlock and can cause the door alarm sensor to be de-activated and activated.

In certain aspects, the first and second inputs are received by a reader, and the first and second inputs are authenticated by a wireless communication module that wirelessly transmits the first and second inputs to a cloud network. In some aspects, the first and second inputs are received by a biometrics reader, and the first and second inputs are authenticated by a server in communication with the fuel dispenser. The server can be a cloud network server.

The fuel dispenser can also include a payment module having a reader that obtains the first and second inputs. In one embodiment, the reader can be a near field communication reader and the first and second inputs are received from at least one of a card and a mobile telephone. The method can also include preventing the fuel dispenser from dispensing fuel when the at least one locking mechanism is unlocked and the door alarm sensor de-activated.

The embodiments described above will be more fully understood from the following detailed description taken in conjunction with the accompanying drawings. The drawings are not intended to be drawn to scale. In the drawings:.

Certain exemplary embodiments will now be described to provide an overall understanding of the principles of the structure, function, manufacture, and use of the devices and methods disclosed (but not claimed) herein. One or more examples of these embodiments are illustrated in the accompanying drawings. Those skilled in the art will understand that the devices and methods specifically described herein and illustrated in the accompanying drawings are non-limiting and that the scope of the present invention is defined solely by the claims. The features illustrated or described in connection with one exemplary embodiment may be combined with the features of other embodiments.

In general, a smart door alarm and locking mechanism and methods for use thereof are disclosed for maintaining security while providing ease of access to a fuel dispenser. The disclosed methods and devices are used in fuel dispensing devices for providing fuel to a vehicle. However, some methods and devices can be utilized in any device having a payment system where security and access are both required.

There is disclosed methods and systems that include a door alarm and door lock kit that allow unlocking of one or more doors in a housing of a fuel dispenser and simultaneously disabling or de-activating respective door alarm sensor(s). In a similar manner, the door can be locked and the door alarm sensor activated or re-activated substantially simultaneously. In an exemplary embodiment, each door in the housing can be coupled to a respective electronic door locking mechanism that is configured to lock and unlock the door to control access to components within the housing of the fuel dispenser. According to the invention, the door alarm sensor is coupled to an alarm and it is configured to sense when the door is locked and unlocked. Operation of the door locking mechanism and the door alarm sensor is controlled by a controller disposed in the housing and coupled to the locking mechanism and the door alarm sensor.

The locking/unlocking of the door and activating/de-activating of the door alarm sensor is done in response to suitable component(s) of a fuel dispenser receiving appropriate data. For example, the fuel dispenser can include a communication unit, such a reader or other component, that can read, in a contact or non-contact manner, a portable access device to unlock the door and de-activate the alarm sensor. The portable access device can be a card, a mobile phone, or other suitable device. The reader can be at least one biometrics reader configured to acquire biometrics information from a user in a contact or non-contact manner. Depending on the configuration of the reader, a user can swipe the card through a slot in the card reader, bring a card or mobile phone or a similar device in proximity to the reader, or provide biometrics information to thereby unlock the door and de-activate the alarm sensor. Each portable access device can be configured to open only one or more of the doors on the dispenser. Similarly, biometrics information used to authenticate a particular user can be configured to open only one or more of the doors on the dispenser. After the unlocked door is opened and the user performs required manipulations of components of the fuel dispenser that become accessible, the user can use the portable access device again to lock the door and activate or re-activate the door alarm sensor. Furthermore, in some embodiments where a fuel dispenser includes a keypad, user input in the form of a pin code or other data can be received to control locking/unlocking of the door and activating/de-activating of the door alarm sensor. In this way, a user can access components of the fuel dispenser in a secure and simplified manner. Moreover, by combining the door alarm de-activation/re-activation with the locking/unlocking of the door, a number of instances of tamper de-activation can be reduced along with a number of instances where the alarming capability is inactive while the payment terminal is active. This can increase the security and stability of the fuel dispenser while also reducing the number of warranty calls to re-enable tamper tripped devices.

<FIG> and <FIG> illustrate one embodiment of a fuel dispenser <NUM> that generally includes a housing <NUM> having a housing base module <NUM> and an electronics module <NUM> (e.g. an "electronic head"), each having a front side <NUM> and a back side <NUM>. While only the front side <NUM> is discussed herein, the back side <NUM> can also have similar features. The fuel dispenser <NUM> also has two hoses 16a, 16b on the front side, each having a nozzle 18a, 18b located at a terminal end of the hose 16a, 16b. Additional hoses can be present on the back side. A person skilled in the art will appreciate that the fuel dispenser <NUM> can have any number of hoses that can be coupled to the dispenser in any suitable way(s).

The housing base module <NUM> can have a variety of configurations and generally includes fuel dispensing components for transportation of fuel to one of more hoses and nozzles. For instance, a "self-contained" fuel dispenser can have an electric motor, a pumping unit, meters, pulsers, and/or valves to physically pump and control a fuel flow. In such an example, the fuel dispenser can use a suction pump. In another example, a submersible pump fuel dispenser can have a pump that is sealed and immersed inside fuel tanks on site. All such variations of fuel dispensing components can be used in the present fuel dispensers. A control system can be disposed in the housing and is coupled to the fuel dispensing components for controlling the delivery of fuel.

The base module <NUM> can include an outer door <NUM> that can open to provide access to the fuel dispensing components located inside the base module <NUM>. A locking mechanism <NUM> is located on the door <NUM> of the base module <NUM> for allowing the door to be selectively opened and closed to control access to components within the base module <NUM>, such as meters and other fuel dispensing components, for servicing the fuel dispenser <NUM>. The servicing can be performed by a technician or other person. It should be appreciated that the door <NUM> is shown schematically, as, in some implementations, the door <NUM> can be in the form of the entire front side <NUM> of the base module <NUM>. Also, the locking mechanism <NUM> and its location on the door <NUM> are shown schematically, as it can include a latch and/or other components, as discussed below.

The electronics module <NUM> for facilitating payment for fuel and for facilitating the dispensing of the fuel, with electronics for controlling the fuel dispensing components, can also have a variety of configurations. In general, the electronics module <NUM> includes a door <NUM> mounted on the front side of the electronics module <NUM> and having various components mounted thereon. The door <NUM> is associated with a respective locking mechanism (not shown) which is typically located on a side of the electronics module <NUM>. The door <NUM> can have various configurations, and it can be opened/closed in various ways. For example, it can drop down from the top, or it can open from a side to provide access to interior components of the electronics module <NUM>. Other door configurations can be used, as the described techniques are not limited in this respect. The door <NUM> can be associated with a respective door alarm sensor (not shown in <FIG>) configured to sense when the door <NUM> is locked and unlocked, as discussed in more detail below.

The exterior of the door <NUM> can include various components for allowing for customer interaction with the dispenser. The illustrated electronics module <NUM> has a price and volume display <NUM> that presents information concerning the price and volume of any fuel being dispensed, and a graphical display <NUM> that presents a user interface for displaying information to a customer and/or for interacting with a customer. The illustrated electronics module <NUM> also has a keypad <NUM> and buttons <NUM> that allow a customer to interact with the electronics module <NUM>, a payment/communication unit such as a card reader <NUM> that allows the customer to pay for purchases, and grade selection buttons <NUM> that allow the customer to select the grade of fuel to be dispensed by the fuel dispenser <NUM>. The illustrated payment/communication unit is in the form of a card reader <NUM> configured to read an authorized card in a contact manner (e.g., when the card is swiped through the card reader's slot). In other embodiments, the payment/communication unit can be in the form of a contactless reader such that a card or other access device (e.g., a mobile phone or other mobile terminal) can be brought in proximity to the reader which receives information from the device. Such a contactless reader can be, for example, a near field communication (NFC) reader. In other embodiments, the payment/communication unit can be or can include a biometrics reader configured to acquire one or more types of biometrics information from a user.

Furthermore, as shown in <FIG>, the electronics module <NUM> includes a printer <NUM> coupled to the controller for printing transaction information, unrelated fuel purchase information, map data, driving directions, etc. Access to the printer <NUM> can be controlled by a door <NUM> associated with a door locking mechanism <NUM>. The door <NUM> can be used to access and change paper used by the printer <NUM>, and/or to perform other printer servicing operations. The door <NUM> can be associated with a respective door alarm sensor (not shown in <FIG>) configured to sense when the door <NUM> is locked and unlocked, as discussed in more detail below. It should be appreciated that some fuel dispensers implementing the described techniques may not include components related to payment, such that no payment for fuel can be done at the fuel dispenser side and the payment can be processed, for example, in an in-store Point of Sale (POS) terminal.

As schematically illustrated in <FIG>, the internal components of the electronics module <NUM> include a fuel controller <NUM> (in the form of a circuit board and processor) for controlling components in the housing base module <NUM>, such as the meters, pumps, and other components for dispensing of fuel. The electronics module <NUM> can also include a payment controller or module <NUM> (in the form of a circuit board and processor) for controlling components of the electronics module <NUM> related to receiving and processing payment, such as card reader(s) and cash acceptors, communication mechanisms for communicating payment data and other information, etc. The fuel controller <NUM> and payment controller <NUM> can communicate with one another, directly or indirectly via other components.

The fuel dispenser <NUM> includes a communication module <NUM>, also referred to herein as a "beacon," that is configured to be installed on a board in the fuel dispenser and to electronically communicate with a network cloud to access cloud technology services. The beacon <NUM>, which includes one or more wireless communication links configured to facilitate wireless communication between the fuel dispenser <NUM> and a network cloud, is not described in detail herein. The beacon can be implemented, for example, as described in <CIT>, which is hereby incorporated by reference herein in its entirety.

The beacon <NUM> can be associated with a fuel dispenser having a payment mechanism (e.g., fuel dispenser <NUM> in <FIG>), or it can be associated with a fuel dispenser that lacks such payment mechanism. The beacon <NUM> can also authorize information received from the access device. If the fuel dispenser includes a payment mechanism, a payment module can authorize information received from the access device.

The fuel dispenser <NUM> can include a communication unit <NUM> configured to communicate in a contact manner or a non-contact manner with a card, mobile phone, or other access device. In some embodiment, the communication unit <NUM> is configured to communicate with at least one biometrics reader. The communication unit <NUM> can be in communication with an alarm/lock controller <NUM> for locking/unlocking one or more doors (e.g., doors <NUM>, <NUM>, <NUM>), as discussed further below.

It should be appreciated that, while only one fuel dispenser <NUM> is shown in <FIG>, one or more fuel dispensers <NUM> can be grouped together in a single location. Additionally, the fuel dispenser <NUM> can contain more than one hose and nozzle combination. For example, two, four, or eight hoses and two, four, or eight nozzles can be provided for use on the front side <NUM> of the housing base <NUM> while two, four, or eight hoses and two, four, or eight nozzles can be provided for use on the back side <NUM>. A person skilled in the art will further appreciate that the fuel dispenser can have a variety of configurations and the illustrated dispenser configuration is merely representative of one type of fuel dispenser.

As indicated above, a fuel dispenser can be manufactured with or can be retrofit with components that allow for simultaneous door locking/unlocking and alarm disabling/enabling. As shown in <FIG>, which illustrates schematically some of the components of a fuel dispenser <NUM> that implement the described techniques, the fuel dispenser includes at least one door <NUM> that is coupled to the housing <NUM> and that is associated with a door locking mechanism <NUM> configured to lock and unlock the door to control access to components within the housing <NUM>. The door <NUM> can be any number of doors on a fuel dispenser, such as base module door <NUM>, electronics module door <NUM>, and printer door <NUM> of <FIG>. As shown in <FIG>, the door locking mechanism <NUM> is associated with a respective door alarm sensor <NUM> configured to sense when the door <NUM> is locked and unlocked, as discussed in more detail below. The door alarm sensor <NUM> can detect when the door <NUM> has been tampered with and can emit an alarm signal. In the illustrated embodiment, the fuel dispenser <NUM> includes at least one alarm <NUM> coupled to the door alarm sensor <NUM> and configured emit a suitable signal (visual, audio, visual/audio, any combination thereof) when the door alarm sensor <NUM> senses that the door <NUM> has been opened without authorization.

As mentioned above, the at least one door <NUM> can be one or more doors <NUM> protecting access to various components of the fuel dispenser, and each of the doors <NUM> can be associated with a respective locking mechanism <NUM> and door alarm sensor <NUM>. Thus, as mentioned above, each of the doors <NUM>, <NUM>, <NUM> is associated with respective locking mechanism and respective door alarm sensors.

Operation of the locking mechanism <NUM> and the door alarm sensor <NUM> is controlled by an alarm/lock controller. <FIG> illustrates such an alarm/lock controller <NUM> disposed in the housing <NUM> and coupled to the locking mechanism <NUM> and the door alarm sensor <NUM>. According to the invention, the door locking mechanism <NUM>, the door alarm sensor <NUM>, and the alarm/lock controller <NUM> are built into a fuel dispenser (e.g., fuel dispenser <NUM>). There is also disclosed a kit including the door locking mechanism <NUM>, the door alarm sensor <NUM>, and the alarm/lock controller <NUM> can be provided that can be incorporated into any existing fuel dispenser.

<FIG> illustrates fuel dispenser components that can be used to implement the described techniques. A person skilled in the art will appreciate that any combination of the illustrated components can be used, and not all components are required. <FIG> shows four door alarm sensors <NUM> each configured to couple via a cable <NUM> to an alarm/lock controller <NUM>; two door locking mechanisms <NUM> each configured to lock a door; a fuel controller <NUM> for controlling the fuel dispensing components in the base module; a payment controller <NUM> for receiving payment and for communicating with the fuel controller <NUM> to allow the dispensing of fuel when payment is received; two readers, one being a contact reader <NUM> configured to read information from a portable access device put into contact with the reader <NUM>, and the other being a contactless reader <NUM> configured to read information from a portable access device held in proximity to the reader <NUM>; a communication module or beacon <NUM> configured to wirelessly communicate with a network cloud; and an alarm mechanism <NUM> configured to emit a signal. The components can be implemented using suitable circuity. It should be appreciated that connections between these components are shown schematically and that not all connections are shown. The wired connections between the components shown herein and other components of the fuel dispenser can be implemented via a suitable number of wires, such as via a controller area network bus (CAN Bus) wire connection, an RS485 wire connection, a current loop connection, or other type of wire connection.

A door alarm sensor (e.g., door alarm sensor <NUM> in <FIG> and door alarm sensors <NUM> of <FIG>), can have a variety of different configurations. In some embodiments, the door alarm sensor can be a magnetic sensor, as in <FIG> in which each of the door alarm sensors <NUM> of <FIG> can be magnetic sensors, and the fuel dispenser can include a magnet associated with the magnetic sensor and configured to be mounted on a door. For ease of discussion, one of the door alarm sensors <NUM> is discussed below with respect to the door associated therewith and with respect to the magnet associated therewith. The magnet can be coupled to the door in any suitable manner. The door alarm sensor <NUM> can be mounted inside the dispenser in a suitable location, such as on a center panel location in an electronics module of the fuel dispenser that separates front and back sides of the dispenser. The door alarm sensor <NUM> can be coupled, e.g., via the cable <NUM>, to the alarm/lock controller <NUM> that controls activation and de-activation of the sensor <NUM>. The door alarm sensor <NUM> can sense when the magnet is disengaged therefrom and thus detect that the door has been opened.

The door locking mechanism <NUM> associated with one or more doors (e.g., doors <NUM>, <NUM>, <NUM> in <FIG>) can also have a variety of different configurations. As shown in <FIG>, the door locking mechanism <NUM> can include an electronic latch assembly <NUM> that is mounted inside the fuel dispenser, e.g., to the center panel in the electronics module. The electronic latch assembly <NUM> can include a cable <NUM> that connects the electronic latch assembly <NUM> to the alarm/lock controller <NUM>. A fuel dispenser can be manufactured with the electronic latch assembly <NUM> (or a similar locking mechanism), or the electronic latch assembly <NUM> (or a similar locking mechanism) can be used to replace a manual lock present on an existing fuel dispenser. Electronics in the latch assembly <NUM> are configured to control opening and closing of a latch <NUM>. The latch <NUM> engages a suitable feature on the door (e.g., a hoop or other feature configured to be lockingly engaged by the latch <NUM>). When the latch <NUM> is disengaged, the door can be opened. When the latch <NUM> is engaged, the door is prevented from being opened. The door to which the door locking mechanism <NUM> is coupled can be opened and closed by a user, whereas locking and unlocking of the door can be done electronically, as described herein.

The alarm/lock controller <NUM> can also have a variety of different configurations. As shown in <FIG>, the alarm/lock controller <NUM> can be implemented as a circuit board mounted inside the fuel dispenser, e.g., in the electronics module. The alarm/lock controller <NUM> can be included in a fuel dispenser as manufactured, or it can be added after-market to an existing fuel dispenser. As discussed above, the alarm/lock controller <NUM> is coupled to both the door alarm sensor <NUM> and the door locking mechanism <NUM> (e.g., via a universal serial bus (USB) cable or using other connector(s)) to allow the alarm/lock controller <NUM> to control operation of these components. Regardless of the number of door alarm sensors <NUM> and door locking mechanisms <NUM> present in a fuel dispenser, the alarm/lock controller <NUM> is coupled to each of these components.

As shown in <FIG>, the alarm/lock controller <NUM> is connected to the fuel controller <NUM>, either directly or via the payment controller <NUM>. Thus, the alarm/lock controller <NUM> can instruct the fuel controller <NUM> to disable fuel dispensing and other operations of the fuel dispenser when the latch <NUM> is disengaged (and hence when the door is open) and/or when the door alarm sensor <NUM> senses unauthorized opening of the door. The alarm/lock controller <NUM> can also be connected to the payment controller <NUM> and/or the beacon <NUM>. When both the payment controller <NUM> and the beacon <NUM> are present, the alarm/lock controller <NUM> is coupled to each of them.

Regardless of its specific configuration, the alarm/lock controller <NUM> receives signals from the door alarm sensors <NUM> indicating a current state of the doors respectively associated with the sensors <NUM>. If a door is opened without proper authorization, an alarm is triggered. For example, the alarm <NUM> can generate a suitable signal that can be provided via the fuel dispenser (e.g., an alarm will sound) and/or a notification can be sent to a remote controller. The alarm/lock controller <NUM> is also configured to send instructions to the door locking mechanism to cause the latch <NUM> to open and close.

As mentioned above, a fuel dispenser can include one or more readers for obtaining information from a portable access device, such as a card, a mobile phone, and/or other access devices. The reader(s) can have a variety of different configurations. For example, the reader can be a contact reader or a contactless reader. The reader can be operatively coupled to either or both of the beacon <NUM> and the payment controller <NUM>. In some cases, a contactless card reader can be coupled to the beacon <NUM>, and a contact card reader can be coupled to the payment controller <NUM>, as shown in <FIG>. The secure card reader <NUM> can be a card reader present in the fuel dispenser and used for receiving credit card payments.

The reader can be configured to read information from a portable access device, such as a card advanced into the card reader <NUM>, and the acquired information can then be provided to a suitable component of the fuel dispenser, such as the beacon <NUM>, payment controller <NUM>, or other suitable component configured to authenticate information read from the card <NUM>. In particular, a user can swipe the card <NUM> through a slot in the contact reader <NUM> such that the card reader <NUM> reads information stored in the card <NUM>. The contactless card reader <NUM>, which can be disposed at any suitable location on the fuel dispenser (e.g., on the front side of the electronics head), can read information from a suitable access device in a non-contact manner. For example, the user can tap the access device or bring it in proximity to the card reader <NUM>.

The fuel dispenser can authenticate or validate the information obtained from the access device using any suitable security protocol, such as a public/private key protocol. The access device can have information stored thereon that can be decrypted and used to lock/unlock the door and activate/de-activate the alarm sensor <NUM> associated with the door. The access device can have the access code (e.g., a private key or the like) stored thereon in a secure manner that can be authenticated or validated by the fuel dispenser using information (e.g., a public key or the like) stored on the dispenser. For example, the fuel dispenser can store in a memory thereof computer-executable instructions that, when executed by a processor (e.g., a payment module's processor or other processor), can perform access device authentication or validation.

The access device can store an access code, user identification information identifying at least a user and a level of the user, date/time information indicating date/time of creation of the access code, and any other suitable information. The date/time of creation of the access code can be used to determine when that information is to be erased and replaced with new information. The level of the user, which can be encoded on the card or other access device as part of the key stored on the card or other access device, is used to determine which components can be accessed using the card or other access device. Thus, a card or other access device can be configured to unlock and lock one or more doors, depending on a level of the user. For example, a card or other access device can allow controlling a door and a respective alarm to control access to a base module of a fuel dispenser's housing, an electronics heard, and a printer. Thus, a service person can use such card or other access device to service the dispenser. As another example, a card or other access device can allow controlling a door and a respective alarm to control access only to a printer or to the electronics module and the printer. For example, a store clerk can use a card or other access device that allows to only accessing a printer door. A fuel dispenser can have various doors that can be locked and unlocked while respective alarm sensors are activated/de-activated using cards or other access devices having a desired level of user access.

A public key can be installed on a fuel dispenser for availability to locking and alarming software installed on the fuel dispenser (e.g., software stored in a payment module, beacon, or other component(s)). The software, when executed by a processor, can use the public key to determine the legitimacy of a user attempting to access the dispenser. To validate access, the user can use a card or other access device that is read either via a contact reader or a contactless reader installed in the dispenser. For dispensers without a payment module, a separate non-payment contactless reader can be installed with appropriate software. The software can be executed by a processor to validate the legitimacy of the card through the date and access code encrypted on the card passed to the software from the reader.

The card or other access device can be created in a Network Operating Center (NOC) or by an Authorized Service Agent or can be electronically updated with an access code (e.g., via an application (app) installed on the access device). In both cases, the access code (e.g., a private key) can be generated by using a single use password. The first use of a newly generated key can automatically disable all previously generated keys. Because the key has a date associated with it, if another key was generated with a previous date but was not used, that previously generated key becomes invalid.

The card or other access device, whether magnetic strip or NFC, can contain multiple tracks of data which have information about the user of the card, the expiration date of the card, the user's level of authorization and some challenge codes which are encrypted using a public-private key encryption pair. When the card is read by the dispenser components, the track data is compared to information which has been downloaded to the dispenser components informing the components of which track should contain a certain key. The challenge track being read will change upon every instance of reading the challenge codes to ensure that the card has not been partially duplicated. All attempts to access a dispenser will be logged both locally and in a server instance to quickly identify attempts to access the dispenser by a user.

In some embodiments, an access code can be received by the fuel dispenser based on user input received via a secure pin pad. The pin pad can be used additionally or alternatively to card readers. The pin pad can be an existing keyboard of the fuel dispenser or an otherwise configured pin pad.

In use, after a user swipes, taps, or otherwise uses a card or other access device such that it is read by a reader, a respective locking mechanism is unlocked and the door alarm sensor is de-activated. A suitable component of the fuel dispenser, e.g., a payment terminal, can then present on a suitable display an indication indicating that the door alarm sensor has been de-activated. The fuel dispenser and payment module (if present) can be de-activated while the door alarm sensor remains inactivated. The indication can be a light, a change of light, a textual message, an audio message, and/or other type of indication. After a door to having the locking mechanism is opened and desired operations are performed (e.g., a store clerk opens a printer door and replaces the paper, a service person services the dispenser, etc.), the door can be locked again. When it is detected (e.g., by the door alarm sensor) that the door has been closed again, the indication will continue to be displayed, indicating the door alarm is not activated. After the user swipes or otherwise uses the card a second time, the door alarm is re-activated and the door is locked. If the payment terminal was disabled, it can then be re-started.

The alarm <NUM>, such as a buzzer or other mechanism, can be mounted in any suitable location on or in the dispenser. The alarm <NUM> can be connected to battery backup. The alarm <NUM> can be activated by alarm/lock controller when the door is opened without authorization.

<FIG> illustrate one embodiment of a frame <NUM> of a fuel dispenser configured to be mounted within the fuel dispenser and to have a door <NUM> hingedly attached thereto. The door alarm sensor <NUM> of <FIG> is configured to be attached to the frame <NUM>, and a magnet <NUM> is configured to be attached to the door <NUM> and to magnetically communicate with the sensor <NUM>. <FIG> show a front side of the frame <NUM>, and <FIG> show a back (internal) side of the door <NUM>. The frame <NUM>, the door <NUM>, the sensor <NUM> and the magnet <NUM> can each have any of a variety of configurations, as will be appreciated by a person skilled in the art. The door alarm sensor <NUM> can be attached to the door <NUM> in any of a variety of different ways. The door <NUM> in this illustrated embodiment includes a cavity formed therein in which the sensor <NUM> can be disposed, as shown in <FIG>. The cable <NUM> has a connector <NUM> on a terminal end thereof for coupling to the sensor <NUM>, and the cable <NUM> can extend out the back side of the door <NUM> to extend into the fuel dispenser and couple to an alarm/lock controller, as discussed herein.

<FIG> illustrate another embodiment of a door <NUM> showing a magnet <NUM> configured to be mounted on the door <NUM>. Various mounting components are shown for securing the magnet <NUM> to the door. In particular, a support <NUM> is shown having a recess that seats the magnet <NUM> and two screws <NUM> are shown for securing the support <NUM> to the door <NUM>. A cover <NUM> is also provided for holding the magnet in the correct location so that the sensor can detect the magnetic pull of the closed door.

<FIG> illustrates a fuel dispenser center panel <NUM> configured to be mounted within the electronics module, e.g., between front and back sides of the fuel dispenser and extending left to right. The panel's left to right width W is less than a left to right width of the fuel dispenser. <FIG> also the door alarm sensor <NUM> having a cable <NUM> configured to attach to the alarm/lock controller <NUM> at a first end <NUM> thereof and to the sensor <NUM> at the second end thereof. The sensor <NUM> can be mounted in a cavity in the door <NUM>, as explained above with respect to <FIG>. A mounting plate <NUM> and connectors <NUM> (e.g., screws) can be used to facilitate attachment of the alarm/lock controller <NUM> to the center panel <NUM>.

<FIG> illustrates one embodiment of components of a fuel dispenser <NUM> including a door alarm <NUM>, which is a mechanism to emit an audible sound in this illustrated embodiment. The fuel dispenser <NUM> also includes first and second readers in the form of a contact card reader <NUM> and a contactless reader <NUM>. The contact reader <NUM> is configured to communicate data to a payment controller <NUM> in response to an access device contacting the contact reader <NUM>, and the contactless reader <NUM> is configured to communicate data to the payment controller <NUM> in response to an access device coming within an effective distance of the contactless reader <NUM>. The payment controller <NUM> is in the form of a computer that is configured to validate or authenticate the access device based on the data received from the one of the readers that read the access device and communicated data related to the attempted validation or authentication to the payment controller <NUM>. The payment controller <NUM> is configured to transmit data indicative of validation of authentication of the access device to an alarm/lock controller <NUM>, which is configured to cause an electronic door lock <NUM> to unlock in response to a received indication of successful access device validation or authentication to allow access into the fuel controller via the unlocked door and to cause the door alarm <NUM> to provide an alarm in response to a received indication of failed access device validation or authentication to indicate a potentially problematic attempt for access into the fuel dispenser <NUM> via the door.

<FIG> illustrates another embodiment of components of a fuel dispenser <NUM> including a door alarm <NUM>, which is a mechanism to emit an audible sound in this illustrated embodiment. The system of <FIG> is similar to the system of <FIG> except that the fuel dispenser of <FIG> does not include a payment controller and does not include a contact reader. The contactless reader <NUM> of <FIG> is configured to validate or authenticate the access device based on the data read from an access device and is configured to communicate data related to the attempted validation or authentication to the alarm/lock controller <NUM>. The alarm/lock controller <NUM>, which is configured to cause the electronic door lock <NUM> to unlock in response to a received indication of successful access device validation or authentication to allow access into the fuel controller via the unlocked door and to cause the door alarm <NUM> to provide an alarm in response to a received indication of failed access device validation or authentication to indicate a potentially problematic attempt for access into the fuel dispenser <NUM> via the door.

As mentioned above, a fuel dispenser implementing the described techniques can include a beacon and/or a payment module. In some embodiments, a beacon is present and a payment module is absent. In other embodiments, both beacon and payment module are present.

<FIG> illustrate examples of fuel dispensers and processes in accordance with the described techniques implemented using the dispensers. Regardless of the configuration of the fuel dispenser, when the door is unlocked and the door alarm sensor is de-activated, the fuel controller de-activates fueling components such that fueling cannot be performed. After the door has been locked and the door alarm sensor is activated (or re-activated), the fueling components are activated and the fuel dispenser can be used to pump fuel. It should be appreciated that only some components of the fuel dispensers are shown in <FIG>.

<FIG> illustrates one embodiment of a fuel dispenser that includes a beacon (e.g., beacon <NUM> in <FIG>) and that does not include a payment module. As shown, the fuel dispenser <NUM> includes a contactless reader (e.g., a near field communication ("NFC") reader) <NUM>, a beacon <NUM>, a fuel controller <NUM>, a door locking mechanism <NUM>, a door alarm sensor <NUM>, an alarm <NUM>, and an alarm/lock controller <NUM>.

<FIG> illustrates a flow process for the fuel dispenser <NUM> of <FIG>. As shown, a first input can be received (<NUM>) from a portable access device. For example, a user can position a card, mobile phone, or other portable device adjacent to the contactless reader. The beacon can authenticate (<NUM>) the information acquired from the portable access device (user information, user level, secure access code, date/time of secure access code creation, etc.). The beacon communicates wirelessly with the network cloud, which can compare the received data to stored data to verify the accuracy of the data. If the authentication (<NUM>) is successful, the beacon sends a deactivation signal to the alarm/lock controller (<NUM>), which in turn can cause the door alarm sensor to be de-activated (<NUM>) and can cause the door locking mechanism to switch from the locked configuration to the unlocked configuration (<NUM>). Based on a level of the user, one or more doors can be thus unlocked. For example, if the user is a service person with a portable device that provides access to all doors, including the base module door, the electronics module door, and the printer door, the locking mechanism for each door can unlock. As another example, if the user is a cashier, a clerk, or other person authorized to access only some components of the fuel dispenser, such as the printer door, the alarm/lock controller will instruct only the electronic door locking mechanism on the printer door to unlock. As mentioned above, the portable access device includes information on what door(s) can be unlocked using this card. It should be appreciated that the door alarm sensor can be de-activated and the door locking mechanism can be unlocked in any order or substantially simultaneously.

When the door alarm sensor is de-activated (<NUM>) and the door locking mechanism is unlocked (<NUM>), a respective indication can be provided (<NUM>) to a user. For example, a button on the electronics module can light up, a color of a light indicator can change (e.g., from green to red), or any other indication can be provided to the user indicating that the alarm has been de-activated. As shown, the beacon can send a signal (<NUM>) to a remote system (e.g., to a POS system, network cloud, or any other remote controller) indicating that the door alarm sensor is de-activated and the door locking mechanism is unlocked.

If the authentication (<NUM>) is not successful, a corresponding indication can be provided (<NUM>) to the user. For example, a graphical display of the fuel dispenser can provide a message indicating that the access device has not been authenticated properly. In some cases, additionally or alternatively, the fuel dispenser can include an additional display configured to display messages related to accessing the fuel dispenser using the described techniques.

After the user opens the unlocked door and performs required operations on components that thus become accessible, the door can be closed. A suitable component of the fuel dispenser, such as the door alarm sensor, can detect that the door has been closed. A second input can then be received (<NUM>) from the portable access device, e.g., when the user again brings the device in proximity to the reader. The beacon then performs another authentication (<NUM>) of the information provided by the portable access device. If the authentication (<NUM>) is successful, the beacon sends an activation signal (<NUM>) to the alarm/lock controller, in response to which the alarm/lock controller causes the door alarm sensor to be activated (<NUM>) and the door locking mechanism to be locked (<NUM>). If the authentication (<NUM>) is not successful, a corresponding indication can be provided (<NUM>) to the user.

When the door alarm sensor is activated (<NUM>) and the door locking mechanism is locked (<NUM>), a respective indication can be provided (<NUM>) to a user. The beacon can send a signal (<NUM>) to the remote system indicating that the door alarm sensor is activated and the door locking mechanism is locked.

<FIG> illustrates a non-claimed a fuel dispenser <NUM> that includes a payment module or controller <NUM> and that does not include a beacon. As shown, the fuel dispenser <NUM> can include a contactless reader <NUM> (e.g., a NFC reader), a contact reader <NUM> (e.g., a card reader configured to receive a credit card to accept payment to fuel), a secure pin pad <NUM> (e.g., a keyboard through which the user can also enter credit card authentication information or any other information), a payment controller <NUM>, a fuel controller <NUM>, at least one door locking mechanism <NUM>, at least one door alarm sensor <NUM>, an alarm <NUM>, and an alarm/lock controller <NUM>. It should be appreciated that any of the readers and/or pin pad can be used to securely receive information used to control access to components of the fuel dispenser.

<FIG> illustrates a process <NUM> for operating the non-claimed fuel dispenser <NUM> of <FIG>. As shown, a first input can be received (<NUM>) from a portable access device. Information acquired from the portable access device can be used to authenticate (<NUM>) the access device, which can be performed by the payment controller. If the authentication (<NUM>) is successful, the payment controller transmits a deactivation signal (<NUM>) to the alarm/lock controller, in response to which the alarm/lock controller causes the door alarm sensor to be de-activated (<NUM>) and the door locking mechanism(s) to be unlocked (<NUM>). A respective indication can be provided (<NUM>, <NUM>) to a user as discussed above. After the user opens the unlocked door(s) and performs required operations on components that thus become accessible, the door(s) can be closed. A suitable component of the fuel dispenser, such as the door alarm sensor, can detect that the door(s) has been closed. A second input can then be received (<NUM>) from the portable access device, e.g., when the user again brings the device in proximity to the reader. The payment controller then performs another authentication (<NUM>) of the access device. If the authentication (<NUM>) is successful, the payment controller sends an activation signal (<NUM>) to the alarm/lock controller, in response to which the alarm/lock controller causes the door alarm sensor to be activated (<NUM>) and the door locking mechanism(s) to be locked (<NUM>). If the authentication (<NUM>) is not successful, a corresponding indication can be provided to the user (<NUM>). A respective indication can be provided (<NUM>) to a user informing the user that the door alarm sensor is activated and the door locking mechanism(s) is locked.

<FIG> illustrates an embodiment of a fuel dispenser <NUM> that includes both a payment module and a beacon. As shown, the fuel dispenser <NUM> includes a contactless reader <NUM> (e.g., a NFC reader), a contact reader <NUM> (e.g., a card reader configured to receive a credit card to accept payment to fuel), a secure pin pad <NUM> (e.g., a keyboard through which the user can also enter credit card authentication information or any other information), a beacon <NUM>, a payment controller <NUM>, a fuel controller <NUM>, one or more door locking mechanisms <NUM>, one or more door alarm sensors <NUM>, an alarm <NUM>, and an alarm/lock controller <NUM>. It should be appreciated that any of the card readers and/or pin pad can be used to securely receive information used to control access to components of the fuel dispenser <NUM>.

<FIG> illustrates a process <NUM> for operating the fuel dispenser of <FIG>. As shown, a first input can be received (<NUM>) from a portable access device. The payment controller can use the information acquired from the device to authenticate (<NUM>) the device. If the authentication (<NUM>) is successful, the payment controller sends a deactivation signal (<NUM>) to the alarm/lock controller, in response to which the alarm/lock controller causes the door alarm sensor to be de-activated (<NUM>) and the door locking mechanism(s) to be unlocked (<NUM>). A respective indication can be provided (<NUM>) to a user, and the beacon can send a signal (<NUM>) to a remote system indicating that the door alarm sensor is de-activated and the door locking mechanism(s) is unlocked. If the authentication (<NUM>) is not successful, a corresponding indication can be provided (<NUM>) to the user.

After the user opens the unlocked door(s) and performs required operations on components that thus become accessible, the door(s) can be closed. A suitable component of the fuel dispenser, such as the door alarm sensor, can detect that the door(s) has been closed. A second input can then be received (<NUM>) from the access device, e.g., when the user again brings the card in proximity to the card reader. The payment controller then performs (<NUM>) another authentication of the access device. If the authentication (<NUM>) is successful, the payment controller sends an activation signal (<NUM>) to the alarm/lock controller, in response to which the alarm/lock controller causes the door alarm sensor(s) to be activated (<NUM>) and the door locking mechanism(s) to be locked (<NUM>). If the authentication (<NUM>) is not successful, a corresponding indication can be provided (<NUM>) to the user. A respective indication can be provided (<NUM>) to a user informing the user that the door alarm sensor(s) is activated and the door locking mechanism(s) is locked. Also, the beacon can send a signal (<NUM>) to the remote system indicating that the door alarm sensor(s) is activated and the door locking mechanism(s) is locked.

In some embodiments, as discussed above, access to various components of a fuel dispenser can be controlled using a portable access device or an access code that can be acquired via a secure pin pad or other device. Furthermore, in some embodiments, access to a fuel dispenser can be controlled based on biometric identification of a user which involves acquiring and processing biometrics information from the user. The biometrics information, which can be acquired in a contact or non-contact manner, can include facial, iris, fingerprint, ear, palm (e.g., palm vein) information, full-body information, full-hand information, voice, and any other measurable and distinct information that can characterize a user and that can be acquired from the user attempting to access a fuel dispenser.

Because biometrics information is non-transferable, always present (unlike an access device, PIN, password, etc.) and can be relatively easily acquired from a user, use of biometrics authentication to identify or verify user's identity simplifies control of access to components of a fuel dispenser while increasing security. In this way, a more user-friendly experience can be provided. In some embodiments, a use of biometrics information can replace use of a portable access device (e.g., a mobile phone, card, etc.) or a password manually entered by a user. In other embodiments, however, a fuel dispenser can include a portable access device reader, keyboard, and/or components configured to acquire and process biometrics information.

Biometrics information can be acquired when a user attempt to access a fuel dispenser is detected. Such an attempt can be detected automatically, for example, by detecting a presence of a person in proximity to the fuel dispenser. The fuel dispenser can then provide a prompt requesting the user to provide biometrics information. In some embodiments, the user can be required to explicitly indicate his or her presence, e.g., by providing biometrics information or in other manner. To provide the biometrics information, the user can be required to be positioned with respect to the fuel dispenser so that at least one image of user's face, retina, iris, ear, palm, body, etc. can be acquired by the fuel dispenser (e.g., by a biometrics reader). Some biometrics information, such as, for example, fingerprint information, can be acquired in a contact manner, and the user may be required to bring one or more of his or her fingers in contact with a biometrics reader having a fingerprint reader (e.g., sensor, imager, or scanner). Other biometrics information can also be acquired in a contact manner, such as, e.g., a palm print image.

Once the biometrics information is acquired, authentication of the acquired information is performed, which involves accessing a server device that stores biometrics information in association with other user's information. The server device can be a remote device, such as a cloud network server, or any other suitable device configured to securely store biometrics and other information. The server can also be a local storage and processing device. The server is configured to process and analyze (e.g., compare) various types of biometrics information.

Regardless of the type of the server device and whether it is or includes at least one of a remote and local server, the server can be accessed to identify whether there is a match between the biometrics information acquired from a user attempting to access the fuel dispenser and information stored on or in association with the server. Before being able to access the fuel dispenser such that one or more of fuel dispenser's doors become unlocked and associated door alarm sensor(s) are de-activated, a user can be required to register with the server. The registration can be done at a fuel dispenser or using any other suitable device that can be located at any suitable location (e.g., at a service provider's computer). For example, a company employee (a store attendant, technician, inspector, etc.) can be required to register with a service providing access to fuel dispensers such that information, including unique biometrics information, on that user is obtained and stored at the server. Information on each registered user can be stored in a corresponding user profile. Information on a user's access level can be part of the user profile stored at the server in association with user's biometrics information.

As mentioned above, the user authentication involves comparing the acquired biometrics information to information stored on the server. According to the invention, the authentication is performed on the server, and the biometrics information acquired by the fuel dispenser can be encrypted before being sent to the server. In some embodiments, a processor of the fuel dispenser processes the acquired biometrics information before sending a representation, such as a plurality of features, to the server for compassion with similar stored representations of biometrics information. Furthermore, in non-claimed examples, at least one processor of the fuel dispenser can perform the authentication, at least in part. Regardless of the specific authentication technique, if a match is identified, an access to the fuel dispenser is provided. In particular, as discussed above, one or more door alarm sensors are de-activated and at least one door locking mechanism is unlocked to provide access to components of the fuel dispenser.

It should be appreciated that a "match" can be determined with accuracy that depends on characteristics of a technique used to process the biometrics information. For example, a match can be a nearest match. In some cases, if the comparison results in more than one match, or in other situation when user biometrics identification with a desired accuracy is not achieved, additional biometrics information can be acquired from the user.

One or more doors can be unlocked based on an access level associated with the user. As an example, if a user is a store attendant in a retail fueling facility, or another person authorized to access only some components of the fuel dispenser, such as a printer door, an alarm/lock controller will instruct only the printer door to unlock. As another example, if a user is a technician or a service person, his/her access level can cause an electronics module door and a printer door to unlock. As a further example, a user can be an inspector permitted to inspect the entirety of the fuel dispenser such that access to all doors (e.g., a base module door, an electronics module door, and a printer door) of the fuel dispenser can be provided by unlocking a locking mechanism of each of the doors. The inspector may be required to, for example, examine a leak in the fuel dispenser, to determine status of one or more fuel dispenser's components and/or to determine compliance of the fuel dispenser and its operation to code requirements. Some issues may need to be addressed by both a technician and an inspector, or by any other type of user. It should be appreciated that an access level of a user can be established in any desired manner, and any suitable number of access levels can be used. For example, user information associated with a technician can allow that person to access all of the doors, including the base module door.

After interior components of the fuel dispenser are accessed, at least one unlocked door can be locked and an associated door alarm sensor can be re-activated. To activate a door locking mechanism and re-activate the door alarm sensor, biometrics information may again be acquired from the user, which can be the same or different information than the information required to unlock the door.

As shown in <FIG>, a fuel dispenser <NUM> includes input/output modules <NUM>, which can include biometrics reader <NUM>, wireless module(s) <NUM>, wired communications module(s) <NUM>, and a display <NUM>. At least one processor <NUM> of the fuel dispenser <NUM> can include at least one biometrics processor <NUM> and a communications processor <NUM>. The fuel dispenser <NUM> includes memory <NUM>. As shown in <FIG>, the dispenser <NUM> also includes at least one door locking mechanism <NUM> configured to lock one or more doors <NUM> of the fuel dispenser <NUM>, at least one door alarm sensor <NUM>, an alarm <NUM> (e.g., a component configured to generate an alarm that can be audible or in any other format, including a signal communicated to a service provider's computer), and an alarm/lock controller <NUM> configured to control the locking mechanism <NUM>, the door alarm sensor <NUM>, and the alarm <NUM>. For example, the alarm/lock controller <NUM> can cause the door locking mechanism <NUM> on the door to lock and unlock and can cause the door alarm sensor <NUM> to be de-activated and activated or re-activated. The doors <NUM> can include at least a first door on a base module of the fuel dispenser controlling access to the fuel dispensing components, a second door on an electronics module of the fuel dispenser controlling access to the electronics module, and a third door on the electronics module controlling access to a printer of the electronics module.

The fuel dispenser <NUM> includes other components, such as a fuel controller <NUM> shown in <FIG>. The fuel controller <NUM> is coupled to fuel dispensing components in a base module of the fuel dispenser <NUM>. The fuel controller <NUM> can be instructed to disallow use of the fuel dispensing components when the at least one locking mechanism <NUM> is unlocked and the door alarm sensor <NUM> is de-activated.

The biometrics processor <NUM> can include various other processors, such as, for example, an image processor, a voice recognition processor, a processor configured to pre-process biometrics information, etc. The biometrics processor <NUM> can include at least one feature extractor configured to identify features related to user's face (entire face or its parts), user's body parts, user's voice, etc..

The biometrics reader <NUM> can have various configurations. For example, it can include an image sensor such as a digital still or video camera, or other type of an optical sensor. The biometrics reader <NUM> can also include a video camera suitable for capturing biometric facial, iris, retina, palm, and other features. The biometrics reader <NUM> can also include a voice recorder and other devices configured to acquire user biometrics information. In some embodiments, the biometrics reader <NUM> can be a multi-modal biometrics device configured to acquire more than one type of biometrics information from a user for biometric authentication of the user.

Biometrics information acquired by the biometrics reader <NUM> and which can be preprocessed by the processor <NUM> of the fuel dispenser <NUM> (e.g., features can be extracted in a suitable format), can be provided via the dispenser's communications module(s) (e.g., wireless module(s) <NUM> and/or wired communications module(s) <NUM>) to a server, which can be a remote or a local server.

A server <NUM> communicatively coupled to the fuel dispenser <NUM> via at least a wireless (and optionally, a wired) connection is shown in <FIG>. The server <NUM> is a cloud network server providing cloud technology services. The server <NUM> can include at least one processor <NUM> and it can also include or can access a user profile storage <NUM> (e.g., one or more databases). The server <NUM> can also include or can access biometrics information storage <NUM> that can be accessed by the fuel dispenser <NUM>, to compare known biometrics information stored with the server <NUM> to the biometrics information acquired from a user attempting to access the fuel dispenser <NUM>. The user profile storage <NUM> and the user biometrics information storage <NUM> can be, for example, one or more databases stored in suitable memory, which can be cloud storage or storage that is updated from a cloud. Either or both of the user profile storage <NUM> and the user biometrics information storage <NUM> can be distributed database(s). The user profile storage <NUM> can include user profiles for each known (e.g., registered) user, and associated known biometrics information can be stored, in any suitable format, in the user biometrics information storage <NUM>. User profiles include user access level indicating what components of a fuel dispenser the user is allowed to access. In some embodiments, the level of permitted access can additionally be associated with a particular fuel dispenser, particular site, etc. The user profile and/or identity, as well as the access level, can be transmitted from the server <NUM> to the fuel dispenser <NUM>.

The user profile and associated access level can be received by the communications processor <NUM> and can be stored in the memory <NUM> of the fuel dispenser <NUM> (FIG. The user profile can be used by the communications processor <NUM> to provide access to the fuel dispenser based on the access level associated with that particular user and other information associated with the user profile. In addition, in some embodiments, information can be rendered on the display <NUM>, based on user preferences that can be specified in the user profile. In at least some implementations, the fuel dispenser can render on the display <NUM> any suitable information that facilitates user's servicing the fuel dispenser.

<FIG> is a process flow diagram illustrating one embodiment of a process <NUM> for operating a fuel dispenser. The process <NUM> can begin, for example, when user input is received (e.g., via a display of the fuel dispenser) including an instruction for the fuel dispenser to enter a maintenance mode. In such a mode, fueling components of a fuel controller can be de-activated such that fueling cannot be performed during maintenance and/or servicing of the fuel dispenser. After the door has been locked and the door alarm sensor is activated (or re-activated), the fueling components can be activated and the fuel dispenser can be used to pump fuel. In some embodiments, the fueling components can be activated after the door has been locked and the door alarm sensor is activated and after the fuel dispenser receives an instruction to exit the maintenance mode. The process <NUM> can begin in response to any other trigger.

As shown in <FIG>, at block <NUM>, a fuel dispenser (e.g., fuel dispenser <NUM> of <FIG>, fuel dispenser <NUM> of <FIG>, or any of the other fuel dispensers described herein or similar fuel dispensers) having a biometrics reader can acquire user's first biometrics information. The biometrics information can include at least one image (e.g., a video image or a still image) of a user's face, fingerprint, iris, retina, ear, palm, hard, or any other information such as voice, DNA, etc. The acquired user's first biometrics information can optionally be processed by at least one processor of the fuel dispenser, at block <NUM>.

The fuel dispenser (e.g., at least one communication module thereof), at block <NUM>, accesses biometrics information storage (e.g., one or more databases). The fuel dispenser can access a remote or local server (or both remote and local servers) storing the biometrics information and/or in communication with the biometrics information storage. In non-claimed examples, the biometrics information storage can be stored locally in the fuel dispenser. Also, in some implementations, various types of user profiles can be stored on different servers. For example, user profiles of fueling station's clerks can be stored locally, e.g., with the fuel dispenser or in a computer at the fueling stations. At the same time, user profiles of technicians, inspectors, or other personnel can be stored in external storage with can be accessed remotely.

Further, at block <NUM>, the acquired user's first biometrics information is compared to information stored at the biometrics information storage. It is then determined, at decision block <NUM>, whether a match has been identified as a result of the comparison. If the match has been identified, the process <NUM> continues to block <NUM> where at least one door locking mechanism (which can be part of a door lock kit) can be unlocked based on a level of access associated with the user. As discussed above, the biometrics information storage can store a plurality of user profiles each of which can specify user's rights with respect to accessing a fuel dispenser. For example, the user's rights can include a user's level of access determining what components of the fuel dispenser the user is allowed to access. Also, the user's rights can specify a manner in which a fuel dispenser can communicate with the user.

When the match is identified, a user profile stored for the user attempting to access the fuel dispenser is accessed and the user's level of access is used to determine which door locking mechanism is allowed to be unlocked. Also, as shown in <FIG>, at least one door alarm sensor is deactivated at block <NUM>. As discussed above, the door alarm sensor is disabled or deactivated simultaneously with unlocking one or more doors in a housing of the fuel dispenser. Thus, the processing at blocks <NUM>, <NUM> can be performed at least in part simultaneously.

If it is determined at decision block <NUM> that the match is not identified, an access to the fuel dispenser is denied, as shown at block <NUM> in <FIG>. In some embodiments, an indication of an attempt of an unauthorized access to the fuel dispenser can be generated, at block <NUM>. For example, an alarm can sound, or the indication can be provided in any other format. A suitable entity can also be notified of the unauthorized access. It should be noted, if the user's biometrics information is not recognized, the user may be prompted for at least one another attempt to provide biometrics information. Thus, the indication of the unauthorized access attempt can be generated when repeated attempts to disable one or more door locks of the fuel dispenser are detected.

After the processing at blocks <NUM>, <NUM> and after the user opens the unlocked door(s) and performs required operations on components that thus became accessible, the door(s) can be closed. To lock the closed door, biometrics authentication can again be performed to lock the door and re-activate the door alarm sensor. <FIG> illustrates one embodiment of a process <NUM> that can be used to lock the door of the fuel dispenser when it is determined that the user is authorized to do so. The process <NUM> can begin, for example, when it is detected that the door is closed, or in response to another trigger.

As shown in <FIG>, at block <NUM>, user's second biometrics information can be acquired. The second biometrics information can be the same or different from the first biometrics information acquired at block <NUM> of <FIG>. At block <NUM>, the acquired second biometrics information can be compared to stored biometrics information. In at least some embodiments, as discussed above, the user profile can be retrieved from the server when the server is accessed with the first biometrics information. The retrieved user profile (and any association data) can be stored, at least in part, in memory of the fuel dispenser (or in another local memory, such as on a local server) and the information can be used to authenticate the user attempting to lock the fuel dispenser's door. In this way, there may be no need to access external biometrics information storage, such as on a remote server, to lock the door(s). Alternatively, in some embodiments, the fuel dispenser can communicate with a remote server to again access the biometrics information storage stored therein, to compare the acquired second biometrics information to known biometrics information to authenticate the user.

Regardless of the specific way in which the comparison is performed, at decision block <NUM> it can be determined whether a match to the acquired second biometrics information has been identified among the stored biometrics information. If the match has been identified, the process <NUM> branches to block <NUM> where the door locking mechanism is locked. The door alarm sensor can be re-activated at block <NUM>, which can be done simultaneously with locking the door. If it is determined, however, that the match has not been identified, the process <NUM> branches to block <NUM> where an appropriate indication of an unsuccessful attempt to authenticate a user to look the door is generated. The indication can be generated after a certain number of attempts to lock the door are detected.

<FIG> illustrates an embodiment of a fuel dispenser <NUM> that can be configured and used as described for any of the various embodiments described herein. Only an intermediate portion of the fuel dispenser <NUM> is illustrated, e.g., top and bottom portions of the fuel dispenser are omitted. The fuel dispenser <NUM> includes a housing <NUM>, a display <NUM> attached to the housing <NUM>, electronics (not shown) (e.g., a processor, a memory, wireless module(s), etc.) disposed within the housing <NUM>, and an information panel <NUM> attached to and/or disposed in the housing <NUM>. The display <NUM> includes a GUI display space and, in some embodiments, at least a portion thereof can be a flexible touchscreen. The fuel dispenser <NUM> also includes fuel dispensing components, such as a pump, a fuel meter, a nozzle, a hose, etc., which are not shown for the sake of brevity.

The information panel <NUM> is configured to facilitate payment and/or fueling. In the illustrated embodiment, as shown in <FIG>, the information panel <NUM> includes at least one biometrics reader <NUM> that can be configured to receive biometrics information. The biometrics reader <NUM>, which can be a single-mode or multi-mode reader, and it can have various shapes and sizes. The biometrics reader <NUM> can include a digital still or video camera configured to acquire images of a face, retina, iris, palm, hand, fingerprints, or any other parts of the user's face or body to acquire biometrics information. The biometrics reader <NUM> can additionally or alternatively include a voice recorder configured to acquire user's voice. It should be appreciated that the biometrics reader <NUM> is shown by way of example only, as it can be disposed at other locations of the fuel dispenser <NUM> that allows users to conveniently communicate with the fuel dispenser <NUM> and to provide one or more types of biometrics information. The biometrics reader <NUM> can be configured to acquire any suitable biometrics information from the user to verify user's identity.

Furthermore, in some embodiments, the information panel <NUM> can include a card reader (e.g., any of card reader <NUM> of <FIG>, card reader <NUM>, <NUM> of <FIG>, card readers <NUM>, <NUM> of <FIG>, card reader <NUM> of <FIG>, card reader <NUM> of <FIG>, card readers <NUM>, <NUM> of <FIG>, card readers <NUM>, <NUM> of <FIG>, or any other card readers) and/or any suitable pin pad or keyboard. When the fuel dispenser is in a fueling mode, during fueling, the information panel <NUM> can show amounts of fuel pumped in a fueling session, prices of different grades of fuel, etc. In some embodiments, at least one of the information panel <NUM> and the display <NUM> can be configured to display information about a status of the fuel dispenser and/or one or more of its components. Also, during servicing of the fuel dispenser as described herein, information (e.g., instructions, fuel dispenser status information, etc.) that can assist in performing the service can be rendered on at least one of the information panel <NUM> and the display <NUM>. Such information can be provided in the form of a video, including a video of an actual or a virtual person. The display <NUM> can be interactive such that it can receive user input.

It should be appreciated that the fuel dispensers described herein in connection with <FIG> can include any of the components of the fuel dispensers described in connection with <FIG>. The fuel dispensers configured to receive biometrics information and use this information for verifying user's identity can be fuel dispensers of any type. In some embodiments, the fuel dispensers can be intelligent fuel dispensers. The intelligent fuel dispensers can be configured to provide virtual assistance to customers and other users via a display of the fuel dispenser.

Although an exemplary retail fueling facility, which can sell retail gasoline and/or diesel fuels for general-purpose vehicles (e.g., automobiles and/or trucks), has been described herein, other implementations can be deployed in other fuel dispensing applications, such as commercial, wholesale, or private fuel dispensing installations. Fuels that are dispensed can, for example, be for automotive, aviation, and/or marine vehicles.

Although the current subject matter has been described with respect to acquiring biometrics information and identifying characteristics of a user, such as a store attendant, technician, or other person knowledgeable with the functioning of the fuel dispenser, other implementations are possible. For example, a fuel dispenser can also or instead acquire biometrics information from customers desiring to fuel a vehicle. The biometrics information can be used to verify user's identity, based on which a fueling session and payment for the fuel can be conducted.

To provide for interaction with a user, one or more aspects or features of the subject matter described herein can be implemented on a computer having a display device, such as for example a cathode ray tube (CRT) or a liquid crystal display (LCD) or a light emitting diode (LED) monitor for displaying information to the user and a keyboard and a pointing device, such as for example a mouse or a trackball, by which the user may provide input to the computer. For example, feedback provided to the user can be any form of sensory feedback, such as for example visual feedback, auditory feedback, or tactile feedback; and input from the user may be received in any form, including, but not limited to, acoustic, speech, or tactile input. Other possible input devices include, but are not limited to, touch screens or other touch-sensitive devices such as single or multi-point resistive or capacitive trackpads, voice recognition hardware and software, optical scanners, optical pointers, digital image capture devices and associated interpretation software, and the like.

Claim 1:
A fuel dispenser (<NUM>), comprising:
a housing (<NUM>) having a base module (<NUM>) with fuel dispensing components disposed therein, and an electronics module (<NUM>) with electronics for controlling the fuel dispensing components;
a first door (<NUM>) coupled to the housing (<NUM>) and associated with a first locking mechanism (<NUM>, <NUM>) configured to lock and unlock the first door to control access to components within the housing (<NUM>);
a first door alarm sensor (<NUM>, <NUM>) configured to sense when the first door (<NUM>) is opened and closed;
an alarm/lock controller (<NUM>, <NUM>) disposed in the housing (<NUM>) and coupled to the first locking mechanism (<NUM>, <NUM>) and the first door alarm sensor (<NUM>, <NUM>), the alarm/lock controller (<NUM>, <NUM>) being configured to control the first locking mechanism (<NUM>, <NUM>) and the first door alarm sensor (<NUM>, <NUM>); and
a reader (<NUM>, <NUM>) operatively coupled to the alarm/lock controller (<NUM>, <NUM>) and configured to receive (<NUM>) a first input,
characterized by
a communication module (<NUM>; <NUM>) coupled to the reader (<NUM>, <NUM>) and configured to wirelessly communicate with a network cloud, the communication module (<NUM>, <NUM>) being configured to receive the first input from the reader (<NUM>, <NUM>), to transmit the first input received to the network cloud to authenticate the first input,
the communication module (<NUM>, <NUM>) being configured to send (<NUM>) a deactivation signal to the alarm/lock controller (<NUM>, <NUM>) and the alarm/lock controller (<NUM>; <NUM>) being configured to unlock (<NUM>) the first locking mechanism (<NUM>; <NUM>) and to deactivate (<NUM>) the first door alarm sensor (<NUM>; <NUM>) for the first door (<NUM>) if the authentication (<NUM>) of the first input is successful, and
a fuel controller (<NUM>) coupled to the fuel dispensing components in the base module and connected to the alarm/lock controller (<NUM>, <NUM>), wherein the alarm/lock controller (<NUM>; <NUM>) is configured to instruct the fuel controller (<NUM>) to disallow use of the fuel dispensing components when the first locking mechanism (<NUM>, <NUM>) is unlocked and when the first door alarm sensor (<NUM>, <NUM>) is de-activated.