TAMPER-EVIDENT SECURITY DEVICE

This invention relates to a tamper-evident security device and particularly to a tamper-evident security device suitable for use in securing entry to an aircraft. The security device suitably acts as a seal for a door, hatch or the like and provides an indication of attempted unauthorised entry.

There are many applications where it is necessary to provide a seal for an opening and which provides an indication of attempted unauthorised entry. For example, aviation regulations typically require commercial aircraft to be secured or sealed when not in use and military aircraft are also typically subject to strict security when not in use. Ensuring the security of aircraft whilst unattended at a civil or military airports and preventing unauthorised access presents certain problems. Although commercial airlines typically attempt to keep their aircraft in use for as much time as possible for commercial reasons there are many occasions where aircraft have to be parked betweens tours of duty and may be left unattended for considerable periods of time. Aviation regulations typically require an aircraft to be scanned for security purposes prior to use and it is necessary to maintain security of the aircraft once scanned until use. Once scanned, the aircraft is typically secured using a tamper-evident seal to detect any attempt at unauthorised entry which may then compromise aircraft security. At present the commercial aviation industry uses tamper-evident paper seals fixed across the gap between the passenger and/or crew access doors and the aircraft fuselage to provide an indication of unauthorised access or an attempt on it. However, this means of securing access has a number of drawbacks. Surreptitious breaking of the seal may not be readily detectable. Security checks of seals on parked aircraft may often be carried out from a distance or from ground level and detection of a break in a seal may be especially problematic for security staff. These problems may be exacerbated at night or in poor visibility and close inspection is typically required to determine whether the seal is in tact or not. In addition, it is not uncommon to find aircraft with multiple paper seals still attached to the fuselage after use which creates difficulty in establishing which paper seal is actually in use at any given time.

Fixing a security device to an aircraft fuselage may be problematic in view of the materials of construction of an aircraft fuselage and the need to avoid undue damage to the appearance of the door through repeated securing and removal of a security device. Additionally, it is important that foreign bodies are not left in situ or in the locality in attaching a security device or after its removal due to the risk of such bodies presenting a safety hazard.

We have now developed a security device for use with a door or other closable panel which provides an excellent tamper-evident seal and which readily provides an indication to an observer as to whether the seal is in tact or an attempt has been made to tamper with the seal. The device is releasably securable and adapted to readily fit and be removable from an aircraft access area, for example a passenger, crew or cargo access door or hatch.

In a first aspect the invention provides a tamper evident security device comprising a locking apparatus, attachment means for releasably attaching the locking apparatus across a seal to be secured, sensor means and indicator means operably connected to the locking apparatus for, in use, respectively detecting and indicating an attempt to move the device from a secured seal.

Suitably, internal power to the device is provided by either rechargeable or renewable batteries when in use. When not in use, the security device may be recharged so reducing problems associated with low power. Suitably the device is locked, armed or otherwise activated by either proximity switches, Dallas Key or Card Reader and preferably released or deactivated in a similar manner.

With the device fitted an aircraft can be serviced and made ready for the next tour of duty and then locked and sealed by official service personnel who may apply seals to any aircraft doors which need protection thus preventing access to any unauthorised person.

Suitably authorised personnel with the correct access controller can disarm the device and remove the device easily.

The device is especially useful for sealing and locking military aircraft which are often required to remain on the ground at overseas airports whilst engaged on diplomatic or other operations and when the flight crew need to protect aircraft from unauthorised entry.

The attachment means is preferably attachable across and releasable from a seal without the use of tools. In a preferred embodiment, the attachment means comprises a plurality of vacuum pads which may be attached to a body to be sealed by manually pressing against the body so as to create a vacuum which thereby retains the pads against the body with the security device spanning a seal to be secured. Preferably, the attachment means comprises two pads which are located towards or at either end of longitudinal body which houses the sensor means, indicator means and the locking apparatus. The longitudinal body is suitably dimensioned to span a seal to be secured.

In a preferred embodiment, the device may be dimensioned and adapted to fit to any aircraft without modification to the aircraft preferably by means of dual suction vacuum pads which once sealed across the aircraft door or hatch opening are locked in place and cannot be released by unauthorised personnel or provide an indication of attempted release..

The locking apparatus suitably comprises a locking mechanism for locking and unlocking the locking apparatus and means for generating an output upon locking and/or

unlocking the locking mechanism. Optionally, the security device comprises recording means for recording the output and/or recording information relating to the time of the generation of the output. The locking apparatus is operably linked to the indicator means and the sensor means such that on operating the locking mechanism without authorisation or on moving the security device from a secured seal the sensor detects the movement or tampering and an output is generated and the indicator means communicates the output externally of the security device.

The output generated may be qualitative, for example a change in the colour of a light or may be a random or quasi-pseudo-random alpha-numeric security code by which the output appears random to the user. By "quasi-pseudo-random" is meant a system which generates numbers in a manner which precludes the generation of the same number in succession. This is advantageous as known random number generators may generate the same number successively as the power supply of the device diminishes.

Suitably, where the output is a security code, the output is changed on each locking operation and the output comprises a new security code each time the device is locked. On locking the security device, preferably a random or quasi-pseudo-random output is generated and recorded for use by authorised personnel. Desirably, information relating to the date and time of the locking and unlocking operation is suitably recorded and transferable remotely of the locking apparatus. In a preferred embodiment, the output comprises a multi-number security code and the indicator means suitably comprises a pre-programmed multi-digit code device of preferably five or more digits any of which can be numbered from zero to nine. In a further preferred embodiment, when locked and sealed on an aircraft, the indicator means of the device emits a constant light, preferably green or yellow, which is suitably visible from the ground by any passing security guard or from an airport control tower or observation post. In the event that any unauthorised person tries to remove or tamper with the seal the warning light suitably turns red indicating the aircraft door is open or an attempt at entry has been made and the red light preferably flashes in order to attract attention to indicate an authorised attempt to gain access to the aircraft. The output may be communicated electronically, for example to a location remote of the device, or visually, for example by way of display of a code or display of lights to indicate qualitatively an attempt to move the device. Desirably, in use, the indicator means are sufficiently visible and dimensioned and suitably visible in all weather conditions and may be observed from a distance. The device may comprise two or more indicator means, preferably of different types and providing indications of tampering independently of each other to provide enhanced security, for example the output may comprise a security code, a coloured indicator light and

optionally a message communicated to a location remote from the aircraft and monitored by security personnel.

In a preferred embodiment, the security device comprises a micro-controller and the output comprises a security code. Locking and unlocking the security device may be controlled by a switch, for example an infra-red sensor. Suitably, the switch is linked to a micro controller and preferably located in an indentation in the device in such a way that if the switch is touched so that an infra-red beam is broken, the micro controller suitably generates a number. On unlocking the device, a number may be generated by breaking the switch and every time the infra-red beam is broken by activating the infra red switch a success the successive single digit number is generated. A further switch may be employed to lock the number in place. The next digit may then be selected in the same manner and the sequence of events repeated until the pre-programmed security code is generated after which time the lock will open.

In a preferred embodiment, the device for generating the output comprises a microcontroller linked to a pre-programmed multi-digit code device and means for displaying the output, the operation of the device for generating the output is controlled by at least two manually operable switches comprising a first switch which on operation generates a new number from 0 to 9 which is displayed in a given location and on successive operation of the switch generates and displays the next successive number in the given location and a second switch which on operation fixes the number in the given location and displays a further new number in a further given location which may be cycled by operation of the first switch and means for unlocking the locking mechanism upon fixing numbers which correspond to a pre-programmed multi-digit code.

The sensor means is suitably movement sensitive and may comprise for example a tilt switch or mercury switch. The sensor means also comprise an electronic and/or magnetic sensor which provides an indication of attack by electronic or magnetic means. Upon unauthorised movement or an unauthorised attempt to deactivate the locked device, the sensor means is activated which provides a changed output and suitably an indication externally of the device thereby alerting security personnel to the fact that the device has been tampered with.

In a preferred embodiment, the device comprises two or more independent sensors which are activated by different mechanisms such that tampering which may not activate the first sensor will activate the second sensor to provide enhanced security.

Preferably the components of the security device are operably connected using means which are not susceptible to electronic attack, for example by magnetic switches. The device may comprise sensor magnets which upon detection of an external magnet trigger generation of a new output and recordal of that fact and information relating to the

time of generation of the new code thereby alerting the user to the possibility of an attempt at unauthorised access through magnetic attack.

The security device is suitably manufactured from solid plastic or aluminium and desirably the internal components of the locking apparatus are sealed inside the lock apparatus, preferably using specialist potting compound preferably a flexible, water- impervious, electrically, inert, sealing compound so as to protect the mechanism from outside contamination.

The security device may comprise two parts, an outer part comprising a body and the attachment means and an inner part comprising the locking apparatus wherein the inner and outer parts further comprise complementary engaging means and may be releasably secured together.

The security device may be employed in widely differing climates and suitably is able to withstand extremely low temperatures, for example lower than -50 ⁰ C and preferably lower than -60 ⁰ C. Desirably, the apparatus is also able to withstand temperatures of at least 80 ⁰ C ad preferably at least 100 ⁰ C.

The locking mechanism may be any suitable known locking mechanism for example a cylinder lock. The locking mechanism is suitably activated and/or deactivated by a preprogrammed proximity card or other hand held device. In a further embodiment, the locking mechanism is activated and/or deactivated using biometric technology. In a further preferred embodiment, the security device may be attached to the inside of an aircraft to provide further enhanced security. It is important that the indicator means provides an indication of the status of the security device which is determinable externally of the aircraft. Preferably the security device is releasably attachable to the inside of an access door or hatch in the aircraft so as to bridge a seal. The indicator means comprises an illuminatable light, preferably an LED light, observable externally of the aircraft and comprising arming means to lock the security device upon closing the door or hatch. The light may be located on the security device or may comprise part of the aircraft whilst being linked to the other components of the security device.

Suitably, the security device is also equipped with an audit trail facility which records information relating to the time the device has been locked or unlocked or an attempt at unauthorised entry has been made, typically including a "Day Date and Time" record.

In a preferred embodiment, the invention provides a self contained locking and sealing apparatus designed to fit on any civil or military aircraft to secure and monitor personnel or cargo doors or hatches in order to prevent unauthorised access and which is fitted externally to adhere to the skin of the main aircraft fuselage and any access door or hatch so that the device spans the airtight seal between the door or hatch and the aircraft fuselage body preferably manufactured from solid plastic or aluminium with all internal

components sealed inside with a specialist sealing compound so as to protect the mechanism from outside contamination and designed so that the body of the device is in two parts with the inner part fitting and locating inside the outer part which has two protruding suction cups at each end both with an external disc membrane preferably manufactured from rubber or similar flexible plastic material so that when the inner part of the lock body is pushed inwards it acts upon a cam or cantilever mechanism which acts upon two plungers, one in each suction cup, that link into or onto the disc membrane so that it is pulled into the suction cups thus creating a vacuum and sealing the device onto the aircraft body and door outer skin and so that when this operation is complete the device automatically locks the inner body into the outer body by means of preferably a key cylinder thus preventing the device from being removed until the lock is activated and released by an external key which once released allows the internal body to move outwards in order to release the vacuum holding the device against the aircraft and door outer skin but designed in such a manner so that when the device is locked initially a five digit quasi-pseudo random number is generated and also an LED light cluster illuminated which will glow green unless the device is attacked or an attempt is made to remove it from the aircraft without use of the key in which case the LED light cluster which is controlled by internal vacuum sensors and level switches designed to detect forced movement so that these switches and sensors will cause the LED light cluster to change from emitting a green light to a red flashing light and simultaneously change the quasi-pseudo random number to a different five digit number and all such operations, official or unofficial, are logged internally within a micro-controller which records all functions and operations by day, date and time for later transmission via infra-red connection to a hand held receiving device thus enabling a full audit trail record to be viewed at a later time or date. The invention will now be described with reference to the accompanying drawings in which:

Figure 1 shows a perspective view of a security device according to the invention; Figure 2 shows a cross-section view of the device in an unlocked position; Figure 3 shows a cross-section view of the device in a locked position; Figure 4 shows a perspective view of an aircraft fuselage with the security device in place.

Figure 1 shows a security device according to the invention having suction pads for attaching the device releasably across a seal to be secured, for example across an aircraft entry point. In use, a rubber or plastic compound disc 1 is withdrawn into the suction cup 2 to create a vacuum seal to hold the lock body 3 against the aircraft body by pushing the internal body element 4 inwards so as to act on the suction elements 1 and 2. The device locks automatically and can only be released by the operation of a key cylinder 6. With the

device locked a light display 5 is illuminated and simultaneously a random seal number is displayed in the window 9. A full audit trail of all recorded operations may be transferred via an infra-red link from an infra-red download port 14. Figure 2 shows a cross sectional view of the device unlocked with the suction pad elements 1 and 2 released and the internal body element 4 protruding from the lock body 3 thus releasing floating cams 7 which act upon a suction plunger 8 which in turn draws pad 1 into the suction cup 2 to create a vacuum and secure the device against the outer skin of the aircraft and access door or hatch.

Figure 3 shows a cross sectional view of the device in the locked position in which suction plunger 8 is withdrawn by the action of pushing the body 3 into the lock body 3 which in turn acts on the floating cams 7 to cause the suction plunger 8 to withdraw and pull pad 1 into suction cup 2 and creating a vacuum.

Figure 4 shows an aircraft fuselage 10 with an access door 11 and the security device of the present invention 12 secured across the door seal 13.