GB2499191A

GB2499191A - Door interlock apparatus

Info

Publication number: GB2499191A
Application number: GB1201719.0A
Authority: GB
Inventors: Paul Robert Calder
Original assignee: Scotia Safes Ltd
Current assignee: Scotia Safes Ltd
Priority date: 2012-02-01
Filing date: 2012-02-01
Publication date: 2013-08-14
Anticipated expiration: 2032-02-01
Also published as: GB201201719D0; GB2499191B

Abstract

An interlock apparatus comprising an interlock controller which communicates with a locking apparatus of at least one first door and a locking apparatus of at least one second door; the interlock controller only allowing one locking apparatus or subset of locking apparatus to be unlocked at any one time. The lock of the first door may be an outer door of a public room in which a safe or Automated Teller Machine (ATM) having the second door is located wherein in order for the door of the safe or ATM to be opened the outer door must be locked; servicing or re-filling the ATM is more secure. The ATM may comprise a plurality of individually lockable compartments. There may be a multiple outer doors to the room each of which must be in the locked state in order for the door of the secure container (safe) to be unlocked.

Description

1

Security Interlock Installation

Field of the Invention

5 The present invention relates to a security interlock installation for use with secure storage devices such as safes or ATMs (automated teller machines).

Background to the Invention

10 It is well known to store cash or other valuable items such as jewellery or documents in secure storage devices (also known as "secure retainers"), such as safes, ATMs or other secure storage areas accessible by a limited number of personnel. However, security is reduced when the secure retainer must be opened to access the contents or to place additional valuable items inside (e.g. to re-fill an ATM, or place items in a 15 safe). Accordingly, it is known for criminals to target duress attacks at a time when an ATM is being refilled or a safe accessed.

ATMs (cash machines) and safes are therefore typically located in a secure area within commercial premises (e.g. a bank or shop), to which only authorised personnel may 20 gain access. This allows the premises to be open to the general public while the secure retainer is being accessed. In premises where the secure retainer is located in the public area, however, it is not unusual for the main access door to the premises to have to be closed and locked while any secure retainer is open.

25 An access door to a secure area may be controlled by either mechanical or electromechanical locking apparatus (e.g. a lock with a magnetic or electric release latch, or an access control system with an electrically actuated door lock). Access to ATMs or safes within the secure area may also be controlled by mechanical or electromechanical locking apparatus.

30

Security systems having electromechanical locking enable access to rooms or secure retainers to be controlled remotely, for example via a coded key pad, or by a controlling input from a device in communication with the security system (e.g. a control terminal) elsewhere in the building, or in principle anywhere in the world. In a purely mechanical

2

locking system there must be a physical link between the operator and the locking device.

It is also common for secure retainers, and access doors to secure areas, to be fitted with one or more sensors to indicate if access doors to secure areas and secure 5 retainers are open or closed/locked or unlocked, and these sensors may be connected to security/safety alarm systems, in order to indicate whether the room or retainer has been accessed.

However, security is at a minimum when a secure area has been accessed, and/or 10 when an ATM or other secure retainer is being accessed, and duress raids during replenishment continue to be prevalent.

The risk of this type of security failure may be minimised procedurally, for example by closing the room or area in which the safe or ATM is located immediately on entry, or 15 by closing the commercial premises housing the secure retainer. However, there remains a risk of human error and such procedures are not always followed.

Therefore, there remains a need for improved security measures for accessing secure storage devices such as ATMs or safes, which minimise cost and complexity.

20

Summary of the Invention

According to a first aspect of the invention there is provided interlock apparatus comprising an interlock controller adapted to communicate with locking apparatus of at 25 least one outer door and at least one retaining door of a security installation; and to determine the state of doors associated with said locking apparatus;

and the interlock controller configured to control an operation of each said locking apparatus and to allow only one said locking apparatus, or a permitted subset of the locking apparatus, in communication therewith to be in an unlocked state at a time.

30

The interlock controller may be configured to allow only one said locking apparatus in communication therewith to be in an unlocked state at a time.

The interlock controller is preferably configured to cause only one said locking 35 apparatus to be in an actuable state. Alternatively, or in addition, the interlock controller

3

may be configured to cause all, or all but one said locking apparatus to be in a secure state.

The interlock controller preferably comprises an interlock module and one or more 5 control modules, the control modules operable to be placed in communication with locking apparatus and to control an operation thereof, and operable to communicate (preferably wirelessly) with the interlock module; and the interlock module operable to control an operation of each said control module; the interlock module functioning as an interlock controller, or the said modules together functioning as the interlock 10 controller. The interlock apparatus may further comprise sensing means, e.g. one or more sensing modules, operable to communicate with the or each said control module and/or interlock module, and/or in some embodiments operable to communicate with locking apparatus or access means associated therewith. The sensing means typically comprise one or more sensors, securable proximal to a door and operable to determine 15 the state of a door.

The interlock apparatus may therefore be provided as a kit, comprising an interlock module and optionally one or more control modules (and/or one or more sensing modules). The kit may thus be used to retrofit existing installations (e.g. banks having 20 one or more secure storage devices such as ATMs, safes and safe rooms) without significant modification or disruption to the existing installation. The interlock apparatus may further comprise one or more locking apparatus, securable to or adjacent to a door and operable to place the door in an unlocked or locked state.

25 In a preferred embodiment, the interlock apparatus comprises one or more locking units, securable to a door, each said locking unit comprising locking apparatus, and a control module.

In some embodiments, the interlock apparatus comprises a locking unit, the locking 30 unit comprising locking apparatus, a control module and optionally access means. The locking unit may further comprise sensing means.

The locking unit or the locking apparatus may comprise an interlock module. Each said locking unit, or each said module, may be battery powered. Any or all of the or each

4

locking unit, locking apparatus, interlock module or control module may comprise access means, for example a key pad.

According to a second aspect of the invention, there is provided a security installation 5 comprising;

at least one retaining door having retaining door locking apparatus and providing access to a secure storage area;

at least one outer door having outer door locking apparatus and providing access to the at least one retaining door;

10 an interlock controller configured to communicate with the or each said locking apparatus; and to determine the state of each said door;

and the interlock controller configured to control an operation of each said locking apparatus, and to allow only one said locking apparatus, or a permitted subset of the locking apparatus, to be in an unlocked state at a time.

15

The interlock controller may be configured to allow only one said locking apparatus to be in an unlocked state at a time.

Preferably, the interlock controller is configured to cause only one said locking 20 apparatus to be in an actuable state and/or the interlock controller may be operable to cause all but one (and in some circumstances all) said locking apparatus to be in a secure state, at any given time. For example, the interlock controller may cause one or more locking apparatus to change from an actuable state to a secure state, if a further said locking apparatus is determined to be in an unlocked state, thereby allowing only 25 one locking apparatus to be in an unlocked state. The locking apparatus may cause a said locking apparatus to change from a secure state to an actuable state (or an unlocked state) if each said other locking apparatus is determined to be in a locked state, and more preferably a secure state, and thereby allow only one locking apparatus to be in an unlocked state.

30

In an actuable state, the locking apparatus may be actuated, i.e. interchanged between a locked state and an unlocked state. Thus, in an actuable state, the locking apparatus and the corresponding door may be in a locked state, and the locking apparatus unlockable (i.e. responsive to user input, such as use of access means); or the locking

5

apparatus and so the corresponding door may be in an unlocked state (in which the door may be open or closed), and the locking apparatus lockable.

In a secure state, of the locking apparatus and the corresponding door, the door is 5 closed, the door and locking apparatus in a locked state and the locking apparatus cannot be unlocked (e.g. the secured locking apparatus is configured so as not to respond to use of access means, or the release latch of secured locking apparatus is not released).

10 In use of the security installation, wherein the interlock controller allows only one said locking apparatus to be in an unlocked state at a time, it is therefore not possible to open or unlock a retaining door if the or each said outer door is open or unlocked, and it is only possible to open or unlock a retaining door (to access the secure area), if the or each outer door (and the or each other retaining door, where present) is locked.

15

For example, an operator (such as a CIT ("cash in transit") operative or a member of banking staff) is compelled to have shut and locked an outer door to a room housing a secure storage device, before opening the secure storage device (e.g. an ATM, safe), so greatly reducing the possibility that an unauthorised person will have access to the 20 secure storage device, when the retaining door is unlocked or opened.

Similarly, it is not possible for an operator to open or unlock the outer door to leave the room or area in which the or each secure storage device is located unless the or each retaining door is closed and locked. Thus, there is no possibility that the secure storage 25 device will be accessed and left in a condition whereby security is provided by the outer door only.

In embodiments comprising an outer door (or more than one outer door) providing access to a plurality of retaining doors, when the interlock controller is configured to 30 allow only one said locking apparatus to be un an unlocked state at a time, it is not possible for more than one door at a time to be in an unlocked or actuable state. For example, in use of a security installation having an outer door providing access to a room or area containing a plurality of secure storage devices (i.e. two or more), an operator must first close and lock the outer door, in order to access one of the secure 35 storage devices. In order to access a further secure storage device, the operator must

6

then close and lock the retaining door of the secure storage device which has been accessed. In order to unlock and open the outer door (e.g. to leave the safe room or ATM room of a bank) the operator must ensure that all of the retaining doors are closed and locked. Consequently, the security risk is minimised because once the outer door 5 has been opened and access to the retaining doors provided, only one out of the outer door and associated retaining doors may be open, unlocked or the locking apparatus actuable at any time.

The outer door typically provides access to a room or area housing one or more secure 10 storage devices (such as ATMs or safes), each having a retaining door and a secure storage area therein. There may be more than one outer door providing access to one or more retaining doors; for example a room housing a plurality of secure storage devices may have more than one outer door thereto. The outer door may be a door to a strong room or vault, providing access to a strong room or vault comprising one or 15 more lock boxes or safes (or other secure storage devices) in the strong room/vault, each having a retaining door.

The retaining door may be a door to a secure storage device, such as a safe or ATM (cash dispenser), or a lock box, or may be a door to a strong room or vault, i.e. The 20 secure storage area may be inside a safe or ATM (or other secure storage device) or may be a strong room or vault.

One or more of the said retaining doors may provide access to one or more secondary retaining doors, comprising secondary locking apparatus. For example, a retaining door 25 to a strong room or vault may provide access to one or more lock boxes, lockers, cabinets or safes therein, each of which may have secondary retaining doors, such as lockable doors or gratings. A retaining door of a cash dispenser/ATM may provide access to one or more secondary retaining doors, for example lockable cassettes (racks which may be loaded with cash, to be dispensed by the cash dispenser), and/or 30 a lockable cassette guard (a lockable rack or other device to prevent removal of the cassettes).

The interlock controller may be configured to allow two (and exceptionally more than two) said locking apparatus in communication therewith to be in an unlocked state at a

7

time. Thus a permitted subset may consist of the retaining door and either of, but not both of, the outer door and the one or more secondary retaining doors.

The interlock controller of a security installation comprising at least one outer door, at 5 least one retaining door providing access to at least one secondary retaining door may therefore be operable to allow the permitted subset of;

one retaining door locking apparatus and one secondary retaining door locking apparatus, or;

one retaining door locking apparatus and one outer door locking apparatus, to be in an 10 unlocked state at the same time.

The interlock controller in this embodiment would not be operable to allow other subsets of locking apparatus to be open at the same time; for example an operator would not be permitted to open two secondary retaining doors, or a secondary retaining 15 door and an outer door, at the same time.

Optionally, the interlock controller may be configured to allow one or more secondary door locking apparatus to be in an unlocked state at a time, if one or both of each said outer door locking apparatus or the or each retaining door locking apparatus are 20 determined to be in a locked (or more preferably secure) state.

Thus, advantageously, a retaining door may be left open when one or more secondary retaining doors are open. This may be necessary for example where dual authorisation is required to open the door to a vault (i.e. simultaneous or sequential input to access 25 means of the retaining door of a vault, by more than one person) or if a retaining door takes a long period of time to open, due to its size or weight. In order to conduct operations inside the vault, it may be impracticable to repeatedly open and close the vault retaining door and the interlock controller is thus advantageously able to provide interlock functionality between the secondary retaining doors (e.g. of lock boxes or 30 safes inside the vault) and the outer door or doors.

Similarly, on ATMs equipped with secondary retaining means, such as lockable cassettes or cassette guards, once the ATM retaining door is open, interlocking functionality can be provided between the lockable cassettes or the cassette guard, 35 and the outer door to the ATM room. Thus, the retaining door locking apparatus (of the

8

ATM) and the secondary retaining door locking apparatus (of the cassette guard) are a permitted subset. Similarly, the outer door locking apparatus and the retaining door locking apparatus are a permitted subset. In effect, the retaining door locking apparatus can be regarded as having been allowed to temporarily drop out of the interlocked 5 system.

In use, one or more locking apparatus may be added to, or removed from, the subset. In some embodiments, one or more first locking apparatus which is part of a permitted subset may be substituted in the subset by one or more second locking apparatus.

10

Locking apparatus may for example comprise electromechanical locking apparatus, operable by way of access means, such as a coded key pad or other user interface device such as a computer terminal, or a coded card, or a lock. The locking apparatus may comprise access means, or access means may be provided remotely (for example 15 access means may be located in another room or part of a building, and in communication with the locking apparatus).

In a secure state, electromechanical locking apparatus is not actuable, responsive to any user input by way of coded key pads, cards, keys, etc. The interlock controller may 20 therefore be operable to control one or more of the operations of electromechanical locking apparatus, and/or access means thereof, so as to prevent the corresponding door from being unlocked, if another said locking apparatus is determined to be in an unlocked state; or to allow the locking apparatus to be actuated if other said locking apparatus are determined to be in a locked state. The locking apparatus may be 25 mechanical locking apparatus, further comprising magnetic or electromechanical release apparatus (e.g. a latch). Thus, in a secure state, the release apparatus does not release, and thus the locking apparatus is not actuable, in use of a key or any other user input. The interlock controller may therefore be operable to control the operation of electromechanical release apparatus, so as to prevent the corresponding door from 30 being unlocked, if another said locking apparatus is determined to be in an unlocked state; or to control the release apparatus, to thereby allow the locking apparatus to be actuated, if other said locking apparatus are determined to be in a locked state.

The system may comprise doors having any suitable type of locking apparatus, in any 35 combination.

9

The interlock controller may communicate directly with one or more said locking apparatus, by way of wireless or wired communication, or a combination thereof. Communication with one or more said locking apparatus may be indirect, for example 5 via a communication network, alarm system, one or more routers, or via other apparatus in communication with (directly or indirectly) both the interlock controller or and the locking apparatus, or a combination thereof. Communication, and in particular wireless communication or communication via a communication network, is preferably encrypted. Wireless communication via one or more routers, or nodes, enables the use 10 of self-healing mesh or star wireless networks, which are operable to communicate signals directly or via one of a number of routers or nodes, and therefore offer redundancy in the case of failure of a particular device.

The interlock controller may determine the state of each said door responsive to 15 signals received from said locking apparatus. For example, the interlock controller may receive a signal from a said locking apparatus indicative of the locking apparatus being in a locked state, and thereby determine that the door is in a closed, locked state. The interlock controller may receive a signal from a said locking apparatus indicative of the locking apparatus being in an unlocked state, and thereby determine that the door is in 20 an unlocked (open or closed) state.

The interlock controller may receive a signal from a said locking apparatus indicative of the locking apparatus being actuated (i.e. changed from one of a locked state or an unlocked state to the other of a locked state and an unlocked state). The interlock 25 controller thereby operable to determine (for example using processing means) the state of the corresponding door, by calculating the effect of the indicated actuation on the previously determined state of the door. e.g. If the door had previously been determined to be in a locked state, the interlock controller is operable to determine, from a signal indicative of corresponding locking apparatus being actuated, that the 30 door is in an unlocked, closed or an unlocked, open state.

In some embodiments, one or more of the said doors is associated with sensing means (typically comprising one or more sensors), the sensing means operable to produce signals indicative of the state of the door. Thus the interlock controller is operable to

10

determine the state of the one or more said doors from signals received from the sensing means (directly or indirectly).

For example the interlock controller may receive a signal from sensing means 5 indicative of the door being open, and thereby determine that the door is open and unlocked. The interlock controller may receive a signal from a sensing means indicative of the door being closed, and thereby determine that the door is closed and locked or unlocked. In some embodiments, one or more doors may be locked by the act of closing the door, such that the interlock controller is operable to determine that the door 10 is closed and locked, responsive to a signal from sensing means indicative of the door being closed. In some embodiments, the interlock controller may receive a signal from sensing means indicative of the door changing between one of an open state and a closed state to the other of an open state or a closed state (e.g. the sensing means may comprise one or more sensors operable to sense the movement of a door past a 15 point).

The sensing means may comprise any suitable type of sensor, (including one or more magnetic sensors or optical sensors such as IR sensors, which may be motion sensors or proximity sensors). The sensing means may be operable to determine if a door is 20 open or closed, or if a door has been changed from one of open or closed the other of open or closed. The sensing means may be positioned or positionable proximal to a said door, or may be in communication with locking apparatus.

In some embodiments, the interlock controller may determine the state of each said 25 door responsive to signals received from access means. For example, the interlock controller may receive a signal from access means indicative of the locking apparatus being actuated, or indicative of a user input to actuate the locking apparatus (responsive to which the locking apparatus is actuated, when the locking apparatus is in an actuable state).

30

The state of each door may be determined responsive to signals received from one or more of locking apparatus, access means and sensing means. For example, the interlock controller may determine the state of a door from a combination of signals received from locking apparatus (i.e. whether the door is in an unlocked or locked

11

state) and sensing means (i.e. whether the door is in an unlocked an open state or an unlocked and closed state).

The interlock controller may comprise processing means, such as a computer 5 processor, and may comprise computer software executable by the processing means. Thus, the invention extends to computer software running on processing means of an interlock controller of the first and second aspects.

The interlock controller may comprise data storage means, in which the state of each 10 said door is stored, responsive to received signals. The interlock controller may update the stored data responsive to each received signal and determine the state of each said door by reference to the stored data. The interlock controller may monitor the state of each said door, continuously or periodically (for example at regular intervals, or responsive to a received signal indicative of the state of a said door). The interlock 15 controller may conduct an interrogation procedure responsive to received signals (e.g. indicative of a door being opened, of locking apparatus being actuated, or of a user input to access means associated with a said door), to determine the state of each said door or each said other door.

20 The security installation may comprise one or more control modules operable to function as an interlock controller. In some embodiments, the security installation comprises an interlock module, and may further comprise one or more control modules. The interlock module may function as an interlock controller, or the interlock module and one or more of the or each control module may together function as an 25 interlock controller. The interlock module, and one or more of the or each control module (where present) may each comprise processing means.

In some embodiments, each said locking apparatus is in communication with a control module. Each said control module may be associated with a said door, or with more 30 than one said door.

Thus, in a preferred embodiment, the security installation comprises;

12

at least one outer door having outer door locking apparatus and providing access to the at least one retaining door; each said door associated with a control module operable to control an operation of corresponding locking apparatus;

and an interlock module configured to communicate with the or each said control 5 module and operable to control an operation thereof;

the interlock module configured to determine, from received signals (received for example from locking apparatus, said control modules, access means associated with locking apparatus, sensing means, or a combination thereof) whether each said locking apparatus is in an unlocked state or a locked state;

10 and to allow only one said locking apparatus to be in an unlocked state at a time.

In communication with the said control modules, the interlock module may cause a said locking apparatus to be in an actuable state; and/or to cause one or more (or in some cases all) of the said locking apparatus to be in a secure state;

15 to thereby allow only one (i.e. a maximum of one) said locking apparatus to be in an actuable state, at a time.

The interlock module may function as, or the interlock module and the control modules may together function as, the interlock controller.

20

The interlock module may be configured to allow more than one of, but only a permitted subset of, the said locking apparatus to be in an unlocked state at a time.

The interlock module may be further operable to function as, or may comprise, a 25 control module. Thus, in one embodiment, the security installation comprises an interlock module (comprising or operable as a control module) associated with a said locking apparatus, and one or more control modules associated with the or each said other locking apparatus.

30 The sensing means associated with a door or each said door may form part of a sensing module comprising the sensing means, the sensor module may be in communication with the interlock controller (directly, or indirectly, e.g. via a control module). The sensing module may be positioned or positionable proximal to a said door, or may be in communication with locking apparatus. The sensing module may be 35 in communication with each said control module and/or the interlock module.

13

The security installation may comprise a central control module, in communication with one or more (or all) of the said locking apparatus and one or more (or all) of the said locking apparatus may each be in communication with a corresponding control module.

5

The retaining door (or the outer door) may be any type of lockable panel suitable for providing access to the secure storage area, and may be a hinged or sliding door, or may comprise more than one hinged or sliding door portion. The term door also includes a demountable panel or access panel.

10

Each locking apparatus may independently comprise one locking mechanism or a plurality of locking mechanisms.

The default state of one or more of the or each said locking apparatus may be a secure 15 state. Therefore, the interlock controller may be operable to place a locking apparatus in an actuable state only when the or each other locking apparatus is determined to be in a locked state (and more preferably a secure state).

For example, the interlock controller may receive a signal from access means or 20 locking apparatus, such as a user input to access means, to actuate the locking apparatus, and place the associated locking apparatus in an actuable state (and optionally to cause the locking apparatus to actuate) only when each said other locking apparatus (and thus each said other door) has been determined to be in a secure state, e.g. by reference to stored data, or from signals received from each said other 25 locking apparatus, optionally following an interrogation procedure (in which the interlock controller communicates with each said control module, sensing means or access means, as the case may be) to determine the state of each said door.

Accordingly, the interlock module may be operable to receive a signal from access 30 means or locking apparatus indicative of a user input to actuate the associated locking apparatus, to cause a signal indicative of the state of each said other locking apparatus (or door) to be issued (e.g. by sending an interrogation signal to one or more control modules), to thereby determine the state of each said door. The interlock module and/or one or more said control modules may comprise access means, for example a 35 key pad.

14

Preferably therefore, a said door reverts to a secure state when it is closed and the locking apparatus actuated to lock the door.

5 The default state of one or more of the or each said locking apparatus may be an actuable state. Accordingly, the interlock controller may be operable, responsive to a received signal indicative of a door being in an unlocked state, to place one or more (and typically each said other) locking apparatus in a secure state. Thus, a signal that a door has been locked may cause the interlock controller to place each said other door 10 in a default actuable state.

Each said door may default to a secure state, depending upon the state of other doors of the security installation, or on the previous configuration of other said doors.

15 In a preferred embodiment, the default state of the outer door (or one of the outer doors, as the case may be) is an actuable state, and the default state one or more other doors (and most preferably each other said door) is a secure state. Accordingly, the outer door may be unlocked and opened. Preferably, when the outer door is closed and locked, the outer door locking mechanism (and thus the outer door) enters a 20 secure state (typically for a predetermined time, for example selected to be considerably longer than the time for which the retaining door or doors are required to be accessed in normal use). Thereafter, a said door can only be unlocked if the interlock controller determines (preferably following an interrogation procedure) that each said other door is in a secure state.

25

In use of the security installation, additional time delays may be included. For example, the interlock controller may be operable to allow one or more of the doors (for example each said retaining door) to be unlocked only a certain times of day. The interlock controller may be operable to allow a door to be unlocked only after a predetermined 30 time period has expired after a door has previously been locked. For example, it may be desirable for a time period to elapse between the retaining door of a first secure storage device being locked, and the retaining door of a second secure storage device (or an outer door) being unlocked.

15

In some embodiments, the security installation comprises access means operable by several users. For example, an outer door providing access to a room or area comprising secure storage devices, such as an ATM room of a bank, may be accessible to a number of bank employees. Accordingly, in some embodiments, the 5 interlock controller is operable to allow a locking apparatus to be unlocked only after a predetermined time interval has elapsed after a signal is received indicative of use input to access means. Thus, a period of time is provided for the interlock controller to resolve conflicts arising from user inputs arising from more than one user, for example two people attempting to open a secure storage device at approximately the same 10 time. The period of time may, for example, enable priority to be determined based on the time that required user input is completed, or priority may be determined based on other parameters, such as the access control rights of the users, or a predetermined order of priority of doors (e.g. an between two said outer doors, or between two said retaining doors).

15

Optionally, each said locking apparatus or the interlock controller, is also in communication with an alarm system, and operable to receive an alarm signal and change state (or remain in, regardless of other signals received), responsive to a received alarm signal. For example, a building alarm may issue security alarm signal 20 (indicative of a security breach) which causes each said locking apparatus to be in, or to remain in, a secure state. The interlock controller may be configured to place said locking apparatus in a secure state. Thus, the security installation may enter a "lockdown" state if an alarm is triggered elsewhere.

25 The interlock controller of a security installation comprising least one outer door, at least one retaining door providing access to at least one secondary retaining door may be operable to place each said secondary retaining door locking apparatus in a secure state, responsive to an alarm signal.

30 The interlock controller is preferably operable to generate an alarm signal responsive if it is determined that locking apparatus which is not one of the preselected subset of the locking apparatus has been unlocked (whether forced or otherwise) or if one of the doors associated with locking apparatus which is not one of the preselected subset, has been opened (e.g. by force). Preferably, the interlock controller is additionally 35 operable to cause each said other locking apparatus to be in a secure state responsive

16

to such an alarm signal. For example, secondary retaining door locking apparatus may be in an actuable state, and be placed in a secure state responsive to an alarm signal received by the interlock controller from an alarm system, or an alarm signal generated by the interlock controller indicative of tampering or unauthorised opening of an outer 5 or retaining door.

In some embodiments, a building alarm may issue a safety (e.g. fire) alarm signal and the locking apparatus of an outer door may be placed in an actuable, or unlocked, state, regardless of the state of the or each other locking apparatus or door. For 10 example, responsive to a fire alarm signal, the outer door may enter an unlocked state automatically (or be cause to enter an unlocked state by the interlock controller) if the state of the outer door has changed within a predetermined time period (e.g. from a locked to an unlocked and back to a locked state, or any other pattern indicative of an operator having opened and passed through the outer door).

15

Each said locking apparatus may have more than one secure state and more than one actuable state (for example distinguished by the level of authorisation, or code, required of an operator to actuate the locking apparatus and so unlock and open the corresponding door).

20

Advantageously, sensing means (e.g. a sensing module), are provided adjacent to each said door and accessible only if the door has been unlocked and opened. For example, sensing means are preferably positioned internally to the or each secure storage area and/or inside of the outer door. Consequently, the risk of tampering with 25 the sensing means (e.g. to disable the security installation) is minimised. Similarly, the interlock module and the or each control module are preferably accessible only by opening the corresponding said door. For example, the interlock module may be positioned within the secure storage area and one or more control modules may be positioned within other secure storage areas (where present), or behind the said outer 30 door in a room housing one or more secure storage devices.

Preferably, the interlock controller and (where present) the sensing means and/or interlock and control modules, together functioning as an interlock controller, may be fitted to existing apparatus.

35

17

This is of particular benefit where, for example, ATM and safe storage facilities are associated with costly and complex installations, and may be integral to a building or not otherwise susceptible to modification. Thus, the present invention provides a means by which the security may be improved and interlocking functionality provided to 5 existing installations, without the costs associated with a new installation.

The or each said module (control, interlock, or sensing module) may be battery powered. Thus, additional power sources are not required and the system may be installed without the need to provide power supplies to existing installations. 10 Accordingly, the security installation of the present invention may be installed rapidly, so as to minimise costs associated with modifying existing installations, and of shutting down commercial premises to conduct installation works.

Typically, one of the said interlock and control modules is powered by a mains power 15 supply or is provided with a larger battery (in comparison to the batteries of the other said modules). Accordingly, one of the said modules (typically the interlock module) is operable to periodically (e.g. every 10 seconds) be in a powered condition, or to remain continuously in a powered condition wherein the module is responsive to a received signal from another said module. Thus, each said other module (typically control 20 modules) are operable to enter a low power condition until a signal is received, from one or more of corresponding access means, corresponding locking apparatus, sensing means or another said module in a powered condition.

Thus, battery life is maximized by placing all but one module (and in some 25 embodiments all modules) in a low power condition. If a signal is received by a control module indicative of a corresponding door being opened, or attempted to be opened (e.g. an operator actuating or attempting to actuate locking apparatus, or access means) the module is activated from a low power to a powered condition, and a signal is sent to the module which has remained in a powered condition (typically the interlock 30 module), which determines the state of each said door accordingly.

In a low power condition, apparatus required to issue signals (such as a wireless transmitter, or processing means) need not consume power and so battery life is extended.

35

18

In a preferred embodiment wherein the default state of the outer door (or a said outer door) is an actuable state, and the default state of each said other door is a secure state, each said module is operable to enter a default low power condition, following a predetermined period of time after a signal is transmitted or received. An operator may 5 therefore actuate the outer door locking apparatus, and cause the associated control module to enter a powered condition (and optionally to cause the other said modules to enter a powered condition), or more preferably to open, close and again lock the outer door to cause the associated control module to enter a powered condition (and optionally to cause the other said modules to enter a powered condition).

10

For example, ATMs are typically provided with an internal power supply, to power the apparatus required to dispense cash. In a preferred embodiment, an interlock module is provided internally to a security installation comprising an ATM (the interlock module further functioning or comprising a control module associated with the retaining door of 15 the ATM) and draws power from the existing ATM power supply. Control modules are associated with the outer door and other ATMs accessible through the outer door. In normal use, the control modules enter a low power state after a predetermined period of time following the last received signal (for example 300 seconds), and the interlock module remains in a powered state, operable to cause the other said modules to enter 20 a powered state. When the outer door locking apparatus is actuated, the corresponding control module enters a powered state, issues a signal to the interlock module, and the interlock module communicates with the other said control modules to cause them to enter a powered state (e.g. by issuing an interrogation signal).

25 In some embodiments, the said modules enter a low power condition only under certain circumstances, e.g. following receipt of a signal from the interlock module that a low power condition may be entered. Thus the interlock module may be operable to issue a signal to control modules that a low power condition may be entered only under certain circumstances, for example when it has been determined that all of the said doors are 30 closed and locked.

Preferably, one or more of the said locking apparatus (and each said door) is in a secure state, when the associated control module is in a low power condition. For example, each said retaining door locking apparatus may be in a secure state when the 35 associated control module is in a low power condition.

19

Preferably, the or each battery powered module is configured such that the corresponding locking apparatus is in an actuable state, if available battery power falls below a predetermined threshold. Thus, the door associated with a battery powered 5 control module (or sensor, or interlock module) can be opened in order to gain access to the module and replace the battery.

Some or all of the signals issued and received by the said modules may be wireless. Thus, one or more, or preferably each of the, said modules comprises a wireless 10 transceiver, and a said module communicates with another said module wirelessly. Wireless communication may be by any suitable means. For example, the system may comprise modules conforming to the ZigBee specification (ZigBee is a trademark of the ZigBee Alliance), which is particularly suitable due to comparatively low power consumption of the wireless transceivers used in ZigBee equipment. However other 15 wireless communication standards such as Wireless LAN and "Bluetooth" standards are also suitable. (Bluetooth is a trademark of the Bluetooth Special Interest Group).

One or more said control modules may be integral to locking apparatus and may, for example, be installed within the structure of a door or within a wall structure adjacent to 20 a door. In some embodiments, the security installation comprises a locking unit associated with one or more of the said doors, each locking unit comprising locking apparatus, a control module and optionally access means. The locking unit may further comprise sensing means.

25 Accordingly, the locking unit may be secured to a door (or in the proximity of a door), where the door is not itself provided with suitable locking apparatus. For example, the locking unit may be installed in cases where a door is provided only with a conventional mechanical lock, such as the outer door of a shop, so as to enable the said door to form part of the interlocked security installation of the present invention.

30

The invention further extends to a room, or area (typically an area of a building, such as one or more rooms of a building or a building) having at least one retaining door having retaining door locking apparatus and providing access to a secure storage area; at least one outer door having outer door locking apparatus and providing access to the 35 at least one retaining door;

20

an interlock controller configured to communicate with the or each said locking apparatus; and to determine the state of each said door;

and the interlock controller configured to control an operation of each said locking apparatus, and to allow only one said locking apparatus to be in an unlocked state at a 5 time.

The invention also extends to a building comprising a security installation, and the building may comprise a room having an outer door providing access to at least one secure storage device. Alternatively, the outer door may be the entrance door of the 10 building, the building having one or more secure storage devices in one or more rooms therein.

In some embodiments, the building may comprise more than one security installation. For example, the building may comprise a first outer door providing access to one or 15 more retaining doors or one or more secure storage devices (e.g. an ATM room), and a second outer door providing access to one or more further secure storage devices (e.g. a vault, or a safe room).

The security installation may interact with a further security installation. For example, 20 the building may comprise a master interlock controller, in communication with the interlock controller of each said security installation, or an interlock controller may function as an interlock controller of more than one security installation.

Advantageously therefore, each said security installation may be programmed to 25 function based upon the configuration of another security installation. For example, an interlock controller may be operable to cause each said door of a first security installation to be in a secure state, responsive to a received signal indicative of one or more doors (or a combination of doors) of a second security installation being in an unlocked state.

30

For example, a first security installation of a building comprising more than one security installation may be configured to place all, or at least the outer door, of the first security installation in a secure state, responsive to a received signal indicative of the outer door of a second security installation being in an unlocked state.

35

21

Preferred and optional features of the first aspect correspond to preferred and optional features of the second aspect, and preferred and optional features of the second aspect correspond to preferred and optional features of the first aspect.

5 According to a third aspect of the invention there is provided interlock apparatus for use in a security installation of the second aspect, the interlock apparatus comprising an interlock controller adapted to communicate with locking apparatus of the at least one outer door and at the least one retaining door; and to determine the state of doors associated with each said locking apparatus;

10 and the interlock controller configured to control an operation of each said locking apparatus, and to allow only one said locking apparatus in communication therewith to be in an unlocked state at a time.

Further preferred and optional features of the third aspect correspond to preferred and 15 optional features of the first and second aspects.

According to a fourth aspect of the invention there is provided a method of operating a security installation, the security installation comprising at least one retaining door having retaining door locking apparatus and providing access to a secure storage area; 20 at least one outer door having outer door locking apparatus and providing access to the at least one retaining door; and an interlock controller configured to communicate with the or each said locking apparatus; and to determine the state of each said door;

the method comprising operating access means associated with a said locking 25 apparatus, to thereby cause a signal indicative of actuation of the locking apparatus to be communicated to the interlock controller, and causing the interlock controller to determine if each said door of the security installation is closed and locked, and to either;

cause the interlock controller to disregard the signal indicative of actuation if another 30 said door is determined to be open or unlocked; or cause the interlock controller place the further locking apparatus in an actuable state (or an unlocked state) if each said door of the security installation is determined to be in a locked state.

22

The security installation may comprise an interlock controller and each said door may be associated with a control module. The method may comprise unlocking (and optionally also subsequently locking) a first said door and thereby causing a signal to be communicated to the interlock controller;

5 to thereby enable the interlock controller to determine, from the received signal, that the door has been unlocked; and to cause one or more of the or each said other locking apparatus to be in a secure state.

Each said control module (and optionally the interlock module) may be operable to 10 enter a low power condition or a powered condition. The step of unlocking (and typically also subsequently locking) a first door (preferably the or an outer door), may comprise causing the associated control module to enter a powered condition from a low power condition, and causing a signal indicative of actuation of the locking apparatus to be communicated to the interlock controller, and causing each said other 15 control module (and optionally the interlock module) to enter a powered condition from a low power condition, responsive to a received signal. Preferably, the method further comprises causing the first said door to enter a secure state.

Thus, the method may comprise unlocking and opening an outer door, and preventing 20 (i.e. causing the interlock controller to prevent) the or each retaining door from being unlocked or opened, when the outer door is unlocked or open. The method may comprise unlocking or opening a retaining door, the method thereby preventing the or each outer door (and other said retaining doors, where present) from being unlocked or opened, when the said retaining door is unlocked or open.

25

The method may comprise closing and locking a first said door (and optionally locking the door by way of the act of closing), thereby causing a signal to be communicated to the interlock controller, causing the interlock controller to determine, from the received signal, that the first door is in a locked state, and causing the interlock controller to 30 allow a second said door to be actuated, or placed in an actuable state.

Further variations and modifications to the arrangement and connectivity of the apparatus herein disclosed, and thus of the method of using the apparatus can be made within the scope of the invention herein disclosed. For example, the invention is

23

not restricted to any particular arrangement and may be implemented by any suitable arrangement of sensing means, locking apparatus and interlock module.

Description of the Drawings

5

An example embodiment of the invention will now be described with reference to the following figures in which:

Figure 1 is a schematic plan view of a room containing a cash dispenser; and

10

Figure 2 is a schematic plan view of a room containing two cash dispensers.

Detailed Description of an Example Embodiment

15 Figure 1 shows a security installation 100 comprising a secure room 1 (for example a room of a bank) comprising walls 2. Access to the room is provided by an outer door 3, which is openable about hinges 4. The outer door 3 is reinforced and is locked by a electronically actuated locking mechanism 5. The outer door is openable by use of an access code entered into a key pad 23, which and only when the locking mechanism 5 20 is in an actuable state (i.e. responsive to user input to the key pad).

Adjacent to the outer door, inside the room, is an outer door control module 6, comprising an arrangement of magnetic proximity sensors (not shown) operable to detect whether the door is open or closed. The outer door control module 6 further 25 comprises a wireless transceiver 7.

A cash dispenser 8 is located in the room and is of a conventional type; provided with apparatus 9 for dispensing cash to customers outside of the room, from a storage area 10, inside the cash dispenser. Access to the storage area is provided by a hinged 30 retaining door 11, openable about a hinge 12. The retaining door comprises a electromechanically releasable locking mechanism 13 and is openable only by use of a key and only when the magnetically releasable locking mechanism 13 is in an actuable state, i.e. when a magnetic latch mechanism (not shown) has been released.

24

The cash dispenser (also known as an ATM) is further provided with a retaining door control module 14 (which comprises a wireless transceiver 15). The retaining door control module is of the same configuration as the outer door control module and is positioned inside the storage area 10, so as to be operable to detect whether the door 5 is open or closed.

The outer door control module is in wired communication (not shown) with the electronically actuated lock mechanism 5, and the retaining door control module is in wired communication (not shown) with the electromechanical latch mechanism of the retaining door lock mechanism. As a consequence, the control modules are operable to place each of the locking mechanisms in a secured state, so preventing the doors from being unlocked, and are operable to place each of the locking mechanisms in an actuable state in which the outer door can be unlocked by use of the key pad, and the retaining door can be unlocked by use of a key.

The security installation 100 further comprises an interlock module 20, also having a wireless transceiver 21. The interlock module 20 is operable to wirelessly communicate with the outer door sensor module and the retaining door sensor module (as indicated by dotted lines of Figure 1). The interlock module is positioned within the room, within wireless communication of the sensor modules, and only accessible by way of the outer door. The interlock module is powered by a mains power supply 22, and each of the control modules are battery powered.

The interlock module and the control modules are each "ZigBee" modules, and 25 conform to the ZigBee wireless protocol. Each module is provided with RS232 inputs (or in other embodiments, not shown, RS485 inputs) and capacity to interface with other devices or wired networks. This enables the modules to be installed at existing locations and interfaced with an existing alarm system or locking apparatus.

30 The interlock module 20 and the control modules 7, 14 have identical hardware. Thus, the input corresponding to those used to connect the control modules to the respective locking apparatus of the interlock module is not used, in the example shown. The interlock module is provided with additional software, so that, in use the interlock module functions as a "master", controlling the function of the security system as a

10

15

20

25

whole, and the control modules act as "slaves", responsive to commands issued by the interlock module, as discussed below.

As a result of each of the modules having identical hardware, the interlock apparatus 5 (comprising the modules) has a high degree of flexibility. Each of the modules may be programmed as an interlock module and/or a control module, and the security system may be adapted to a particular environment. Therefore, a single type of module may be used to provide an interlocking security installation to rooms having a variety of existing doors, locking apparatus, ATMs and other installations (e.g. alarm systems, fire 10 alarms).

In an alternative embodiment (not shown) the interlock may also be positioned within wireless range, but outside of the room.

15 Use of the security installation 100, to replenish the cash in the storage area of the cash dispenser, will now be described.

The outer door locking mechanism 5 is initially in a secure state; i.e. the outer door is locked, but openable, and the outer door control module 6 is in a low power "sleep" 20 mode. When an operator enters a code into the key pad 23, a signal received by the outer door control module from the key pad (an example of access means) causes the control module to power up (so as to activate the transceiver 7) and transmit a signal to the mains powered interlock module indicative of use of the key pad.

25 The interlock module then transmits an interrogation signal to the retaining door control module, causing the retaining door control module to power up from a sleep mode, and to communicate the status of the retaining door to the interlock module.

The interlock module is then operable to determine that the retaining door is in a locked 30 state, and to transmit a signal back to the outer door control module to cause the electronic locking mechanism to be actuated. A further signal is sent to the retaining door control module to place the retaining door in a secure state, wherein the magnetic latch is engaged, so preventing the retaining door from being unlocked.

26

The operator may then open the outer door and enter the room. However, the retaining door cannot be opened.

When the outer door is closed and locked, the outer door locking mechanism sends a 5 signal to the interlock module, which determines that the outer door is closed and locked and sends a signal to the retaining door control module to allow the magnetic latch of the retaining door locking mechanism to be released, thereby placing the retaining door locking mechanism in an actuable state.

10 When the operator unlocks the retaining door, a signal is transmitted by the retaining door locking mechanism to the interlock module, and the interlock module sends a signal to the outer door control module and the outer door locking mechanism is placed in a secure state.

15 Therefore the outer door cannot be unlocked and opened until the operator has again closed and locked the retaining door.

On subsequent closure of the outer door, the system is returned to its initial state and each of the control modules returns to a low power "sleep" mode after a predetermined 20 period of time, to preserve battery life.

The only required modification to the room, outer door and the ATM is to attach each of the control modules adjacent to the corresponding door and to provide wired connections to each of the locking mechanisms. The security installation 100 can 25 therefore be installed into an existing ATM room very rapidly and with minimum disruption to service.

In an alternative embodiment (not shown), the interlock module is placed in (wired or wireless) communication with a building alarm system, so as to be operable to ensure 30 that the outer door is actuable, if an alarm signal (e.g. a fire or other safety alarm) is issued - so that an operator will not be trapped in the room.

Figure 2 shows a security installation 200, comprising a room 101 housing two cash dispensers 8a and 8b. The security installation 200 comprises an interlock module 220 35 (comprising a wireless transceiver 221) located inside storage area 10a of cash

27

dispensers 8a. The interlock module 220 comprises a wireless transceiver 221 and is additionally programmed to function as a control module, 14a. Additional reference numerals shown in Figure 2 correspond to those of security installation 100 described with reference to Figure 1, with designations "a" and "b" corresponding to respective 5 cash dispensers 8a and 8b.

The interlock module 220 draws power from an internal power supply of the cash dispenser 8a (not shown) and the control modules 7 and 15b are battery powered.

10 Use of the security system 200 is generally the same as for the system 100. However, the control modules 6 and 14b are initially in a low power "sleep" mode and the outer door locking mechanism 5 is in a default actuable state. When an operator actuates the outer door locking mechanism to open the door, the configuration of the security installation does not change in any other respect. When the outer door is subsequently 15 closed and re-locked, the outer door control module 7 powers up, and transmits a signal to the interlock module 220, causing the control module 14b also to power up. In addition, the control module 7 places the outer door locking mechanism in a secure state. The security installation is thus activated.

20 If the operator attempts to actuate either of the retaining door locking mechanisms 13a, 13b or the outer door locking mechanism 5, the corresponding control module communicates a signal to the interlock module, responsive to which the interlock module conducts an interrogation procedure. "Interrogation signals" are transmitted to the other control modules, causing them to report the current status of each of the 25 doors back to the interlock module, and (functioning as a control module) the interlock module also determines the state of retaining door 13a.

If the interlock module determines that all of the other doors are in a secure state, a signal is communicated to allow the operator to actuate a lock (i.e. to open one of the 30 ATMs or the outer door).

By conducting the interrogation procedure in this way, i.e. by polling or "pinging" each other module before an action to change the state of any of the doors, security system operates according to the state of each of the doors in "real time". Therefore the 35 security of the system is greater than operation based on stored data, because the

28

system will be able to determine is one of the doors has been forced or tampered with, and respond accordingly.

Thus, once the outer door 3 has been opened or unlocked, neither of the retaining 5 doors 11a or 11b of the cash dispensers 8a and 8b can be opened (both being in a default secure state, or having been placed in a secure state responsive to a signal from the interlock device to each of the retaining door sensor modules 14a, 14b).

Therefore, the operator cannot open the retaining doors of both cash dispensers at the 10 same time, nor can the outer door be opened when the retaining door of either cash dispenser is unlocked or open.

The outer door 3 is only returned to an actuable state (or permitted to be actuated) once the interlock module has determined that both of the retaining doors are closed 15 and locked.

Thus, only one out of the outer door or the two retaining doors may be unlocked or opened at any time, and access to only one of the storage areas 10a or 10b is possible at any one time.

20 Various modifications may be made to the above described embodiments without departing from the scope of the invention. For example, the interlock module and the sensor modules are also connectable together to form a larger security installation comprising more than one room and/or a plurality of secure storage devices (or areas). For example, the system could extend to all of the ATMs of a large banking 25 establishment (both those accessible to customers inside the bank, and those accessible from the adjacent street) and any additional safes or other secure storage devices or areas within the establishment. Systems of this nature typically comprise a plurality of outer doors. The system may also be programmable, or configured, so as to provide interlocking functionality (as described above) in relation to only certain 30 combinations of outer doors and secure storage devices, for example grouped according to the room in which they are located. Optionally, a limit could be set for the maximum number of secure storage devices in separate rooms open or openable (of the number of rooms having outer doors which are open or unlocked) at any given time. Such extended systems may also comprise multiple interlock modules, each 35 associated with a group of doors (for example those associated with a room and the

29

secure storage devices therein), the interlock modules in communication with one another, or with a central control module.

30

Claims

CLAIMS:

1. Interlock apparatus comprising an interlock controller adapted to communicate with locking apparatus of at least one outer door and at least one retaining door 5 of a security installation; and to determine the state of doors associated with each said locking apparatus;

and the interlock controller configured to control an operation of each said locking apparatus and to allow only only one said locking apparatus, or a permitted subset of the locking apparatus,in communication therewith to be in 10 an unlocked state at a time.

2. Interlock apparatus according to claim 1, wherein the interlock apparatus is configured to allow only one said locking apparatus in communication therewith to be in an unlocked state at a time.

15

3. Interlock apparatus according to claim 1 or claim 2, comprising an interlock module and one or more control modules, the control modules operable to be placed in communication with locking apparatus and to control an operation thereof, and operable to communicate with the interlock module;

20 and the interlock module operable to control an operation of each said control module;

the interlock module functioning as, or the said modules together functioning as, the interlock controller.

25 4. Interlock apparatus according to claim 3, further comprising sensing means operable to communicate with the or each said control module; the sensing means comprising one or more sensors securable proximal to a door and operable to determine the state of a door.

30 5. Interlock apparatus according to claim 3 or claim 4, comprising one or more locking units, each said locking unit securable to a door and comprising locking apparatus operable to lock and unlock a door to which the locking unit is secured, and a control module and/or an interlock module.

35

6.

A security installation comprising;

at least one retaining door having retaining door locking apparatus and providing access to a secure storage area;

at least one outer door having outer door locking apparatus and providing access to the at least one retaining door;

an interlock controller configured to communicate with the or each said locking apparatus; and to determine the state of each said door;

and the interlock controller configured to control an operation of each said locking apparatus, and to allow only one said locking apparatus, or a permitted subset of the locking apparatus, to be in an unlocked state at a time.

A security installation according to claim 6, wherein the interlock controller is configured to allow only one said locking apparatus to be in an unlocked state at a time.

A security installation according to claims 6 to or claim 7, wherein the or each outer door provides access to a room or area housing one or more secure storage devices, each having a retaining door and a secure storage area therein.

A security installation according to any one of claims 6 to 8, wherein the interlock controller is operable to determine the state of each said door responsive to signals received from said locking apparatus.

A security installation according to any one of claims 6 to 9, wherein one or more said doors is associated with sensing means, operable to produce signals indicative of the state of the door, the interlock controller operable to determine the state of the one or more said doors from signals received directly or indirectly from the sensing means.

A security installation according to claim 10, wherein the sensing means comprises one or more sensors.

A security installation according to any one of claims 6 to 11, comprising; at least one retaining door having retaining door locking apparatus and providing access to a secure storage area;

32

at least one outer door having outer door locking apparatus and providing access to the at least one retaining door; each said door associated with a control module operable to control an operation of corresponding locking apparatus;

and an interlock module configured to communicate with the or each said control module operable to control an operation thereof;

the interlock module functioning as the interlock controller and configured to determine, from received signals whether each said locking apparatus is in an unlocked state or a locked state;

and to allow only one said locking apparatus, or a permitted subset of the locking apparatus to be in an unlocked state at a time.

A security installation according to claim 12, wherein the interlock module is further operable to function as a control module.

A security installation according to any one of claims 6 to 13, wherein the default state one or more said locking apparatus is a secure state, and wherein the interlock controller is operable to place a locking apparatus in an actuable state only when the or each other locking apparatus is determined to be in a locked state.

A security installation according to any one of claims 6 to 14, wherein a said door reverts to a secure state when it is closed and the locking apparatus actuated to lock the door, in use.

A security installation according to any one of claims 12 to 15, wherein each said module is accessible only by opening the corresponding said door.

A security installation according to any one of claims 12 to 16, wherein each said module control module is battery powered.

A security installation according to claim 17, wherein only one out of the said interlock module and the or each said control module is powered by a mains power supply.

19.

33

A security installation according to claim 17 or 18, wherein each said module is battery powered.

20. A security installation according to any one of claims 12 to 19, wherein each of 5 the said modules comprises a wireless transceiver, and a said module communicates with another said module wirelessly.

21. A security installation according to any one of claims 112 to 20, comprising a locking unit associated with one or more of the said doors, each locking unit

10 comprising locking apparatus and a control module

22. Interlock apparatus for use in a security installation according to any one or claims 6 to 21.

INTELLECTUAL

PROPERTY OFFICE

Application No: GB1201719.0 Examiner: BenMunns

Claims searched: 1-21 Date of search: 2 April 2012

Patents Act 1977: Search Report under Section 17

Documents considered to be relevant:

Category

Relevant to claims

Identity of document and passage or figure of particular relevance

X

1-21

GB 1496481 A

(BRITISH RAILWAYS BOARD) see the entire document, particularly figure 1 and page 2 lines 24-42.

X

1-21

EP 0264491 A1

(BROUWERS) see entire document, particularly col.4 lines 15-16 and 24-25.

X

1-21

WO 2005/124655 A1

(NATIONAL SAFE DEPOSIT) see the entire document, particularly paragraph 37 onwards, even more particularly paragraph 41.

X

1, 6 at least

EP 1496186 A1

(SCHLIERENZAUER) see the figures and WPI Abstract Accession No.: 2005-067874 [08],

X

1, 6 at least

FR 2570747 A1

(CARMINE) see the figures and WPI Abstract Accession No.: 1986-120886 [19],

Categories:

X

Document indicating lack of novelty or inventive

A

Document indicating technological background and/or state

step

of the art.

Y

Document indicating lack of inventive step if

P

Document published on or after the declared priority date but

combined with one or more other documents of

before the filing date of this invention.

same category.

&

Member of the same patent family

E

Patent document published on or after, but with priority date

earlier than, the filing date of this application.

Field of Search:

Search of GB, EP, WO & US patent documents classified in the following areas of the UKC :

Intellectual Property Office is an operating name of the Patent Office www.ipo.gov.uk

•.'????.• INTELLECTUAL

*.*. .V PROPERTY OFFICE

35

International Classification:

Subclass

Subgroup

Valid From

E05B

0047/00

01/01/2006

E05B

0063/14

01/01/2006

E05G

0001/02

01/01/2006

E05G

0001/08

01/01/2006

E05G

0005/00

01/01/2006

G07F

0019/00

01/01/2006

Intellectual Property Office is an operating name of the Patent Office www.ipo.gov.uk