The present invention relates to the verification of operators of machines.

Operators of machines, in particular specialist machines, such as those used on worksites or building sites, e.g. excavators, cranes, tipper trucks, etc., typically require specialist training for operating them, and multiple permissions or certificates for the safe operation of the machines on worksites or building sites may be required or desired. The permissions or criteria required for a given machine may be specified for instance by the company or contractor operating a site, the employer of operator, or the government.

There is identified a need to control access to machines to reduce risks associated with non- compliant machine operators. These risks can be exacerbated in busy worksite environments.

In this light, according to a first aspect of the invention, there is provided a method of controlling activation of a worksite machine, the method comprising the steps of: (a) providing a worksite machine with a control unit, the control unit comprising circuitry that is connected to a start system of the machine, the control unit comprising memory in which is stored a machine identifier; (b) using a mobile computer device to identify a user; (c) communicating the machine identifier to the mobile computer device to identify the machine; (d) using the mobile computer device, verifying that the identified user meets predefined criteria for the identified machine; and (e) if positively verified, communicating a signal to the control unit, permitting the machine to start or be started; wherein the verification is based upon user records data, the user records data comprising at least one of: i. licence, certificate, or permit records; ii. previous experience records; and iii. training records.

The method may include retrieving user records data to the mobile computer device from an online register or database. This may allow verification using up to date records data, or may allow required data to be downloaded onto the mobile device to allow verification, e.g. if necessary data is not available on the device or not (sufficiently) current to meet the criteria set.

The method may include storing the user records data on the mobile computer device. This may facilitate verification when no network is available. The method may further include communicating a visual indicator to a screen of the mobile computer device to display whether the user has been verified to meet the criteria for the machine.

The method may include locating the mobile computer device in communication proximity to the control unit to initiate steps (c) to (e) of the method. Thus, the verification can conveniently be initiated by the user of the device.

The method may further include retrieving machine requirements data for the identified machine, e.g. from an online database of machine requirements. The machine requirements may comprise any of: i) licence, certificate, or permit requirements; ii) experience requirements; and iii) training requirements. The machine requirements may be stored in the database for many machines.

According to a second aspect of the invention, there is provided a system for approving a user for operating a machine on a worksite, the system comprising: a machine; a control unit installed on the machine, the control unit configured to store a machine identifier; and a mobile computer device, the mobile computer device configured to identify a user; the control unit operable to communicate the machine identifier to the mobile computer device; the mobile computer device being operable based on the machine identifier to verify whether the identified user meets predefined criteria for the machine, and if positively identified, communicate a signal to the control unit for permitting the machine to start or be started; wherein the verification by the mobile computer device is based upon user records data, the user records data comprising at least one of: i. licence, certificate, or permit records; ii. previous experience records; and iii. training records.

The control unit may include a communication pod for wireless data communication with the mobile computer device. This may be a close-proximity pod. This can be convenient way for the initiation of verification when a user is at the machine, e.g. in the cab.

The control unit may further include a substance tester. The substance tester may be a breathalyser. The data from the breathalyser may be communicated to the mobile computer device which may perform the verification using the data from substance tester. The control unit may be operable to permit the machine to start or be started in dependence upon the data from the substance tester. The control unit may include an emergency override switch for permitting the machine to be started without verification as to whether the user meets the criteria for the machine.

The system may further comprise at least one remote server, which may host a cloud service. The cloud service may be for remote data storage of user data records. The cloud service may communicate with one or more databases for updating user records. The mobile computer device may be operable to communicate with the cloud service to obtain and/or retrieve up to date user records data.

The system may further comprise at least one remote device. The remote device may comprise a database comprising a register, e.g. an actively maintained online register which may comprise data records of for example, certificates, licences, training, or experience of large numbers of people.

The system may further comprise a remote computer which may be configured to communicate with the control unit for monitoring status and/or whereabouts of the control unit and/or machine.

The control unit may be provided with an aerial for wireless communications, e.g. with remote network devices, e.g. by Wifi, LTE, or GPS, or other wireless network connectivity.

According to a third aspect of the invention, there is provided apparatus for approving an operator and starting a machine, the apparatus comprising: a control unit configured to be installed on the machine, the control unit configured to store a machine identifier; and a mobile computer device, the mobile computer device configured to identify a user; the control unit operable to communicate the machine identifier to the mobile computer device; the mobile computer device being operable based on the machine identifier to verify whether the identified user meets predefined criteria for the machine, and if positively identified, communicate a signal to the control unit for permitting the machine to start or be started; wherein the verification by the mobile computer device is based upon user records data, the user records data comprising at least one of: i. licence, certificate, or permit records; ii. previous experience records; and iii. training records.

According to a fourth aspect of the invention, there is provided a control unit for controlling activation of the machine, the control unit comprising: control circuitry for connecting the control unit to a start system of the machine; memory for storing a machine identifier data for identifying the machine; and communication means for receiving a signal communicated from the mobile device when positively verified that a user meets criteria for operating the identified machine; the control circuitry being operable to output a signal to activate or allow activation of the start system of the machine to start the machine if the user is positively verified.

According to a fifth aspect of the invention, there is provided a mobile computer device for use in the method of the first aspect or the system of the second aspect of the invention, the mobile computer device comprising a processor arranged to execute a computer program to verify whether an identified user meets the criteria for operating an identified machine, and if positively identified, to produce at least one verification signal.

According to a sixth aspect of the invention, there is provided a computer program for verifying whether an identified user meets the criteria for operating an identified machine, and if positively identified, to produce at least one verification signal.

There will now be described, by way of example only, embodiments of the invention with reference to the accompanying drawings, in which:

Figure 1 is a schematic representation of apparatus for controlling activation of a machine; and

Figure 2 is a flow chart representation of a method of controlling activation of a machine.

In Figure 1 , apparatus for controlling activation of a machine is generally depicted at reference numeral 1. The apparatus 1 provides for approving a user for allowing the machine to start or be started. The apparatus 1 includes a control unit 100, which is installed on the machine 200.

The control unit 100 is installed so that in normal operation, the machine 200 requires a start signal to be passed between the control unit 100 and a component of the machine 200. The signal is passed to the component of the machine to operate it and start the machine 200, or otherwise permit the machine to be started by an operator. The start signal is indicated by arrowhead 202.

In the example of Figure 1 , the component of the machine 200 to which the signal is passed comprises an electrical start circuit 201. The control unit 100 is electrically connected to the start circuit 201 by one or more electrical lines 203 for electrically communicating the start signal through the line 203. The electrical line 203 can also provide electrical power input to operate the control unit. In other examples notably, the start signal is passed to a component of the machine that is associated with, or arranged to control, an electrical start circuit or start mechanism or system, of the machine. In further examples, the start signal is passed wirelessly or by one or more optical lines between the control unit and the component for starting the machine.

The control unit 100 is an electronic device, e.g. an electronic computer or microcontroller device, that includes internal memory 110, an in/out unit 112, and a processor 114.

The control unit 100 includes an aerial 130 for wireless data communications with remote network devices and/or connecting to a network. The communications are typically over a mobile communications network, e.g. a 4G or 5G network. The aerial 130 is suitable for LTE, Wifi, and/or GPS signal transmission. The apparatus in this case includes remote network devices including in this example: a cloud service device 401 ; a database 402 comprising national register for obtaining certificates, training, and machine data; and a remote computer 403 comprising a display, e.g. for remote monitoring of the machine, e.g. for displaying status and alarms.

The control unit 100 also includes communication means, e.g. pod, in the form or a wireless receiver 120 for close-proximity wireless data communications with a mobile device in the form of smart phone 320. This can provide communications e.g. using NFC technology.

The control unit additionally includes a substance tester in the form of a breathalyser 140 for testing whether the user is undesirably influenced by a substance, e.g. alcohol. The breathalyser 140 provides data input to the control unit 110 which based on the data can determine if the permitted substance limit is exceeded. If the permitted limit is determined to be exceeded, then verification of the user fails, and a start signal is not sent to the machine.

The control unit 110 also has an override switch 150, e.g. for emergency start of the vehicle. There can be instances such as emergencies where one needs to temporarily operate the machine without verification. The override switch 150 can be unlocked and then used to disable the control unit 100 so that the machine is started directly, e.g. by a start button, key, or upon activating the switch 150.

In some examples, the network devices are arranged to communicate between themselves, so that for instance, upon communication from the control unit 100 with one of the network devices, e.g. through a client service on the server 403, the server 403 may communicate to obtain data from another device, such as the database 402.

The apparatus 1 is operable to perform a computer implemented verification process and provides a convenient and reliable means for approving and allowing machine operators access for using the machines. This is done through the mobile device of the user/operator seeking to operate the machine. The apparatus 1 is configured to operate so that the user cannot use the machine until verified based on preferably up to date information as to the certifications, permits, experience, and/or training that the user has.

In an example with reference to Figure 2, a method 600 has the following steps:

51. The user accesses the mobile device 320. User identification data for identifying the user is stored on the mobile device. Thus, the user is identified on the mobile device. Verification is then initiated through locating the mobile device in communication with the control unit, e.g. in close proximity to the communication pod 120.

52. The machine is identified. Machine identification data is stored in the memory 110 of the control device, e.g. in a pre-configuration of the control device when first installed on the machine. Machine identification data is transmitted to the mobile device.

53. The mobile device 320 is used to perform the verification. User records data are stored on the mobile device 320. The user records data include for example: machine licence records, training records, experience records, certificates records. The user records data may be retrieved from the database(s) 402 e.g. from one or more national or other registers, and stored temporarily for purposes of the verification.

54. The mobile device 320, by executing a computer program, determines whether the identified user meets predefined requirements or criteria to operate the identified machine, and if positively verified to meet the predefined criteria produces a positive verification signal. The positive verification signal is displayed on the screen of the mobile device 320 for providing a visual confirmation to the user. The criteria can include that the user has certain permits, licences, experience, or training or combinations thereof for the identified or similar machines, and can include that such permits, experience, training or combinations thereof were obtained more recently than a predefined date, and/or were checked against independent registers or databases more recently than a predefined date, and/or were obtained for relevant machines and/or relevant worksite contexts, etc. The criteria may defined in the computer program. S5 & S6. The positive verification signal is communicated from the mobile device to the control unit, e.g. through the communication pod 120 or potentially the aerial 130, which upon receipt by the control unit 100 permits the machine 200 to be activated and started. The machine 200 and/or start circuit 201 receives start signal or impetus from the control unit 100 which starts or allows the machine to start.

If the user is not positively verified, then a negative verification signal is produced and displayed on the screen of the mobile device, informing the user that the verification failed. In this case, the negative verification signal or no signal is transmitted to the control unit, and the control unit does not operate to permit the machine to start.

In examples such as Figure 1, where a substance tester, e.g. breathalyser, comprises an input to the control unit, the starting of the machine 200 is dependent upon the user passing the substance test. If the test has been performed and the user meets or exceeds the substance test criteria, then a positive test signal is produced, e.g. by the breathalyser and passed from the control unit to the mobile device 320. The mobile device 320 upon performing the verification then will produce the positive verification signal only if the positive test signal is obtained. Alternatively, test data from the breathalyser may be passed to the mobile device 320, and the program executed using the device 320, may determine, optionally in communication with network or cloud servers, whether the test has been passed.

In more detail, for example the mobile device 320 has an application (“app”) installed, where the application “knows” the user who has logged in and therefore also which certificates and training the user has currently, i.e. user identification and records data. It also “knows” the machines that are currently registered for the organisation where the user works, and the requirements that are set for the operation of these machines, i.e. registered machines and requirements data. This information is stored locally on the mobile device 320 so that the information is also available locally if no internet connection is available when identification and verification of the user is to be performed. The verification can be performed therefore based upon the user identification and records data and upon the registered machines and requirements data to determine whether the identified user meets the requirements for the identified machine.

Indeed, the app may continuously, regularly, or from time to time be used to check which of the registered machines the user meets the requirements or criteria for and has permission to use. Therefore, upon performing the verification in practice, the app may only require to be provided with the identity of the particular machine sought to be used, i.e. the machine where the control unit is installed. Information for providing the identity of the machine may be simply and immediately communicated to the mobile device through the communication pod 120. Upon receiving the machine identity data, the computer program is executed to determine whether the identified machine is one which is registered and one which the user meets the requirements to use. If so, then the user can be verified positively, and a positive verification signal issued and returned to the control unit 100.

National registers 402 for example are maintained with records of training, certificates and experience relevant for operation of machines. A requirement or criteria or important feature can be that the information, i.e. user records data, which is stored and/or accessed by the mobile unit comes from the national registers and/or has been checked against national register records.

The computer device may determine whether the time of data download or last time of check against the register(s) is sufficiently recent to be deemed current. To do so, the time of last check is compared with the current time, and if the duration between the two exceeds a desired time limit, then a new check is performed. If determined not current or if no check is possible because the information in the app or stored on the computer device has not been updated, then the computer device may not produce a positive verification signal.

In the event of an emergency, the operator may activate the switch 150. The control unit 100 sends the start signal to the machine, and logs and sends a warning, e.g. to the computer 403 that the emergency switch 150 has been activated.

The cloud service 401 is used for synchronisation of data between devices and units of the apparatus 1. The cloud service 401 communicates with the database 407 / registers for retrieving and updating of machine data and information which certificates and training have been issued to the operator. The cloud service 401 communicates with the mobile phone via the app for synchronising information as to which machine operator has been identified and verified for, together with updating as to the status of certificates and training of the operator that is logged into the app on the mobile device. The cloud service 401 communicates with the control unit 100 for synchronising the status information and emergency start messages.

The apparatus described herein may provide a convenient set up for reliable verification of users seeking to operate machines on worksites. The user can simply use a personal mobile device, e.g. smart phone, and with appropriate app installed can quickly obtain the verification for the machine, both when online and offline. Connectivity to network can help to keep user records data information and machine requirements information up to date, allows convenient monitoring by site operators. Machine requirements information may be amended, and new machines may be added by site manages or others, and may be looked up, accessed or retrieved when required by the user, e.g. upon verification, or at other times, e.g. through use of cloud service. This can make site operations less time consuming, more efficient, and reliable, and the risks of improper access to machines are reduced.