SE1351104A1 - Security system and electronic locking device for use therein, and an associated method for monitoring the handling of a security alarm event in a security alarm system - Google Patents

Abstract

28 ABSTRACT A telecare system (100) comprises a telecare alarm center (TAC) and a pluralityof telecare terrninals (TT) for use by respective caretakers (CT) at their respectivecaretaker residences (CTR). Each telecare terrninal (TTi) is conf1gured for transmitting atelecare alarrn (1) to the telecare alarrn center upon occurrence of an alarrn event at thecaretaker residence (CTRi). The telecare alarrn center is configured, as a result ofreceiving the telecare alarrn from the telecare terrninal, to transmit a telecare actionrequest (2) to a caregiving entity (CGC; SG; ES). The telecare alarrn center isconf1gured for monitoring the receipt of a telecare action performance conf1rmation (5)indicating that a caregiving person (CGPJQ SG; ES) has appeared at the caretakerresidence for the purpose of attending to the alarrn event. The telecare system alsocomprises, for each of the caretaker residences (CTR), an electronic lock device (LDi)for mounting to a door (50i) of the caretaker residence (CTRi). The electronic lockdevice comprises a transceiver (540) capable of Wireless interaction (4a) With a keydevice (KDk), an electrically controlled lock actuator (512) conf1gured for actuation of alock mechanism (52) of a lock (54) of the door, and a processing unit (510) coupled tothe transceiver and configured to cause the lock actuator to actuate the lock mechanismof the lock in response to Wireless interaction With the key device. The processing unitis further configured to cause (4b; 4b”; 4b”) generation of the telecare action performance conf1rmation (5). To be published With Fig 2

Description

A TELECARE SYSTEM AND AN ELECTRONIC LOCK DEVICE FOR USETHEREIN, AND AN ASSOCIATED METHOD FOR MONITORINGATTENDANCE TO A TELECARE ALARM EVENT IN A TELECARE SYSTEM Field of the Invention The present invention relates to telecare, and more particularly to a telecaresystem comprising a telecare alarm center and a plurality of telecare terrninals for useby respective caretakers at their respective caretaker residences, each telecare terrninalbeing configured for transmitting a telecare alarrn to the telecare alarrn center uponoccurrence of an alarrn event at the caretaker residence, wherein the telecare alarrncenter is conf1gured, as a result of receiving the telecare alarrn from the telecareterrninal, to transmit a telecare action request to a caregiving entity, and wherein thetelecare alarrn center is conf1gured for monitoring the receipt of a telecare actionperformance conf1rmation indicating that a caregiving person has appeared at thecaretaker residence for the purpose of attending to the alarm event.

The invention also relates to an associated method of monitoring attendance to atelecare alarm event in a telecare system. Furthermore, the invention also relates to an electronic lock device for use in such a telecare system.

Background of the Invention In modem times, as our society is facing an ageing population, needs and expectationshave arisen for an efficient and yet dignif1ed manner of allowing elderly people, as wellas peoples with physical, medical or mental handicaps, to remain living at their privateresidences or day care centers, rather than conventional caretaking institutions such ashospitals.

People in the categories above often need attendance or assistance on a frequentbasis. Such attendance or assistance is typically scheduled and provided by personnelfrom a caregiver center, which visits the caretaker a number of times a day or week toperform housekeeping, medication or nursing services. However, the need forattendance or assistance cannot always be predicted and scheduled in advance; thecaretaker may be subj ected to an accident, sudden illness or another kind of situationwhere urgent attendance or assistance is needed. To this end, the field of telecaresystems has evolved. An example of a typical telecare system 10 is shown in Fig 1.

In the telecare system 10 of Fig 1, a telecare alarm center TAC is provided.

Moreover, a plurality of telecare terrninals, TT, are provided for use by respective caretakers, CT, at their respective caretaker residences, CTR. (Only one caretakerresidence, CTRi, one caretaker, CTi, and one telecare terminal, TTi, are seen in Fig l.)Each individual telecare terrninal TT, is conf1gured for transmitting a telecare alarrn l tothe telecare alarrn center when an alarrn event occurs in the particular caretakerresidence CTRi in which that telecare terrninal TT, is installed. Typically, the alarrnevent may be triggered by the caretaker CT, actuating an alarrn button on the telecareterrninal TTi, hence signaling for assistance or attendance.

The telecare terrninal TT, may typically take the forrn of a stationary telephonedevice which is connected via a communications channel 102 to the telecare alarrncenter TAC. The communications channel l02 may typically involve a Public SwitchedTelephone Network (PSTN), a mobile telecommunication network (e. g. GSM, UMTS,LTE) or a wide area network (WAN) (e. g. a broadband IP network), or combinationsthereof Quite often, the telecare terrninal TT, is supplemented by a portable unit, suchas a wristbelt device carried around the caretaker°s wrist. Such a wristbelt devicetypically has an alarrn button and wireless communication means for transmitting alocal alarrn signal to the telecare terrninal, which as a result generates and sends thetelecare alarrn l to the telecare alarrn center TAC.

As seen in Fig l, the telecare alarrn center TAC has a telecare alarrn centerserver, TAC-S, and a telecare alarrn center database, TAC-DB. When receiving thetelecare alarrn l from the telecare terrninal TTi, the telecare alarrn center TAC isconf1gured to transmit a telecare action request 2 to a caregiving entity. This may bedone purely automatically or by one or more human operators located at the telecarealarrn center TAC, using a computer program run on the telecare alarrn center serverTAC-S and reference data stored in the telecare alarrn center database, TAC-DB.

The telecare alarrn center TAC sends the telecare action request 2 over acommunications channel l04 to the caregiving entity. The communications channel l04may typically involve a PSTN, a mobile telecommunication network or WAN, orcombinations thereof Typically, the caregiving entity will be a caregiver center (CGC)which norrnally provides scheduled caregiving services to the caretaker CTi. By issuingthe telecare action request 2 to the caregiver center CGC, the telecare alarrn center TACthus urges the caregiver center CGC to attend to the abnormal (i.e. non-scheduled)alarrn situation at the caretaker°s residence CTRi, and expects confirmatory informationfrom the caregiver center CGC.

To this end, the caregiver center CGC typically sends a telecare action request conf1rmation 3 back to the telecare alarrn center TAC upon receipt of the telecare action request 2. This may cause the telecare alarm center TAC to move the alarm event froma “code red” status (an unresolved alarm event has been reported) to a “code yellow”status (an appropriate action has been requested). However, the telecare alarm centerTAC must keep on monitoring the developments of the alarm event, since it has not yetany knowledge whether the alarm event has actually been attended to.

The caregiver center CGC may have a caregiver center server CGC-S and acaregiver center database CGC-DB to allow automatic or operator-controlled allocationof an actual person to be instructed to attend to the alarm event, and, ultimately, thecaretaker CTi, at the caretaker residence CTRi. This actual person may often be oneamong a team of caregiver personnel CGP being in service at the caregiver center CGC.Such a person is indicated as CGPi in Fig 1.

The allocated action-taking, caregiving person CGPi is then expected totransport himself, as seen at 120, to the caretaker residence CTRi, enter it typicallythrough a front door 50i, and of course attend to the alarm event (caretaker CTi) whichgave rise to the telecare alarm 1. The caregiving person CGPi is expected to report backto the caregiving entity which sent him (i.e. the caregiver center CGC in Fig 1). To thisend, the caregiving person CGPi sends a telecare action performance report 4 over acommunication channel 106, which may typically involve a PSTN, a mobiletelecommunication network or WAN, or combinations thereof. This may be made orallyas a phone report over a conventional phone call (for instance via the telecare terminalTTi or a mobile phone carried by the caregiving person CGPi). Altematively, it may bedone electronically by executing a certain reporting function in a computer program runby a portable computer terminal or smartphone carried by the caregiving person CGPi,or being installed in the caretaker residence CTRi.

Upon receipt of the telecare action performance report 4, the caregiving entity(i.e. the caregiver center CGC in Fig 1) will typically generate a telecare actionperformance conf1rmation 5 and send it to the telecare alarm center TAC over acommunication channel, such as channel 104 in Fig 1 or a separate channel. Uponreceipt of the telecare action performance conf1rmation 5, the telecare alarm center TACmay move the alarm event from the “code yellow” status to a “code green” status,representing completion of the handling of the alarm event related to the telecare alarm1 from the telecare alarm center TAC°s point of view.

Telecare systems in the prior art, including the telecare system 10 of Fig 1 as described above, have a number of shortcomings and drawbacks.

One problem lies in the low degree of confidence, or trust, that the telecarealarm center TAC can put in the responsive information received from or about thecaregiving entity, and its correlation with an actual appearance by the right caregiverperson at the right caretaker residence. It is to be noticed that the telecare action requestconfirrnation 3 from the caregiver center CGC only confirrns to the telecare alarrncenter TAC that the telecare action request 2 has been duly received; it says nothingabout the actual attendance to the alarrn event in question.

Moreover, the fact that the caregiving person CGP, himself generates thetelecare action performance report 4 has its drawbacks. Firstly, the telecare alarrn centerTAC (nor the caregiver center CGC) cannot know where the caregiving person CGP, isactually located when he generates the report. There is a risk that the caregiving personCGP, generates the report too early, i.e. on his way l20 to the caretaker residence CTR,,before arriving there. Then, if for some reason the caregiving person CGP, does notactually appear at the caretaker residence CTR,, the telecare alarrn center TAC will clearthe alarrn situation based on the misunderstanding that the alarrn event has beenattended to, even though this is actually not the case. As a result, the caretaker CT, willbe let down and left on his own without attendance, which of course may be potentiallyvery hazardous.

And, even if the caregiving person CGP, does appear at the right caretakerresidence CTR, and generates the telecare action performance report 4 while being atthe foresteps of the door 50,, this does not necessarily mean that he will able to accessthe caretaker residence CTR,, i.e. does he have the right key to the door 50,? The situation is complicated even further by the fact that in some situations andfor some caretakers CT, the caregiving entity that received the telecare action request 2will have to invoke an altemative caregiving entity to attend to the alarrn situation. Suchan altemative caregiving entity may for instance be a security guard service or anemergency service, not seen in Fig l but indicated on other drawings as SG and ES,respectively. This may be the case for instance when the nature of the alarrn event issuch that special resources are required, e. g. a reported burglar attempt, a suspected firehazard, or life-threatening sudden illness of the caretaker CT,.

A related situation is with certain kinds of caretakers CT who do not needregular, scheduled attention by the caregiver center CGC but still has some impairrnentwhich motivates the provision of a telecare terminal TT for safety reasons should anoccasional abnormal situation occur at the caretaker residence CTR,. In such a case, the caretaker CT may not even be a known user at the caregiver center CGC, and the telecare alarm center TAC Will have to send the telecare action request 2 directly to thealternative caregiving entity Without iiivolving the caregiver center CGC. Alternativecaregiving entities SG, ES typically have thousands of potential caretakers CT. Not onlyis it uncertain if they have a copy of the right key to the caretaker residence CTRi, but inaddition it is at best uncertain if they are familiar With the correct Way of reporting backto the telecare alarrn center TAC upon attendance of the alarrn event. Therefore, theproblem from the telecare alarrn center TAC”s perspective, to obtain an efficient andconfident monitoring of the attendance to a telecare alarrn event, is made even harder.

Generally, in the field of telecare, there is room for improvements When it comesto the reporting or monitoring of a caregiving person having appeared at a caretaker residence for the purpose of attending to an alarrn event at the caretaker residence.

Summarv of the Invention In view of the above, an objective of the invention is to solve or at least reducethe problems discussed above.

In view of the above, a first aspect of the present invention is a telecare system,comprising a telecare alarrn center and a plurality of telecare terrninals for use byrespective caretakers at their respective caretaker residences, each telecare terminalbeing configured for transmitting a telecare alarrn to the telecare alarrn center uponoccurrence of an alarrn event at the caretaker residence.

The telecare alarrn center is configured, as a result of receiving the telecarealarrn from the telecare terminal, to transmit a telecare action request to a caregivingentity. The telecare alarrn center is configured for monitoring the receipt of a telecareaction performance confirrnation indicating that a caregiving person has appeared at thecaretaker residence for the purpose of attending to the alarrn event.

The telecare system is characterized by: for each of the caretaker residences, an electronic lock device for mounting to adoor of the caretaker residence, Wherein the electronic lock device comprises: a transceiver capable of Wireless interaction With a key device; an electrically controlled lock actuator configured for actuation of a lockmechanism of a lock of the door; and a processing unit coupled to the transceiver and configured to cause the lockactuator to actuate the lock mechanism of the lock in response to Wireless interactionWith the key device. The processing unit is further configured to cause generation of the telecare action performance confirrnation.

In one or more embodiments, the processing unit of the lock device isconfigured to cause generation of the telecare action perforrnance confirrnation onlyonce the key device has been Verified as having the authority to actuate the lockmechanism of the lock of the door to which the lock device is mounted.

Furthermore, the processing unit of the lock device may be configured to verifythe authority of the key device by analyzing the compliance of access control datareceived from the key device during the wireless interaction, with respect to accesscontrol data stored in the lock device.

In one or more embodiments, the telecare system further comprises an accesscontrol system for the purpose of controlling the access to the plurality of lock devicesfor a plurality of users with a plurality of key devices, wherein the access control systemincludes an access control system server and an access control system database, theaccess control system database being configured to contain cross-reference data thatdef1nes the access rights of respective ones of the key devices and corresponding onesof the users to respective ones of the lock devices.

Furthermore, each lock device may comprise a local database configured to storea replicated version, or a subset thereof, of the contents of the access control systemdatabase, wherein the processing unit of the lock device is configured to verify theauthority of the key device by deterrnining an identity of the key device during thewireless interaction and by checking the authority of the key device thus identified bycross-reference in the local database.

In one or more embodiments, the processing unit of the lock device isconfigured to cause generation of the telecare action performance confirrnation bygenerating the telecare action performance confirrnation locally in the lock device andsending it to the key device for further forwarding towards the telecare alarm center.

Furthermore, the generated telecare action performance confirrnation may beforwarded by the key device through the access control system to the telecare alarmcenter.

In one or more embodiments, the processing unit of the lock device isconfigured to cause generation of the telecare action performance confirrnation bygenerating the telecare action performance confirrnation locally in the lock device andsending it to the telecare terminal for further forwarding to the telecare alarm center.

The lock device may further comprise a local battery power unit as a power source for powering the lock device, wherein the processing unit of the lock device is further configured to include, in or with the generated telecare action performanceconfirmation, inforrnation about a remaining charge level of the battery power unit.

In one or more embodiments, the processing unit of the lock device isconfigured to cause generation of the telecare action performance confirrnation byinstructing or allowing the key device, once verified as having the authority to actuatethe lock mechanism of the lock of the door to which the lock device is mounted, togenerate the telecare action performance confirmation and send it towards the telecarealarm center.

In one or more embodiments, where the caregiving entity to which the telecareaction request is transmitted is a caregiver center, the processing unit of the lock devicemay be configured to cause generation of the telecare action performance confirrnationby instructing or allowing the key device, once verified as having the authority toactuate the lock mechanism of the lock of the door to which the lock device is mounted,to generate a telecare action performance report to be sent to the caregiver center, andthe caregiver center may be configured, in response to receiving the telecare actionperformance report, to generate the telecare action performance confirrnation and sendit to the telecare alarm center.

In one or more embodiments, the processing unit of the lock device isconfigured to cause generation of the telecare action performance confirrnation byinforrning the key device that it has been verified as having the authority to actuate thelock mechanism of the lock of the door to which the lock device is mounted, the keydevice reporting this to the access control system, and the access control system beingconfigured to generate the telecare action performance confirmation and send it to thetelecare alarm center.

The aforementioned caregiving entity may, for instance, include one or more ofa caregiver center, a security guard service and an emergency service.

The aforementioned occurrence of an alarm event at the caretaker residencemay, for instance, include one or more of manual actuation by the caretaker of an alarmfunction of the telecare terminal, automatic detection by a sensor device of an abnormalcondition for the caretaker, and automatic detection by a sensor device of an abnormalcondition for the caretaker residence.

Further features of the telecare system according to the first aspect of the invention appear from the detailed description and drawings.

A second aspect of the present invention is a method of monitoring attendance toa telecare alarm event in a telecare system, Where the method involves, at a telecarealarm center: receiving a telecare alarm from a telecare terminal located at a caretakerresidence; transmitting a telecare action request to a caregiving entity so as to initiate atelecare action involving attending to an alarm event at the caretaker residence; and monitoring for receipt of a telecare action performance conf1rmation indicatingthat a caregiving person has appeared at the caretaker residence for the purpose ofattending to the alarm event, Wherein generation of the telecare action performance conf1rmation has beencaused by an electronic lock device being mounted to a door of the caretaker residenceand being configured for actuation of a lock mechanism of a lock of the door inresponse to Wireless interaction With a key device.

In addition, the second aspect of the present invention may comprise steps forperforming any of the functional features of the telecare system referred to above for thefirst aspect of the invention.

A third aspect of the present invention is an electronic lock device for mountingto a door of a caretaker residence and for use in a telecare system Which has a telecarealarm center and a plurality of telecare terrninals for use by respective caretakers at theirrespective caretaker residences, each telecare terminal being configured for transmittinga telecare alarm to the telecare alarm center upon occurrence of an alarm event at thecaretaker residence, Wherein the telecare alarm center is conf1gured, as a result ofreceiving the telecare alarm from the telecare terrninal, to transmit a telecare actionrequest to a caregiving entity, and Wherein the telecare alarm center is conf1gured formonitoring the receipt of a telecare action performance conf1rmation indicating that acaregiving person has appeared at the caretaker residence for the purpose of attending tothe alarm event.

The electronic lock device is characterized by: a transceiver capable of Wireless interaction With a key device; an electrically controlled lock actuator configured for actuation of a lockmechanism of a lock of the door; and a processing unit coupled to the transceiver and configured to cause the lockactuator to actuate the lock mechanism of the lock in response to Wireless interaction With the key device, wherein the processing unit is further configured to cause generation of thetelecare action perforrnance confirrnation.

In addition, the third aspect of the present invention may comprise means orother structural elements capable of performing the same or corresponding functions ofthe lock device in the telecare system referred to above for the first aspect of theinvention.

Other objectives, features and advantages of the present invention will appearfrom the following detailed disclosure as well as from the drawings.

Generally, all terms used in the claims are to be interpreted according to theirordinary meaning in the technical field, unless explicitly defined otherwise herein. Allreferences to "a/an/the [element, device, component, means, step, etc]" are to beinterpreted openly as referring to at least one instance of said element, device,component, means, step, etc., unless explicitly stated otherwise. The steps of anymethod disclosed herein do not have to be performed in the exact order disclosed, unless explicitly stated.

Brief Description of the Drawings The above, as well as additional objectives, features and advantages of thepresent invention, will be better understood through the following illustrative and non-limiting detailed description of embodiments of the present invention, reference beingmade to the appended drawings.

Fig 1 is a schematic view of a telecare system according to the prior art.

Fig 2 is a schematic view of a telecare system illustrating the present inventionin general terms.

Figs Sa to 3c are schematic views of different exemplary embodiments of thetelecare system according to the present invention.

Fig 4 is a schematic block diagram of an exemplary key device which mayinteract with an electronic lock device in the telecare system shown in the otherdrawings.

Fig 5 is a schematic block diagram of an electronic lock device according to oneembodiment of the present invention, adapted for use in the telecare system shown inthe other drawings.

Fig 6 is a schematic view of an access control system which may be used in embodiments of the telecare system shown in the other drawings.

Fig 7 is a schematic flowchart diagram of a method of monitoring attendance toa telecare alarm event in a telecare system according to one embodiment of the present invention.

Detailed Description of Embodiments Fig 2, Which is a schematic view of a telecare system 100 illustrating the presentinvention in general terms, Will now be described. Reference numerals Which are thesame as in the prior art telecare system 10 of Fig 1 represent the same or functionallyequivalent elements as those in Fig 1; the description of those elements has thereforealready been given in the background section and Will not be repeated in detail in thepresent section for reasons of brevity. The following brief description is consideredfully sufficient.

The telecare system 100 of Fig 2 comprises a telecare alarm center TAC and aplurality of telecare terrninals TT for use by respective caretakers CT at their respectivecaretaker residences CTR. Each telecare terminal TTi is conf1gured for transmitting atelecare alarm 1 to the telecare alarm center upon occurrence of an alarm event at thecaretaker residence CTRL The alarm event at the caretaker residence CTRi may for instance occur becauseof manual actuation by the caretaker CTi of an alarm function of the telecare terminalTTi. This may involve pressing an alarm button on the telecare terminal or an alarmbutton on a Wristbelt, as described in the background section.

Altematively, the alarm event at the caretaker residence CTRi may occurbecause of automatic detection by a sensor device of an abnormal condition for thecaretaker. Such a sensor device may for instance be an accelerometer-based or opticalfall sensor detecting a fall accident for the caretaker, a movement sensor detecting aperiod of immobility for the caretaker, or an acoustic sensor detecting a cry for help or amoan from the caretaker.

As a further altemative, the alarm event at the caretaker residence CTRi mayoccur because of automatic detection by a sensor device of an abnormal condition forthe caretaker residence. Such a sensor device may for instance be a smoke, fire orhumidity sensor detecting a hazardous situation in the caretaker residence, or a burglaralarm sensor detecting a burglar attempt into the caretaker residence.

As already described in the background section, the telecare alarm center TAC isconf1gured, as a result of receiving the telecare alarm 1 from the telecare terminal TTi, to transmit a telecare action request to a caregiving entity. The caregiving entity is ll shown to be a caregiver center CGC in Fig 2; it may however be an alternativecaregiving entity such as a security guard service SG or an emergency service ES.In response, as in Fig 1, the caregiving entity may issue a telecare action requestconfirmation 2 to the telecare alarrn center TAC.

The telecare alarrn center TAC is conf1gured for monitoring the receipt of atelecare action performance confirrnation 5 indicating that a caregiving person CGPJ- (oraltematively SG or ES) has appeared at the caretaker residence CTRi for the purpose ofattending to the alarm event, The novel and inventive features of the telecare system 100 of Fig 2 over theprior art telecare system 10 of Fig 1 will now be described.

For each of the caretaker residences CTR, an electronic lock device LDi isprovided for mounting to a door 50i of the caretaker residence CTRi. The electronic lockdevice LDi, possible but non-limiting embodiments of which will be described in moredetail later with reference to for instance Fig 5, comprises a transceiver (Fig 5, 540)capable of wireless interaction 4a with a key device KDk. Possible but non-limitingembodiments of the key device KDk which will be described in more detail later withreference to for instance Fig 4.

The electronic lock device LDi also comprises an electrically controlled lockactuator (Fig 5, 512) conf1gured for actuation of a lock mechanism (Fig 5, 52) of a lock(Fig 5, 54) of the door 50,.

The electronic lock device LDi furtherrnore comprises a processing unit (Fig 5,510) coupled to the transceiver and configured to cause the lock actuator to actuate thelock mechanism of the lock in response to wireless interaction with the key device KDk.The processing unit is further configured to cause 4b generation of the telecare actionperformance confirrnation 5, to be received by the telecare alarm center TAC. As isindicated schematically at 130 in Fig 2, this may occur in cooperation with otherelements in the telecare system 100. Possible but non-limiting embodiments in thisregard will be described later with reference to Figs 3a to 3c.

Hence, from a fianctional perspective and as is also illustrated in Fig 7, thetelecare alarm center TAC operates in the following manner to monitor the attendanceto a telecare alarm event in the telecare system 100: First, in a step 710, the telecare alarm center TAC receives a telecare alarm 1 from a telecare terminal TT, located at a caretaker residence CTRi. 12 Then, in a step 720, the telecare alarm center TAC transmits a telecare actionrequest 2 to a caregiving entity CGC, SG or ES so as to initiate a telecare actioninvolving attending to an alarrn event at the caretaker residence CTRi.

Further on, in a step 730, the telecare alarrn center TAC monitors for receipt of atelecare action perforrnance confirrnation 5 indicating that a caregiving person CGPj,SG or ES has appeared at the caretaker residence for the purpose of attending to thealarrn event, wherein generation of the telecare action perforrnance confirrnation hasbeen caused 4b by an electronic lock device LDi being mounted to a door 50i of thecaretaker residence and being configured for actuation of a lock mechanism 52 of a lock54 of the door in response to wireless interaction 4a with a key device KDi.

The provision of an electronic lock device LDi, which interacts wirelessly with akey device KDk and which serves to cause 4b generation of the telecare action perfor-mance confirmation 5, in the telecare system 100 will solve or at least reduce the prob-lems discussed above with reference to the prior art telecare system 10. This will bemore apparent from the remainder of this detailed description, particularly withreference to Figs 3a to 3c.

First, however, Fig 4 is a schematic block diagram of an exemplary key deviceKD which may interact with an electronic lock device LD in the telecare system 100shown in the other drawings. In the example disclosed in Fig 4, the key device KD is amobile terminal, e.g. a cellular telephone, personal digital assistant (PDA), smart phone,surf pad, etc., which is capable of communicating with a telecommunications system.Thus, the caregiving person CGPj, SG or ES may use the key device KD for varioustelecommunication services, such as voice calls, Intemet browsing, video calls, datacalls, facsimile transmissions, still image transmissions, video transmissions, electronicmessaging, and e-commerce. Generally, these telecommunication services are notcentral within the context of the present invention; there are no limitations to anyparticular set of services in this respect. Therefore, only components which aresomehow pertinent to the inventive fi.1nctionality are shown in Fig 4.

As seen in Fig 4, the key device KD has a network interface 430 for connectingto one or more communications network(s). The network interface 430 may complywith any commercially available mobile telecommunications standard, including but notlimited to GSM, UMTS, LTE, D-AMPS, CDMA2000, FOMA and TD-SCDMA.Altematively or additionally, the network interface 430 may comply with a wirelessdata communication standard such as WLAN (Wireless Local Area Network)/WiFi. In an advantageous embodiment, the key device KD communicates with an access control 13 system ACS Which is shown in Fig 3a and Will be described in more detail Withreference to Fig 6.

The key device KD also has a user interface 420, Which may include a display422 and a set of keys 424 or other input device, as Well as other known user interfaceelements like a speaker and a microphone. The caregiving person CGPj, SG or ES maycontrol the operation of, and exchange data With, the key device KD over the user inter-face 420.

Further, the key device KD has a Wireless transceiver 440 for interaction 4a(and, if applicable, 4b, Fig 3a; 4b”, Fig 3b) With the electronic lock device LD. In anadvantageous embodiment, the Wireless transceiver 440 is capable of short-rangeWireless data communication such as, for instance, Bluetooth®, WLAN/WiFi, NFC(Near Field Communication), RF-ID (Radio Frequency Identification) or IrDA (InfraredData Association).

A processing unit 4l0 is the overall responsible for the operation and control ofthe different components of the key device KD. The processing unit 4l0 may beimplemented in any knoWn controller technology, including but not limited to aprocessor (PLC, CPU, DSP), FPGA, ASIC or any other suitable digital and/or analoguecircuitry capable of performing the intended fianctionality.

Finally, the key device KD has a memory 450 Which is operatively connected tothe processing unit 4l0. The memory 450 may be implemented by any knoWn memorytechnology, including but not limited to E(E)PROM, S(D)RAM and flash memory, andit may also include secondary storage such as a magnetic or optical disc. Physically, thememory 450 may consist of one unit or a plurality of units Which together constitute thememory 450 on a logical level. In some embodiments, it may be implemented at leastpartly by a storage area in another component of the key device KD, such as theprocessing unit 4l0 and/or the Wireless transceiver 440.

In addition to storing various program instructions and data for the variousfunctions and applications Which are typically available in a mobile terminal, thememory 450 may also comprise computer program instructions 452 for an accesscontrol application used by the caregiving person When seeking access to the caregiverresidence CTR, by actuating the lock of the door 50, through the electronic lock deviceLD.

The memory 450 may also comprise prestored access control data 470 to betransmitted to the electronic lock device LD When access to the caregiver residence CTR, is sought. Altematively or additionally, access control data 470” may be input by 14 the caregiving person Via the user interface 420 of the key device KD, for transmissionto the electronic lock device LD when access to the caregiver residence CTRi is sought.Altematively or additionally, access control data 470” may be retrieved by the keydevice KD from a remote server (such as, for instance an access control server AC S_Sshown in Fig 6) before or during the access attempt to the caregiver residence CTRi.

Other kinds of key devices than mobile terminal may be operable in and with thetelecare system l00, including but not limited to RF-ID tags or NFC enabled devices.

Fig 5 is a schematic block diagram of an electronic lock device LD according toone embodiment of the present invention, adapted for use in the telecare system l00shown in the other drawings. The electronic lock device LD is adapted for mounting toa door 50 of a caretaker residence CTR, and more specifically serves to cause actuationof a lock mechanism 52 of a lock 54 of the door to the caretaker residences (CTR) bymeans of an electrically controlled lock actuator 5 l2, so as to allow the door 50 to beopened. Hence, to “cause actuation of a lock mechanism of a lock” shall be construed,in this document, to include the activity of affecting directly or indirectly a member,means, element, module, etc, of the lock mechanism so that the lock switches from afirst state in which unlocking of the lock is prevented to a second state in whichunlocking of the lock is no longer prevented.

With reference to Fig 5, the lock device LD generally comprises the followingmain components. A processing unit 5 l0 is the overall responsible for the operation andcontrol of the different components of the lock device LD. The processing unit 5 l0 maybe implemented in any known controller technology, including but not limited to aprocessor (PLC, CPU, DSP), FPGA, ASIC or any other suitable digital and/or analoguecircuitry capable of performing the intended fianctionality.

The processing unit 5 l0 is operatively coupled to the lock actuator 5 l2 so as tocause actuation of the lock mechanism 52 upon successful verification of the key deviceKD°s authority to unlock the lock 54 (i.e. to gain access to the caretaker residenceCTR).

The lock device LD of the illustrated embodiment is a stand-alone, autono-mously operating device which requires no wire-based installations, neither forcommunication nor for power supply. Instead, the lock device LD is powered by a localbattery power unit 520 which comprises one or more long-life batteries. It interacts withkey devices KD, as already mentioned, by wireless activities. The lock device 40therefore has a wireless transceiver 540 for interaction 4a (and, if applicable, 4b, Fig Sa;4b°, Fig 3b) with the key device KD. In an advantageous embodiment, the wireless transceiver 540 is capable of short-range Wireless data communication such as, forinstance, Bluetooth®, WLAN/WiFi, NFC, RF-ID or IrDA.

The lock device LD of the disclosed embodiment further includes a real-timeclock 530 capable of providing the processing unit 5 l0 With an accurate value of thecurrent time. HoWever, embodiments are also possible Where no real-time clock isprovided.

Finally, the lock device LD has a memory 550 Which is operatively connected tothe processing unit 5 l0. The memory 550 may be implemented by any known memorytechnology, including but not limited to E(E)PROM, S(D)RAM and flash memory, andit may also include secondary storage such as a magnetic or optical disc. Physically, thememory 550 may consist of one unit or a plurality of units Which together constitute thememory 550 on a logical level. In some embodiments, it may be implemented at leastpartly by a storage area in another component of the lock device LD, such as theprocessing unit 5 l0 and/or the Wireless transceiver 540.

The memory 550 serves to store various computer program instructions andWork data for functions to be performed by the processing unit 5 l0 in order to carry outthe tasks of the lock device LD. For instance, these program instructions define a mainaccess control module 552 Which is responsible for the general parts of the lock device-side filnctionality When interacting With the KD for the purpose of a potential unlockingof the lock of the door 50. A communication module 560 Will handle the actualcommunication With the key device KD in cooperation With the Wireless transceiver540. There may also be an encryption/decryption module for safe communication to andfrom the lock device LD, such encryption/decryption being based, for instance, on AES(Advanced Encryption Standard).

Moreover, the memory 550 serves to store access control data 570 to be used fordeterrnining Whether or not the KD Which is seeking access to the caregiver residenceCTR, shall be granted access or not. In one embodiment, such stored access control data570 may be contained in a local database LD_DB stored in the memory 550.

The processing unit 5 l0 of the lock device LD is preferably configured to causegeneration of the telecare action performance confirmation 5 only once the key deviceKD has been verified as having the authority to actuate the lock mechanism 52 of thelock 54 of the door 50, to Which the lock device LD is mounted. This represents animprovement over the prior art telecare system l0 of Fig l, in that it has now been made sure that the telecare action performance confirmation 5 Will be generated only if the 16 key device KD has been found to be allowed to access the caretaker residence CTR andhas actually caused unlocking of the lock 54 of the door 50.

Hence, the processing unit 510 of the lock device LD is configured to verify theauthority of the key device KD by analyzing the compliance of the access control data470, 470°, 470” as received from the key device KD during the wireless interaction 4a,with respect to the access control data 570 stored in the lock device LD.

In one or more embodiments, this analysis may involve checking an identity 470of the key device KD against a prestored allowed key device identity 570 or a list ofallowed key device identities in the LD_DB. Such a key device identity may, forinstance, be represented by a Bluetooth® ID, a MAC address, an IP address, a WiFiaddress, a serial number, and combinations thereof.

In one or more embodiments, this analysis may involve checking user data 470°,having been input on the key device by the caregiving person caregiving person CGPj,SG or ES, against corresponding reference data 570 in the electronic lock device LD.Such user data may for instance pertain to a password or PIN code, a fingerprint image,an image for face recognition, an image for retinal scan, etc.

In one or more embodiments, this analysis may involve validating a receiveddigital certificate or signature 470 by using asymmetric cryptographic principles.

In one or more embodiments, this analysis may involve checking a receivedshared secret 470 against a stored copy 570 of the shared secret.

Combinations of these exemplary altematives are also possible; the lock deviceLD may in other words verify the authority of the key device KD by two or more testsor analyses in combination.

Once the key device KD has been successfully verified as authorized, theprocessing unit 510 will control the lock actuator 512 to cause actuation of the lockmechanism 52 of the lock 54. In addition, the processing unit 510 will also causegeneration of the telecare action performance confirrnation 5, as already mentioned.

For further possible implementation details and possible additional componentsof the lock device LD, reference is for instance made to WO 2006/098690, WO2008/ 101930 and WO201 1/065 892, which are fially incorporated herein byreference.

Reference is now again made to the processing unit 510 in the electronic lockdevice LDi, and more specifically how it may be configured to cause 4b generation ofthe telecare action performance confirrnation 5, to be received by the telecare alarm center TAC, as was indicated only on a schematic level at 130 in Fig 2. Possible but 17 non-limiting embodiments in this regard will hence now be described with reference toFigs 3a to 3c. Reference numerals which are the same in any of Figs 3a to 3c as in anyof the preceding drawings represent the same or functionally equivalent elements asthose in the preceding drawing.

In Fig 3a, or more specif1cally in one embodiment thereof, the processing unit510 of the lock device LDi may be configured to cause 4b generation of the telecareaction perforrnance confirrnation 5 by generating the telecare action perforrnanceconfirmation 5 locally in the lock device LD, and sending it to the key device KDk forfurther forwarding towards the telecare alarrn center TAC, as seen at 4c, via the networkinterface 430.

Hence, in this embodiment, the lock device itself creates the telecare actionperforrnance confirrnation 5 and uses the key device as a courier or relay station to sendthe telecare action perforrnance confirmation 5 to or towards the telecare alarrn centerTAC. In one embodiment, where the telecare system 100 also involves an access controlsystem ACS (which will be described in more detail below with reference to Fig 6), thegenerated telecare action perforrnance confirrnation 5 is forwarded by the key deviceKDk through the access control system ACS to the telecare alarrn center TAC. Inanother embodiment, the generated telecare action perforrnance confirrnation 5 is sentby the key device KDk to the telecare alarrn center TAC through a communicationchannel such as a PSTN, a mobile telecommunication network or WAN, orcombinations thereof In still an altemative embodiment, the generated telecare actionperforrnance confirrnation 5 may be sent by the key device KDk to the telecare alarrncenter TAC through the caregiver center CGC.

In yet another embodiment, the processing unit 510 of the lock device LDi isconfigured to cause 4b° generation of the telecare action perforrnance confirrnation 5 byinstructing or allowing the key device KDk, once verified as having the authority toactuate the lock mechanism 52 of the lock 54 of the door 50i to which the lock deviceLD, is mounted, to generate the telecare action perforrnance confirrnation 5 and send itto or towards the telecare alarrn center TAC.

Hence, in this embodiment, the lock device itself does not create the telecareaction perforrnance confirrnation 5 but commands the key device to generate thetelecare action perforrnance confirrnation 5 and send it to or towards the telecare alarrncenter TAC - thereby in effect causing, or initiating, the generation of the telecareaction perforrnance confirrnation 5. In this embodiment, too, the generated telecare action perforrnance confirrnation 5 may be sent by the key device KDk through the 18 access control system ACS of Fig 6 to the telecare alarm center TAC, or altematively tothe telecare alarrn center TAC through a communication channel such as a PSTN, amobile telecommunication network or WAN, or combinations thereof In still another embodiment, the processing unit 5 l0 of the lock device LD, isconfigured to cause 4b generation of the telecare action performance confirrnation 5 byinforrning the key device KDk that it has been verified as having the authority to actuatethe lock mechanism 52 of the lock 54 of the door 50, to which the lock device LD, ismounted, the key device KDk reporting this to the access control system ACS, and theaccess control system ACS being configured to generate the telecare action performanceconfirmation 5 and send it to the telecare alarm center TAC.

Fig 6 illustrates, in a schematic and simplified form, the layout of anembodiment of the access control system ACS referred to in Fig 3a, as well as thetypical caregiving environment in which it is operational. A first team of caregiverpersonnel CGP is responsible for the care of a first group of caretakers (cf CT in thepreceding description), all living in respective caretaker residences (cf CTR in thepreceding description) covered by respective front doors 501-501.. Electronic lockdevices LDl-LDn are installed on the respective front doors 501-501, and serve asgateways to the respective protected environment (i.e. the caretaker residence) behindeach door. A first pool of key devices KDl-KDm is available to the first team ofcaregiver personnel CGP_ The key devices KDl-KDm may for instance be mobileterrninals. Each lock device LDl-LDn contains some sort of access control data (cf 570in Fig 5), which may be used when assessing whether or not a particular key device is tobe granted access to the caretaker residence.

When a caregiver person from the first team starts his shift, he may check outone of the key devices KDl-KDm from a caregiver center (cf CGC in the precedingdescription), for instance key device KD1. During his shift, he may use key device KD1to gain access to various ones of the front doors 501-501, to provide the care andattention required by the respective caretakers (provided that his key device KD1 has theauthority). This access will be provided by way of wireless communication between keydevice and lock device, as previously described. At the end of his shift, the caregiverperson may again check in and retum the key device KD1 to the caregiver center. Inaddition or altematively, some or all members of the first team of caregiver personnelCGP may use their own mobile terrninals as key devices. Not all key devices or members of the first team of caregiver personnel CGP may be authorized to access all 19 doors, and they need not all have the same level of authorization in terms of timesand/or dates When access is allowed.

As seen in Fig 6, the caregiving environment further involves a second team ofcaregiver personnel CGP” responsible for serving a second group of caretakers, thecaretaker residences of Which have respective front doors 501=-5 0,1, to Which electroniclock devices LDy-LDn, are installed. A second pool of key devices KDy-KDmfl isavailable to the second team of caregiver personnel CGP”. Of course, the caregivingenvironment may in reality include additional teams of caregiver personnel, additionalgroups of caretakers, additional front doors, additional lock devices, and additionalpools of key devices.

In addition, altemative caregiving entities may be included in the caregivingenvironment, in the form of a security guard service SG or an emergency service ESWith key devices KDSg and KDES. Whereas the key devices KDl-KDm, KDy-KDm, of thefirst and second teams CGP, CGP” Will be used by a relatively large number ofcaregiver persons to access a relatively small number of lock devices/doors at relativelyfrequent occasions, the situation may be the opposite for the key devices KDSg and KDGSof the security guard service SG or emergency service ES. These key devices Will beused by a limited number of persons (such as paramedics, nurses or guards) at rareoccasions, but they nevertheless need to be able to access a very large number of lockdevices/doors - or even all lock devices/doors that are included in the caregivingenvironment.

For enhanced security, each key device may have an access control softwareapplication in Which the user must log on. Also, all communications With the lockdevices may be encrypted.

Each team of caregiver personnel CGP, CGP” may be sub-divided into sub-groups, for instance a day shift, an evening shift and a night shift. Also, an individualcaregiver person may act in or for both teams CGP and CGP” (for instance to serve asback-up in situations of sickness, parental leave or during popular holiday periods),therefore having a need to use his key device for accessing lock devices both in the firstgroup of caretakers and in the second group of caretakers. This is illustrated in Fig 6 forkey device KDm, Which Will access not only lock device LDm in the first group ofcaretakers, but also lock device LD1» in the second group of caretakers.

The purpose of the access control system ACS is to control the access to theplurality of lock devices LD1- LDn, LDy- LDnfl for a plurality of users CGP, CGP°, SG,ES With a plurality of key devices KD1- KDm, KDy- KDmfl, KDSg, KDES. To this end, the access control system includes an access control system server ACS_S and an accesscontrol system database ACS_DB. The key devices may communicate (via the networkinterface 430) with the access control system server ACS_S via the network interface430 over a local network (WLAN/WiFi) 620 and/or a wide area network (e.g. theIntemet) or cellular network 630.

The access control system database ACS_DB is conf1gured to contain cross-reference or mapping data 610 that defines the access rights of respective ones of thekey devices and corresponding ones of the users to respective ones of the lock devices.Fig 6 contains an enlarged representation of the cross-reference or mapping data 6l0.As seen at 6l2 and 6l3, a caretaker CT is mapped to a lock device LD (or several lockdevices, or vice versa). Correspondingly, as seen at 6l4 and 6l5, a caregiving personCGP is mapped to a key device KD (or several key devices, or vice versa). Likewise asecurity guard or emergency service person SG or ES is mapped, at 6l6, to a key deviceKD (or several key devices, or vice versa). Finally, the reference or mapping data 6l0contains associations which connect allowed key devices KD with particular lockdevices LD.

In embodiments where the lock devices LD comprise a local database LD_DB, itmay be conf1gured to store a replicated version, or a subset thereof, of the contents ofthe access control system database ACS_DB. The processing unit 5 l0 of an individuallock device LD, may be conf1gured to verify the authority of a key device KDk seekingaccess by deterrnining an identity of the key device during the wireless interaction 4aand by checking the authority of the key device thus identified by cross-reference in thelocal database LD_DB. This allows a high degree of security in the system and stillallows the lock devices LD to operate as autonomous units. Loading and updating ofreplicated ACS_DB data into the LD_DB may occur over the wireless transceiver 540,and the key devices may act as couriers of this information under certain securityarrangements. As already mentioned, the key device identity may, for instance, berepresented by a Bluetooth® ID, a MAC address, an IP address, a WiFi address, a serialnumber, and combinations thereof.

As described above, the access control system ACS may be involved in thegeneration and/or forwarding of the generated telecare action performance confirrnation5 to the telecare alarm center TAC.

Using the access control system ACS to forward a telecare action performanceconfirrnation 5 generated by either the lock device LD, or the key device KDk is advantageous, since it allows for addition of supplemental information to the telecare 21 alarm center TAC. For instance, the key device KDk may only know its key deviceidentity 615 but not the identity of the caregiving person CGPJ- using it. In contrast, theaccess control system ACS will have access to the mapping data 610 in the accesscontrol system database ACS_DB and may thus determine the identity 614 of thecaregiving person CGPj, and add this information to the telecare action performanceconf1rmation 5 sent to the telecare alarm center TAC. The same holds true for theidentity 613 of the lock device LDi versus the identity 612 of the caretaker CTi.

Using the access control system ACS to generate the telecare action performanceconf1rmation 5 is advantageous, since it improves the reliability of the telecare actionperformance conf1rmation 5 from the telecare alarm center TAC°s point of view.Imagine a situation where the lock device LDi made its decision to allow the key deviceKDk to access the caretaker residence CTRi based on an expired replicated version (orsubset thereof) of the contents of the access control system database ACS_DB, and as aresult granted the key device KDk access even though its access rights havesubsequently been cancelled or changed in the access control system databaseACS_DB. The access control system ACS may detect this inconsistency and eitherrefrain from sending a telecare action performance confirrnation 5 to the telecare alarmcenter TAC or, even better, send an alert to the telecare alarm center TAC, therebygiving the latter a chance to correct the mistake by sending another caregiving personCGP or perhaps a security guard SG.

Reference is now once again made to the processing unit 510 in the electroniclock device LDi, and more specifically how it may be configured to cause generation ofthe telecare action performance confirrnation 5, to be received by the telecare alarmcenter TAC. Some possible but non-limiting embodiments were described withreference to Fig 3a. Further altemative will now be described with reference to Figs 3band 3c.

In Fig 3b, the processing unit 510 of the lock device LDi is configured to cause4b° generation of the telecare action performance conf1rmation 5 by instructing orallowing the key device KDk, once verified as having the authority to actuate the lockmechanism 52 of the lock 54 of the door 50i to which the lock device LDi is mounted, togenerate a telecare action performance report 4c to be sent to the caregiver center CGC.The caregiver center CGC is configured, in response to receiving the telecare actionperformance report 4c, to generate the telecare action performance confirrnation 5 and send it to the telecare alarm center TAC. 22 In Fig 3c, the processing unit 510 of the lock device LDi is configured to cause4b” generation of the telecare action performance confirmation 5 by generating thetelecare action performance confirrnation 5 locally in the lock device and sending it tothe telecare terrninal TT, for fiarther forwarding to the telecare alarrn center TAC overthe communication channel 102. Altematively, the processing unit 510 of the lockdevice LD, may instruct or allow the telecare terminal TT, to generate the telecare actionperformance confirmation 5 and send it to the telecare alarm center TAC.

This altemative embodiment has an advantage in that it uses a reasonably secureunit in the telecare system 100, namely the telecare terminal TTi, for the forwarding ofthe telecare action performance confirmation 5. Another advantage is that no specialdesign of the key device KD is required; it suffices if it is a simple RF-ID or NFC tag,as is more likely carried by altemative caregiving entities like security guards oremergency services.

In a refinement of this altemative embodiment, the processing unit 510 of thelock device LD, is further conf1gured to include, in or with the generated telecare actionperformance confirmation 5, information about a remaining charge level of the batterypower unit 520 in the lock device LDi. This represents a resource-efficient way ofcommunicating this information, which might be crucial in terms of operationalreliability, to the telecare alarm center TAC through the telecare terminal TTi.

The present invention has been described with reference to a number ofexemplary embodiments. However, modifications to these embodiments, as well asother embodiments, may be possible within the scope of the patent claims, as is readilyrealized by a skilled person. For instance, even though the telecare alarm center TACand the caregiver center CGC have been described as separate entities in thisdescription, they may be integrated into one structural entity in altemative embodi-ments. Likewise, the access control center ACS may the structurally integrated with the telecare alarm center TAC or the caregiver center CGC, or both.

Claims (16)

1. A telecare system (100), comprising: a telecare alarm center (TAC); and a plurality of telecare terrninals (TT) for use by respective caretakers (CT) attheir respective caretaker residences (CTR), each telecare terrninal (TTi) beingconf1gured for transmitting a telecare alarrn (1) to the telecare alarrn center uponoccurrence of an alarrn event at the caretaker residence (CTRi), Wherein the telecare alarrn center is conf1gured, as a result of receiving thetelecare alarrn from the telecare terrninal, to transmit a telecare action request (2) to acaregiving entity (CGC; SG; ES), and Wherein the telecare alarrn center is configured for monitoring the receipt of atelecare action perforrnance confirrnation (5) indicating that a caregiving person (CGPJQSG; ES) has appeared at the caretaker residence for the purpose of attending to thealarrn event, the telecare system being characterized by: for each of the caretaker residences (CTR), an electronic lock device (LDi) formounting to a door (5 0,) of the caretaker residence (CTRi), Wherein the electronic lockdevice comprises: a transceiver (540) capable of Wireless interaction (4a) With a key device (KDk); an electrically controlled lock actuator (512) conf1gured for actuation of a lockmechanism (52) of a lock (54) of the door; and a processing unit (510) coupled to the transceiver and configured to cause thelock actuator to actuate the lock mechanism of the lock in response to Wirelessinteraction With the key device, Wherein the processing unit is further configured to cause (4b; 4b°; 4b”) generation of the telecare action perforrnance confirrnation (5).

2. The telecare system (100) as defined in claim 1, Wherein the processing unit(510) of the lock device (LDi) is configured to cause (4b; 4b°; 4b”) generation of thetelecare action perforrnance confirrnation (5) only once the key device (KDk) has beenverified as having the authority to actuate the lock mechanism (52) of the lock (54) ofthe door (5 0,) to Which the lock device is mounted. 24

3. The telecare system (100) as defined in claim 2, Wherein the processing unit(510) of the lock device (LDi) is configured to verify the authority of the key device(KDk) by analyzing the compliance of access control data (470, 470°, 470”) receivedfrom the key device during the Wireless interaction (4a), With respect to access controldata (570, LD_DB) stored in the lock device (LDi).

4. The telecare system (100) as defined in any preceding claim, the telecaresystem (100) further comprising an access control system (AC S) for the purpose ofcontrolling the access to the plurality of lock devices (LD1- LDn, LDy- LDIf) for aplurality of users (CGP, CGP°, SG, ES) With a plurality of key devices (KD1- KDm,KDy- KDnf, KDSg, KDES), Wherein the access control system includes an access controlsystem server (ACS_S) and an access control system database (ACS_DB), the accesscontrol system database being configured to contain cross-reference data (610) thatdefines the access rights of respective ones of the key devices and corresponding ones of the users to respective ones of the lock devices.

5. The telecare system (100) as defined in claims 3 and 4, Wherein each lock device (LDi) comprises a local database (LD_DB) configuredto store a replicated version, or a subset thereof, of the contents of the access controlsystem database (ACS_DB), and Wherein the processing unit (510) of the lock device (LDi) is configured to verifythe authority of the key device (KDk) by deterrnining an identity of the key deviceduring the Wireless interaction (4a) and by checking the authority of the key device thusidentified by cross-reference in the local database (LD_DB).

6. The telecare system (100) as defined in any of claims 2 to 5, Wherein theprocessing unit (510) of the lock device (LDi) is configured to cause (4b) generation ofthe telecare action performance confirmation (5) by generating the telecare actionperformance confirmation (5) locally in the lock device and sending it to the key device(KDk) for fiirther forwarding towards the telecare alarm center (TAC).

7. The telecare system (100) as defined claim 6 When depending on claim 4 or 5,Wherein the generated telecare action performance confirmation (5) is forWarded by thekey device (KDk) through the access control system (ACS) to the telecare alarm center(TAC).

8. The telecare system (100) as defined in any of claims 2 to 5, wherein theprocessing unit (510) of the lock device (LDi) is configured to cause (4b”) generation ofthe telecare action performance confirmation (5) by generating the telecare action per-formance confirmation (5) locally in the lock device and sending it to the telecare terrninal (TTi) for fiirther forwarding to the telecare alarrn center (TAC).

9. The telecare system (100) as defined in any of claims 6 to 8, the lock device(LDi) fiarther comprising a local battery power unit (520) as a power source forpowering the lock device, wherein the processing unit (510) of the lock device (LDi) isfurther configured to include, in or with the generated telecare action perforrnance confirmation (5), inforrnation about a remaining charge level of the battery power unit.

10. The telecare system (100) as defined in any of claims 2 to 5, wherein theprocessing unit (510) of the lock device (LDi) is configured to cause (4b”) generation ofthe telecare action perforrnance confirmation (5) by instructing or allowing the keydevice (KDk), once verified as having the authority to actuate the lock mechanism (52)of the lock (54) of the door (50i) to which the lock device (LDi) is mounted, to generatethe telecare action perforrnance confirmation (5) and send it to or towards the telecarealarm center (TAC).

11. The telecare system (100) as defined in any of claims 2 to 5, wherein the caregiving entity to which the telecare action request (2) istransmitted is a caregiver center (CGC), wherein the processing unit (510) of the lock device (LDi) is configured to cause(4b”) generation of the telecare action perforrnance confirmation (5) by instructing orallowing the key device (KDk), once verified as having the authority to actuate the lockmechanism (52) of the lock (54) of the door (50i) to which the lock device (LDi) ismounted, to generate a telecare action perforrnance report (4c) to be sent to thecaregiver center (CGC), and wherein the caregiver center is configured, in response to receiving the telecareaction perforrnance report (4c), to generate the telecare action perforrnance confirrnation(5) and send it to the telecare alarm center (TAC). 26

12. The telecare system (100) as defined in claim 4 or 5, Wherein the processingunit (510) of the lock device (LDi) is configured to cause (4b) generation of the telecareaction performance conf1rmation (5) by inforrning the key device (KDk) that it has beenverified as having the authority to actuate the lock mechanism (52) of the lock (54) ofthe door (5 0i) to Which the lock device (LDi) is mounted, the key device (KDk) reportingthis to the access control system (ACS), and the access control system (AC S) beingconf1gured to generate the telecare action performance conf1rmation (5) and send it to the telecare alarm center (TAC).

13. The telecare system (100) as defined in any preceding claim, Wherein thecaregiving entity includes one or more of:a caregiver center (CGC);a security guard service (SG); and an emergency service (ES).

14. The telecare system (100) as defined in any preceding claim, Wherein theoccurrence of an alarm event at the caretaker residence (CTRi) includes one or more ofthe following: manual actuation by the caretaker (CTi) of an alarm function of the telecareterminal (TTi); automatic detection by a sensor device of an abnormal condition for thecaretaker; automatic detection by a sensor device of an abnormal condition for the caretaker residence.

15. A method of monitoring attendance to a telecare alarm event in a telecaresystem (100), the method involving, at a telecare alarm center (TAC): receiving (710) a telecare alarm (1) from a telecare terminal (TTi) located at acaretaker residence (CTRi); transmitting (720) a telecare action request (2) to a caregiving entity (CGC; SG;ES) so as to initiate a telecare action involving attending to an alarm event at thecaretaker residence (CTRi); and monitoring (730) for receipt of a telecare action performance conf1rmation (5)indicating that a caregiving person (CGPJQ SG; ES) has appeared at the caretaker residence for the purpose of attending to the alarm event, 27 Wherein generation of the telecare action performance confirmation has beencaused (4b; 4b°; 4b”) by an electronic lock device (LDi) being mounted to a door (50i)of the caretaker residence and being configured for actuation of a lock mechanism (52)of a lock (54) of the door in response to Wireless interaction (4a) With a key device(KDi).

16. An electronic lock device (LDi) for mounting to a door (50i) of a caretakerresidence (CTRi) and for use in a telecare system (100) Which has a telecare alarmcenter (TAC) and a plurality of telecare terrninals (TT) for use by respective caretakers(CT) at their respective caretaker residences (CTR), each telecare terminal (TTi) beingconf1gured for transmitting a telecare alarm (l) to the telecare alarm center uponoccurrence of an alarm event at the caretaker residence (CTRi), Wherein the telecarealarm center is configured, as a result of receiving the telecare alarm from the telecareterminal, to transmit a telecare action request (2) to a caregiving entity (CGC; SG; ES),and Wherein the telecare alarm center is conf1gured for monitoring the receipt of atelecare action performance confirrnation (5) indicating that a caregiving person (CGPJ-;SG; ES) has appeared at the caretaker residence for the purpose of attending to thealarm event, the electronic lock device being characterized by: a transceiver (540) capable of Wireless interaction (4a) With a key device (KDk); an electrically controlled lock actuator (5 l2) conf1gured for actuation of a lockmechanism (52) of a lock (54) of the door; and a processing unit (5 l0) coupled to the transceiver and configured to cause thelock actuator to actuate the lock mechanism of the lock in response to Wirelessinteraction With the key device, Wherein the processing unit is further configured to cause (4b; 4b°; 4b”) generation of the telecare action performance confirrnation (5).