DE102006047939B4 - Self-organizing locking system and method of organizing such a system - Google Patents

Abstract

Locking system comprising at least one lock cylinder (3) designed for bidirectional data exchange by radio, at least one access point (access point) designed for bidirectional data exchange by radio with lock cylinders and bidirectional data exchange, and a central administration unit (1) which is connected to the Access point is connected for bidirectional data exchange, characterized in that an association request signal can be transmitted from the locking cylinder, association response signals can be transmitted from access points (2) within radio range after receipt of the association request signal, and an access point can be connected via radio to the locking cylinder for bidirectional data exchange on the basis of received association response signals ( Association of the locking cylinder at the access point) and that at least one locking cylinder connected for bidirectional data exchange as access point f r is formed at least one other lock cylinder.

Description

The present invention relates to a locking system, which allows an automatic integration of further lock cylinder in an existing network. The invention further relates to a method for constructing such a locking system.

Electronic locking systems are already known from the prior art. These are usually self-sufficient electronic locking cylinders that fit into a standard mortise lock and thus can lock almost any door. The known locking systems have differences in terms of their mechanics, the electronics used, the number of different locks and keys and much more. on. In addition, most known systems offer no possibility of network connection. However, if the lock cylinders do not have a network connection, for example, if access authorizations are changed, either transponders must be re-coded or the cylinders reprogrammed on each door using a mobile service device. This procedure is cumbersome and generates an increased service effort.

Occasionally, networked locking systems from the prior art are known. However, the associated networking functionality is designed so that all associations (eg, by tables) are predetermined. This results in an inflexible, static structure of the network, which requires a high planning and organizational effort (especially before installation of the system). The known networked systems are therefore only very limited expandable and changeable.

From the prior art ( WO 2006/044816 A1 ) a home wireless network is known, can be integrated through the various devices, such as lamps, radiators, motion detectors and door locking systems. A central control device controls the individual devices. The individual connected devices can also be connected via access points, for example according to an IEEE 802.11 implementation. Energy saving techniques are also described.

The prior art knows in US 2005/0030922 A1 beyond there is a device for selecting an access point in a WLAN system, which may also be designed according to the IEEE 802.11 standard. In this document, an active access point search is described in which a local device sends out an association request, which is answered by corresponding access points by means of an association response signal. Subsequently, a suitable connection is made with the appropriate access point.

In DE 103 07 735 A1 a mechatronic access control and building monitoring system is described, wherein in the shown, controlled by a central PC local radio network lock cylinder and sensors, which are capable of bidirectional radio link, are involved. Also disclosed is the use of wake-up calls. If the distance between a lock cylinder and the central radio module becomes too large, separate radio relays can be installed.

Finally, that describes US 2004/0214576 A1 The connection of mobile units in a WLAN system using the IEEE 802.11 standard. These can be laptops, PDAs or other devices that are capable of wireless communication.

It is therefore an object of the present invention to provide a networked locking system in which new locking cylinders can be integrated in an already existing network in a simple manner and in which simple and flexible data transmission (in particular, for example, locking authorizations) is possible. to the individual lock cylinder is possible.

The object is solved by the independent claims, advantageous developments are the dependent claims.

The present invention provides self-organization mechanisms for a lock system formed of lock cylinders, access points, and a central management unit. In such a network, the lock cylinders are wirelessly networked via access points (which in turn may be integrated in lock cylinders) with the central management unit (hereinafter also referred to as a central office or central lock system management unit). The self-organization mechanisms according to the invention simplify the configuration and administration of the locking system. In particular, with the locking system according to the invention it becomes possible to monitor, configure or program the lock cylinders from the control center.

In the following, a locking cylinder is understood to mean a technical device which has a transmitting and receiving unit which allows the cylinder to communicate with the central management unit for data exchange by radio via an access point (in particular a wireless access point). The data exchanged here can be transmitted from the central management unit to the lock cylinder configuration data for the lock cylinder or even from the lock cylinder to the central management unit to be transmitted, detected by a sensor integrated in the lock cylinder environment data. A variety of other data forms are possible for transmission.

In the following, an access point is understood to mean a device (in particular a wireless access point) which on the one hand has a transmitting and receiving unit in order to make radio contact with a locking cylinder for data transmission, which, in addition, also has a second transmitting and receiving unit to forward the data received from the lock cylinder to another device (central management unit) and to forward the information data received from the central management unit to the lock cylinder. As will be described in more detail below, in this case the connection between the access point and the central administrative unit is not necessarily designed as a radio connection, but may also be configured as a radio connection (in this case, the first and the second transmitting and receiving unit can also be implemented as a common unit ).

As explained in more detail below, lock cylinder can also be designed as an access point for further lock cylinders, if necessary, in that in addition to the radio link transmitting and receiving unit, a further transmitting and receiving unit is integrated, which is used for data exchange with the central administrative unit.

The data exchange between the lock cylinders and the control center is thus handled via the access points (access points). However, separate access points can also be dispensed with if the lock cylinders are designed such that they additionally integrate access point functionality for other lock cylinders. Data originating from the lock cylinders reach an access point by radio. This access point forwards the data to the central office. Such forwarding can also be done via radio, but it is also z. B. the transmission via cable network possible. Also possible is the forwarding via a subnetwork (for example, an Internet Protocol-based company network). Conversely, data originating from the central management unit will reach an access point and the access point will forward the data to the appropriate lock cylinders. An access point can in this case be assigned a plurality of lock cylinders.

The lock system according to the invention automates the integration of lock cylinders in the existing network or locking system. In addition, ways are also described how access points can be integrated into the network. Finally, mechanisms are also provided for the automatic detection of disturbances (disturbances are for example failures of locking cylinders, of access points or of the central administrative unit). The invention also describes mechanisms for compensating such disturbances.

Mechanisms for data transmission by radio and / or data transmission via Ethernet or the like are known in the art and are therefore assumed here and not described separately.

An essential aspect of the present invention is that a lock cylinder can automatically connect to the central management unit via an access point (by association at the access point) by sending out an association request signal (hereinafter also referred to as "Associate Request Broadcast Packet"). Those access points within the radio range of the lock cylinder receive the association request signal and thereafter send association response signals enabling them to communicate with the lock cylinder (or allow data exchange of the lock cylinder with the central management unit through them). signal. Based on the received association response signals of the access points, as will be described in more detail below, the lock cylinder selects and associates with an access point: a bidirectional connection is made for data exchange between lock cylinder and selected access point.

In order to prevent unauthorized lock cylinders from joining the network, registration of the lock cylinder with the central management unit is carried out as described in more detail below by means of an association identification code (hereinafter also association ID). If the association ID transmitted by the lock cylinder via the access point to the central administration unit has been registered in advance at the central administration unit, then the connection is permitted to the corresponding lock cylinder. Otherwise, z. B. the data transmission disabled or an alarm signal can be triggered.

It is particularly advantageous, alternatively or cumulatively for the registration of the lock cylinder with the aid of encrypted authentication codes, as will also be described in more detail below, an authentication of a lock cylinder at the central administrative unit perform. This makes it possible to prevent attempts to circumvent unauthorized locking cylinders, which may for example be based on the fact that the association ID is not encrypted.

As described in more detail below, in advantageous embodiments of the present locking system according to the invention also keep-alive messages (hereinafter alternatively referred to as function messages) can be used. Such messages can be used for fault detection and can be used in particular for a network unit (eg lock cylinder, access point or central administration unit) to be convinced of the accessibility of another network unit or of a communication partner.

An essential aspect of the free assignability in the present invention is also that several lock cylinders can communicate with an access point or access point and that such an access point need not be in the immediate vicinity of a lock cylinder. In the case of the multi-hop networking described in more detail below, it is even possible for separate access points to be outside the range of individual lock cylinders; These lock cylinders can then connect via other lock cylinders with the separate access points.

• • Auf einfache Art und Weise können sich mit einer Funkeinheit ausgestattete Schließzylinder per Funk mit einer bereits vorhandenen Schließanlagensystem-(Teil)-Anordnung zu einem erweiterten Schließanlagensystem automatisch verbinden.
• • Es ist somit theoretisch unbegrenzt eine automatische Erweiterung eines bestehenden Schließanlagensystems um zusätzliche Schließzylinder auf einfache Art und Weise möglich.
• • Nicht autorisierte Schließzylinder können auf verschiedene Art und Weisen daran gehindert werden, sich mit den vorhandenen Netzwerkkomponenten zu verbinden.
• • Mit dem erfindungsgemäßen Schließanlagensystem ist es auf einfache Art und Weise möglich, eine beliebige Zahl von einzelnen per Funk ansteuerbaren Schließzylindern zu überwachen, zu konfigurieren oder zu programmieren. Manuelle Eingriffe zur Konfiguration der Zylinder vor Ort und manuelle Administrationsvorgänge vor Ort entfallen somit weitestgehend.
• • Das erfindungsgemäße Schließanlagensystem kann in allen Bereichen eingesetzt werden, in denen drahtlose Schließzylinder über Zugangspunkte mit einer zentralen Verwaltungseinheit zu vernetzen sind.

The main advantages of the present invention are as follows:

• • In a simple way, lock cylinders equipped with a radio unit can automatically connect to a pre-existing lock system system (part) arrangement to an extended locking system by radio.
• • It is thus theoretically unlimited an automatic extension of an existing locking system with additional locking cylinder in a simple manner possible.
• • Unauthorized locking cylinders can be prevented in various ways from connecting to existing network components.
• With the lock system according to the invention, it is possible in a simple manner to monitor, configure or program any number of individual lockable by radio lock cylinders. Manual interventions for the configuration of the cylinders on site and manual administration on site are thus eliminated as far as possible.
• The locking system according to the invention can be used in all areas in which wireless lock cylinders are to be networked via access points with a central administrative unit.

Hereinafter, the present invention will be described in detail based on individual embodiments. The individual aspects described in the exemplary embodiments can also be combined by the person skilled in the art in a manner in which they are directly understood in terms of their technical understanding, without this having been laid down in this form in one of the exemplary embodiments.

1 shows an example of a possible basic configuration of a locking system according to the invention for explaining the association of a single lock cylinder at an access point and the registration of the cylinder at the central management unit.

2 shows an activity diagram of the association, a subsequent registration and a subsequent authentication of a lock cylinder at the central management unit.

3 shows the use of timers and timer signals for fault detection and elimination (activity diagram).

4 shows an application in which a plurality of lock cylinders are connected via separate, not designed as a lock cylinder access points and an IP-based company network (subnetwork) with the central management unit or connect.

5 shows another example, in which a corresponding connection via lock cylinder, which additionally integrate an access point functionality is performed.

It is initially based on the basic configuration of 1 and the 2 describes how an association or connection according to the invention, a registration according to the invention and an authentication according to the invention can be configured.

1 shows a lock cylinder 3 , which is designed for bidirectional data exchange by radio. Thus, the lock cylinder 3 a corresponding radio module. 1 further shows two at different locations spaced from the lock cylinder 3 arranged access point units or access points 2a and 2 B , Each of the access points has a first connection unit (radio connection unit) with which bidirectionally data with locking cylinders are exchangeable by radio (dashed line). The access point 2a and 2 B is in this case via a data line (cable or similar, solid line) with a central administrative unit 1 connected. However, it may alternatively also be a radio connection. For data exchange with the central administrative unit 1 assign the access points 2a and 2 B in each case a further (second) transmitting and receiving unit. The administrative unit may be located in one and the same building as the access points and the lock cylinder. However, it is also possible that it is located in another building (eg neighboring building).

After the lock cylinder, as described in detail below, to one of the access points 1 has established a radio link (association), then can bidirectionally data between central administrative unit 1 and lock cylinder 3 over the lock cylinder 3 selected access point are exchanged.

An example of an association, registration and authentication of the lock cylinder according to the invention 3 at the central administrative unit 1 is now based on the activity diagram of the 2 described.

Before the lock cylinder 3 According to the invention in the previous hull network 1 . 2a . 2 B For security reasons, he must first be registered locally at the headquarters. This is also referred to below as initialization. During this initialization, a unique identification number or association identification code (which also serves for the later association), a secret (also referred to below alternatively as a cryptographic key) serving for the subsequent authentication, as well as optionally authorization data (eg which access authorizations users accessing the lock cylinder or which events the lock cylinder may initiate after data transmission in the central unit) are programmed locally in the central administration unit (eg in corresponding tables in the memory). This locally in the central unit 1 stored data are also referred to as the second association identification code and second cryptographic key. Likewise, correspondingly, a first association identification code and a first cryptographic key are locally stored in the lock cylinder (permanently programmed in). As an option, authorization data (which key is allowed to actuate this cylinder) can also be stored in the lock cylinder.

After completion of this initialization in the central office 1 At the central office, a timer is started (order of magnitude in half-hourly range). This timer is stopped when the lock cylinder, after being put into service via one of the access points 2a . 2 B (see below) at the head office 1 reports. If this message is missing, can in the software of the control panel 1 be notified of the absence of registration (error message).

After completion of the local initialization (programming of the necessary data into the central office 1 ) is now locally on the (or a) new (he) lock cylinder 3 activated. After activation, the lock cylinder sends 3 an Association Request Broadcast Packet containing the Association Identification Code to all those access points 2 that are within radio range. Subsequently, it is assumed that this is the two in 1 shown points 2a and 2 B are (dashed lines: radio link between lock cylinder 3 and access point 2a and access point 2 B possible). All inbound access points respond with an association response signal (also known as the Associate Response Broadcast Packet), which provides information about the current usage of each access point 2 contains (eg, in particular on the number already associated with an access point lock cylinder). So that communication between lock cylinder 3 and access point 2 is unique, the Associate Response Broadcast Packets also contain the Association Identification Number (Association ID) assigned at initialization (received by the access point through the Associate Request Broadcast Packet).

The lock cylinder selects due to the current utilization of the individual access points 2 and / or the quality of connection between the lock cylinder 3 and the respective access point 2 possible radio connection (eg RSSI or Link Quality Indicator, see below) the most suitable access point 2 out and associates or connects to this. To confirm a successful association, a three-way handshake is performed.

As with high probability several access points within the radio range of the lock cylinder 3 are (here the two points 2a and 2 B ) Assume that multiple access points use the Associate Request Broadcast Packet of the lock cylinder 3 can receive. Any access point that is underutilized (ie associated with less than a maximum number of lock cylinders specified in the central administration software and reported to each access point) will respond in this case with an Associate Response Broadcast Packet. This response packet contains the association ID of the lock cylinder 3 and a value describing the current utilization of the access point (for example in the form of the number of associated lock cylinders). Because most likely, multiple access points use the Associate Request Broadcast Packet of the lock cylinder 3 receive the lock cylinder 3 in response also several Associate Response Broadcast Packets (association response signals) from different access points.

The locking cylinder now determines the most suitable access point for the connection. The values Utilization, RSSI and Link Quality Indicator serve this purpose. These values can either be used individually in different ways (eg, choosing the access point that has the lowest utilization or the highest link quality indicator), but they can also be linked together to provide a measure of the quality of the possible connection through an access point to investigate. RSSI stands for "Received Signal Strength Indication" and is a measure of the field strength of a received radio signal. The Link Quality Indicator is a measure of the bit error rate of the received data. Both values are usually determined by the hardware of a radio system and can thus be linked or further processed individually in the corresponding software. After determining the most suitable access point based on the determined quality measure, the lock cylinder associates 3 with this access point. Hereinafter, assume that the association of the lock cylinder 3 with the access point 2a he follows. The association includes the assignment of an address to the lock cylinder 3 and storing the address of the point 2a in the lock cylinder. After successful association, the access point registers 2a the lock cylinder 3 at the headquarters 1 so that a successful commissioning of the lock cylinder can be detected and it can also be determined whether the lock cylinder is an authorized lock cylinder (see below on the basis of the association identification code or better still using encrypted secrets).

In other words, if the lock cylinder 3 authorized, it recognizes the central office 1 on the basis of a comparison of the second association identification code stored in the center during the local initialization with that via the access point 2a from the lock cylinder 3 to the central office 1 transmitted first association identification code. Will the device 3 (if these codes match), the control panel stores the address of the lock cylinder 3 together with the address of the assigned access point 2a in a routing table. Already the use of a non-encrypted association ID (or the comparison of two such codes) thus prevents in a simple manner the creeping in of foreign, unauthorized locking cylinders into the locking system according to the invention. In order to meet a higher safety standard, in addition, as described below, an authentication of the lock cylinder is additionally made.

After successful association between locking cylinder 3 and access point 2a thus registers the access point 2a this lock cylinder 3 at the headquarters 1 , To do so sends as described above the access point 2a the registration message to the head office. This message contains the association ID of the lock cylinder 3 and the address that the access point 2a before the lock cylinder 3 assigned. To confirm a successful registration, a three-way handshake will be performed again.

• • Der Zentrale 1 ist bekannt, mit welchem Zugangspunkt welche Schließzylinder assoziiert sind (hier Schließzylinder 3 mit Zugangspunkt 2a). Die Zentrale 1 kann somit die Daten, die für einen bestimmten Schließzylinder bestimmt sind (beispielsweise Daten um diesen lokal zu konfigurieren) an den richtigen Zugangspunkt schicken. Der Zugangspunkt empfängt die Daten und leitet sie an den Schließzylinder weiter.
• • Jeder Schließzylinder kennt den mit ihm assoziierten Zugangspunkt: Der Schließzylinder kann somit Daten, die für die Zentrale bestimmt sind, an den für ihn besten Zugangspunkt schicken. Der Zugangspunkt empfängt diese Daten und leitet sie an die Zentrale weiter. Natürlich ist es hierbei auch möglich, dass sich (beispielsweise in einer lokalen Tabelle) der Schließzylinder 3 mehrere Zugangspunkte anhand des bestimmten Gütemaßes der Funkverbindung merkt: Es werden dann auch alternierend Datenübertragungen über mehrere Zugangspunkte und/oder Wechsel von einem zum anderen Zugangspunkt beim Ausfall eines Zugangspunkts möglich.

After successful association and registration as described above, the path that the data must take through the lock system according to the invention is clear in both directions:

• • The head office 1 it is known with which access point which locking cylinders are associated (here locking cylinder 3 with access point 2a ). The central office 1 Thus, the data destined for a particular lock cylinder (for example, data to locally configure it) can be sent to the correct access point. The access point receives the data and forwards it to the lock cylinder.
• • Each locking cylinder knows the access point associated with it: The locking cylinder can thus send data destined for the control center to the best access point. The access point receives this data and forwards it to the central office. Of course, it is also possible that (for example in a local table) the lock cylinder 3 several access points on the basis of the specific quality measure of the radio link notes: It will then also alternately data transfers over multiple access points and / or change from one to another access point in case of failure of an access point possible.

In order to meet high security requirements with regard to the creeping in of non-authorized lock cylinders, an authentication of the lock cylinder will also be required in the present case after the registration 3 (via the access point 2a ) in the main office 1 carried out. Such authentication is done using cryptographic keys. In this case, a first cryptographic key is stored in the lock cylinder (the cryptographic keys are hereinafter also referred to as secrets), in the center (at least) a second cryptographic key is stored. Both the lock cylinder and the central office can generate an encrypted authentication code by encryption with their respective cryptographic key from an authentication code (this may be, in particular, a random number generated with a random number generator). It can then in a suitable manner an unencrypted Authentication code (random number) and a result of encryption thereof are exchanged between the two network units, so that without exchange of a cryptographic key itself an authentication of the lock cylinder 3 at the headquarters 1 becomes possible. The lock cylinder thus detects the knowledge of its programmed secret (first cryptographic key) without having to transfer the secret itself. The authentication procedure is initiated by the control panel as follows: During authentication, the locking cylinder points 3 the knowledge of the programmed in the initialization secret (first cryptographic key) by first a random number R (second authentication code) from the center 1 is generated and to the lock cylinder 3 is sent. The lock cylinder 3 Encrypts this random number R with its cryptographic key (thus uses the received second authentication ID as a first authentication ID to generate a first encrypted authentication ID therefrom by encryption using the locally stored first cryptographic key). The result (the generated first encrypted authentication code) is then returned from the lock cylinder to the central office 1 sent and received there. The control center also encrypts the random number R (thus generates with its locally stored second cryptographic key from the second authentication code R a second encrypted authentication code). Subsequently, the second encrypted authentication code number generated in the central office is compared with the received first encrypted authentication code number. If the encryption result matches, the encryption of the random number R generates identical encrypted authentication code numbers on both sides, this means that the two Communication partner headquarters 1 and lock cylinder 3 have the same secret (so the first cryptographic key matches the second cryptographic key). This is the lock cylinder 3 at the headquarters 1 authenticated.

Advantageously, the locking system is designed so that the above-described authentication of the lock cylinder 3 at the headquarters 1 can also be done in reverse (authentication of the central office 1 at the lock cylinder 3 , for example, after failure of the control center). Likewise, by storing a third cryptographic key in an access point, it is possible to authenticate an access point at the central office in a corresponding manner 1 or vice versa.

If the association, registration or authentication as prescribed is failed, it will be indicated on the lock cylinder (eg by an audible signal). In particular, that network component which has to be authenticated may trigger an event in the form of an alarm signal if it fails. The software (for example the central office) responds to a failed authentication with a corresponding alarm message.

• • Einbindung eines „verwaisten” Schließzylinders:
• Ein Schließzylinder kann den Kontakt zu seinem Zugangspunkt (nachfolgend: AP) verlieren, z. B. aufgrund eines Neustarts (reset) oder des Ausfalls des APs. Dabei durchläuft der Schließzylinder erneut die in 2 dargestellten Aktivitäten in der Partition „Einsatzbereich”, d. h. die Wiedereingliederung in das Netz geht vom Schließzylinder aus. Die bei der ursprünglichen lokalen Initialisierung bei der Zentrale einprogrammierte Assoziations-ID wird weiterverwendet.
• • Einbindung neuer bzw. neu gestarteter Access Points:
• – Die Einbindung eines neuen Access Points beginnt mit der Zuweisung einer IP-Adresse durch die Zentrale über DHCP. Ein Access Point fordert nach der Aktivierung automatisch eine IP-Adresse an. Falls die MAC-Adresse des APs der Zentrale bekannt ist, wird eine IP-Adresse zugewiesen (die MAC-Adressen der APs sind in einer Liste der Zentrale gespeichert). Vor der Zuweisung der IP-Adresse wird per ARP-Request überprüft, ob diese im Netz bereits vorhanden ist. Dies ist nötig, da sonst nach einem Neustart der Zentrale unter Umständen IP-Adressen doppelt vorhanden sein könnten.
• – Anschließend erfolgt eine gegenseitige Authentifizierung von AP und Zentrale, wobei die Kenntnis eines einprogrammierten Geheimnisses (zweiter und dritter kryptographischer Schlüssel) nachgewiesen wird. Diese Prozedur wird vom Access Point angestoßen (dabei wird vom AP eine Socket-Verbindung zur Zentrale aufgebaut).
• – Die Zentrale reagiert mit einer Alarmmeldung, falls die MAC-Adresse des APs unbekannt ist oder falls die Authentifizierung scheitert.
• – Die Zentrale speichert die IP-Adresse des AP in der Routingtabelle.
• – Beim Neustart eines Access Points gehen bestehende Assoziationen mit Schließzylindern verloren. Die Schließzylinder registrieren den Neustart als Ausfall und suchen sich einen neuen AP.
• • Entfernen von Schließzylindern:
• – Schließzylinder können von der Zentrale aus deaktiviert, d. h. geordnet aus dem Netz entfernt werden. Dazu wird eine shutdown-Nachricht von der Zentrale an den Schließzylinder geschickt.
• – Schließzylinder können auch lokal deaktiviert werden. In diesem Fall schickt der Schließzylinder eine shutdown-notify Nachricht an die Zentrale.
• – Beide Nachrichten werden vom AP bei der Weiterleitung an die Zentrale registriert. Der AP ist somit über den Shutdown des Schließzylinders informiert und beendet daraufhin die Überwachung der keep-alive-Nachrichten (vgl. nachfolgend) des Schließzylinders (und schickt insbesondere keine eigene Nachricht über einen vermeintlichen Schließzylinderausfall an die Zentrale) und löscht die an den Schließzylinder vergebene Adresse.
• • Entfernen von APs:
• – Access Points können von der Zentrale aus deaktiviert werden. Dabei weist die Zentrale den zu deaktivierenden AP mit einer shutdown-Nachricht an, den Betrieb einzustellen. Die Zentrale löscht den AP mit allen assoziierten Schließzylindern aus der Routingtabelle.
• – Der Access Point informiert die mit ihm assoziierten Schließzylinder über den Shutdown, woraufhin sich die Schließzylinder selbsttätig einen neuen AP suchen, d. h. es werden erneut die in 2 dargestellten Aktivitäten in der Partition „Einsatzbereich” durchlaufen. Die bei der ursprünglichen lokalen Registrierung bei der Zentrale einprogrammierte Assoziations-ID wird weiterverwendet.
• • Neustart der Zentrale:
• – Nach einem Neustart (reboot des PC oder Neustart der Software) hat die Zentrale zunächst keine Kenntnis von Zustand und Topologie des Netzes. Um zu verhindern, dass unberechtigte Komponenten (insbesondere Schließzylinder) während des Ausfalls in das Netz geschleust werden, müssen alle Authentifizierungsschritte (siehe 2) erneut durchlaufen werden.
• – Falls die Zentrale nach einem Neustart erstmalig eine keep-alive Nachricht von einem Access Point empfängt, wird überprüft ob diese Nachricht von einem AP mit bekannter MAC-Adresse geschickt wurde. Dem AP wird (aus Gründen der Vereinfachung) eine neue IP-Adresse zugewiesen (alternativ kann dem DHCP-Server mitgeteilt werden, dass die entsprechende IP-Adresse bereits vergeben ist). Anschließend erfolgt erneut eine gegenseitige Authentifizierung von Zentrale und AP wie vorbeschrieben.
• – Danach teilt die Zentrale dem AP mit, dass sich alle mit ihm assoziierten Schließzylinder erneut bei der Zentrale registrieren und authentifizieren müssen. Der AP schickt dazu Register-Nachrichten (unicast) an alle Schließzylinder. Dabei wird die bei der ursprünglichen lokalen Initialisierung bei der Zentrale einprogrammierte Assoziations-ID von den Schließzylindern weiterverwendet.
• – Falls Überprüfung der MAC-Adresse des APs oder die gegenseitige Authentifizierung scheitern, reagiert die Zentrale mit einer Alarmmeldung.

According to the invention are based on the in 1 Moreover, the following basic functions are implemented (by suitable design of the software and / or hardware of the corresponding network units):

• • Integration of an "orphaned" lock cylinder:
• A lock cylinder may lose contact with its access point (hereinafter AP), e.g. Due to a reset or the failure of the AP. The lock cylinder goes through the in 2 Activities shown in the partition "area of use", ie the reintegration into the network is based on the lock cylinder. The association ID programmed in the original local initialization at the central office will continue to be used.
• • Integration of new or newly started access points:
• - The integration of a new access point begins with the assignment of an IP address by the control center via DHCP. An access point automatically requests an IP address after activation. If the MAC address of the central office AP is known, an IP address is assigned (the MAC addresses of the APs are stored in a list of the central office). Before the IP address is assigned, the ARP request checks whether it already exists in the network. This is necessary because otherwise IP addresses could possibly be present twice after a restart of the control center.
• - Subsequently, a mutual authentication of AP and central office, whereby the knowledge of a programmed secret (second and third cryptographic key) is detected. This procedure is triggered by the access point (the AP establishes a socket connection to the central unit).
• - The control panel responds with an alarm message if the MAC address of the AP is unknown or if the authentication fails.
• - The control panel stores the IP address of the AP in the routing table.
• - When restarting an Access Point, existing associations with locking cylinders are lost. The lock cylinders register the restart as a failure and look for a new AP.
• • Remove lock cylinders:
• - Lock cylinders can be deactivated from the control panel, ie they are sorted out of the network become. For this purpose, a shutdown message is sent from the control center to the lock cylinder.
• - Lock cylinders can also be deactivated locally. In this case, the lock cylinder sends a shutdown-notify message to the control panel.
• - Both messages are registered by the AP when forwarding to the central office. The AP is thus informed about the shutdown of the lock cylinder and then stops the monitoring of the keep-alive messages (see below) of the lock cylinder (and sends in particular no own message about a supposed lock cylinder failure to the headquarters) and deletes the awarded to the lock cylinder Address.
• • Remove APs:
• - Access points can be deactivated from the control center. In this case, the center instructs the AP to be deactivated with a shutdown message to stop the operation. The control panel deletes the AP with all associated lock cylinders from the routing table.
• - The access point informs the lock cylinder associated with it about the shutdown, whereupon the lock cylinder automatically search for a new AP, ie it will be again in 2 through the activities in the Partition Usage partition. The association ID programmed into the original local registry at the central office will continue to be used.
• • Restart of the control panel:
• - After a reboot (reboot of the PC or restart of the software), the control center initially has no knowledge of the state and topology of the network. In order to prevent unauthorized components (in particular lock cylinders) from being introduced into the network during the failure, all authentication steps (see 2 ) again.
• - If the central unit receives a keep-alive message from an access point for the first time after a restart, it checks whether this message has been sent by an AP with a known MAC address. The AP is assigned (for reasons of simplicity) a new IP address (alternatively the DHCP server can be told that the corresponding IP address has already been assigned). Subsequently, a mutual authentication of central office and AP is carried out again as described above.
• - After that, the control center informs the AP that all lock cylinders associated with it must register again with the central office and authenticate. The AP sends to register messages (unicast) to all lock cylinders. In this case, the association ID programmed in at the headquarters during the original local initialization is reused by the lock cylinders.
• - If the MAC address of the AP or mutual authentication fails, the control panel responds with an alarm message.

Moreover, in the locking system according to the invention in the present case, the interference detection mechanisms described below are integrated:

3 shows the processes occurring in the lock cylinders, in the APs and in the control center for fault detection, ie for detecting the failure of a component or network unit.

In order to be able to detect the failure of a lock cylinder, the lock cylinder must communicate with its associated AP at least once within a specific time interval. If no payload transport is required within this interval, special keep-alive messages will be sent. The partition "lock cylinder" in 3 shows this process. A timer is reset every time a normal message is sent. Only when this timer expires will the keep-alive message be sent as an exception handling.

The same mechanism takes place between the access points and the central office, ie the access points must also regularly contact the central office. This is indicated by the in the partition "AP" in 3 Timer2 shown controlled.

Each access point maintains for each associated lock cylinder a timer which is reset when a data packet is received from the lock cylinder. When a timer expires, a corresponding fault message is sent to the control panel. Likewise, the control panel maintains timers for all APs, which are reset on each incoming AP data packet and when they expire, a fault message is displayed.

• • Ausfall eines APs:
• – Auf den Ausfall eines APs (= mehrfach ausbleibende keep-alive-Nachrichten) reagiert die Zentrale mit einer Alarmmeldung. Der Anwender kann wählen, ob der AP weiter überwacht oder gelöscht werden soll. Falls der Anwender zustimmt, wird der AP-Eintrag zusammen mit den assoziierten Schließzylindern aus der Routingtabelle gelöscht.
• – Alternativ kann diese Löschung auch automatisiert ablaufen.
• – Die an den AP vergebene IP-Adresse wird zu diesem Zeitpunkt nicht gelöscht. Falls der AP neu gestartet wird und für eine bekannte MAC-Adresse (der bereits eine IP-Adresse zugewiesen wurde) eine neue IP-Adresse angefordert wird, kann die alte Adresse erneut zugewiesen werden oder eine neue vergeben und die alte gelöscht werden.
• • Ausfall eines Schließzylinders:
• Der Ausfall eines Schließzylinders wird in der Zentrale angezeigt.
• • Wiederaufnahme von APs:
• Die Wiederaufnahme eines AP entspricht dem Wiedereingang von keep-alive-Nachrichten nach wiederholten Timeouts. Um das Einschleusen von nicht autorisierten APs zu verhindern, werden zunächst MAC- und IP-Adresse des APs überprüft (bekannte MAC-Adresse und an diese MAC-Adresse vergebene IP-Adresse). Anschließend erfolgt eine gegenseitige Authentifizierung von AP und Zentrale (wie vorstehend beschrieben). Auf ein Scheitern dieser Überprüfungen reagiert die Zentrale mit einer Alarmmeldung. Danach teilt die Zentrale dem AP mit, dass sich alle mit ihm assoziierten Schließzylinder erneut bei der Zentrale registrieren und authentifizieren müssen. Der AP schickt dazu Register-Nachrichten (unicast) an alle Schließzylinder. Dabei wird die bei der ursprünglichen lokalen Initialisierung bei der Zentrale einprogrammierte Assoziations-ID von den Schließzylindern weiterverwendet.
• • Wiederaufnahme von Schließzylindern:
• Wieder aufgenommene Schließzylinder werden wie neue Schließzylinder in der Software der Zentrale angezeigt.

The control center behaves as follows in case of faults:

• • Failure of an AP:
• - On the failure of an AP (= repeatedly missing keep-alive messages), the control panel reacts with an alarm message. The user can choose whether the AP should continue to be monitored or deleted. If the user agrees, the AP entry is deleted from the routing table along with the associated lock cylinders.
• - Alternatively, this deletion can also be automated.
• - The IP address assigned to the AP is not deleted at this time. If the AP is restarted and for a known MAC Address (which has already been assigned an IP address) a new IP address is requested, the old address can be reassigned or a new one can be assigned and the old one can be deleted.
• • Failure of a lock cylinder:
• The failure of a lock cylinder is displayed in the control panel.
• • Recovery of APs:
• Resuming an AP is equivalent to returning keep-alive messages after repeated timeouts. To prevent the entry of unauthorized APs, the MAC and IP addresses of the AP are first checked (known MAC address and IP address assigned to this MAC address). Subsequently, a mutual authentication of AP and central office (as described above). Upon failure of these checks, the control panel reacts with an alarm message. Afterwards, the control center informs the AP that all lock cylinders associated with it must register again with the central office and authenticate. The AP sends to register messages (unicast) to all lock cylinders. In this case, the association ID programmed in at the headquarters during the original local initialization is reused by the lock cylinders.
• • Resumption of lock cylinders:
• Resumed locking cylinders are displayed like new locking cylinders in the software of the control panel.

• • Verlust eines Schließzylinders:
• Der Ausfall eines Schließzylinders wird der Zentrale mit einer lost-Nachricht gemeldet, die die Assoziations-ID des Schließzylinders enthält.
• • Ausfall und Neustart der Zentrale:
• Falls die Kommunikation mit der Zentrale ausfällt, puffert der AP für eine gewisse Zeit alle Nachrichten an die Zentrale. Nach einem prioritätsabhängigen Timeout werden die Nachrichten verworfen. Dabei haben Register-Nachrichten von Schließzylindern an die Zentrale und Meldungen über Schließzylinder-Ausfälle die höchste Priorität. Sonstige Anfragen an die Zentrale haben die geringste Priorität. Die Erreichbarkeit der Zentrale wird durch regelmäßige Sendeversuche von keep-alive-Nachrichten getestet. Der weitere Ablauf ist im vorstehenden Abschnitt „Neustart der Zentrale” beschrieben.
• • Wiederaufnahme von Schließzylindern:
• Die Abläufe zur Aufnahme verwaister Schließzylinder sind in Abschnitt „Einbindung eines verwaisten Schließzylinders” beschrieben.

The access points behave in the following way:

• • loss of a lock cylinder:
• The failure of a lock cylinder is reported to the central office with a lost message containing the association ID of the lock cylinder.
• • Failure and restart of the control panel:
• If the communication with the control center fails, the AP buffers all messages to the control center for a certain time. After a priority-dependent timeout, the messages are discarded. Register messages from lock cylinders to the control panel and messages about lock cylinder failures have the highest priority. Other inquiries to the headquarters have the lowest priority. The accessibility of the center is tested by regular attempts to send keep-alive messages. The further procedure is described in the previous section "Restarting the Control Center".
• • Resumption of lock cylinders:
• The processes for picking up orphaned lock cylinders are described in the section "Integration of an orphaned lock cylinder".

• • Verlust des assoziierten APs und Neuassoziierung:
• Ein Schließzylinder sucht sich selbsttätig einen neuen AP, vgl. Abschnitt „Einbindung eines verwaisten Schließzylinders”.
• • Ausfall der Zentrale:
• Die Schließzylinder sind von einem Ausfall der Zentrale nicht direkt betroffen. Sie können weiterhin Daten an die Zentrale adressieren. Falls die Zentrale ausfällt, wird dies vom assoziierten AP registriert und die Nachrichten werden eine prioritätsabhängige Zeit gepuffert, vgl. Abschnitt oben (Verhalten der APs bei Störungen).
• Neustart der Zentrale:
• Bei einem Neustart der Zentrale müssen sich die Schließzylinder erneut bei dieser registrieren, vgl. Abschnitt „Neustart der Zentrale” oben.

The locking cylinders behave as follows in case of faults:

• • Loss of associated AP and reclassification:
• A lock cylinder automatically searches for a new AP, cf. Section "Integration of an Orphaned Locking Cylinder".
• • Failure of the central office:
• The lock cylinders are not directly affected by a failure of the center. You can continue to address data to the center. If the central office fails, this is registered by the associated AP and the messages are buffered for a priority-dependent time, cf. Section above (Behavior of APs in case of faults).
• Restart of the headquarters:
• When the central office is restarted, the lock cylinders must register again with this, cf. "Restart the control panel" section above.

4 shows a further example of a locking system according to the invention. As described above, this is the lock cylinder 3a and the wall reader 3b (see below) both with the access point 2a associated or connected. The access point 2a is via an Internet Protocol-based company network (subnetwork) with the central locking system management unit 1 connected. The IP-based corporate network may be a traditional Ethernet connection; however, a radio network is alternatively conceivable.

From the central office 1 (here: personal computer) are thus data, in particular also configuration data for the lock cylinder via the subnetwork 5 and the access point 2a to the respective lock cylinder 3a respectively. 3b transferable. Conversely, the lock cylinder 3a respectively. 3b for example, data recorded by an integrated sensor via the access point 2a and the subnetwork 5 to the central office 1 transfer. The self-organization of the locking system according to the invention is carried out (by appropriate data exchange) thus both in the lock cylinders 3 and the access points 2 , as well as in the central administration 1 (by suitable SW and / or HW measures).

About the subnetwork 5 is another access point 2 B with the central office 1 connected. In an alternative embodiment, the two access points 2a and 2 B also be networked with each other (not shown here).

The lock cylinders 3c . 3d and 3e Now show a further possibility, as inventively locking cylinder via an access point 2 B with a central administration 1 can be connected. Here are the two lock cylinders 3c and 3d each already with the access point 2 B associated. The lock cylinder 3e However, it is outside the wireless range of the access point 2 B and the access point 2a , In such a case, nevertheless, a production of a radio link of the lock cylinder 3e with the access point 2 B possible if the lock cylinder 3c and 3d designed as a switching lock cylinder. In this case, one of the lock cylinder 3e emitted association request signal from the two lockout cylinders within radio range 3c and 3d receive. The two lock cylinders 3c and 3d forward the association request signal to the access point already connected to them 2 B (which is within its radio range). The access point 2 B sends out a corresponding association response signal if it still has free capacity, which of the lock cylinders 3c and 3d received and each to the lock cylinder 3e within their radio range. Depending on which radio link (lock cylinder 3e , Lock cylinder 3d , Access point 2 B or lock cylinder 3e , Lock cylinder 3c , Access point 2 B ) is cheaper, selects the lock cylinder to be connected 3e one of the two possible radio links for association with the access point 2 B out. Here it is assumed that the radio link 3e - 3d - 2 B is cheaper, so that the lock cylinder 3e to conductive data or the data received from him via the lock cylinder 3d , the access point 2 B and the subnetwork 5 to the central unit 1 be directed or received by this. In the present case, the two lock cylinders act 3c and 3d as pure mediation-locking cylinders, have different than in the following (see 5 ) does not have the ability to decide on the possibility of association (this is done by the access point alone) 2 B , the lock cylinder 3c and 3d So integrate differently than in 5 case, no complete access point functionalities are shown).

The lock cylinder 3a has a memory unit in the present case. After associating the lock cylinder 3a with the access point 2a be from the central administrative unit 1 over the subnetwork 5 and the access point 2a Configuration data for the configuration of the lock cylinder 3a transmitted to this storage unit. In the present case, the configuration data are access authorization data, that is, for example, a table of key identification numbers for keys that are authorized, the lock cylinder 1 bring into the open state (and thus, for example, a door, which locks the lock cylinder 3a integrated, open).

Such a key 6 can also be seen in the present arrangement. This is a radio key (but it can also be an RFID key or a mobile phone). The lock cylinder 3a now has a sensor unit with which the remote key 6 emitted identification data can be detected (the sensor unit is thus formed here as a radio receiving unit). The received key identification is then from the lock cylinder 3a compared with the table stored in the memory unit: If a corresponding key identification number is found in the table, the lock cylinder recognizes 3a that the key 6 is entitled to open and accordingly opens the associated door. Is the key 6 not authorized to open (so there is no match with the stored table), so the lock cylinder can store, for example, in a separate table unauthorized attempts to open, this to the lock management unit 1 or trigger an alarm signal. The basis of the decision, like the lock cylinder 3a moves, so is the locally stored table to access authorization data, which in a simple manner as described above by the Schließsystemverwaltung 1 to the associated lock cylinder 3a can be transmitted and changed at any time.

Finally, the embodiment of the 4 a control unit 4 which with the locking system management 1 is in data exchange via a data line. With this control unit 4 can be adjusted depending on the lock cylinder 3a transmitted status data trigger events. Thus, in the present case, the lock cylinder 3a for example, the closure of a door to a laboratory room. About the control unit 4 are now, for example, the individual computer systems of the corresponding laboratory space and also parts of the building technology with the locking system management 1 connected. Now closes a specific user by his key identification number 6 is ascertainable, the lock cylinder 3a on, its key identification number is sent to the locking system management 1 transfer. The locking system administration 1 uses this set of configuration data to determine which computer systems are needed for this user and then automatically boots them up (using the control unit) 4 ). In addition, via the control unit 4 automatically regulated the building services: So it is conceivable that upon entering the room (closing event in 3a ) the light is switched on automatically or the blinds are raised. A user-dependent configuration of the individual building technology units is also conceivable.

The wall reader 3b contains the same wireless technology as a lock cylinder. He controlled via a cable connected to him (not shown, not equipped with a radio unit) lock cylinder. The wall reader 3b with connected, not spark-capable cylinder thus behaves just like the radio-equipped cylinder 3a ,

5 shows another embodiment of the present invention. In this case, some of the lock cylinders have access point functionality, so that separate access points can be dispensed with. This concerns the lock cylinder 3e . 3f and 3g , Such is the lock cylinder 3g via its integrated access point functional unit directly to the central unit 1 connected. In the present case, this connection also takes place via a radio link. With this lock cylinder has over a radio link of also an access point unit having lock cylinder 3f connected. The lock cylinders 3a and 3b have yourself with this access point locking cylinder 3f associated. The same applies to the lock cylinder 3e (which via a radio link with the access point lock cylinder 3g is connected, so it has associated with this) with which the two lock cylinder 3c and 3d are associated. In the present case, the communication between the individual lock cylinders and the lock system management is thus carried out via adjacent lock cylinders, wherein due to the fact that the individual lock cylinders additionally have access point functionality or are simultaneously configured as access points, separate access points can be dispensed with. Unlike in 4 In the case shown, the access point lock cylinders (for example, the lock cylinder 3e ) This means that in the present case, such a lock cylinder itself decides (for example, due to the utilization of its access point unit) how many more lock cylinder he still allows for multihop communication.

About the radio key 6 and a corresponding data transmission via a lock cylinder are (control unit 4 not shown here) the same control mechanisms as above 4 described were possible.

The present invention has been described with reference to a locking system, as can be used in particular in the field of door locks of buildings. However, the individual lock cylinders can not only be door locks, but also all other types of locks. For example, it is conceivable to network the furniture locks of individual furniture or furniture units accordingly and store individual access authorizations locally. The same applies to car locks, window locks, etc.

Claims (40)

Locking system having at least one bidirectional data exchange by radio trained locking cylinder ( 3 ), at least one access point designed for bidirectional data exchange by radio with locking cylinders and for bidirectional data exchange with a central administrative unit, and a central administrative unit ( 1 ), which is connected to the access point for bidirectional data exchange, characterized in that an association request signal can be sent by the lock cylinder, from access points ( 2 ) on the basis of received association response signals, an access point is connectable via radio to the lock cylinder for bidirectional data exchange (association of the lock cylinder at the access point) and that at least one lock cylinder connected for bi-directional data exchange acts as access point for at least one further lock cylinder is trained. Locking system according to the preceding claim, characterized in that the at least one designed as an access point for at least one further lock cylinder lock cylinder is designed to decide how many more lock cylinder he allows for multi-hop communication. Locking system according to one of the preceding claims, characterized by a plurality of access points, wherein the central management unit is connected to each of the access points for bidirectional data exchange. Locking system according to one of the preceding claims, characterized in that in the lock cylinder, a lock identification cylinder uniquely identifying the first association identification code is stored, wherein after a connection of the lock cylinder with an access point, the first association identification code of the lock cylinder is transferable from this access point to the central management unit (registration of the lock cylinder with the central management unit). Locking system according to the preceding claim, characterized in that at least one second association identification code is stored in the central management unit such that the central administration unit compares the received first association identification code with the second association identification code and in that, depending on the comparison, at least one event can be triggered by the central administrative unit. Locking system according to one of the preceding claims, characterized in that in the lock cylinder, a first cryptographic key is stored and that in the central management unit, a second cryptographic key is stored, wherein from the lock cylinder by encryption with the first cryptographic key from a first authentication code, a first encrypted authentication code can be generated and wherein from the central management unit by encryption with the second cryptographic key from a second authentication code a second encrypted authentication code generated is. Locking system according to the preceding claim, characterized in that after a connection of the lock cylinder with an access point, a second authentication code can be transmitted from the central administration unit to the lock cylinder, the received second authentication code number is usable by the lock cylinder as the first authentication code number for generating the first encrypted authentication code number, that the generated first encrypted authentication code is transferable from the lock cylinder to the central management unit, a second encrypted authentication code number can be generated by the central administration unit from the second authentication code number and is comparable to the received first encrypted authentication code number, and in that, depending on the comparison, at least one event can be triggered by the central administrative unit (authentication of the lock cylinder with the central administrative unit). Locking system according to claim 6, characterized in that after a connection of the lock cylinder with an access point, the first authentication code is transferable from the lock cylinder to the central management unit, that the received first authentication code is usable by the central management unit as a second authentication code for generating the second encrypted authentication code, that the generated second encrypted authentication code is transferable from the central management unit to the lock cylinder, a first encrypted authentication code number can be generated by the locking cylinder from the first authentication code number and is comparable to the received second encrypted authentication code number, and in that, depending on the comparison, at least one event can be triggered by the lock cylinder (authentication of the central administrative unit in the lock cylinder). Locking system according to one of the preceding claims, characterized in that a third cryptographic key is stored in the access point and that a second cryptographic key is stored in the central management unit, wherein from the access point by encryption with the third cryptographic key from a third authentication code, a third encrypted authentication code can be generated and wherein from the central management unit by encryption with the second cryptographic key from a second authentication code a second encrypted authentication code generated is. Closing system according to the preceding claim, characterized in that a third authentication code from the access point to the central management unit is transferable, that the received third authentication code by the central management unit as a second authentication code for generating the second encrypted authentication code is usable, that the generated second encrypted authentication code is transferable from the central management unit to the access point, that a third encrypted authentication code is generated by the access point from the third authentication code and with the received second encrypted authentication -Code is comparable and that depending on the comparison, at least one event can be triggered by the access point (authentication of the central administrative unit at the access point). Locking system according to claim 9, characterized in that a second authentication code is transferable from the central management unit to the access point, that the received second authentication code is usable by the access point as the third authentication code for generating the third encrypted authentication code, that the generated third encrypted authentication code is transferable from the access point to the central management unit, a second encrypted authentication code number can be generated by the central administration unit from the second authentication code number and is comparable to the received third encrypted authentication code number, and in that, depending on the comparison, at least one event can be triggered by the central administrative unit (authentication of the access point with the central administrative unit). Locking system according to one of the six preceding claims, characterized in that at least one of the authentication codes is a random number generated by means of a random number generator arranged in the central management unit, in the access point and / or in the lock cylinder. Locking system according to claim 5 or 7, characterized by the storage of an address assigned to the lock cylinder after connection with an access point and the address of the access point in the central management unit as an event in case of matching the first and the second association identification code or the match of the first and the second the second encrypted authentication ID. Closing system according to claim 11, characterized by the storage of an address assigned to the access point in the central management unit as an event in the case of the match of the third and the second encrypted authentication code. Closing system according to one of the preceding claims, characterized by the triggering of an alarm signal by the central management unit, an access point and / or by the lock cylinder as an event in case of non-compliance of the first with the second association identification code, in case of non-compliance first and second or third and second encrypted authentication credentials and / or in case of association failure. Locking system according to one of the preceding claims, characterized by a plurality of lock cylinders. Locking system according to the preceding claim, characterized by at least one switching lock cylinder and a further lock cylinder, wherein the further lock cylinder is connectable by radio to the switch lock cylinder and via this with an access point connected to the switch lock cylinder for bidirectional data exchange. Closing system according to the preceding claim, characterized in that from the further lock cylinder an association request signal can be sent out of switching lock cylinders within radio range after receiving the association request signal association response signals of the access points connected to them can be transmitted and based on the access points and / or switching lock cylinders received association response signals an access point directly or via its associated lock-lock cylinder via radio with the other lock cylinder for bidirectional data exchange is connectable (association of the other lock cylinder at the access point). Locking system according to one of the preceding claims, characterized in that with several access points located in the radio range of the lock cylinder, the access point to be connected on the basis of the current states of these multiple access points, in particular the utilization, or an achievable connection quality between locking cylinder and the respective access point, in particular the RSSI and / or a link quality indicator is selectable. Locking system according to one of the preceding claims, characterized in that the association, registration and / or authentication by means of a three-way handshake between the lock cylinder, the central administrative unit and / or an access point is confirmed. Locking system according to one of the preceding claims, characterized in that an association, registration and / or authentication is feasible in Interruption of a connection between a lock cylinder and an access point, Interruption of a connection between an access point and the central administrative unit, or - Failure or restart of an access point or central administration unit. Closing system according to one of the preceding claims, characterized by at least one timer unit arranged in one of the network units, with which at regular intervals Time intervals Functional messages (keep-alive messages) can be sent to network units connected to this network unit. Locking system according to the preceding claim, characterized in that the network unit in which the timer unit is arranged is the central management unit, one of the access points and / or the lock cylinder. Locking system according to one of the preceding claims, characterized in that at least one of the lock cylinder with exactly one access point for data exchange is connectable and / or that at least one of the lock cylinder with multiple access points for data exchange is connectable. Locking system according to one of the preceding claims, characterized in that the central management unit with the access point by radio or via a subnetwork ( 5 ) is connected for bidirectional data exchange. Locking system according to the preceding claim, characterized in that the sub-network is an Internet Protocol-based network and / or a wireless network and / or that the data exchange between the access point and the central management unit based on local communication technology, in particular Wireless LAN, Ethernet or HomePNA , Locking system according to one of the preceding claims, characterized in that the central administrative unit is a personal computer. Locking system according to one of the preceding claims, characterized in that the lock cylinder and / or components used for data exchange thereof are temporarily deactivated to reduce energy consumption. Locking system according to one of the preceding claims, characterized in that the lock cylinder has a memory unit, wherein after the connection of the lock cylinder with the access point of the central administrative unit configuration data for the configuration of the lock cylinder via the access point to the storage unit transferable and can be stored there. Locking system according to the preceding claim, characterized in that the configuration data are access authorization data. Locking system according to one of the preceding claims, characterized in that the lock cylinder has a sensor unit by means of the data, physical state variables and / or chemical state variables from the environment of the lock cylinder can be detected or state variables of the lock cylinder itself, in particular service data, are queried and via radio via the access point can be transferred to the central administrative unit. Locking system according to one of the preceding claims, characterized in that the data are data for the identification of keys with which authorized or unauthorized opening attempts of the lock cylinder are undertaken. Locking system according to one of the two preceding claims characterized by a connected to the central administrative unit or in this integrated control unit ( 4 ) for controlling a process state and / or triggering an event as a function of the transmitted data or state variables. Locking system according to the preceding claim, characterized in that the lock cylinder within a building or in the outer area of the same is arranged and that with the control unit, the technology of the building is adjustable, computer systems or telephone systems can be activated or alarm events are triggered. Locking system according to one of the preceding claims, characterized by at least one key ( 6 ) with which locking events can be triggered in the lock cylinder. Locking system according to the preceding claim, characterized in that the key is a mechanical and / or electronic key, in particular an electromechanical key, a radio key, an RFID transponder, a PDA or a mobile phone. Locking system according to one of the preceding claims, characterized in that at least one of the lock cylinder is a door lock cylinder, a lock cylinder for a furniture lock, a lock cylinder for a car lock or a lock cylinder for a window lock. Use of a locking system according to the preceding claim for networking of door-closing cylinders, lock cylinders for furniture locks, lock cylinders for a car locks or lock cylinders for window locks. Method for integrating at least one lock cylinder in a network, wherein at least one lock cylinder designed for bidirectional data exchange by radio is arranged, wherein at least one access point arranged for bidirectional data exchange by radio with lock cylinders and for bidirectional data exchange with a central management unit is arranged; and wherein a central management unit for bidirectional data exchange is connected to the access point, characterized in that an association request signal is transmitted from the lock cylinder, association response signals are sent from access points within radio range upon receipt of the association request signal, and an access point over the radio to the lock cylinder for bidirectional based on received association response signals Data exchange (association of the lock cylinder at the access point), and that at least one Sch let cylinder connected by means of a bidirectional data exchange, designed as an access point for at least one other lock cylinder lock cylinder is integrated into the locking system. Method according to the preceding claim, characterized in that a locking system according to one of claims 1 to 37 is set up.

Images