1 Introduction

The Tardif IRDC system is a flexible system for selective electronic access control, data registration, and communication for underground waste containers. Separate Tardif fill level measurement systems are also available.

The Tardif systems are fully modular in design and powered by a unique battery system that can operate under extreme conditions.
Because the system is battery-powered, it can be installed in any type of (underground) waste container and is not dependent on a connection to the public electricity grid. The various configurations, both horizontal and vertical, also allow installation in different types of deposit columns.

The IRDC system is prepared for the most common pass systems in the waste industry, including a Read/Only or Read/Write principle for selective access cards, balance cards, pre-pay cards, or a combination. The system can be used with contactless Mifare chip cards.

Online data communication with an IRDC or fill level measurement system in an underground waste container at any location takes place via a GPRS / 3G modem.

The system is freely programmable regarding different configurations.
The system can "grow" from a simple access system to a complete registration/information system or a pre-pay payment system.

The necessary system software can be loaded into the GPRS / 3G modem. Various sensors can be connected, enabling "remote management." The IRDC system can be linked with all leading software packages on the market and fully complies with the "open standard" established in STOSAG.

The absence of external wiring, the compact modular design, the robust waterproof (IP67) housing, the solid lock construction, and the fully encapsulated, military-specified battery guarantee a reliable system that is extremely service- and customer-friendly.

2 Functional operation of the Tardif IRDC system

2.1 Use of the IRDC system

To increase battery life, the system is de-energized in the "rest state." The system is activated by presenting the Tardif chip card. The system will then automatically activate (within 0.5 seconds). The internal number of the Tardif chip card is also read.

Next, it is checked whether the unique card number (see also chapter 3) appears in the whitelist; if so, the drum is unlocked. This means only authorized cards can use the system. The presented card is read contactlessly. After unlocking the drum, the graphic color display shows: Open Drum.

A pulsing acoustic signal also sounds. The user can now open the drum and deposit their waste.

If the drum is sufficiently opened (the drum provides space for depositing or is > 50% open), this is registered via a sensor, and the transaction is stored as a successful transaction in the internal memory. At the same time, the fill level is increased by one deposit. Immediately after opening the drum (detected via the drum sensor), the lock is re-engaged. This guarantees that the drum can only be opened once per deposit. The above system fully meets the requirements set for the system when implementing tariff differentiation (DIFTAR).
After depositing the waste, the drum must be closed, and the transaction is completed; the system switches to standby.
If the drum is not opened within a configurable time (default 15 seconds), the drum is locked again, and an unsuccessful transaction is stored in the memory.
If an unauthorized card (chip number not in the whitelist) is presented, the drum is not unlocked; however, the transaction is recorded and forwarded to the central server.
All transactions are forwarded "real-time" to the Tardif.web software. This ensures that the software always has an up-to-date and real-time view of the status of all systems and all transactions.

2.2 Transaction registration

The following items are registered per transaction:

• The card number
• The location
• The container
• The waste fraction (via CMS)
• Transaction successful (yes/no)
• Unauthorized card presented
• The time and date of deposit / registration
• The waste fraction (via CMS)

This data can be used for billing the use of the container to the citizen.

2.3 Fill level determination

The Tardif system offers two methods to determine the fill level of the container:
1. Counting the number of drum openings
This method can be used if the container is equipped with a double-walled drum. The drum is equipped with a contactless sensor that detects the opening of the drum. The fill level increases by one deposit per opening.
2. Measuring the fill level with a fill level sensor
This method can be used for containers with a double-walled drum, containers with a single-walled drum, or containers without a drum (free deposit), such as glass or paper. The fill level sensor is installed in the container and measures the distance between the waste and the top of the container. This distance is converted into a fill level. The fill level is measured after each deposit or at set times.

At two freely adjustable limits, a communication message is sent via the GPRS modem showing the fill level (full, almost full). The following data are then sent:

• The location
• The container
• The waste fraction (via CMS)
• The time and date of the communication session
• The current fill level, [%]
• The battery capacity
• Any malfunctions
• The not yet sent deposits / transactions

The fill level information can be used to optimize waste collection.
When a container is emptied, this is detected by an emptying sensor. The sensor detects the emptying movement (contactless) and sends this signal to the control unit. This resets the fill level to zero, and the IRDC system sends an emptying message to the container management system.
The following information is stored and sent per emptying:

• The location
• The container
• The waste fraction (via CMS)
• The time and date of emptying
• The fill level of the container at emptying [%]
• The battery capacity
• Any malfunctions
• The not yet sent deposits / transactions

Per emptying, it is known when and at what fill level the container was emptied. This can be used for monitoring and further optimization of the collection process.

2.4 Configuration

From the CMS system, the settings of the IRDC system can be adjusted remotely (via GPRS). The successful receipt of the new settings is reported back to the CMS system by the IRDC system. The clock setting is done automatically after registration on the central server.
The following settings can be adjusted in the IRDC system:

1. Location number of the IRDC system
2. Container number of the IRDC system
3. Lock time-out: The number of seconds the drum lock remains open
4. Limit 1: number of deposits at which a first alert must be sent (almost full)
5. Limit 2: number of deposits at which a second alert must be sent (full)
6. Lock if deposits exceed maximum deposits
7. Frequency of sending deposit data
8. Events that must be sent immediately (malfunctions, exceeding fill level...)
9. Opening hours of the container when it should be available (configurable per day of the week)
10. Holidays when a time slot must apply (container can only be used within the time slot)
11. The whitelist (list of cards that have access to the container)

2.5 Malfunction notifications

The IRDC system checks the current status of the system at startup and will send a malfunction notification if the system is not functioning properly. No cards will be accepted in this case (except for faults a, f, and g).

The following malfunctions are registered and sent:

• Jamming

If the drum is not opened within a configurable time (default 15 seconds), and this happens 3 times (number is adjustable) consecutively, a so-called waste jamming is detected and sent via GPRS to the container management program.

• Drum open at registration

If the drum is open when the system is switched on, no card is accepted. The user can manually close the drum. If there are 3 registrations (number adjustable) with an open drum, a malfunction message is sent via GPRS to the container management program.

• Clock defect

At startup, the operation of the internal clock is checked; if it is not working correctly, a malfunction message is sent via GPRS to the container management program.

• Card reader defect

At startup, the operation of the chip card reader is checked; if it is not working correctly, a malfunction message is sent via GPRS to the container management program.

• Memory defect

At startup, the operation of the memory is checked; if it is not working correctly, a malfunction message is sent via GPRS to the container management program.

• Communication error

If connecting to the central server fails, this is stored in memory with a status message and date/time. As soon as communication is possible again, this data is also sent. These errors can also be read out via a laptop/handheld.

• Low battery voltage

After each transaction, the battery voltage is measured. If it falls below a set value, a message is immediately sent via GPRS.

For all malfunction notifications, the following data are stored and sent:

• The malfunction ID (unique incrementing)
• The location
• The container
• The waste fraction (via CMS)
• The time and date of the malfunction
• The malfunction number
• The fill level of the container
• The battery capacity
• The not yet sent deposits / transactions

2.6 Sending data

The IRDC system sends its data via GPRS / 3G (see also chapter 5). At least twice a day, the system "wakes up" automatically without user intervention, after which communication takes place. The wake-up time and frequency can be set by the customer using the CMS software. At the set time, the current status of the system is sent to the central server so that it can be displayed by the CMS system. The following information is sent:

• The location
• The container
• The time and date of the communication session
• The current fill level
• The battery capacity
• Any malfunctions
• The not yet sent deposits / transactions

The fill level information can be used to optimize waste collection.

2.7 On-site data setting

By using the Tardif.web web-based software on a laptop, it is possible to adjust the data/settings of a system on-site. In this way, the following settings can be changed (see also 2.4):

• whitelist
• lock time-out
• fill level limits for calling in
• call-in time(s)
• clock
• temporary locking

The changes are effected by presenting a communication card.

A system with PC connection is also available. The same settings can be made with it.

3 IRDC cards

Underground containers are often placed in a vandalism-prone environment. The TARDIF IRDC system is therefore equipped with a card reader that can read the electronic card "contactlessly"; the card does not need to be inserted into a slot. A Read/Write card with a secure protocol (MIFARE) is used as standard. Data can be read from (electronic card number) and written to (credit on pre-paid or balance card) this type of card. The cards can be printed in full color.

The TARDIF IRDC cards are available in two formats:

1. Credit card format
2. Keychain format

The multifunctional Tardif cards contain an internal Mifare chip from NXP/Infineon. This chip can be accessed contactlessly via an RF field. This field provides both power and communication with the chip card. Communication between the card reader and the chip card is encrypted. The chip card contains approximately 500 bytes of freely programmable memory. Additionally, each chip card has a unique number (factory-applied) between 0 and 4294967296. This number can only be read and serves as the chip card's identification. This number cannot be manipulated. The chip card also contains a counter that can be increased or decreased by the card reader. The counter can hold a value between 0 and 65536. The counter can, for example, be used to store a credit.

The freely programmable memory consists of 16 sectors, each secured with its own password. These 16 sectors of the chip card are freely programmable and can be used by an electronics supplier for another application, such as access control at a recycling center, library, or swimming pool. The lifespan of the cards is 5 years under normal use.

The cards can be linked to one or more containers.

The cards used comply with the requirements of STOSAG.

3.1 Types of cards

The TARDIF cards can be programmed differently, each with its own functionality.

1. User Registration Card
2. User Pre-Pay Card
3. User Balance Card
4. Administrator General Access Card
5. Administrator/Collector Emptying Card
6. Administrator Communication Card
7. Administrator Manager Card
8. Administrator Fill Level Measurement Card

3.1.1 User Registration Card

This card is used by a user of the IRDC system to open the drum of the underground container. When the card is presented, it is checked whether the unique chip number is in the whitelist. If so, the drum is unlocked. The unique electronic chip number of the registration card is linked to identification data in the Front- and Backoffice system. Each time the card is presented to the IRDC system, the unique electronic chip number is stored in the IRDC system's memory. Also, if the drum is opened, the fill level is increased by one deposit.

3.1.2 User Pre-Pay Card

This card is used by a user of the IRDC system to open the drum of the underground container. When the card is presented, it is checked whether the unique chip number is in the whitelist. If so, it checks whether the Pre-pay credit on the chip card is sufficient. If so, the drum is unlocked. Each time the card is presented to the IRDC system, the unique electronic chip number is stored in the IRDC system's memory. Also, if the drum is opened, the fill level is increased by one deposit.
The Pre-Pay card's credit is programmed at issuance with a certain amount. When using the Pre-Pay card, the credit is deducted by 1, which is visible on the IRDC system's user interface. If the Pre-Pay card's credit is zero, the card can no longer be used to open the container and must be recharged. This recharge must take place at a location where the recharge software and hardware are available.

3.1.3 User Balance Card

This card is used by a user of the IRDC system to open the drum of the underground container. When the card is presented, it is checked whether the unique chip number is in the whitelist. If so, it checks whether the balance credit on the chip card is sufficient. If so, the drum is unlocked. Each time the card is presented to the IRDC system, the unique electronic chip number is stored in the IRDC system's memory. Also, if the drum is opened, the fill level is increased by one deposit.

The balance of the Balance card is programmed at issuance with a certain amount. When using the Balance card, the balance is deducted by 1, which is visible on the IRDC system's user interface. The balance relates to a specific period, for example, a quarter. The balance can be used during this period. If the Balance card is used in a new period at an IRDC system, the balance on the card is automatically recharged by the IRDC system with a certain amount. The old balance then expires. Both the period and the periodic credit can be set via the CMS software.

3.1.4 Administrator General Access Card

This card is used by an administrator/service technician of the IRDC system to open the drum of the underground container. This card can be added to all whitelists, giving access to all containers within the administrator's service area. Each time the card is presented to the IRDC system, the unique electronic card code, linked to an employee, is stored in the IRDC system's memory. This allows for monitoring the use of this card and blocking it if necessary in case of misuse/loss. When using this card, the fill level is not increased.

3.1.5 Administrator/Collector Emptying Card

This card is presented during the emptying of the container in which the IRDC system is installed. It resets the internal "bag counter" to zero; in other words, the fill level is reset. This zeroing also sends an emptying message to the front- and backoffice system. An emptying card can be linked to a person, so it is known who emptied the container at what time, and it can be blocked if necessary in case of misuse/loss.

3.1.6 Administrator Communication Card

This card is used by an administrator of the IRDC system to make the IRDC system communicate outside the set times. Presenting this card initiates a communication session between the IRDC system and the front- and backoffice system. This card is intended for control and service work where the IRDC system must be accessed online. Each time the card is presented to the IRDC system, the unique electronic card code, linked to an employee, is stored in the IRDC system's memory. This allows monitoring of the use of this card and blocking it if necessary in case of misuse/loss.

The following information is sent:

• The location
• The container
• The time and date of the communication session
• The current fill level
• The battery capacity
• Any malfunctions / notifications
• The not yet sent deposits / transactions
• The whitelist

3.1.7 Administrator Manager Card

This card is used by the administrator to display the unique number of the IRDC system (the unitID) on the display. This number is used in the Tardif.web software when entering the system into the database.

3.1 Card issuance by the municipality

Only a USB Mifare card reader is necessary for issuing cards by the municipality. This card reader reads the unique Mifare number and passes it to the software, which links it to an address and adds it to the whitelist of containers linked to that address.

4 Description of IRDC system hardware

The TARDIF IRDC system is suitable for installation in an underground waste collection system, for granting selective access. The system consists of the following components:

1. Combined control and card reading unit with modem and user interface: this unit is the heart of the IRDC system. The processor, memory, real-time clock, GSM/GPRS/3G modem, and antenna are the main elements. The entire unit is housed in a vandal-resistant, waterproof, and dustproof IP67 enclosure with an impact-resistant (IK 8) and scratch-resistant window. In addition, a card reading unit is built in. The card reading unit contains the Mifare card reader and the user interface, which provides information to users and administrators.

1. Battery: provides power to the IRDC system. The battery is housed in an IP67 enclosure.

1. Electronic lock unit: secures the drum and is equipped with a contactless sensor for detecting the opening of the container drum. The lock has an IP67 connector with gold-plated contacts.

1. Cable set: provides connections between the various components. The cables are protected against mechanical damage by a plastic sheath. The connectors used all have gold-plated contacts and are waterproof (IP67).

Overview

Card reader                                                                                                           Battery

Lock Unit                                                                                                          Cable set

4.1 Control unit

The heart of the TARDIF IRDC system is the control unit. This control unit contains the logic and intelligence of the system, also called firmware. The TARDIF IRDC firmware has proven itself over the years. However, development continues with new insights and functionalities. The control unit is designed so that the latest firmware version can be installed remotely (GPRS/3G mobile data communication) or on-site (via a serial connection with a laptop). Installing the latest firmware remotely keeps the IRDC system up to date with the newest available functionalities. The control unit has gold-plated contacts for connecting the lock and battery. Various optional modules can also be connected, such as a fill level sensor or open service door detection (see appendix 5 for the datasheet).

The serial port can also be used to read out settings, whitelist, and deposit data. These data can be stored on an external data carrier via this serial port.

The housing and window of the control unit are IP67, impact-resistant, and vandal-proof. The control unit including card reader is fully integrated and installed in the deposit column.

The main elements of the control unit are:

1. Processor
2. Memory
3. Real-Time clock
4. GSM/GPRS/3G modem
5. Card reading unit
6. User Interface / Display
7. Emptying sensor

4.1.1 Processor

The processor used is of the latest generation. This processor operates fully within the temperature range of -25°C to 85°C. Besides the program installed in the processor containing the logic/intelligence, it also manages communication with the GSM/GPRS/3G modem, the lock unit, and the card reader unit.

4.1.2 Memory

The memory's function is to store registered data, settings, and authorization lists.

The memory used is non-volatile memory. Non-volatile means that data and settings remain stored even if power is lost. This non-volatile memory has a guaranteed retention time of 10 years. There is space for up to 5000 authorized chip cards, including municipal service cards, and up to 5000 transactions. Larger memories supporting up to 100,000 chip cards and 50,000 transactions are optionally available.

4.1.3 Real-Time clock

The Real-Time clock is the internal clock that keeps track of time/date.
The real-time clock continues running even if the main battery is disconnected from the control unit because it has its own backup battery on the control unit's circuit board. The real-time clock backup battery can power the internal clock for up to 3 weeks. As soon as the main battery is reconnected, the real-time clock runs on this battery, and the backup battery is charged. This prevents having to reset the IRDC system's time when changing the battery. The Real-Time clock automatically adjusts for daylight saving time and leap years.
If the IRDC system has mobile communication, the real-time clock is synchronized with a time server at each communication moment.
 

4.1.4 GSM/GPRS/3G modem

The GSM/GPRS/3G modem provides mobile communication. The modem used is an industrial version with an operating temperature range of -25°C to 85°C. It is suitable for sending data via GPRS, 3G, and SMS. The GSM/GPRS/3G modem is mounted as a module on the control unit. The SIM card is integrated into the control unit (SIM chip), eliminating contact problems with the SIM. The antenna is integrated into the control unit's housing.

4.1.5 Card reading unit integrated into the control unit.

The card reading unit is fully integrated into the control unit. A MIFARE contactless card reader is standard. The card reader is suitable for reading data from the chip card and can also write data to the chip card.

4.1.6 User interface/display

The user interface provides information to the user and features an OLED graphic color display. The use of OLED guarantees good readability in sunlight. Texts, numbers, and images can be displayed on the graphic display.

In situations where the system does not function properly (e.g., nearly empty battery, non-working card reader, malfunctioning lock or lock sensor), the container will remain closed, and the user will receive a message on the user interface indicating that the system cannot be used. A malfunction message is also sent via the GSM/GPRS/3G modem.
As additional support for the display, the control unit is also equipped with a buzzer that indicates when the system is switched on, when the drum can be opened, and when there is a malfunction.

4.1.7 Emptying sensor

The control unit includes an integrated emptying sensor. The sensor detects that the container is being emptied by checking whether the container is removed from the pit. At that moment, the electronics are automatically switched on, and the counter is reset to zero. This is also immediately sent to the central server. An external emptying sensor can be optionally connected.

4.2 Battery

The battery provides power to the IRDC system. The battery life strongly depends on usage. Under normal use, the battery lasts at least 2 years with 35 deposits per day and two communication moments per day. Batteries with higher capacity are optionally available. The battery is fully encapsulated and thus also IP67. It can be used over a very wide temperature range from –25°C to 85°C. Furthermore, the battery has its own fuse and is equipped with a waterproof connector with gold-plated contacts.

The battery is only used during the IRDC system's operation. When the system is not in use, it is in standby mode, with only the internal clock running. The battery can be easily replaced by the technical service. When replacing the battery, the internal clock continues running on its integrated backup battery, so the time does not need to be reset. If the control unit detects that the battery capacity is less than 2 months of use, a status message is sent via GPRS to the container management system (see appendix 3 battery datasheet). Battery replacement can be done within 15 minutes.
The battery cannot be recharged and can be fully recycled at the end of its life.

4.3 Lock unit

The electronic lock unit is responsible for locking the drum. The main components of the lock unit are:

1. Sensor
2. Actuator
3. Cable / waterproof connector with gold-plated contacts

The lock unit is made entirely of stainless steel, providing optimal protection against rust. For mounting the lock unit to the container,

the mounting plate is equipped with slots to allow precise adjustment of the lock unit. A lock replacement can be performed within 5 minutes.

4.3.1 Sensor

The sensor detects the opening of the container drum. It is a contactless sensor, so no moving parts that can wear out are present. Once the drum opening is detected, the lock is re-engaged, ensuring only one deposit can be made per opening (the drum must have locking cams in the correct positions).

4.3.2 Actuator

The actuator, controlled by the control unit, unlocks the drum. The rest state (de-energized) of the actuator is closed (thus, the drum is locked). The actuator can be mechanically unlocked manually to always stay open.

4.4 Cable set

The cable set provides connections between the various components. The cables are protected against mechanical damage by a plastic sheath. The connectors used all have gold-plated contacts and are waterproof (IP67). Gold-plated contacts prevent corrosion.

5 Description of the hardware of the Tardif Fill Level measurement system

The Tardif fill level measurement system can be installed in (underground) waste containers. The system uses three ultrasonic sensors for an accurate determination of the container's fill level. The system automatically ignores fixed obstacles (such as chains / lifting frame) so that they do not affect fill level determination. The system can be set to automatically determine the optimal measurement frequency to maximize battery life and always provide an up-to-date fill level. Of course, a fixed measurement frequency can also be set (e.g., every hour). The battery can be easily replaced by the user and lasts about 10 years under normal use.

The Tardif fill level measurement system is available in two versions:

• TFS solo, a stand-alone version equipped with a battery and modem.
• TFS sensor, a sensor that can be connected to a Tardif access control system. The sensor uses the battery and modem of the access control system.

5.1 Fill level measurement system

The Tardif fill level measurement system consists of only one module that can be easily placed in an (underground) container. This unit contains all components and can connect multiple sensors (for containers with multiple fractions). New functions can be added remotely (via GPRS/3G) by updating the firmware.

The system's housing is very robust and has an IP67 waterproof rating.

The main elements of the control unit are:

1. Processor
2. Memory
3. Real-Time clock
4. GSM/GPRS/3G modem
5. Ultrasonic sensors
6. Emptying sensor

5.1.1 Processor

The processor used is of the latest generation. This processor operates fully within the temperature range of -25°C to 85°C. Besides the program installed in the processor containing the logic/intelligence, it also manages communication with the GSM/GPRS/3G modem, the lock unit, and the card reader unit.

5.1.2 Memory

The memory's function is to store measurements and settings. The memory used is non-volatile memory. Non-volatile means data and settings remain stored even if power is lost. This non-volatile memory has a guaranteed retention time of 10 years. There is space for up to 10,000 measurements. Larger memories supporting up to 100,000 measurements are optionally available.

5.1.3 Real-Time clock

The Real-Time clock is the internal clock that keeps track of time/date.
The real-time clock continues running even if the main battery is disconnected from the control unit because it has its own backup battery on the control unit's circuit board. The real-time clock backup battery can power the internal clock for up to 3 weeks. As soon as the main battery is reconnected, the real-time clock runs on this battery, and the backup battery is charged. This prevents having to reset the fill level measurement system's time when changing the battery. The Real-Time clock automatically adjusts for daylight saving time and leap years.
The fill level measurement system synchronizes the real-time clock with a time server at each communication moment.
 

5.1.4 GSM/GPRS/3G modem

(not present in the TFS sensor version)

The GSM/GPRS/3G modem provides mobile communication. The modem used is an industrial version with an operating temperature range of -25°C to 85°C. It is suitable for sending data via GPRS, 3G, and SMS. The GSM/GPRS/3G modem is mounted as a module on the control unit. The SIM card is integrated into the control unit (SIM chip), eliminating contact problems with the SIM. The antenna is integrated into the unit's housing.

5.1.5 Ultrasonic sensors

The system is equipped with 3 ultrasonic sensors that together determine the container's fill level. Using three sensors creates a "scan" of the waste, providing much higher accuracy than point measurements of systems with only one sensor.

5.1.6 Emptying sensor

The system includes an integrated emptying sensor. The sensor detects that the container is being emptied by checking whether the container is removed from the pit. At that moment, the electronics are automatically switched on, and the counter is reset to zero. This is also immediately sent to the central server.

5.1.7 Battery

(not present in the TFS sensor version)

An integrated (but replaceable) battery powers the fill level measurement system. Like the rest of the system, the battery has a very wide temperature range of –25°C to 85°C.

The battery can be easily replaced by the user. It can be fully recycled and has minimal environmental impact.

6 Data communication

6.1 Data communication

The TARDIF IRDC system is equipped with a GSM/GPRS/3G modem. Communication with the systems in the field is established as follows.

All configuration, malfunction, deposit, and whitelist data is sent to and from the containers via GPRS/3G communication. There is full two-way communication between the server and the IRDC system. The containers are uniquely identified by an IP address. After switching on, the system registers with the Radius server. It receives a unique fixed IP address from the Radius server. All other communication to and from the container then occurs via the TCP/IP protocol. The infrastructure used operates on a part of the GPRS/3G network fully separated from the public internet. Access to the containers is only possible via the data communication server, ensuring optimal security. The SIM cards are also protected against misuse by third parties because they only have access to a secure access point and cannot be used for, for example, internet surfing. The connection between the CMS software and the central server occurs via a “secure” internet connection (https).

The system checks communication between the IRDC system and the server at least twice daily.

The figure below shows the solution (when using 3G, switching occurs via the 3G centers):

Deposit data, whitelists, malfunction and status information (including battery voltage), and settings are stored on the central server and are available to the customer there. Mic-o-data ensures daily backups of this data so that it is never lost. Malfunctions, sent data, received data, emptying moments, and historical fill levels are also stored.

It is also possible to view the fill levels of the containers using an internet application.

The connection with the mentioned packages is realized via SOAP/XML message traffic over a secure connection (https or VPN).

Additionally, the Tardif IRDC systems and software fully comply with the Stosag standard.

6.2 Integration with CMS systems

Currently, integration has been realized with the following CMS systems:
Prevent (Fixion Software solutions)
CI-WEB (D&C)
Afval-Ris (GMT/Meurs)
Clear (GMT)
IDSC (OIS)
HLCBS (English HLC)

Deposit data, whitelists, malfunction and status information (including battery voltage), and settings are stored on the central server and are available to the customer there. Mic-o-data ensures daily backups of this data so that it is never lost. Malfunctions, sent data, received data, emptying moments, and historical fill levels are also stored.
It is also possible to view the fill levels of the containers using an internet application.
The connection with the mentioned packages is realized via SOAP/XML message traffic over a secure connection (https or VPN).
Besides these integrations, the STOSAG connection can also be used.

6.3 Reliability of sent data

The Tardif IRDC systems use a complete "handshake" when sending data. This means memory space is only freed for new data once the receiver confirms that the data has been correctly received and processed. This prevents data loss during communication. The IRDC systems use cyclic memory. This means there is always at least 6 months of history available in the IRDC system in the container. On the central server, data is stored in raw format and also in the database. This database is backed up daily. Data loss is thus excluded.

For completeness and accuracy of stored data, checksums and unique numbering are used to record transactions.

The memory type used in the IRDC system is non-volatile. Non-volatile memory means data remains stored even if power is lost. This non-volatile memory has a guaranteed data retention time of 10 years.

6.4 Security of sent data

The data is sent via GPRS/3G over a secure network completely separate from the public internet. Encrypted messages are sent via the TCP/IP protocol.

The Vodafone GPRS/3G network, certified by Interpay, is used.
(see appendix 2 Interpay certification). Mic-o-data is also ISO 9001 and ISO 27001 certified.

For communication with the central server, an SSL (secure) internet connection is used (the same security as internet banking). Access to the central server is granted only to certain IP addresses. After IP address approval, the correct username and password must be entered to access the server. Then a session for communication with the customer's database can be started, requiring another username and password for the correct database. Unauthorized data modification is thus excluded. The system is fully suitable for Diftar.