WO2018069840A1

WO2018069840A1 - Method and apparatus for monitoring fluid dispensing

Info

Publication number: WO2018069840A1
Application number: PCT/IB2017/056273
Authority: WO
Inventors: David White
Original assignee: Iotiq Pty Ltd
Priority date: 2016-10-11
Filing date: 2017-10-11
Publication date: 2018-04-19

Abstract

This invention provides a system of monitoring the dispensing of a fluid, such as a fuel, and recording data pertaining to each instance of the fluid being dispensed using interactive application software on a personal communications device, such as a smartphone or tablet computer, to communicate with dispensing software operating a subsidiary or field tank controller unit. Communication between the respective devices running the interactive software is preferably by means of a short range wireless protocol such as the Bluetooth protocol. By logging offtakes using the invention, the excessive or optimal use of fuel by a specific item of plant is automatically detectable and reportable, as is a record of the locations at which fuel was dispensed. In the case of excessive consumption, the plant concerned is automatically slated for inspection for determining the cause.

Description

METHOD AND APPARATUS FOR MONITORING FLUID DISPENSING

Field of invention

[01] This invention relates to apparatus for and a method of monitoring the dispensing of a fluent commodity, in particular a fluid fuel from a subsidiary field supply, such as a mobile light holding tank, bowser and the like. However, the invention can be applied in controlling and monitoring the dispensing of any desired fluid, non-limiting examples including fluent foodstuffs such as dairy products, beer, wine, fruit juices and other beverages, water, lubricants, crude oil, industrial gases, chemical compounds, and the like. More particularly, in relation to the dispensing of fuel, it relates to the monitoring of fuel dispensing events in which fuel is supplied from a tank, present in the field, to end- user field machinery, including plant and vehicles.

Background to the invention

[02] In typical known fuel management system, a user requiring liquid or gaseous fuel to be dispensed from a secured subsidiary, especially mobile, storage device such as a mini-tanker or bowser, for powering an item of plant, will present a token to be read by a reader device associated with the storage device. Alternatively, the user may be required to key in a pin or swipe a card. The user would then enter a number or alphanumeric string for identifying the plant concerned. The user may further be required to enter the current number of operational hours or an odometer reading for the plant. The dispensing apparatus of the storage device will then be unlocked for dispensing of a predetermined volume or a measured volume to be dispensed. A record of the event will then be stored on site for later downloading, or will be communicated to a remote data storage facility, such as a wirelessly linked server. A system of this nature is offered through the website <myfuelmaster.com> (as accessed on 5 October 2016).

[03] In the fuel custody chain, it is at the dispensing point that the fuel owner has little to no control over the plant that receives the fuel and, at best, poor or dubious data concerning the plant that has received it and the actual fuel end use. Fuel usage data is important to the business owner who needs to: a. Report fuel use to support off-road diesel fuel government excise rebates b. Monitor fuel consumption for maintenance planning and operations costing

[04] In the case where all the fuel goes out through the depot facility, these needs are easily met. However, in the case of dispensing from a relocatable fuel bowser in the field, it is a challenge.

[05] US patent 6073840 discloses a forecourt installation for regulating fuel dispensing in the retail consumer environment. It concentrates on determining a value that correlates with payment made by a customer to ensure correct dispensing occurs. It provides a system of multiple antennae for tracking the positions of vehicles and vehicle operators within the forecourt environment for locating pumps nearest the vehicle. This system would be unsuitable for a field environment, not least because of the multiplicity of wireless signalling and receiving devices being employed leading to interference issues with field instrumentation not associated with the dispensing of fuel, for example.

[06] Patent application publication US 2015/0242969 discloses a wireless activation system for a mechanical fuel dispenser, typically in a filling station forecourt and retail environment. Each dispenser is listed in a database and issued an identification code. Although the invention makes use of low energy Bluetooth® wireless signals and utilised global positioning system (GPS) location co-ordinates, it is concerned not with identifying a plant item to receive fuel and the person authorised to cause the dispenser to operate, but with identifying a dispenser to be used for causing the dispensing to the paying customer. In the invention described, GPS technology is used to determine if a vehicle to be refuelled has entered into a virtual zone in close enough proximity to the selected dispensing pump and when it has departed the zone (see paragraph [0106] thereof). The GPS co-ordinates are used further to locate and identify refuelling stations and fuel dispensers in relation to a vehicle mounted or user-borne mobile GPS device.

[07] The above publication mentions the Bluetooth communications protocol as merely one example of a protocol or waveband that may be used in meeting the communication requirements of the disclosed invention. A drawback with systems other than Bluetooth in the field is that in the case of a WiFi network, only one network may be connected to at any one time, impacting on the functionality of a mobile telephone handset while it is being used on a filling station network. This may not be a serious issue for a customer in the fuel retailer's network, as the customer does not necessarily require data push/pull during a transaction.

Objects of the invention

[08] The present invention is intended to be used with dispensing systems associated with field tanks and pumps and all manner of equipment that may be used to transfer a fluid from a holding tank to a tank on machinery requiring the fluid. Specifically, the invention seeks to provide a form of digital logbook for association with plant or machinery being used in the field and refuelling thereof from a field supply tank.

[09] It is an object of this invention to address the shortcomings of the prior art and, in doing so, to provide a method and apparatus for monitoring the dispensing of a fluid. In particular it is desired to combine the functionality of personal wireless communications devices, such as the ubiquitous smartphone or tablet computer, with dispensing unlockable control apparatus for an indivisible product, to achieve increased accuracy in the logging of dispensing data and a need for transactional security.

[010] The preceding discussion of the background to the invention is intended to facilitate an understanding of the present invention. However, it should be appreciated that the discussion is not an acknowledgement or admission that any of the material referred to was part of the common general knowledge in Australia or elsewhere as at the priority date of the present application.

[011] Further, and unless the context clearly requires otherwise, throughout the description and the claims, the words 'comprise', 'comprising', and the like are to be construed in an inclusive sense - in the sense of "including, but not being limited to" - as opposed to an exclusive or exhaustive sense - meaning "including this and nothing else".

Summary of invention

[012] This invention provides a system of monitoring the dispensing of a fluid, such as a fuel, and recording data pertaining to each instance of the fluid being dispensed using interactive application software on a personal communications device, such as a smartphone or tablet computer, to communicate with dispensing software operating a subsidiary or field tank controller unit. Communication between the respective devices running the interactive software is preferably by means of a short range wireless protocol such as the Bluetooth protocol. Other short range protocols using similar frequencies and ranges may alternatively be employed.

[013] According to a first aspect of the invention, there is provided a fluid dispenser unlocking system comprising : a. Dispensing hardware and an associated control system for operatively mounting on a supply tank for controlling operation of the hardware, the control system comprising: i. wireless communications hardware and software, operable according to a short range wireless communications protocol ii. a programmed microprocessor in operative communication with the communications hardware, and iii. interlocks between the microprocessor and microprocessor- controllable items of the dispensing hardware; and b. Application software for running on a personal communications device, the software comprising instructions for causing communication between the personal communications device and the control system, via said short range wireless communications protocol, wherein the microprocessor and the personal communications device are programmed to interact for establishing trusted communication between them, on the basis of a plant identification code identifying the plant to receive the fluid to be dispensed authorize, on the basis of trust having been established, a fluid-dispensing event by a user associated with the personal communications device, and log data relating to the event, said data including global positioning co-ordinates of the place of the dispensing.

[014] In a preferred form of the invention, the global positioning co-ordinates are captured using the personal communications device during the event. [015] In a more preferred form of the invention, the plant-identification code is a machine-readable code displayed on the plant and preferably adapted for capture by a camera associated with the personal communications device. More preferably, the plant- identification code comprises a barcode. An example of a suitable barcode is a quick- response (QR) code. Preferably, the code is fluid-specific, identifying the fluid that is permitted to be charged to the receiving container or tank. Thus when permissions and approvals are being negotiated between the programs being run on the microprocessor and the personal communications device, permission will not be given unless the fuel type being requested for dispensing is compatible with the fuel indicated on the plant code.

[016] In an embodiment of the invention, the microprocessor is programmed to emit at intervals a call sign for reception by the personal communications device. Preferably, the application software on the personal communications device causes the device to scan for the call sign.

[017] Further preferably, the application software causes the device to identify itself to the control system.

[018] In an alternative embodiment, the personal communications device emits a polling signal to detect the presence of the unlocking control system microprocessor within range.

[019] In a preferred form of the invention, trust is established when a code transmitted from the dispensing control system and re-entered by a human user is received back by the controller and verified.

[020] In a further preferred form of the invention, logged data is remotely stored.

[021 ] In a still further preferred form of the invention, the system includes a web portal with which the logged data is accessible to a human portal user.

[022] In an embodiment of the invention, the unlocking control apparatus comprises global positioning means operatively installed to record global positioning coordinates of the field supply tank. Preferably, in this embodiment, unlocking of the dispensing apparatus is conditional on a comparison of the coordinates of the personal communications device and of the field supply tank. If the co-ordinates are found to be representative of locations within a permitted distance of each other, then dispensing is unlocked to proceed.

[023] According to a second aspect of the invention, a method is provided of monitoring dispensing of a fluid from a supply tank equipped with a microprocessor controlled fluid-dispenser unlocking system, the method comprising the steps of: a. equipping the field supply tank for wireless communication with a personal communications device loaded with software for establishing trusted communication with the tank, b. bringing the personal communications device in wireless communications range of the supply tank and allowing the software to interact with software running on the microprocessor of the fluid-dispensing apparatus, for trusted communication to be established, on the basis of a plant-identification code identifying the plant to receive the fluid to be dispensed, c. allowing the software, on the basis of trust having been established, to authorize the dispensing of fluid from the tank and to unlock the fluid dispenser, and d. causing the software to monitor the dispensing and log data relating thereto, said data including the global positioning co-ordinates of the place of the dispensing.

[024] In a preferred form of the invention, the method includes obtaining the code from the plant item and causing it to be verified by the unlocking controller prior to the dispensing commencing. Preferably, the plant-identification code is a machine-readable code displayed on the plant item.

[025] In a preferred embodiment, the plant-identification code is adapted for visual capture by a camera associated with the personal communications device.

[026] The method further preferably includes the step of communicating the code to the microprocessor of the fluid-dispensing apparatus for verification [027] In a preferred form of the invention, the method includes operating the personal communications device to capture the global positioning co-ordinates. Preferably, capture take place at the time of establishing trust between the controller and the personal communications device.

[028] In an embodiment, the fluid-dispensing controller apparatus is operatively configured to capture the global positioning co-ordinates and is operated for performing this function.

[029] Further, the embodiment may include the step of comparing the global positioning co-ordinates captured by the personal communications device and the fluid- dispenser unlocking apparatus and causing dispensing to be authorized if comparison finds them within a pre-set distance of each other.

[030] The step of allowing trusted communication to be established preferably includes causing the personal communications device to identify itself to the supply tank controller.

[031] Further preferably, the method includes the step of causing the supply tank, in response to making a positive identification of the personal communications device, to actuate the dispensing apparatus to allow a human user associated with the communications device to operate the dispensing apparatus to refill or replenish a plant item with a fluid.

[032] In a preferred form of the invention, the method includes preventing actuation of the apparatus unless the personal communications device is within a predetermined range of the supply tank.

[033] Further, according to the invention, the method preferably includes providing a web portal and making logged data accessible via the portal to a human portal user.

[034] In a preferred form of the invention, the logged data includes global position system co-ordinates of the personal communications device at the time of the dispensing event.

[035] According to a third aspect of the invention, there is provided a fluid dispenser unlocking device comprising a personal communications device programmed with software that, when loaded and activated, causes the device to function, via the use of a short range wireless communications protocol, as an interface between a human user of the device and a dispensing controller associated with a field supply tank, allowing an authorized user of the device to cause unlocking of the dispensing controller for performing a dispensing event, wherein tank fluid is dispensed by operation of the controller via inputs communicated to it from the device, said inputs including an identification code pertaining to a plant item designated to receive fluid from the tank and global positioning coordinates of the device.

[036] In a preferred form of the invention, the device comprises data-capturing instrumentation configured to capture data relating to the dispensing event.

[037] Preferably, the instrumentation includes location-determining means.

[038] Further, according to the invention, the device includes communication means for communicating logged data to a remote data storage facility.

[039] In an embodiment of this aspect, the device includes event authorisation means operable for interaction with a processor associated with dispenser controller means installed operatively on the field tank. .

Brief description of drawings

[040] In order that the invention may be readily understood, and put into practical effect, reference will now be made to the accompanying figures. Thus:

Figure 1 shows schematically a preferred embodiment of the system of this invention for controlling and monitoring fluid offtakes in the field.

Figure 2 is a schematic view of an example of the process of the invention for authorising a fluid-dispensing event.

Detailed description of an embodiment of the invention

[041 ] The invention will now be described with particular reference to the example of a liquid fuel as the fluid to be dispensed. Referring to Figure 1, in a preferred embodiment of this invention, a system of interacting devices is illustrated, as denoted generally by way of the number 10. [042] A trailer-mounted field supply tank (light tanker) 12 is charged with fuel from a supply depot 14. The tank may be mounted or borne on a self-propelled vehicle or on a trailer or the like to enable it to be moved to a site where fuel is needed to be dispensed to plant and equipment 16 in the field. Mounted to tank 12 is dispensing unlocking control system hardware 18, comprising a pump of conventional design operable by means of a relay to transfer fuel via a flow meter in the form of a digital pulse meter, (a volumetric flow-measuring instrument that sends a pre-determined electronic signal per passing litre), an electronically-actuated valve and hose 20 connecting to plant 16, requiring fuel replenishment. The plant is identified by a unique code. The code may be displayed visually in the form of a barcode, such as quick read (QR) code applied on to a specification plate fixed to the plant body or chassis or other permanent part thereof. In the case of a QR code, a randomised key is created, comprising a string of characters (Base 64, an alphanumeric combination 0-9, a-z, A-Z), encoded in a QR symbol and allocated to a plant item. The keys created are stored in a database against the respective allocated plant items.

[043] Alternatively, or in addition, the code may be electronically broadcast in response to a polling signal, or other activation signal, using known radio frequency identification (RFID) means.

[044] Additional data may be associated with individual plant or equipment codes, for example the site of allocation or operation, name of operator or client organisation, fuel type, pre-set volume limits and similar.

[045] Unlocking system 18 also includes electronic controller means to which the pump relay, flow meter and valve operating mechanism are operatively interlocked for operation according to a predetermined protocol managed by an on-board data processor. The controller further comprises wireless data receiving and transmitting devices for short range communication with a mobile transceiver associated with, and carried by the field user. An example of a suitable electronics platform is the Arduino open-source electronics platform, supplied by Arduino LLC of the USA (See https://www.arduino.cc/).

[046] The controller is enabled for wireless communication with a personal communications device, in this embodiment a smartphone 22, carried by a human user in the field. The smartphone is loaded with an application (app) for establishing communication with the controller. Instead of a smartphone, the software may be operated on a tablet computer or other multifunction communications device associated with and carried on the person of its user. Whichever device is used, it needs to be GPS-enabled and preferably be equipped with a digital camera or other image capturing means.

[047] Communication is by way of a short-range radio communications protocol, for example the Bluetooth® protocol. This protocol is preferred to using a WiFi network, because of the current limitation that a device such as a smartphone may connect to only one WiFi network at a time, thereby relinquishing other capabilities and features, depending on the network of connection. In this case, a WiFi connection may interfere with push and pull capabilities between the device and the cloud storage facility of the system. Especially preferred is the Bluetooth low energy protocol, known as "BTLE" or "BT 4.0". BTLE does not require traditional pairing, as employed in regular Bluetooth communications. Instead, when a BTLE device arrives within range of another BTLE device, communication is established without requiring pairing codes to be manually exchanged, but by the automatic exchange of parameters and logic in a predefined message format agreed to by subscribers to the system.

[048] An alternative to the Bluetooth protocol is nearfield communications technology (NFC). This may also be used to identify a handset to the system hardware, specifically as operably mounted on the dispensing tank.

[049] In an embodiment, both the tank unlocking control apparatus 12 and smartphone 22 are equipped with a global positioning system and operating software. The smartphone is associated with the field user, who is predesignated in the system as an authorised user. The user gains access to the system app on the smartphone by means of standard login procedures. The user, once allowed access, is pre-authorised to enter into one or more categories of dispensing transactions for fuel offtakes from the tank. The categories may be defined in terms of the user's level of authority in the enterprise to which the plant belongs, or according to the plant type, the fuel it uses and the maximum volume of fuel that the user may dispense. In this embodiment, the user is pre-authorised to dispense fuel from the tank into the identified piece of plant, identified by the code mentioned above.

[050] Different levels of transactional security are built into the system. At a first level, a fuel offtake is authorised and the dispensing system programmed to be unlocked when a personal communications device associated with a pre-authorised field user sends a password or other secret data set to the dispensing controller. The dispensing controller will be one that has been identified and listed in the app as being available for use. Therefore, the app operates the smartphone performs a polling function to detect its presence.

[051 ] At a higher level, in an alternative embodiment, the GPS system of the personal communications device may be required to correspond within a set distance of, for example, 20 metres from the location sent by a GPS system installed on the field supply tank. Within the stated proximity range, the system is programmed to authorise the offtake and the dispensing system is unlocked. At a third level, a location signal emitted by a GPS device installed on the plant to be replenished with fuel is received by the personal communications device and the software of the device app compares the plant location with the device location and that of the tank. If all are within a preordained radius, then the dispensing system is unlocked.

[052] The range limitation aspect of these alternative, enhanced embodiments of the invention, permits longer range wireless communications protocols to be utilised without compromising security of transactions, should these be preferable to use in certain circumstances, because verifications and authorisations can be limited to devices within a set range as calculated by their respective GPS co-ordinates.

[053] On completion of the offtake, the smartphone device app causes compilation and transmission of a packet of event-related data 24 to a remote server 28 automatically, for example using a mobile telephone network 26, or wi-fi network if one is available. The data is buffered in the event such networks are not available and transmitted when the device again joins a suitable network. The data may be transmitted via the smartphone or directly from the unlocking control system, or from both, in which case comparison of the data sent can be performed at the server receiving the transmissions, as a further layer of authentication.

[054] The data packet contains the location co-ordinates of the GPS-equipped device or devices and apparatus involved in the event as well as their identification data. In addition, it contains the time and date of the event and the volume of fuel dispensed in the offtake. Where available, it also contains odometer and hour-meter data of the plant being refuelled. The app operates the user device to obtain the hours or distance data from the computer management system of the plant when such a system is installed and operational. If the plant does not electronically serve the hours or distance data to the user device, the field user is prompted to input this information manually to the phone using voice or keypad data input means.

[055] The data package sent to the remote system server 28 is accessible via a web portal 30 so that authorised users in, for example, an enterprise management structure, are able to obtain the data and reports containing it and other events, for example in a periodic history or sets of statistics and expenses 32.

[056] Referring to Figure 2, there is shown a concept flowchart of an unlocking process according to this invention, wherein a user of the dispensing control application software, desirous of refuelling a plant item, and, approaching the field refuelling tank, initiates the application on their smartphone at step 102, entering their user authorisation criteria 104 to gain authorised access. Actions performed on or by the smartphone app and its user are generally shown to the left of the vertical broken dividing line. Actions by the tank controller hardware are generally shown to the right.

[057] The field supply tank is equipped a control unit 104 comprising a wireless transceiver, communicating via the BTLE protocol, and associated microprocessor. The microprocessor causes the transceiver to emit a low strength call signal 106 at a predetermined frequency at predefined intervals. The strength of the signal determines the receiving range.

[058] In another embodiment, the control unit includes GPS apparatus for determining and recording its location and to enable remote tracking. The location of the supply tank can then be compared with the GPS location of the user's smartphone handset and /or that of the plant.

[059] In the embodiment of Figure 2, the following process 100 is carried out in procuring the dispensing of fuel from a field supply tank 12 (in Figure 1). Actions performed on or by the smartphone app and its user are generally shown to the left of the vertical dividing line, marked D. Actions by the tank controller are generally shown to the right. [060] The process commences when the smartphone user, desirous of refuelling a plant item 16, opens the dispensing application (app) on the smartphone 22.

[061] Referring to the right-hand side of Figure 2, the dispenser controller hardware is configured to broadcast its identification signal 103, provided it is receiving power, awaiting a valid connection attempt from the app of the invention emanating from a smartphone within communication range. The controller may be set also to monitor the dispensing flow meter and other switches, even when humanly unattended.

[062] The user logs in with a username and password 104. A secure token 106 is issued from the system server 28. The token, username and password may be stored in memory on the smartphone, saving the user time in subsequent refuelling events. Alternative means of identity verification may be used, including biometric identification of the user of the communications device. Examples include fingerprint readers, iris scanners, facial recognition systems and the like, as known in the art.

[063] The smartphone app, when the user login of the user is successful, causes the smartphone to scan for broadcast signals 103 and, in response to detecting one, transmits its identification call sign. The controller transceiver receives and communicates the identification sign to the controller microprocessor. The microprocessor is programmed to attempt to establish trusted communication with the smartphone. To this end, it interrogates a database of authorised identification signs and, if the sign received is recognized as an authorised sign, approves a communication connection.

[064] The user nominates the plant or equipment to be refuelled 108. This may be done from a list presented in a dropdown menu. Optionally and additionally, the equipment is selectable via a scan of a barcode on the item via the smartphone camera 109. This provides an additional layer of security in the sense that it requires physical proximity of the user's smartphone with the item to be refuelled.

[065] The user is given the choice of a fixed pre-set volume or to dispense at his discretion, for example until the user judges that the receiving tank has been filled to a desired extent. However, it is preferable that the plant selected will already have been pre- associated with refuelling parameters such as the type of fuel it requires, volume limitations, frequency limitations and the like. If these are not pre-loaded, the user is called on by screen prompts (or voiceover instructions) to populate the app with parameters pre- configured within the app. The app may at times default the connection. The parameters may also include (without limitation) the identity of the plant item (16 in Figure 1), an authorization code (optional), information identifying the user of the smartphone, and the like. It will be appreciated that the fuel type may not be required if this information is already stored in the system data bank 28. However, requiring the user to input the type, or select the type from a dropdown menu, will provide an extra check or confirmation 110, to ensure the data is in approved form and relevant to the plant item identified.

[066] If the parameters entered meet authorization criteria, the process proceeds at step 110 with the proposed dispensing event being approved.

[067] Communication is established 114 between smartphone and the tank-mounted dispensing hardware 18 (see Figure 1). Messages are exchanged between smartphone app and the dispensing hardware, the processor of the latter determining, on an exchange of secure encryption keys and identification criteria, whether the electronic connection is approved for the refuelling event to proceed. If the determination is resolved in favour of approval, the system is held ready to commence the dispensing, and the microprocessor issues instructions for the dispensing pump to be started and held on standby 116; otherwise, the proposed transaction event is rejected, with the user being notified by a message displayed or sounded on the smartphone.

[068] If the dispensing event is approved for execution, the user is notified and prompted on the touchscreen to place the fuel dispensing nozzle in position on the plant item 16 in readiness for delivery of fluid to commence.

[069] The user is prompted to confirm when the nozzle is in place and to tap a button to cause the necessary valves of the dispenser to open for delivery to commence 118.

[070] With the filling target amount having been settled (fixed quantity or discretionary amount), the microprocessor causes a signal to be sent to the dispensing apparatus for releasing an electronic lock so that filling can take place as programmed.

[071] On the lock being released, a flowmeter monitoring the dispensing nozzle is activated. The user then manually directs the dispensing nozzle to the inlet of the receiving tank of the plant being refuelled and operates a lever on the dispenser. The lever is interlocked with the motor of the dispensing pump of the apparatus, to activate the motor to cause fuel to be dispensed via the nozzle.

[072] The app provides the data required to enable the dispenser controller software to issue instructions 120 for the fluid to be dispensed, thereby defining the dispensing event or transaction. Optionally, depending on the tank and dispensing equipment configuration, the dispenser controller hardware may be set to limit the volume of fluid to be dispensed.

[073] The user interface defined by the smartphone touchscreen is updated with messages from the hardware periodically during dispensing 122. This may be in the form of a progress bar and the like, showing how much fuel has been dispensed and/or how much remains for dispensing according to the event parameters, such as volume limitations 124.

[074] The smartphone is programmed for the user at any time during the dispensing to be able to pause or stop the pump at the touch of a button 126. The app then instructs the hardware accordingly 128.

[075] When the programmed volume has been dispensed, the microprocessor switches the tank pump off. Alternatively, when the user has dispensed a discretionary offtake volume, signalled by his releasing of the operating handle, the pump motor is deactivated. When a detector detects that the nozzle has been replaced in its docking station, a signal is sent to the microprocessor, which then causes the dispenser to be relocked, pending a new event being initiated.

[076] The app contains executable instructions for terminating the dispensing event entirely 130, under specified conditions. The hardware controller processor too can terminate the operation 132, for example in the event of a timeout, a connection loss, a switch-monitoring event being captured, or malfunction. Upon receiving termination notice from the controller, the smartphone app user interface resets 134, logging the current user out, and the hardware is left available for another user.

[077] The data pertaining to the event is stored locally on the handset and pushed to cloud storage 138. Event data may also be stored locally on the hardware device. The processor stores in a connected memory module the relevant data of the event, including identity of the user's device, the volume dispensed, the date, time and duration of pump operation. It may then cause this data to be packaged and transmitted to the user's smartphone. This information is them forwarded to the system host server for further storage, packaging and processing. The server utilises a web portal for presenting the data in report form to a set of authorised users. These users may, for example, be members of a management team of the enterprise that owns the plant or employs the smartphone user.

[078] After event termination, the user is offered an option of requesting additional delivery to the same or a different plant item 140. By responding to a prompt, the user may commence the event without having to log in afresh.

[079] Optionally, the smartphone app may program the smartphone to enable the user to commence a new dispensing event with minimal screen input touches, for example in cases where the same or similar parameters are to be used. The system does not need to reconnect under these circumstances.

[080] In a further embodiment of the process of the invention, in which the unlocking controller unit is GPS-enabled, the smartphone app operates the smartphone to transmit its location data (determined from its on-board GPS) to the unlocking controller unit. The microprocessor compares the location co-ordinates of the smartphone with the current coordinates of the tank, and, if the distance separating them is calculated to be within a preset range, for example 24m, a proximity match is registered and the microprocessor emits the user event code mentioned in the preceding paragraph.

[081] The event data, collected as described above, can be made available in virtual real time, depending on the availability of communications from the location of the event. Otherwise, the data package is retained in the communications device and sent when again in communications range with a communications network accessible by the server. The memory module on the field supply tank stores the event data until it can be downloaded on a separate occasion, for example when the tank is being replenished, or has been retrieved and returned to a base station.

[082] In a further embodiment, the microprocessor is programmed so that before it unlocks the dispensing apparatus it prompts the user to enter information concerning the item of plant requiring fuel. The information would include, by way of non -limiting example, the serial number, registration number or other identifying indicia of the plant, logged usage information such as the odometer reading or hours-meter reading, as applicable. This information will be retained in the data storage of the tank controller, but will also be relayed back to the base station server. The plant identifying data may be recorded as noted above within a QR code applied on a surface of the plant or on a plate fixed securely to the plant.

[083] Even before authorisation is given for the dispensing apparatus to be unlocked for fuel to be dispensed, software resident at the server or being run on the communications device or controller is able to check whether the requested dispensing event is within specified parameters. For example, if an item of plant seems to be requiring more fuel than it should, or sooner than expected, on the basis of its prior record of refuelling, a flag can be raised in regard to the plant so that its mechanical condition can be assessed. The server or other processor on the communications device or the microprocessor in the tank control may be programmed to decline the transaction or initiate other action, including disabling the plant itself. Other alarm conditions may be detected and flagged based on the data received. An example is where the fuel being requested from the tank is incompatible with the engine of the plant, for example diesel instead of petrol, or grade of petrol. Preventing the event will avoid damage resulting to the engine.

[084] In an alternative embodiment of the process, instead of there being a touchpad or touchscreen on the tank control unit, inputs to the unit are made using input means, such as a touchscreen or keyboard and mouse on the personal communications device of the user, in reply to prompts generated by the user software. The responses are processed on the user device before consequential instructions are communicated from the device to the tank microprocessor. By way of example in this case, the user device software scans for and recognizes the field supply tank call sign as that of a permitted supply unit - for example because it belongs to the enterprise that employs the device user, and supplies diesel, and the plant to be supplied requires diesel only. The phone software then issues a request to the tank microprocessor to request from the user a password or other authorisation code. The user inputs the code and this is checked by the software. If verified, the user device directs the tank controller to communicate how much fuel is available for dispensing, and to request the user's requirement. If the requirement is exceeded by the volume available, the user device directs the controller to unlock the dispensing system, so that matters can proceed as previously described, with the event data being logged and stored as before. [085] Instead of the personal communications device processor performing certain of the processing functions described above, these may also or alternatively be performed by the tank microprocessor. Both processors may perform certain steps for corroboration, redundancy and other security-related purposes.

[086] Using the mobile personal communications device as a convenient means of authorising the events and for gathering data to be logged, as well as transferring it remotely to the server, facilitates more accurate logging than was available in prior systems. The use of the device enables a touchpad or touchscreen input device to be done away with at the field tank dispending controller. Without having such an input device available, the risk of tampering is reduced, as is the risk of data entry errors.

[087] In cases where sensors automatically transmit transactional data to the communications device app, the invention facilitates elimination of human data input error or intentional inputting of false data an unscrupulous field user seeking to misappropriate fuel for unauthorised use.

[088] An audit trail is established when a fuel tank gauge in a recipient plant item shows that a certain amount of fuel has been received and this corresponds or does not correspond to the amount measured by the digital pulse meter of the dispensing control system. Losses are thereby detectable and notified automatically so as to be swiftly reported and actionable by enterprise management.

[089] By logging offtakes using the invention, the excessive or optimal use of fuel by a particular item of plant is automatically detectable and reportable. In the case of excessive consumption, the plant concerned is automatically slated for inspection for determining the cause.

[090] The audit functionality provided by the comparing of offtake received in the recipient plant tank with the volume measured as having been dispensed enables corroboration of fuel consumption measured or calculated for the plant concerned.

[091] The invention also facilitates fuel inventory management by enabling accuracy of records to be improved and corroborated. [092] These embodiments merely illustrate particular examples of the unlocking method, programmable devices and apparatus of the invention providing means for the monitoring of authorised offtakes of a fluid commodity and downstream use of data gathered in the process of such monitoring. With the insight gained from this disclosure, the person skilled in the art is well placed to discern further embodiments by means of which to put the claimed invention into practice.

Ends

Claims

A fluid dispenser unlocking system comprising: a. Dispensing hardware and an associated control system for operatively mounting on a supply tank for controlling operation of the hardware, the control system comprising i. wireless communications hardware and software operable according to a short range wireless communications protocol (e.g. 'BT'), ii. a programmed microprocessor in operative communication with the communications hardware, and iii. interlocks between the microprocessor and microprocessor-controllable items of the dispensing hardware; and b. Application software for running on a personal communications device, the software comprising instructions for causing communication between the personal communications device and the control system, via said short range wireless communications protocol, wherein the microprocessor and the personal communications device are programmed to interact for establishing trusted communication between them on the basis of a plant identification code identifying the plant to receive the fluid to be dispensed, authorize, on the basis of trust having been established, a fluid-dispensing event by a user associated with the personal communications device, and log data relating to the event, said data including global positioning co-ordinates of the place of the dispensing.

The system of claim 1 wherein the code is obtainable from the plant item and is verified by the unlocking controller prior to the dispensing commencing.

20

3. The system of claim 2 wherein the plant-identification code is a machine-readable code displayed on the plant item.

4. The system of claim 3 wherein the code is adapted for capture by an camera associated with the personal communications device.

5. The system of claim 4 wherein the plant-identification code comprises a barcode.

6. The system according to any one of the preceding claims wherein the microprocessor is programmed to emit at intervals a call sign for reception by the personal communications device.

7. The system of claim 5 wherein the application software on the personal communications device causes the device to scan for the call sign.

8. The system of claim 6 wherein the application software causes said device to identify itself to the unlocking control system.

9. The system according to any one of claims 1 to 5, wherein the personal communications device emits a polling signal to detect the presence of the unlocking control system within range.

10. The system of any one of the preceding claims wherein trust is established when a code transmitted from the dispensing control system and re-entered by a human user is received back by the controller and verified.

11. The system of any one of the preceding claims wherein logged data is remotely stored.

12. The system of any one of the preceding claims wherein the unlocking control apparatus comprises global positioning means operatively installed to record global positioning coordinates of the field supply tank.

13. The system of claim 12 wherein unlocking of the dispensing apparatus is conditional on a comparison of the coordinates of the personal communications device and of the field supply tank.

21

14. A method of monitoring dispensing of a fluid from a field supply tank equipped with a microprocessor-controlled fluid-dispenser unlocking system, the method comprising the steps of: a. equipping the field supply tank unlocking system for wireless communication, by means of a short range wireless communications protocol, with a personal communications device loaded with software for establishing trusted communication with the tank, b. bringing the personal communications device within wireless communications range of the field supply tank and allowing the software to interact with software running on the microprocessor of the fluid-dispensing apparatus for trusted communication to be established, on the basis of a plant-identification code identifying the plant to receive the fluid to be dispensed, c. allowing the software, on the basis of trust having been established, to authorize the dispensing of fluid from the tank and to unlock the fluid dispenser, and d. causing the software to monitor the dispensing and log data relating thereto, said data including the global positioning co-ordinates of the place of the dispensing.

15. The method of claim 14 including causing the software to select the plant for receiving the fluid to be dispensed.

16. The method of claim 15 including obtaining the code from the plant item and causing it to be verified by the unlocking controller prior to the dispensing commencing.

17. The method of claim 16 wherein the plant-identification code is a machine-readable code displayed on the plant item.

18. The method of claim 17 wherein the plant-identification code is adapted for visual capture by a camera associated with the personal communications device.

22

19. The method of any one of claims 14 to 18 including the step of communicating the code to the microprocessor of the fluid-dispensing apparatus for verification.

20. The method of any one of claims 14 to 19, wherein it is the personal communications device that captures the global positioning co-ordinates.

21. The method of claim 20, wherein the fluid-dispensing controller captures global positioning co-ordinates pertaining to the field supply tank.

22. The method of claim 21 wherein capture take place for use in establishing trust between the controller and the personal communications device.

23. The method of claim 21 or claim 22 including the step of comparing the global positioning co-ordinates captured by the personal communications device and the fluid-dispensing apparatus and causing dispensing to be authorized if comparison finds them within a preset distance.

24. The method of any one of claims 14 to 23, wherein the step of allowing trusted communication to be established comprises causing the personal communications device to identify itself to the field supply tank controller.

25. The method of claim 24 further comprising causing the field supply tank controller, in response to making a positive identification of the personal communications device, to actuate the dispensing apparatus to allow a human user associated with the communications device to operate the dispensing apparatus to replenish a plant item.

26. The method of claim 25 including preventing actuation of the apparatus unless the communications device is within a predetermined range of the supply tank.

27. The method of any one of claims 14 to 26 including providing a web portal and making logged data accessible via the portal to a human portal user.

28. A fluid-dispenser unlocking device comprising a personal communications device programmed with software that, when loaded and activated, causes the device to function, via the use of a short range wireless communications protocol, as an interface between a

23 human user of the device and a dispensing controller associated with a field supply tank, allowing an authorized user of the device to cause unlocking of the dispensing controller for performing a dispensing event, wherein tank fluid is dispensed by operation of the controller via inputs communicated to it from the device, said inputs including an identification code pertaining to a plant item designated to receive fluid dispensed from the tank and global positioning coordinates of the device..

29. The device of claim 28 comprising data- capturing instrumentation configured to capture data relating to the dispensing event.

30. The device of claim 29 wherein the instrumentation includes location- coordinates capturing means.

31. The device according to claims 29 or 30 wherein the instrumentation includes code capturing means.

32. The device of claim 31 wherein the digital code capturing means comprises a digital camera.

33. The device of any one of claims claim 28 to 32 using the Bluetooth low energy protocol as the short range wireless communications protocol.

34. The device of any one of claims claim 28 to 33 comprising communication means for communicating data relating to the dispensing event to a remote data storage facility.

24