DE102019114850A1 - Wall-mountable authentication device - Google Patents

Abstract

The invention relates to a wall-mountable authentication device for authenticating a user of a building locking system, which comprises a control unit and an image capture device, a sound recording / output device, a device for wireless transmission / reception of data, a touch-sensitive screen and an interface module for connecting the authentication device at least one door actuator. The invention also relates to a method for authenticating a user of a building locking system.

Description

The invention relates to a wall-mountable authentication device for authenticating a user of a building locking system and a method for authenticating a user of a building locking system.

Wall-mountable door communication systems are known in principle, in particular those that enable voice communication between a user of the door communication system in the exterior of a building and a resident in the interior of the building and include a camera that allows the resident to identify the user based on a transmitted image. If the resident is absent, he has no way of tracking or influencing activities in the door area with such a device. Authorized persons usually open doors from outside using a key, a chip card or a PIN code. In these cases, the door can also be opened by a person who is not authorized to access the door if they have gained access to a key, chip card or PIN code.

Proceeding from this, the present invention is based on the object of providing an authentication device and an authentication method which offers increased security against unauthorized access to a building and is also characterized by increased ease of use.

The object is achieved by a wall-mountable authentication device with the features of claim 1 and a method for authenticating a user of a building locking system with the features of claim 9.

According to the invention, a wall-mountable authentication device for authenticating a user of a building locking system comprises a control unit, an image acquisition device connected to the control unit, a sound recording / output device connected to the control unit, a device connected to the control unit for wireless transmission / reception of data, and one to the control unit connected touch-sensitive screen and an interface module connected to the control unit for connecting the authentication device to at least one door actuator.

In a method according to the invention for authenticating a user of a building locking system by means of an authentication device of the above type connected to a door actuator, a first security feature of the user is recorded in a first authentication step and the recorded security feature is compared with at least one first predetermined security feature and, if the recorded first security feature corresponds to the first specified security feature, a second security feature of the user is recorded in a second authentication step and the recorded second security feature is compared with at least one second specified security feature and, if the detected second security feature matches the second specified security feature, the control unit unlocks and / or a door assigned to the door actuator is initiated.

With the help of the authentication device and authentication method according to the invention, increased security when authenticating a user and, accordingly, increased security against unauthorized access to a building are achieved, namely in that at least two security features of the user can or must be positively verified before unlocking and / or a door is opened. In general, the first recorded security feature is different from the second recorded security feature in order to provide increased security in the authentication process. As a result of a successful authentication, the door can be unlocked and / or opened without manual intervention by the user, which leads to increased ease of use for the user.

The authentication device according to the invention can be wall-mounted, that is, it is provided to be attached to a wall, in particular to a building wall and preferably next to a door. The authentication device can also be attached to an entrance gate to a site. In both cases, the site and / or building can be used privately as well as for business purposes. The authentication device can be used for user authentication in one-party or multi-party buildings. Correspondingly, the authentication device can control several door actuators, which can optionally be assigned to different doors. Different users with possibly different authorizations can be registered on the authentication device for different door actuators to be controlled.

As a result of an authentication process, actions are carried out by the authentication device that depend on the authorizations and configurations that are stored for the respective authenticated user. This can be, for example, unlocking a door lock and, if necessary, opening the door automatically associated door for an authorized user or a display of a bell button for a non-authorized user.

In this context, users are all persons who interact with the authentication device. These can include residents of a private household, staff in private households, employees of a company, known visitors with or without access authorization and unknown visitors who usually do not have access authorization, e.g. Postmen or parcel deliverers as well as service providers and craftsmen. The users can also be divided into different categories: A master user can be authorized to make configurations on the authentication device, while a standard user, for example, only has access authorization or can only access a limited range of functions of the authentication device that can be configured by the master user. An unknown user can, for example, only be authorized to operate a signal unit, leave a message and, depending on the configuration, switch on lighting, start certain networked devices such as watering the garden, or enter a security code. A master user can also create user groups for which specific functional scopes and processes can be configured, for example user groups such as “children of a resident” or “employees 1st floor”. In the following, all persons who are expected and regularly stay in a building, site or household that are secured with a building locking system according to the invention are referred to as residents. This can accordingly include employees of a company in premises secured according to the invention, as well as residents of a private household.

The control of the authentication process and the functions of the authentication device, including the processing of incoming signals and commands, as well as the generation of appropriate actions, is carried out by the control unit, which is connected to the components of the authentication device. These components include an image capture device, a sound recording / output device which comprises at least one microphone and at least one loudspeaker, a device for wireless transmission / reception of data, also referred to below as a transmitting / receiving device, a touch-sensitive screen which is used to output information and messages and configured for inputting commands and for interaction with the authentication device, as well as an interface module for connecting the authentication device to a door actuator. The interface module is designed in such a way that the connection to the door actuator can be established by radio, in particular, for example, by means of sub-1 GHz frequencies, or also by cable.

The sound recording / output device is intended to enable door communication between a user of the authentication device and a resident of the building, to provide sound recording and playback for voice and video messages or calls, and to enable biometric voice recognition. In addition, the microphone can be configured to pick up conspicuous noises in the door area and to generate appropriate warnings for the occupant of the building by means of noise detection by the control unit of the authentication device.

In this context, door actuators are understood to mean both door locks and door drives for automatically opening or closing a door. In particular, a door actuator can be formed by a device integrated in a door lock, such as a motor lock, an electronic door cylinder, a motorized door lock drive or an electric door buzzer, an electromagnetic door lock or an electric door opening device. Furthermore, the door actuator can comprise a device for automatically locking and unlocking the door as well as a device for automatically opening and closing the door, so that as a result of a successful authentication process an automatic, i. no manual intervention, and thus particularly convenient unlocking and opening or closing and locking of the door can take place.

The authentication method according to the invention is based on the detection of security features of a user of the authentication device. Suitable security features include personal features, which can in particular be biometric features, as well as electronic security keys and / or security codes. In this context, the term biometric feature includes, inter alia, fingerprints, hand geometry and palm vein patterns, iris or retinal characteristics, characteristic eye movements, characteristic features of the voice, and two- and / or three-dimensional face geometry. Electronic security keys in this context include QR codes, Bluetooth keys, WLAN keys, and NFC or RFID tags, while PIN codes or passwords and phrases are conceivable as security codes. Biometric features, in particular palm vein patterns or characteristic eye movements, generally have smart cards compared to conventional keys or PIN codes offer significantly increased security against forgery and misuse.

According to the invention, a particularly high level of security is achieved in that different security features of the user are queried in two authentication steps. The security feature queried in the first authentication step is compared with predefined, stored security features of the known users. If there is a match between the detected and a first predetermined security feature, the query of a second security feature of the user is triggered, which is different from the first security feature. Unlocking and / or opening of the door is only initiated if the second security feature also matches a second predetermined security feature. Such double authentication significantly reduces the risk of unauthorized opening of the door.

It goes without saying that additional authentication steps can be included in the authentication process in order to increase security even further.

Advantageous embodiments of the invention can be found in the subclaims, the description and the drawing.

According to one embodiment, the authentication device has a sensor system connected to the control unit for detecting the approach of a person to the authentication device. An increase in the service life and a reduction in the energy consumption of the authentication device can be achieved in that the authentication device is only activated when an approaching person is detected within a detection distance d _rec from the authentication device. The sensor system for detecting the approach of a person can include, for example, a pyroelectric (PIR) sensor, an ultrasonic sensor or a camera as a proximity sensor.

The authentication device preferably has a database in which the specified security features of the registered users are stored, in particular biometric features, electronic security keys and / or security codes.

According to a further embodiment of the authentication device, the interface module is designed to connect the control unit to a local network, an external server, a doorbell, a sensor system for detecting an open state of a door assigned to the door actuator, a smart home system and / or an alarm system. The connection can be wired, for example via Ethernet, or wirelessly, for example by means of WLAN and / or by means of radio, in particular by means of sub-1 GHz frequencies. In this context, the external server can be formed by one or more central computer units or, alternatively, by a cloud. Such a cloud can be a cloud provided by the manufacturer of the authentication device, which guarantees the use and configuration of the full functionality of the authentication device, or a cloud provided by a third party provider. Furthermore, the external server can comprise a database in which predetermined security features are stored. In addition, the external server can provide an Internet connection for the authentication device in order to enable an exchange of messages and information between the authentication device and mobile terminals, mobile applications or databases as well as the downloading of information from the Internet. For example, the authentication device can also be connected to an in-house system such as an alarm, surveillance or security system, a smart home system and / or an ABUS security platform via the interface module.

The sensor system for detecting an open state of a door assigned to the door actuator advantageously detects both whether and when the door is opened or closed and whether the door lock is in a locked or unlocked state.

The image acquisition device of the authentication device preferably comprises at least one camera for two-dimensional image acquisition, for example an RGB camera. The image acquisition device of the authentication device particularly preferably comprises a camera for three-dimensional image acquisition, for example a 3D TOF camera for image acquisition by means of the transit time method. A 3D TOF camera provides increased security against unauthorized access through the possibility of three-dimensional face recognition and a vein scan in the authentication process and offers an expansion of the functionality of the authentication device through the possibility of capturing gestures. In contrast to recordings with a 2D RGB camera, three-dimensional image capture using the transit time method is insensitive to unfavorable lighting conditions. As an alternative or in addition, the image acquisition device can have an infrared camera in order, for example, to enable people to be recognized, gaze acquisition, or pupil movement to be tracked by means of this camera or an aforementioned camera.

According to a further embodiment, the device for wireless transmission / reception of data has a Bluetooth module, an RFID module, an NFC module and / or a WLAN module, which can be installed individually or in any combination in the authentication device, can serve to query corresponding security features and / or can provide communication between the authentication device and an external server.

Another object of the invention is a building locking system with an authentication device of the type described above and a door actuator connected to the authentication device, the connection being wireless, for example by radio, or also wired.

The building locking system preferably has an external server which is connected to the authentication device. As already mentioned, the external server can also be a cloud.

The method for authenticating a user of a building locking system by means of an authentication device connected to a door actuator is advantageously designed such that the first and / or second detected security feature is a biometric feature. The increased security against forgery of biometric features, in particular of vein scans, for example, contributes to increased security of the authentication process. In a first authentication step, for example, a biometric feature can be recorded and, if this recorded biometric feature matches a specified security feature, the automated query of a further personal security feature can be triggered in a second authentication step, for example the exchange of a digital key with a mobile device of the user via Bluetooth or WLAN, the acquisition of a further biometric feature or another security feature.

According to one embodiment, it is provided that the control unit causes the door assigned to the door actuator to be locked if the authentication device has detected an opening of the door within a predetermined period of time before the first authentication step and the security feature detected in the first authentication step already matches a correspondingly specified security feature. This serves to increase the ease of use, since in this way a reliable locking of the door can be ensured without manual intervention after leaving the building. The authentication by a single security feature is sufficient when locking, since there are usually lower security requirements. The predetermined period of time before the first authentication step, in which opening of the door is detected, can be configured by a master user or preset by the manufacturer, for example in such a way that the door can only be locked within 2 minutes, preferably 1 minute, with positive authentication of a user. after opening the door.

The authentication method is advantageously designed in such a way that, if a security feature detected in one of the authentication steps does not match a correspondingly specified security feature, at least one input field for user input is displayed on the touch-sensitive screen, which enables the user to generate a ringing signal, a To leave a video, voice or text message for another user of the authentication device on the authentication device, to make a video or voice call via the authentication device to a mobile device of another user of the authentication device, to send a text message to a mobile device of another user via the authentication device of the authentication device, to retrieve a video, voice or text message that another user has stored on the authentication device and by entering a security c odes to unlock and / or open the door assigned to the door actuator. In the event of an unsuccessful authentication, information can also be provided on the touch-sensitive screen for the user about whether there is a malfunction in the authentication process and what type of malfunction is. For example, it can be pointed out that there is no data connection, or, in the event of a failed biometric authentication, a request and / or instructions can be displayed for the user to position himself correctly in the detection area of the authentication device. A bell signal generated by the user on the authentication device can be reproduced, for example, on a signal unit inside the building or on a mobile terminal of the occupant of the building. To increase security and ease of use, a resident can also be informed about activities on the authentication device during his absence or can communicate with the user via his mobile device and the authentication device. Video, voice and text messages left on the authentication device for other users can, for example, be directed to a resident of the building or a child of the resident, as can the video and voice calls and text messages transmitted to mobile terminals. Messages that a user leaves on the authentication device for retrieval by another user can in particular be stored by a resident and contain, for example, information about when the resident can be reached again or who should be contacted as a replacement.

Particularly advantageously, a visitor can trigger a bell signal on the authentication device which, in the absence of the resident of the building, is forwarded to the resident to his mobile terminal. The resident then has the option of accepting the bell signal in the form of a video or voice call and communicating with the visitor via the authentication device. Using his mobile device, the resident could then open the door for the visitor even during his absence or provide the visitor with a security code to open the door once.

The image acquisition device can be designed to take a photo including a time stamp of unregistered and / or unauthorized users who are detected on the authentication device so that a resident of the building can be informed about visits. If necessary, a corresponding input field can be displayed which enables the user of the authentication device to consent to the photo taking or to trigger it in a targeted manner via user input.

The input fields displayed can also offer a fallback option for a user with access authorization to open the door if, as an exception, the regular authentication steps cannot be successfully completed. This can happen, for example, if an electronic security key is requested by the authentication device in a step of the authentication process, but the battery of the correspondingly required mobile device of the user is empty. In this case, an authorized user can enter a security code, for example a PIN code or a password, via the touch-sensitive screen in order to still be able to open the door. In order to prevent a user from being able to use fingerprints that were left on the touch-sensitive screen during previous use of the authentication device to deduce which digits, letters and / or symbols a valid security code contains, a corresponding keypad for entering the code can be used on the touch-sensitive screen Screen so that the buttons are displayed in a random order each time they are called.

The authentication device preferably goes into a sleep mode after use. It only changes to an active mode and starts the first authentication step when the approach of a user to the authentication device is detected. The touch-sensitive screen can be deactivated in idle mode and only activated when a user is detected. It is conceivable that the screen is switched on at a distance from the user that is less than 10 meters and preferably less than 5 meters. This extends the life of the screen and reduces the power consumption of the authentication device.

If the approach of a user to the authentication device is detected by a suitable sensor system, different visualizations can be displayed to the user on the touch-sensitive screen depending on the distance between the user and the authentication device. For example, a configurable welcome screen can be displayed at a distance of more than one meter, which can contain information such as address data or resident data, warning notices, for example on video surveillance of the door area, bell areas for at least one party in the building and other information. If the distance between the user and the authentication device is reduced, for example less than 1 meter, the authentication method can be started with the detection of a security feature.

According to a preferred embodiment, if all of the security features recorded in the authentication process match the corresponding predetermined security features, further configurable functions, in particular smart home devices and security systems, can be activated or deactivated and / or information about their status as well as recorded events and warnings on the touch-sensitive device Screen are displayed and / or information about activities on the authentication device and associated devices or sensors are displayed on the touch-sensitive screen.

This can include that individual smart home devices, for example lighting, music systems, air conditioning devices, etc. can be controlled by the authentication device. Accordingly, these devices can be switched off, for example, when the authentication device detects that all residents have left the building or, conversely, are activated when a resident enters the building. Likewise, security systems, for example an alarm system, can be controlled by the authentication device, for example activated when the authentication device detects that all residents have left the building, and vice versa, deactivated when a resident enters the building. Other devices within the house, building or site can be controlled by the authentication device, for example a garage door, an entrance gate, a garden irrigation system and other devices that are networked as part of a smart home.

In addition, a master user of the authentication device can configure scenarios that include several functions of networked devices at the same time. These scenarios can be activated or deactivated by the authentication device, depending on which user is authenticated on the authentication device. For example, a 'house is empty' scenario can be started when the authentication device has detected that all residents have left the building, which can include activating an alarm system, switching off all lighting in the building and turning down the heating.

Furthermore, when a child is authenticated on the authentication device, a 'child comes home' scenario can cause the parents to receive notification of the child's return on a mobile device and / or a message from the parents to be played for the child on the touch-sensitive screen of the authentication device and / or the lighting in the house is switched on.

Different options can also be provided on the authentication device for people with different authorizations. For example, if a specific registered neighbor is authenticated on the authentication device, an input field can be displayed on the touch-sensitive screen which enables the neighbor to switch on a garden irrigation, for example, without entering the building.

Information about the status of the connected smart home devices as well as recorded events and warnings can also be displayed on the touch-sensitive screen and / or information about activities on the authentication device and associated devices or sensors can be displayed on the touch-sensitive screen while the resident is absent, if the resident himself or other appropriately authorized users are authenticated by the authentication device. This can include a message about known or unknown visitors in their absence, photos of the visitors or video messages left by the visitors, a message that mail has been thrown into the mailbox if it is connected to the authentication device via a corresponding sensor system, as well as information include noticeable noises in the door area or other warning notices.

In combination with appropriate monitoring systems, the authentication device can open the door connected to the authentication device in an emergency in the event of an alarm. This can be done either by means of a general emergency opening function activated in the event of an alarm, for example by means of a corresponding input field that is displayed on the touch-sensitive screen, or it can only be accessible to emergency services who can, for example, request remote opening through a stored emergency contact.

• 1 ein Gebäudeschließsystem mit einem erfindungsgemäßen Authentifizierungsgerät und einem elektrischen Türaktor;
• 2 eine schematische Darstellung eines Grundaufbaus des Authentifizierungsgeräts von 1;
• 3 eine schematische Darstellung einer ersten konkreten Ausführungsform des Authentifizierungsgeräts von 1;
• 4A ein schematisches Ablaufdiagramm eines Authentifizierungsverfahrens mit dem Authentifizierungsgerät von 3 für den Fall ‚Ankommen‘ für einen registrierten Nutzer;
• 4B eine schematische Darstellung einer Bildschirmvisualisierung mit dem Authentifizierungsgerät von 3 für den Fall ‚Ankommen‘ für einen unbekannten Nutzer;
• 4C ein schematisches Ablaufdiagramm eines Authentifizierungsverfahrens mit dem Authentifizierungsgerät von 3 für den Fall ‚Verlassen‘;
• 5 eine schematische Darstellung einer zweiten konkreten Ausführungsform des Authentifizierungsgeräts von 1.

The invention is described below purely by way of example using a possible embodiment with reference to the accompanying drawing. Show it:

• 1 a building locking system with an authentication device according to the invention and an electric door actuator;
• 2 a schematic representation of a basic structure of the authentication device of 1 ;
• 3 a schematic representation of a first specific embodiment of the authentication device of FIG 1 ;
• 4A a schematic flow diagram of an authentication method with the authentication device of FIG 3 in the event of 'arriving' for a registered user;
• 4B a schematic representation of a screen visualization with the authentication device from 3 in the event of 'arrival' for an unknown user;
• 4C a schematic flow diagram of an authentication method with the authentication device of FIG 3 in the event of 'abandonment';
• 5 a schematic representation of a second specific embodiment of the authentication device from FIG 1 .

1 shows a building 10 with a building wall 12 into one door 18th is let in. The door 18th is provided with two door actuators, here in the form of an electric door opening device 22nd and a motorized door lock 24 are trained. The door actuators 22nd , 24 are part of a building locking system 14th , which also has an external server 26th , which is designed here as a cloud, and an authentication device 16 includes. The authentication device 16 is next to the door 18th at the Building wall 12 mounted and provided for a user of the building locking system 14th to authenticate.

In 2 is a basic structure of the authentication device 16 shown in more detail. The authentication device 16 includes a control unit 30th , which with other components of the authentication device 16 is connected, namely with an image capture device 32 , a sound recording / output device 34 , a device for wireless transmission / reception 36 of data, a touch screen 38 and an interface module 40 for wired or wireless connection of the authentication device 16 with the door actuators 22nd , 24 .

3 shows a first concrete embodiment of the authentication device 16 . The image capture device 32 includes a 2D camera here 42 which is intended to take photos or videos of a user. In principle, these recordings can be used as a basis for two-dimensional face recognition or the detection of characteristic eye movements, as well as a resident of the building 10 be played for informational purposes. In addition, the image capturing device shown 32 a 3D TOF camera 44 on, which is provided to take three-dimensional recordings by means of a transit time method. These can advantageously be used in an authentication method for three-dimensional face recognition and / or a scan of the palm vein pattern of a user.

The sound recording / output device 34 includes a microphone 46 as well as a loudspeaker 48 , which are intended to be messages for other users, especially for a resident of the building 10 to be left on the authentication device and / or to play sound recordings as well as to be used for biometric voice recognition.

The transmitting / receiving device 36 includes a bluetooth module 50 as well as a WLAN module 52 which are provided in an authentication process for exchanging a digital key pair with a mobile device of the user. The key exchange can optionally take place via Bluetooth or WLAN.

The authentication device 16 also has a sensor 54 for detecting an approach of a user to the authentication device 16 on, which is designed here as a PIR sensor. The detection of a user can lead to the authentication device 16 from sleep mode with the touchscreen turned off 38 is placed in an active mode.

The control unit 30th is via the interface module 40 connected to a local network, for example via Ethernet or via WLAN. An Internet connection to an external server can be established via the local network 26th be established, which a communication between a user of the authentication device 16 and a resident of the building 10 , in particular also in his absence, for example via a mobile application on a mobile device of the resident in the form of video, voice or text messages or in the form of Internet telephony.

The authentication device 16 is also via the interface module 40 with a sensor 56 connected to the open state of the door 18th and here with the control unit 30th connected is. The sensor 56 can basically be wired or wireless with the authentication device 16 be connected.

The interface module 40 here also has a sub-1 GHz module 64 which is provided, for example the door actuator 24 in the form of an electronic lock cylinder and / or required sensors to the control unit 30th of the authentication device 16 to connect.

The authentication device 16 also has one with the control unit 30th connected database 58 on, in which predetermined security features are stored, in particular biometric features, electronic security keys and / or security codes. The ones in the database 58 deposited security features can through the control unit 30th are compared with the security features recorded in an authentication process in order to identify a user and, if necessary, functions on the authentication device 16 to start.

The following is the authentication of a user with the help of the authentication device 16 described. In principle, you can 'arrive' between the situations ( 4A, B ), in which a user connects to the authentication device 16 from the outside of the building 10 approaching and 'leaving' ( 4C ), where a user is the building 10 from the inside, can be distinguished.

In the 'arriving' situation, a user first approaches the building or site from outside 10 and thus the authentication device 16 of the building locking system 14th . The PIR sensor 54 detects the approach 100 and bring the authentication device 16 from sleep mode to active mode when the user joins the authentication device 16 up to a distance d which is not greater than a detection distance d _rec . While in sleep mode, the touch-sensitive screen 38 is disabled, it will appear in Active mode switched on. As long as the distance between the user and the authentication device 16 more than a minimum distance dmin configured by a master user, 1 meter in the exemplary embodiment shown, is displayed on the touch-sensitive screen 38 a welcome screen is displayed 102. This can contain, for example, a warning that the user is in a video-monitored area, as well as the house number of the building 10 and the names of the residents.

As soon as the user connects to the authentication device 16 the authentication device starts up to less than the minimum distance dmin 16 an authentication process 104 ( 4A) .

In a first authentication step 106 a first security feature of the user is determined. In the exemplary embodiment shown, this is done by means of the 2D camera 42 a two-dimensional face recognition of the user can be carried out. A corresponding request and instructions for correctly positioning the face in front of the 2D camera 42 are on the touch screen 38 is displayed and a corresponding image of the face is taken. Characteristic features of the recording are made by the control unit 30th with predetermined characteristic features of the authentication device 16 registered users compared which ones in the database 58 are deposited. For example, depending on the lighting conditions, two-dimensional face capture by means of the 2D camera can be used 42 can be dispensed with and instead three-dimensional face recognition using the 3D TOF camera 44 can be used in the run-time procedure.

Provided that the recorded face geometry matches one in the database 58 the stored face geometry of a registered user matches, a second authentication step is performed 108 carried out. In the exemplary embodiment shown, this is done by the Bluetooth module 50 of the authentication device 16 a security key is automatically requested from the user's mobile device via Bluetooth. The security key received from the mobile terminal is controlled by the control unit 30th with in the database 58 stored security keys compared.

If the received security key matches one in the database 58 the stored security key of a registered user matches is determined by the control unit 30th checks which authorizations the identified user has. If the identified user is authorized to access, the control unit will initiate 30th an automated unlocking and opening 110 the door 18th by means of the connected door actuators 22nd , 24 .

• - Verpasste Besuche, gegebenenfalls einschließlich Zeitstempel, wann die Besuche erfolgt sind, Fotoaufnahmen der Besucher und eventuell von den Besuchern hinterlassene Video-, Sprach- oder Textnachrichten, welche über den berührungsempfindlichen Bildschirm abgerufen werden können;
• - Informationen über erkannte Ereignisse, wie z.B. eine Unterbrechung eines Öffnungskontakts eines mit dem Authentifizierungsgerät 16 verbundenen Briefkastens, weshalb ein Hinweis auf Post im Briefkasten angezeigt wird;
• - Warnungen eines mit dem Authentifizierungsgerät 16 verbundenen Sicherheitssystems, die anzeigen, ob ein Alarm in Abwesenheit stattgefunden hat oder ob sich eine unbekannte Person auf dem Grundstück befindet.

On the touch screen 38 configuration-dependent user-specific information is also provided for the authenticated user 112 . If a resident is recognized, this can include the following information about events on the authentication device 16 and related devices and sensors include:

• - Missed visits, possibly including time stamps, when the visits took place, photos of the visitors and any video, voice or text messages left by the visitors, which can be called up via the touch-sensitive screen;
• - Information about recognized events, such as an interruption of an opening contact with the authentication device 16 connected mailbox, which is why a notice of mail is displayed in the mailbox;
• - Alerts one with the authentication device 16 connected security system that indicate whether an alarm has occurred in the absence or whether there is an unknown person on the property.

It goes without saying that the above list is not exhaustive. In addition, configurable functions or scenarios of in-house systems become user-specific after the authentication of a user by the authentication device 16 activated or deactivated 114 . When a resident comes home, this concerns, for example, deactivating an alarm system, switching on lighting, notifying other, absent residents on their mobile devices about the arrival of the authenticated user and other functions.

• - eine 3D-Gesichtserkennung gefolgt von einem Handvenenscan, beides mittels der 3D-TOF-Kamera 44,
• - eine biometrische Stimmenerkennung mittels des Mikrofons 46 gefolgt von der Abfrage eines Bluetooth-Schlüssels durch das Bluetooth-Modul 50,
• - eine Erfassung einer charakteristischen Augenbewegung mittels der 2D-Kamera 42 gefolgt von der Abfrage eines WLAN-Schlüssels durch das WLAN-Modul 52,
• - eine Erfassung eines QR-Codes mittels der 2D-Kamera 42 gefolgt von einer 2D-Gesichtserkennung mittels derselben 2D-Kamera 42,
• - eine Abfrage eines Bluetooth-Schlüssels durch das Bluetooth-Modul 50 gefolgt von einer Authentifizierung mittels einer manuellen Sicherheitscode-Eingabe mittels des berührungsempfindlichen Bildschirms 38,
• - eine biometrische Stimmenerkennung mittels des Mikrofons 46 während der Aussprache eines Code-Worts, welches entweder ein personenbezogenes Passwort sein kann, das in der Datenbank 58 hinterlegt ist, oder ein Zufallswort, das auf dem berührungsempfindlichen Bildschirm 38 angezeigt und vorgelesen werden muss.

In the present exemplary embodiment, the first authentication step 106 a two-dimensional face recognition carried out in the second authentication step 108 a security key transmitted via bluetooth. In principle, however, the method can also be designed in such a way that two biometric features or even no biometric feature at all in the authentication steps 106 and 108 are recorded. Possible combinations here would be, for example

• - a 3D face recognition followed by a hand vein scan, both using the 3D TOF camera 44 ,
• - a biometric voice recognition by means of the microphone 46 followed by the request for a Bluetooth key from the Bluetooth module 50 ,
• - A detection of a characteristic eye movement by means of the 2D camera 42 followed the request for a WLAN key by the WLAN module 52 ,
• - A QR code is captured using the 2D camera 42 followed by 2D face recognition using the same 2D camera 42 ,
• - a request for a Bluetooth key by the Bluetooth module 50 followed by authentication by means of manual security code entry using the touch-sensitive screen 38 ,
• - a biometric voice recognition by means of the microphone 46 during the pronunciation of a code word, which can either be a personal password stored in the database 58 is stored, or a random word that appears on the touch-sensitive screen 38 must be displayed and read aloud.

This list is also not exhaustive, but rather an example of the possible combinations of features that relate to the components of the authentication device 16 out 3 have it carried out. Depending on the area of application and the objective, a correspondingly advantageous combination of features can be used for the specific implementation of the authentication device 16 and the authentication method can be selected.

If a user is recognized in the authentication process who is on the authentication device 16 is registered but not authorized to access, a corresponding extended range of functions is displayed on the touch-sensitive screen, depending on the authenticated user 38 of the authentication device 16 displayed. This affects, for example, the neighbor who is at the authentication device in the absence of the residents 16 those with the authentication device 16 can activate connected garden irrigation system.

If one of the in one of the authentication steps 106 or 108 detected security features does not match a stored security feature of a registered user, a user is shown on the touch-sensitive screen 38 one or more input fields are displayed, by means of which a user input into the authentication device 16 can take place and information can be provided for the user ( 4B) .

An input field 116 enables the user to generate a bell signal on a signaling device inside the building 10 is reproduced to a resident about the presence of a visitor on the authentication device 16 to inform. In addition, a photo or video of the visitor can be displayed on the signal device indoors. The resident can then open the door for the visitor 18th open manually or automatically.

Is the resident of the building 10 absent, can by means of the external server 26th the ringing signal can be played back on the resident's mobile device, and a photo or video of the visitor can also be transmitted. The resident can then make a video or voice call with the authentication device in response to the ringing signal 16 accept.

An input field enables an unanswered ringing process 118 the visitor, a video or voice call via the external server 26th with a mobile device of the resident. Another input field 120 provides a function of sending a text message to a mobile terminal of the resident by means of the external server 26th ready. An input field 122 allows a video, voice, or text message to be sent to the authentication device 16 to leave behind. An input field 124 makes it possible to call up a video, voice or text message sent by the resident on the authentication device 16 left behind. An input field 126 provides the opportunity to open the door 18th opened by entering a security code.

It goes without saying that the embodiment described is to be understood only as an example. A master user of the authentication device determines which of the specified input fields and functions are to be provided 16 configurable as required. Other embodiments are possible at any time. For example, on the touch-sensitive screen 38 of the authentication device 16 an information field 128 are displayed, which informs a user about opening times, for example if the authentication device 16 is not used in a private household but in a business environment. Accordingly, the touch-sensitive screen can 38 be used as advertising space or provide infotainment for visitors.

One embodiment of the 'leave' situation is in 4C shown. The process is started by a sensor system 56 detected opening 130 the door 18th . When a user subsequently approaches the authentication device 16 are the steps 100-106 of the authentication procedure started as in the situation 'Arriving' ( 4A) described. Provided that a known user is authenticated within a predetermined time window t <tmax of, for example, 1 minute after the detected opening 130 the door 18th the authentication device recognizes it 16 that the situation is 'leaving', that is, a person leaves the building 10 . If in this case the authentication device 16 in the first authentication step 106 recognizes an authorized user, there is no further authentication step 108 carried out, but an automatic closing and / or locking 132 the door 18th caused.

Also this function of the authentication device 16 can be configured by a master user in such a way that, for example, the user groups are configured for which the door is automatically locked 132 should take place, or that the automated locking 132 the door 18th only takes place when the authentication device 16 by means of the sensors 56 has detected that all residents of the building 10 have left.

Just as when 'arriving', an authenticated user can configure configurable user-specific information on the touch-sensitive screen when 'leaving' 38 displayed as well as functions or scenarios with the authentication device 16 connected devices. In this case, when leaving the building 10 an alarm system is activated and the lighting is switched off. The resident is shown instructions - based on their calendar, for example, a reminder to take a sports bag with them or, based on a weather report provided on the Internet, an instruction to pack an umbrella.

Configurable input fields can also be displayed that enable connected devices to be controlled manually as required, for example opening the garage door and forwarding bell signals on the authentication device 16 triggered on a mobile device.

5 shows a second specific embodiment of the authentication device 16 which ultimately only differ from the first specific embodiment of 3 distinguishes that the transceiver 36 an RFID module 62 in addition to the Bluetooth module 44 and to the WLAN module 46 having. With this authentication device 16 Further configurations of the authentication method are possible, as it offers additional options, such as a user on the authentication device 16 can be authenticated. So either in the first authentication step 106 or in the second authentication step 108 a user-related RFID tag as a recorded security feature from the authentication device 16 can be read out. It is understood that in other embodiments of the authentication device 16 Transmission standards such as NFC, provided by an NFC module, can be used, any combination being possible with the further modules mentioned above for wireless transmission / reception of data.

List of reference symbols

10

building

12

Building wall

14th

Building locking system

16

Authentication device

18th

door

22nd

electric door opening device

24

motorized door lock

26th

external server

30th

Control unit

32

Image capture device

34

Sound recording / output device

36

Device for wireless transmission / reception of data

38

touch screen

40

Interface module

42

2D camera

44

3D TOF camera

46

microphone

48

speaker

50

Bluetooth module

52

WLAN module

54

PIR sensor

56

Sensor technology for detecting the opening state of a door

58

Database

62

RFID module

64

Sub-1 GHz module

100

Detection of a user at the recognition distance dmin <d <d _rec

102

Display of a welcome screen

104

Start of the authentication procedure at d <dmin

106

first authentication step

108

second authentication step

110

automatic unlocking and / or opening of a door

112

user-specific optional information

114

User-specific activation of functions / scenarios

116

Entry field for bell signal

118

Input field for video / voice calls on mobile devices

120

Input field for text message on mobile device

122

Input field for leaving a video / voice / text message

124

Input field for calling up a message

126

Input field for entering a security code

128

Information field

130

Detection of the opening of a door

132

automatic closing and / or locking of a door

Claims (15)

Wall-mountable authentication device (16) for authenticating a user of a building locking system (14), comprising: a control unit (30), an image acquisition device (32) connected to the control unit (30), a sound recording / output device (34) connected to the control unit (30), a device connected to the control unit (30) for the wireless transmission / reception of data (36), a touch-sensitive screen (38) connected to the control unit (30) and an interface module (40) connected to the control unit (30) for connecting the authentication device (16) to at least one door actuator (22, 24). Authentication device (16) Claim 1 , wherein the authentication device (16) has a sensor system (54) connected to the control unit (30) for detecting the approach of a person to the authentication device (16). Authentication device (16) Claim 1 or 2 wherein the authentication device (16) has a database (58) in which predetermined security features are stored, in particular biometric features, electronic security keys and / or security codes. Authentication device (16) according to one of the preceding claims, wherein the interface module (40) for connecting the control unit (30) to a local network, an external server (26), a doorbell, a sensor system (56) for detecting an open state of the door actuator (22, 24) associated door (18), a smart home system and / or an alarm system. Authentication device (16) according to one of the preceding claims, wherein the image acquisition device (32) has a 2D camera (42) and / or a 3D camera (44), for example a TOF camera for image acquisition using the runtime method. Authentication device (16) according to one of the preceding claims, wherein the device for wireless transmission / reception of data (36) is a Bluetooth module (50), an RFID module (62), an NFC module and / or a WLAN module (52). Building locking system (14) with an authentication device (16) according to one of the preceding claims and a door actuator (22, 24) connected to the authentication device (16). Building locking system (16) according to Claim 7 , the authentication device (16) having a local network, an external server (26), a sensor system (56) for detecting an open state of a door (18) assigned to the door actuator (22, 24), a doorbell, a smart home system and / or connected to an alarm system. Method for authenticating a user of a building locking system (14) by means of an authentication device (16) connected to a door actuator (22, 24) according to one of the preceding claims, wherein the authentication device (16) detects a first security feature of the user in a first authentication step (106) and compares the detected first security feature with at least one first predetermined security feature and, if the detected first security feature matches the first specified security feature, the authentication device (16) detects a second security feature of the user in a second authentication step (108) and compares the detected second security feature with at least one second specified security feature and, if the detected second security feature matches the second predetermined security feature, the control unit (30) causes a door (18) assigned to the door actuator (22, 24) to be unlocked and / or opened (110). Procedure according to Claim 9 , wherein the first and / or second detected security feature is a biometric feature. Procedure according to Claim 9 or 10 wherein if the authentication device (16) is within a predetermined time prior to the first Authentication step (106) has detected (130) opening of the door, the control unit (30) initiates locking (132) of the door (18) assigned to the door actuator (22, 24), provided that the security feature detected in the first authentication step (106) has already been detected corresponds to a correspondingly specified security feature. Method according to one of the Claims 9 to 11 wherein, if a security feature detected in one of the authentication steps (106, 108) does not match a correspondingly predetermined security feature, at least one input field (116, 118, 120, 122, 124, 126) for user input on the touch-sensitive screen (38) is displayed, which enables the user to generate a ring signal, to leave a video, voice or text message for another user of the authentication device (16) on the authentication device (16), a video or voice call via the authentication device (16 ) to a mobile terminal of another user of the authentication device (16) to produce a text message via the authentication device (16) to a mobile terminal of another user of the authentication device (16), a video, voice or text message sent by another user has stored on the authentication device (16), retrieve and / or manually he input of a security code to unlock and / or open the door (18) assigned to the door actuator (22, 24). Method according to one of the Claims 9 to 12 wherein the authentication device (16) goes into a sleep mode after use and only then changes to an active mode and starts the first authentication step (106) when the approach of a user to the authentication device (16) is detected (100). Method according to one of the Claims 9 to 13 wherein the user is shown different visualizations (102, 128) on the touch-sensitive screen (38) of the authentication device (16) as a function of a distance between the user and the authentication device (16). Method according to one of the Claims 9 to 14th , whereby, provided that all the recorded security features match the correspondingly specified security features, further configurable functions, in particular smart home devices and security systems, are activated or deactivated (114) and / or information about their status as well as recorded events and warnings on the touch-sensitive screen ( 38) of the authentication device (16) can be displayed (112) and / or information about activities on the authentication device (16) and associated devices or sensors are displayed on the touch-sensitive screen (38) of the authentication device (16) (112).

Images