DE102008058660A1 - Access control system - Google Patents

Abstract

It is proposed an access control system with an indoor unit (1) in the form of a standard-fit flush-mounted device box device insert, which has an evaluation / processing and storage unit (5) via a relay (10) a door lock (43) of a Access door activates. An outdoor unit (26) in the form of a device insert (27) which can be mounted in a standard-compliant flush-mounted box has an evaluation / processing and encryption unit (38) to which a functional element (30, 32, 34, 36) is connected for the detection of authorized access is. The indoor unit (1) is connected to the outdoor unit (26) via a cable (20). The device insert (27) of the outdoor unit (26) has at least one interface (28) for electrical contacting with a corresponding interface (40) of a transponder functional element (30) or a fingerprint functional element (32) or a PIN code functional element ( 34) or a radio-functional element (36). The data signals from the different functional elements (30, 32, 34, 36) to the evaluation / processing and encryption unit (38) are each in a standardized form. The external unit (26) provided with a specific functional element (30, 32, 34, 36) is "electronically married" to the indoor unit (1) after commissioning by acting upon the evaluation / processing and storage unit (5) such that the Indoor unit (1) only ...

Description

The The invention relates to an access control system according to Preamble of claim 1.

• • Einschränkung/Verhinderung von unautorisiertem Zutritt von Personen,
• • Überwachung/Kontrolle von Personenbewegungen.

An access control system is a system that allows access to rooms or buildings without the use of a conventional key (door key, front door key). Instead, access is controlled in the form of a digital locking system using transponder (RFID) or fingerprint or PIN code or Bluetooth technology (Bluetooth is a registered trademark of Bluetooth SIG, Inc., Bellevue, Wash., USA). In the Bluetooth technology, the access z. B. granted via mobile phone. The essential tasks of the access control system are accordingly

• • restriction / prevention of unauthorized access of persons,
• • Monitoring / control of personal movements.

From the DE 20 2006 006 85 U1 For example, a device for authenticating an authorized person and for opening an electronic lock or an electronic security unit is known. A device is provided for inputting a PIN code and / or a biometric sensor for receiving a biometric feature. When entering a correct PIN code and / or a correct biometric information of an authorized access, a control signal is generated. A generated authorization signal is wirelessly transmitted to the lock.

From the DE 103 41 370 A1 For example, an identification system is known for securely identifying and enabling / preventing a logical and / or physical access to a destination device. The system has a portable, programmable identification medium with biometric sensor, input element, output element, processor, memory, transmitting and receiving electronics and a programmable, with the target device in operative connection remote station with reading and evaluation electronics, actuator and memory.

From the DE 101 60 813 A1 is a home communication system with at least one door station and at least one home station known, all stations are connected to each other via a bus connection and at least partially modular - consisting of main module and function module. The main module is made in the manner of an electrical installation device of a conventional building installation system from a socket-like insertable into a standard electrical installation box insert, the respective functional module electrically and / or mechanically connectable to the main module is (pluggable). Each main module receives a specific, electrical and / or mechanical device function by the connection with a specific functional module or a particular further main module and / or separate switching / adjusting.

Of the Invention is the object of a subsequent in a cost-saving way changeable access control system to specify the type mentioned.

These The object is achieved in conjunction with the features of the preamble according to the invention solved specified in the characterizing part of claim 1 features.

The particular advantages of the invention are that for different access technologies (transponder / fingerprint / PIN code / radio) and thus different functional elements always one and the same Device insert for a commercial, Standard-compliant flush-mounted device box is used. All Access technologies are based on the same standardized data signals, so that the communication with both the evaluation / processing and encryption unit of the outdoor unit in Form of a device use as well as with the evaluation / processing and Storage unit of the indoor unit without any customization at each the various functional elements is ensured. That's the way it is even longer time after installation of the access control system in simple way possible, the functional element of the Disassemble the outdoor unit and another, if necessary technically improved or upgraded functional element or by a functional element of another type (other type).

advantageous Further developments of the invention are in the subclaims characterized.

The Invention will be described below with reference to the drawing Embodiments explained. Show it:

1 a schematic diagram of the proposed access control system,

2 a side view of an outdoor unit,

3 Building components of an outdoor unit in different embodiments,

4 - 7 different embodiments of an outdoor unit.

• • eine Inneneinheit (z. B. Wohnungsstation) 1, welche in wesentlichen Teilen in Form eines in eine handelsübliche UP-(Unterputz)Gerätedose nach DIN 40073 (aus Kunststoff, Durchmesser 60 mm, Tiefe 40 mm) installierbaren Geräteeinsatzes (mittels Spreizklemmen) ausgebildet ist und
• • eine Außeneinheit (z. B. Türstation) 26, welche ebenfalls in wesentlichen Teilen in Form eines in eine handelsübliche UP-(Unterputz)Gerätedose nach DIN 40073 (aus Kunststoff, Durchmesser 60 mm, Tiefe 40 mm) installierbaren Geräteeinsatzes (mittels Spreizklemmen) ausgebildet ist.

In 1 is a basic picture of the proposal NEN access control system. The two main modules of the access control system are

• • one indoor unit (eg home station) 1 , which in essential parts in the form of a commercial UP (flush mounted) device box after DIN 40073 (made of plastic, diameter 60 mm, depth 40 mm) installable device insert (by means of Spreizklemmen) is formed and
• • one outdoor unit (eg door station) 26 , which also in essential parts in the form of a commercial UP (flush mounted) device box after DIN 40073 (made of plastic, diameter 60 mm, depth 40 mm) installable device insert (by Spreizklemmen) is formed.

These two main assemblies indoor unit 1 and outdoor unit 26 are over a cable 20 connected to each other, which on the one hand to a cable connection 17 the indoor unit 1 and on the other hand to a cable connection 39 the outdoor unit 26 is to be connected. Usually the cable breaks through 20 at least one between indoor unit 1 and outdoor unit 26 arranged wall 42 ,

For the energy supply of the access control system is a power supply unit (power supply) 16 in the indoor unit 1 intended. This power supply unit 16 is on the input side to a mains connection 15 connected, which is connected to L-conductor and N-conductor of a 230 V AC mains. On the output side, there is the power supply unit 16 a DC voltage of z. B. 12 V or 24 V and not only feeds all components of the indoor unit to be supplied with energy 1 , in particular also an evaluation / processing and storage unit 5 but over the cable 20 also all building components of the outdoor unit to be supplied with energy 26 ,

The power supply unit 16 Among other things, it is also used to supply a potential-related switching relay 10 , on whose terminals an electromagnetically opening door lock 43 an access door of the access control system is connected.

The indoor unit 1 has the above-mentioned evaluation / processing and storage unit as a central "intelligent" building block 5 on. On the output side controls the evaluation / processing and storage unit 5 Among other things the potential-related switching relay 10 at. It is at least one more, from the evaluation / processing and storage unit 5 controlled, potential-free switching relay 11 available to over this an alarm system 41 to enable / disable.

The outdoor unit 26 has as central "intelligent" building block an evaluation / processing and encryption unit 38 on, being over the cable 20 The tensignale between the evaluation / processing and storage unit 5 the indoor unit 1 and the evaluation / processing and encryption unit 38 the outdoor unit 26 be replaced.

• • mittels eines Transponder-Funktionselements 30 als einfaches, schnelles und wartungsfreundliches, berührungsloses System oder
• • mittels eines Fingerprint-Funktionselements 32 als biometrisches System oder
• • mittels eines PIN-Code-Funktionselements 34 oder
• • mittels eines Funk-Funktionselements 36

verifiziert, wobei mindestens eines dieser Funktionselemente 30 oder 32 oder 34 oder 36 hierzu an die Auswerte-/Verarbeitungs- und Verschlüsselungseinheit 38 angeschlossen ist. Die Auswerte-/Verarbeitungs- und Verschlüsselungseinheit 38 inklusive des Kabelanschlusses 39 ist in Form eines in eine handelsübliche UP-Gerätedose nach DIN 49073 (aus Kunststoff, Durchmesser 60 mm, Tiefe 40 mm) montierbaren Geräteeinsatzes 27 ausgebildet, welcher eine Schnittstelle 28 zur elektrischen Kontaktierung mit einem Funktionselement 30 oder 32 oder 34 oder 36 aufweist. Jedes Funktionselement 30 oder 32 oder 34 oder 36 besitzt eine zur Schnittstelle korrespondierende Schnittstelle 40, so dass eine Komplettierung der Außeneinheit 26 mit einem gewünschten Funktionselement in einfacher Weise durch Steckkontakte erfolgen kann. Des Weiteren besitzen der Geräteeinsatz 27 einerseits und die Funktionselemente 30 oder 32 oder 34 andererseits zueinander korrespondierende mechanische Befestigungskomponenten, insbesondere Rastelemente.The access control is either

• • by means of a transponder functional element 30 as a simple, fast and easy to maintain, non-contact system or
• • by means of a fingerprint function element 32 as a biometric system or
• • by means of a PIN code function element 34 or
• • by means of a wireless functional element 36

Verified, wherein at least one of these functional elements 30 or 32 or 34 or 36 for this purpose to the evaluation / processing and encryption unit 38 connected. The evaluation / processing and encryption unit 38 including the cable connection 39 is in the form of a commercially available flush-mounted device box DIN 49073 (plastic, diameter 60 mm, depth 40 mm) mountable device insert 27 formed, which an interface 28 for electrical contacting with a functional element 30 or 32 or 34 or 36 having. Each functional element 30 or 32 or 34 or 36 has an interface corresponding to the interface 40 , making a completion of the outdoor unit 26 can be done with a desired functional element in a simple manner by plug contacts. Furthermore, the device use 27 on the one hand and the functional elements 30 or 32 or 34 on the other hand corresponding mechanical fastening components, in particular locking elements.

The evaluation / processing and encryption unit 38 Detects and filters together with the at least one plugged function element 30 . 32 . 34 . 36 the access authorization information of the person who wants to receive access and sends a corresponding data signal or authorization signal encrypted to the evaluation / processing and storage unit 5 the indoor unit 1 in which the access authorization information of all authorized persons, in short just authorized persons are stored. Accordingly, a check of the access authorization by comparison of the stored information with the current of the outdoor unit 26 obtained information (encrypted data signal) take place.

When using a transponder function element 30 Preferably, the passive transponder technology is used, in which the energy required exclusively from the radiated using an antenna field in the outdoor unit 26 is located while the required for personal identification mobile transponder, which is preferably designed in the form of a transponder card, even ownergielos works. When approaching a mobile transponder or a transponder card is the access authorization information from the transponder function element 30 with the evaluation / processing and encryption unit 38 checked, ie the data containing the transponder or the transponder card are read, decoded and encrypted as a data signal (authorization signal) via the cable 20 to the indoor unit 1 forwarded.

When using a fingerprint function element 32 be using one in the outdoor unit 26 Finger scanner (reader) biometric fingerprint data (digital fingerprint) using the evaluation / processing and encryption unit 38 detected and as an encrypted data signal (authorization signal) via the cable 20 to the indoor unit 1 forwarded.

When using a PIN code function element 34 must have a given digit sequence in one in the outdoor unit 26 typed input keyboard typed. The using the evaluation / processing and encryption unit 38 The acquired digit sequence is used as access authorization information in the form of an encrypted data signal (authorization signal) via the cable 20 to the indoor unit 1 forwarded.

When using a radio function element 36 can z. B. Bluetooth-enabled devices, in particular also mobile phones as keys, comparable to a front door key, are used. The license-free and admission-free ISM band (Industrial, Scientific and Medical Band) between 2.402 GHz and 2.480 GHz is used. Each Bluetooth-enabled device identifies itself via a unique and distinctive 48-bit serial number. Authentication is performed using one in the outdoor unit 26 radio receiver including antenna as well as the evaluation / processing and encryption unit 38 , The received data is used as access authorization information in the form of an encrypted data signal (authorization signal) over the cable 20 to the indoor unit 1 forwarded.

In this case, the data signals of the functional elements 30 . 32 . 34 . 36 to the evaluation / processing and encryption unit 38 and the encrypted data signals of the outdoor unit 26 to the indoor unit 1 standardized, so basically one and the same indoor unit 1 without any adjustment / modification with each of the different functional elements 30 or 32 or 34 or 36 can work together. In this way, different customer requirements and applications can be verified without any additional effort. In addition, the replacement of a functional element of one particular type (eg PIN code functional element) with another functional element of a different type (eg transponder functional element) is also possible at a later time.

To increase the security against tampering does not activate the outdoor unit 26 but only the indoor unit 1 via evaluation / processing and storage unit 5 the door lock 43 via relay contact of the integrated switching relay 10 , The prerequisite for this is that the storage of access authorization information and the evaluation based on the encrypted data signal (authorization signal) exclusively in the indoor unit 1 takes place.

To unauthorized access by manipulation, z. B. Exchange of outdoor unit 26 or the functional element 30 / 32 / 34 / 36 to prevent the outdoor unit 26 during commissioning of the access control system with the indoor unit 1 automatically digitally uniquely "electronically married", ie after this during commissioning made electronic locking takes the indoor unit 1 only data signals (commands) from this outdoor unit 26 in receipt. In the event of a power failure, the unique "electronic marriage" and all other relevant data, in particular the stored access authorization information, remain in the evaluation / processing and storage unit 5 the indoor unit 1 permanently saved.

Before a functional element is exchanged, one is first to the evaluation / processing and storage unit 5 connected reset button 19 to press. If the functional element 30 or 32 or 34 or 36 the outdoor unit 26 is removed, without that before the evaluation / processing and storage unit 5 directly acting reset button 19 is pressed for a predetermined period of time (the user expediently receives an acoustic and / or optical signal as "feedback"), so charged to the evaluation / processing and storage unit 5 the spurious outlet of the indoor unit 1 ie the alarm system 41 is due to the controlled potential-free switching relay 11 triggered.

• • entweder die verschlüsselten Datensignale (Zutrittsberechtigungssignale) von beiden Funktionselementen im Sinne einer logischen UND-Verknüpfung
• • oder lediglich eines der beiden möglichen verschlüsselten Datensignale (Zutrittsberechtigungssignale) im Sinne einer logischen ODER-Verknüpfung.

Of course, this is also a combination of two or more of the above-described functional elements 30 . 32 . 34 . 36 different types, eg. B. a combination transponder + fingerprint in the outdoor unit 26 possible. When combining two functional elements, the indoor unit 1

• Either the encrypted data signals (access authorization signals) of both functional elements in the sense of a logical AND operation
• • or only one of the two possible encrypted data signals (access authorization signals) in the sense of a logical OR operation.

By means of an evaluation / processing and storage unit 5 acting DIP switch 12 there is a corresponding setting of the desired logical operations of the two in the outdoor unit 26 installed functional elements in the sense of an AND operation or an OR operation.

In principle, two different variants are possible when combining the two functional elements transponder + fingerprint. In the first variant, the fingerprint information is stored on the transponder card itself. If the transponder card is held in front of the functional element, then next to the access authorization information of the transponder to the indoor unit 1 also the fingerprint information to the fingerprint function element 32 Posted. The fingerprint functional element 32 then expects a finger with the same information. The fingerprint information (fingerprint data) are stored in this first variant exclusively on the transponder card.

In the second variant, no fingerprint information is stored on the transponder card. Both functional elements work independently. In the evaluation / processing and storage unit 5 the indoor unit 1 the fingerprint information and transponder authorizations of all authorized persons are stored. The evaluation / processing and storage unit 5 Accordingly, evaluates both signals individually.

1 shows more details of the indoor unit 1 , so z. B. one with the evaluation / processing and storage unit 5 connected bus connection 9 which makes the access control system network-compatible and optionally via a converter 48 an external bus 44 can be connected. In this way a connection to KNX (standard for home and building system technology of the Konnex Association) and TCP / IP (Transport Control Protocol / Internet Protocol) is made possible. For example, an interface to a central display and control panel (touchscreen, "Comfortpanel") can be made possible, via which changes can be entered during operation (name assignments, deleting, changing, reading out user profiles, reading out event logs and determination of individual time periods and time zones).

Of course, the above-mentioned operation / programming / configuration can also be done in other ways, for example by means of PDA (Personal Digital Assistant) via an infrared interface of the outdoor unit 26 or via a connected bus 44 ,

In 2 is a side view of an outdoor unit 26 (when mounted) shown. It is the device insert 27 including cable connection 39 with cable 20 , on this equipment use 27 plugged functional element 30 or 32 or 34 or 36 and a cover frame 29 to recognize.

• • ein Transponder-Funktionselement 30 mit integrierter Antenne 31 und Schnittstelle 40,
• • ein Fingerprint-Funktionselement 32 mit Finger-Scanner 33 und Schnittstelle 40,
• • ein PIN-Code-Funktionselement 34 mit Eingabetastatur 35 und Schnittstelle 40,
• • ein Funk-Funktionselement 36 mit integrierter Antenne 37 und Schnittstelle 40

zu erkennen.In 3 are building components of an outdoor unit 26 in different embodiments (disassembled state) each shown in side views. It is the device insert 27 including cable connection 39 and interface 28 for contacting with any functional element 30 / 32 / 34 / 36 , a cover frame 29 such as

• • a transponder function element 30 with integrated antenna 31 and interface 40 .
• • a fingerprint function element 32 with finger scanner 33 and interface 40 .
• • a PIN code function element 34 with input keyboard 35 and interface 40 .
• • a radio function element 36 with integrated antenna 37 and interface 40

to recognize.

In the 4 - 7 are front views of different embodiments of an outdoor unit 26 shown. In 4 is an outdoor unit 26 with transponder functional element 30 including (in the central disc) integrated antenna 31 and with cover frame 29 shown. In 5 is an outdoor unit 26 with fingerprint function element 32 including (in the central disk installed) finger scanner 33 and with cover frame 29 shown.

In 6 is an outdoor unit 26 with PIN code function element (installed in the central pane) 34 shown, with an input keyboard 35 for typing in a given number of digits. A cover frame 29 encloses the PIN code function element 34 ,

In 7 is an outdoor unit 26 with radio function element 36 including (in the central disc) integrated antenna 37 and with cover frame 29 shown. When using a radio function element 36 it is desirable for energy saving, the outdoor unit 26 with an activation input in the form of an activation button, which has the advantage that not continuous search for any authorized wireless devices. Only after pressing this activation button does the outdoor unit activate the radio receiver including the antenna during a predefined period of time in order to obtain the access authorization information. This serves the energy efficiency of the access control system. Of course, the system also works optionally without an activation button.

All controls also have z. B. two LEDs 24 for visualization and additionally / alternatively an electric buzzer 25 for an acoustic feedback. A green LED lights up when the access door is opened. A red LED 24 lights up to indicate a locked access. Are z. B. a transponder functional element 30 or a fingerprint function element 32 or a PIN code function element 34 or a radio function element 36 used, the user is expedient in the same way by means of optical feedback in the form of LEDs 24 and / or acoustic feedback in the form of a buzzer 25 informed whether the access control, ie the verification of the encrypted data signals, has led to a positive / negative result.

From the 4 - 7 is the modular design of the outdoor unit 26 to recognize, ie separate equipment use, different, separate functional elements, separate cover frame. In this way, the desired design using one and the same device insert can be advantageously selected from different flush-mounted switch programs. As already mentioned above, the functional elements are mutually exchangeable, ie a transponder-functional element is not only electronic, but also mechanically and with respect to its dimensions designed such that it can be easily z. B. can be replaced by a fingerprint function element or by a PIN code function element.

In a similar way is the indoor unit 1 modular design, ie separate equipment use, separate cover frame to select using the same equipment use the desired design from different installation equipment programs.

1

indoor unit (Home station) of the access control system in the form of a device insert

2

3

4

5

Evaluation / processing and storage unit

6

7

8th

9

Bus connection

10

potential lossy switching Relays

11

potential free switching Relays

12

Dip switch

13

14

15

mains connection (L-conductor, N-conductor)

16

Power supply unit

17

cable

18

19

Reset button

20

electric wire to the outdoor unit

21

22

23

24

LEDs (green: entrance allowed, red: entrance closed)

25

buzzer

26

outdoor unit (Door station) in the form of a device insert

27

Service outlet

28

interface

29

Cover

30

Transponder functional element

31

antenna

32

Fingerprint functional element

33

Finger Scanner

34

PIN code function element

35

input keyboard

36

Information function element (Mobile phone)

37

antenna the radio receiver

38

Evaluation / processing and encryption unit

39

cable

40

interface

41

alarm system

42

wall

43

Locks an access door

44

bus

45

46

47

48

converter

QUOTES INCLUDE IN THE DESCRIPTION

This list The documents listed by the applicant have been automated generated and is solely for better information recorded by the reader. The list is not part of the German Patent or utility model application. The DPMA takes over no liability for any errors or omissions.

Cited patent literature

• - DE 20200600685 U1 [0003]
• - DE 10341370 A1 [0004]
• - DE 10160813 A1 [0005]

Cited non-patent literature

• - DIN 40073 [0015]
• - DIN 40073 [0015]
• - DIN 49073 [0021]

Claims (12)

Access control system a) with an indoor unit ( 1 ) in the form of a device insert which can be mounted in a standard-compliant flush-mounted device box and which has an evaluation / processing and storage unit ( 5 ), which via a relay ( 10 ) a door lock ( 43 ) an access door, b) with an outdoor unit ( 26 ) in the form of a device insert which can be mounted in a standard-compliant flush-mounted box ( 27 ), which has an evaluation / processing and encryption unit ( 38 ) to which a functional element ( 30 . 32 . 34 . 36 ) is connected for the detection of persons entitled to access, c) the indoor unit ( 1 ) via a cable ( 20 ) with the outdoor unit ( 26 ), characterized in that d) that the device insert ( 27 ) of the outdoor unit ( 26 ) at least one interface ( 28 ) for electrical contacting with a corresponding interface ( 40 ) of a transponder functional element ( 30 ) or a fingerprint function element ( 32 ) or a PIN code function element ( 34 ) or a radio function element ( 36 ), e) that the device insert ( 27 ) on the one hand and the functional elements ( 30 . 32 . 34 . 36 on the other hand have mutually corresponding fastening components, f) that the data signals from the different functional elements ( 30 . 32 . 34 . 36 ) to the evaluation / processing and encryption unit ( 38 ) are each in a standardized form, g) that with a certain functional element ( 30 . 32 . 34 . 36 ) provided outdoor unit ( 26 ) with the indoor unit ( 1 ) after commissioning by loading the evaluation / processing and storage unit ( 5 ) is so "electronically married" that the indoor unit ( 1 ) only data signals from this outdoor unit ( 26 ) receives. Access control system according to claim 1, characterized by a device on the ( 27 ) plugged transponder functional element ( 30 ) with an integrated antenna fed by a read / write unit ( 31 ). Access control system according to claim 1, characterized by a device on the ( 27 ) plugged fingerprint function element ( 32 ) with integrated finger scanner ( 33 ). Access control system according to claim 1, characterized by a device on the ( 27 ) plugged PIN code function element ( 34 ) with integrated keypad ( 35 ). Access control system according to claim 1, characterized by a device on the ( 27 ) plugged wireless functional element ( 36 ) with an integrated antenna ( 37 ). Access control system according to one of the preceding claims, characterized by a prior exchange of a functional element ( 30 . 32 . 34 . 36 ) to the evaluation / processing and storage unit ( 5 ) connected reset button ( 19 ). Access control system according to one of the preceding claims, characterized by an evaluation / processing and storage unit ( 5 ) DIP switch ( 12 ) for setting a desired logical AND or ORing of the data signals at two in the outdoor unit ( 26 ) installed functional elements ( 30 . 32 . 34 . 36 ). Access control system according to one of the preceding claims, characterized in that the indoor unit ( 1 ) a power supply unit ( 16 ), which on the input side to a network connection ( 15 ) and outputs an output side reduced voltage, wherein the power supply unit ( 16 ) all building components of the indoor unit to be supplied with energy ( 1 ) and the outdoor unit ( 26 ) provided. Access control system according to claim 8, characterized in that the indoor unit ( 1 ) a potential-reliant relay ( 10 ) for controlling the door lock ( 43 ) of the access door, which when actuated by the evaluation / processing and storage unit ( 5 ) the output side, reduced voltage of the power supply unit ( 16 ) to the door lock ( 43 ) switches through. Access control system according to one of the preceding claims, characterized in that the indoor unit ( 1 ) at least one potential-free, by the evaluation / processing and storage unit ( 5 ) controllable switching relay ( 11 ), to which preferably an alarm system ( 41 ) is connectable. Access control system according to one of the preceding claims, characterized in that a bus connection ( 9 ) is provided to which via a converter ( 48 ) an external bus ( 44 ) is connectable. Access control system according to one of the preceding claims, characterized in that the outdoor unit ( 26 ) to the evaluation / processing and encryption unit ( 38 ) associated funds ( 24 . 25 ) for optical and / or acoustic feedback on whether the access control has led to a positive / negative result.