DE102016118161A1 - Building security system - Google Patents

Abstract

The present invention relates to a building security system, comprising: - a plurality of detection devices for detecting various identification features of a person, - a plurality of building security components, - a storage device, and - an evaluation and control device which is connected to the detection devices, the building security components and the storage device and the configured to selectively authorize or deny requested access to one of the building security components; wherein the evaluation and control device is adapted to determine a current user authenticity degree for this person in dependence on at least two identification features which are detected by two different of the several detection devices for the same person; and wherein the evaluation and control device is further configured to authorize access only if a user authorization level assigned to this person comprises a component access category assigned to the building security component and if the current user authenticity degree determined for this person corresponds at least to the component access category assigned to the building security component.

Description

The present invention relates to a building security system. Building security systems serve to deny an unauthorized person access to a building or certain areas of the building while granting access to an authorized person. It can be distinguished not only between authorized and unauthorized persons, but also between persons within a group of authorized users by different users permanently assigned different user authorization levels, the access rights of the respective user, for example access to a specific area of the user Building, are static.

In order to gain access, it is important to check not only the scope of the entitlement of an access person, but also whether the person seeking access is actually a creditor or an alleged person. In other words, in addition to the scope of the authorization, the building monitoring system also checks the authenticity of the person seeking access. For this, an access person must communicate directly or actively with the building security system, i. the person seeking access is requested by the building security system to act as an authorized person in relation to the building security system, or to attest to their authenticity by means of an identification feature. This can be done, for example, by authenticating the person seeking access to the building security system by entering a personal identification number (PIN) or via a personal RFID transponder. However, such a building security system is not able to recognize whether it is actually a legitimate person or an unauthorized person who, for example, the PIN is known without authorization or has stolen the RFID transponder.

Thus, with a building security system based on only one identification feature, unambiguous user authentication is difficult or even impossible, so that sufficient security can not be guaranteed for all imaginable requirements. To better identify a person and to increase the security of the building security system further identification features of a person can be detected, in particular biometric data are used, which are considered to be forgery-proof or not easy to fake. However, in this case too, the identification of the identification features is carried out by an active process, for example by the person seeking access having to undergo a biometric scan by a device for detecting biometric data.

Although the security of a building security system can be further increased by the active detection of additional identification features, with the number of detected identification features also the time required to acquire the different identification features increases, which is perceived by a user as time-consuming and / or cumbersome can. Furthermore, a completely redundant detection of identification features is undesirably expensive.

An object of the invention is to provide a more user-friendly building security system with a safer user authentication.

To solve the problem, a building security system with the features of claim 1 is provided.

The building monitoring system according to the invention comprises a plurality of detection devices for detecting various identification features of a person, a plurality of building security components, a storage device, and an evaluation and control device, which is connected to the detection devices, the building security components and the storage device and which is adapted to a requested access to a to selectively authorize or deny the building security components. In this case, an assigned component access category is stored in the memory device for each of the building security components, with several different component access categories being available in ascending order. Furthermore, an associated user authorization level is stored in the memory device for each of a plurality of registered persons, wherein a plurality of different user authorization levels corresponding to different groups of assigned component access categories are available. The evaluation and control device is designed to determine a current user authenticity degree for this person in dependence on at least two identification features detected by two different of the several detection devices for the same person, wherein a plurality of different user authenticity degrees are in ascending order corresponding to the component access categories Are available. The evaluation and control device is further adapted, in the case of one of provide access authorization to one of the building backup components and authorize access only if the user privilege level associated with that person comprises the component access category associated with the building backup component and if the current user authenticity level determined for that person is at least equal to the component access category associated with the building backup component.

The invention is based on the general idea that the authenticity of a user can be determined all the more precisely the more different identifiers of the same person are detected. In doing so, not only actively detected identifiers may be used to determine the user authenticity level, which may also be referred to as user trust value, i. in which a user has actively contacted the building security system, but also passively detected identification features, i. Identification features detected by the building monitoring system without a user having actively contacted the building monitoring system.

Actively detected identification features may include, for example, entering a personal identification number (PIN) or capturing a user-specific iris pattern or retina pattern, wherein the user must consciously look into a camera that detects the iris or retina. Passively detected identification features can be, for example, a movement pattern recognition of the user, indirectly recorded calendar entries in a mobile electrical terminal of the user, recognition of a motor vehicle license plate of the user's motor vehicle, the user not having to actively contact the building security system for the detection of these identification features.

Due to the wealth of identification features, a user can be identified more clearly, as a result of which the building security system can recognize more clearly whether it really is the person who, for example, tries to authenticate himself by entering a personal identification number. In other words, as part of an authentication check, the building security system can detect whether the actively detected identifiers actually identify the authorized user, or if they are an unauthorized person who is unlawfully in possession of an authorization feature (eg, a PIN), attempts to gain access to one secure area. This has the advantage that the security of the building security system is increased.

Another advantage is that, given sufficiently existing passive identification features, even largely can be dispensed with actively detected identification features, so that a user identification can be done so to speak, without an active need for action by the user or so to speak automatically. In this case, a complete automatic user identification does not exclude that at least to a certain extent identification features are still actively detected.

Another aspect of the invention is that unlike a building security system, in which the access rights of a user are statically determined, there is additionally a dynamic determination and consideration of a user authenticity degree, for example, by the anomalies in the behavior of the user or in the process of Authentication can be considered. The user authenticity level can be adjusted regularly depending on the behavior of the user. By tracking the user authenticity level as a function of currently detected identification features, an additional criterion is available in order to be able to evaluate and take into account the reliability of an identification. Thus, while the user privilege level associated with a user defines a respective maximum available level of access rights, the level of user authenticity may limit the actual amount of access rights actually available, particularly depending on a detected behavior of the user.

Access is only authorized if both the (statically assigned) user privilege check and the current (dynamic) user authenticity check check result in a positive result. In other words, not only must the user be assigned a sufficient user authorization level, which is basically necessary in order to be able to gain access to the relevant building security component at all. In addition, the current user authenticity level of the user must correspond to a minimum value associated with the building security component concerned (so-called component access category).

Advantageous embodiments of the invention are described in the dependent claims, the further description and the drawings.

As far as the aforementioned access authorization check is concerned, the evaluation and Control device be designed to perform the following steps. First of all, the component access category assigned to the relevant building security component is read from the memory device. Furthermore, the one of the registered persons who has requested the access, for example by means of a manually entered code, by means of a used code carrier such as RFID transponders or by means of a biometric detection and evaluation, and to the identified person, the assigned user authorization level from the Memory device read out. Moreover, the current user authenticity degree is determined for the identified person (eg based on two currently detected identification features or by reading out a previously determined or modified current user authenticity level from the storage device). It is checked whether the read user authorization level comprises at least the component access category read out, ie whether the component access category assigned to the relevant building security component is included in the read user authorization level. It is further checked whether the determined current user authenticity degree corresponds at least to the read component access category, ie whether the current user authenticity level has at least the significance of the component access category assigned to the relevant building security component in a scale corresponding to one another. The access is only authorized by the evaluation and control device if the two tests provide a positive result. Otherwise, access is denied. It is understood that the steps may also differ from the sequence described above.

Preferably, the user privilege levels are hierarchically arranged such that each user privilege level is assigned a component access category of a particular severity and, in addition, the lower-valued component access categories. In other words, a hierarchically higher user privilege level always also has all component access categories of lesser significance, i. the component access categories of the hierarchically lower user privilege levels. Valence in this context means a rank or a ranking within a value scheme. The different groups of assigned component access categories thus form only subsets of each other. This simplifies the management of access rights. However, it is also possible that the groups of assigned component access categories corresponding to the different user authorization level are selected differently.

In order to be able to compare the current user authenticity level particularly easily with the respective component access category (which is associated with the building security component under consideration) for all user authorization levels, it is preferred for all user authorization levels that the same assigned component access category corresponds in each case to the same current user authenticity level which, for a positive result of the access authorization check at least is required. In other words, a respective user privilege level can always be compared on the same principle and independently with a respective component access category, which user privilege level has an inspected person.

According to one embodiment, the evaluation and control device may be configured to compare the current user authenticity degree of a person with a predetermined first lower threshold value and to give the person the status of an unauthorized or unauthorized person if the current user authenticity level is less than the first lower threshold value. In other words, the current user authentication level may have a threshold below which the person no longer has access rights, regardless of their user privilege level, because their current user authenticity level is too low for all of the component access categories. In this way, it can be achieved that an abnormal behavior of a person despite the user authorization level granted to this person results in that person at least temporarily no longer has access to the building security components.

Alternatively or additionally, the evaluation and control device can be designed to compare the current user authenticity level of a person with a second lower threshold value and even to give the person the status of a potential intruder if the current user authenticity level falls below the second lower threshold value. It is understood that in this case the second lower threshold is below the first lower threshold, if this is also taken into account. For example, if such a status of a potential intruder is conferred, active countermeasures may be automatically initiated, such as the issuing of an alarm signal or the locking of electric door locks in the vicinity of the person concerned.

According to a particularly advantageous embodiment, it is provided that the current user authenticity degree is determined on the basis of a previously determined user authenticity degree is, namely by the latter is modified. For this purpose, a last determined user authenticity degree can be stored in the said memory device for at least some (preferably each) of the registered persons. For determining the current user authenticity level of the respective person, the evaluation and control device is then configured to read out the last determined user authenticity level of the person from the memory device, to modify the read user authenticity degree as a function of the identification features detected for this person and the modified user authenticity level as current Restore user authenticity level in the storage device.

Modifying the current user authenticity level can be done regularly. According to an advantageous embodiment, the evaluation and control device is designed to modify the user authenticity degree stored for a person on the basis of a predetermined triggering event. A modification of the current user authenticity level can be triggered, for example, by a person requesting access to one of the building security components, and / or by one of the detection devices detecting an identification feature for this person (active or passive).

In order to modify the degree of user authenticity stored for a person, the evaluation and control device can be designed to compare at least one identification feature currently detected with the person with a respective expectation value and to increase or decrease the user authenticity level depending on the result of the comparison or to leave unchanged.

In this case, the evaluation and control device can be designed to increase or decrease the user authenticity degree differently depending on a degree of agreement of the respective identification feature, in particular of a biometric identification feature or of a trained usual time behavior of a person, with the expected value. Thus, a simple quantitative adjustment of the user authenticity degree can be made easily.

A categorization can also be provided with regard to the detection devices. This can be realized for modifying the current user authenticity level such that the detection devices are assigned different relevance categories, wherein the evaluation and control device is designed to vary the user authenticity degree depending on the relevance category of the detection device that has acquired the respective identification feature increase or decrease. Thus, for example, a personal identification number, in particular multiple, incorrectly entered, may be weighted more heavily than a deviation of a passively registered identification feature, such as a registered motor vehicle license plate.

With regard to the aforementioned detection of at least two different identification features, the evaluation and control device can be configured to compare at least two identification features detected at different times with a respective expected value and to increase or decrease the user authenticity level depending on the result of the comparison or to leave unchanged, wherein the evaluation and control device weighs the identification feature detected earlier at a lower weighting than the identification feature detected at a later time. Thus, an event history can be considered weighted, with lower past events or identification features is given a lower weight.

For determining the current user authenticity level of the respective person, the evaluation and control device can use both at least one of the at least two detected identification features to identify the person as a registered person as well as at least one of the at least two identification features to the user authenticity degree or to modify a user authenticity level stored for the identified person. In this case, a complete separation of the use may be provided, i. only one identifier (eg, an entered PIN) is used to identify the person as a registered person, and only the other identifier (eg, the period of time for entering the PIN from an expected value) is used to set the user authenticity level or to modify.

Preferably, the different detection means used to detect the at least two identification features comprise at least one detection means operable by the user (for example a code input device) and at least one detection means (such as a face recognition or recognition video camera) of the license plate).

To increase the security of the building security system, it is also advantageous if both biometric and code-based identification features are detected. For this purpose, the at least two different detection devices may comprise at least one biometric detection device configured to detect a biometric identification feature (such as a fingerprint, voice, iris pattern or retina pattern) of the subject, and at least one code detection device for detection a code carrier (for example an RFID transponder) or for detecting a code input (for example PIN) is formed.

In general, a code input device, a code detection device and / or a biometric detection device can be provided as detection devices.

Furthermore, the detection devices may comprise at least one video camera, wherein the evaluation and control device or an independent evaluation device is adapted to capture by image analysis a current user feature (eg, a user behavior) and compare the detected current user feature with a stored previous user feature and a degree of matching between the current and the stored previous user feature. In this case, the determined degree of agreement can also be used as an identification feature.

When the user characteristic is detected, it is possible for example to evaluate a stature, the face or a facial expression of the user, but also certain movement patterns or a specific movement behavior of the user. Moreover, it is also conceivable to include in the detection of the user characteristic a motor vehicle license plate of a motor vehicle of the user.

Exemplary building security components are in the context of the invention, a door opening device, such as an electronic door fitting or an electronic lock cylinder, and / or an operating device for arming or disarming a burglar alarm system.

The invention will now be described purely by way of example with reference to a possible embodiment with reference to the accompanying drawings. Show it:

1 a schematic representation of a building security system according to the invention;

2 a schematic representation of the determination of a user authenticity degree, which in the building security system of 1 is implemented;

3 a schematic representation of the relationships between user authenticity level, user authorization level and component access category, which in the building security system of 1 are implemented.

1 shows a schematic representation of a building security system according to the invention. The building security system includes multiple detection devices 10a . 10b to 10n , several building security components 12a . 12b to 12n , and a memory device 14 , which with an evaluation and control device 16 connected by cable or wirelessly (eg local wireless network, WLAN etc.).

The multiple detection devices 10a . 10b to 10n serve to capture various identification features 18a . 18b to 18n an access requesting or access-seeking person, which is not shown in the figures. The identification features 18a . 18b to 18n For example, they may include a personal identification number (PIN), an RFID transponder carried by the person, and / or biometric data of the person, such as a face shape, an iris or retina pattern.

The building security components 12a . 12b to 12n comprise at least one door opening device and / or at least one operating device for selectively arming or disarming a burglar alarm system. For each of the building security components 12a . 12b to 12n is in the storage device 14 each one associated component access category K1, K2 to Kn ( 3 ), which in connection with 3 will be explained in more detail.

Further, in the storage device 14 stored for each of several registered persons an associated user authorization level B, wherein a plurality of different user authorization levels B1, B2 to Bn ( 3 ) corresponding to different groups of (one or more) associated component access categories K1, K2 through Kn. A user privilege level B sets a maximum amount of access, as related to 3 is explained in more detail.

The evaluation and control device 16 is configured to provide requested access to one of the building security components 12a . 12b to 12n to selectively authorize or deny. The evaluation and control device 16 is further adapted, depending on at least two identification features 18a . 18b to 18n that of two different of the multiple detection devices 10a . 10b to 10n to the same person, to obtain a current user authenticity degree G for that person ( 2 ). As related to 3 described in more detail, several different user authenticity degrees G1, G2 through Gn are available in ascending order corresponding to the component access categories K1, K2, to Kn.

2 shows a schematic representation of the determination of the user authenticity degree G. The determination of the user authenticity degree G begins with a start signal 20 which can be triggered, for example, by allowing a person access to one of the building security components 12a . 12b or 12n requests. Subsequently, in a first detection step 22a by the first detection device 10a a first identification feature 18a the person detects or checks whether a first identification feature 18a the person can be detected, where appropriate, the evaluation and control device 16 in a first evaluation step 24a a rating of the detected first identification feature 18a performs.

In the subsequent second detection step 22b becomes a second identification feature 18b according to the first detection step 22a recorded and evaluated. Through several acquisition steps 22 and evaluation steps 24 become more different identifiers 18 recorded and evaluated until sufficient identification features 18a . 18b to 18n were detected and a final signal 26 the recording and evaluation of the identification features 18a . 18b to 18n completed. Based on the identified identification features 18a . 18b to 18n determines the evaluation and control unit 16 the current user authenticity level G, where the user authentication level G indicates the reliability that is actually the registered user.

Was in the respective detection step 22 no identification feature 18 does not capture or lie to the person any identification feature 18 before, so is in the respective evaluation step 24 the rating is neutral, which is in 2 is illustrated by W = 0, ie the non-existent identification feature 18 does not contribute to the determination or modification of the user authenticity level G. Will be an identification feature 18 detected, so is the evaluation and control device 16 designed to be in the respective evaluation step 24 the detected identification feature 18 to compare with an expected value. Corresponds to the detected identification feature 18 at least approximately the expected value, so there is a positive rating, which has an increase in user authenticity degree G result. A significant deviation of the detected identification feature 18 the expected value, on the other hand, results in a negative score, so that the user authenticity degree G is decreased. In 2 is a positive score represented by W = (+1) and a negative score by W = (-1).

Depending on a relevance category of the detection device, the weighting factor f may weight the weighting differently. The relevance category can result, for example, from a predetermined trustworthiness of a detected identification feature. For example, a biometric identification feature of the user, which represents a very user-specific identification feature, may be given greater trustworthiness than the detection of a motor vehicle license plate of the user's motor vehicle, which is not necessarily actuated by the user and thus does not unequivocally identify the user.

3 shows the relationship between user authenticity level G, user privilege level B, and component access category K. In 3 Concretely, four user authorization levels B1, B2, B3 and B4 are shown. It is understood that also more or less than four user authorization levels B can be provided.

The user authorization levels B1, B2, B3 and B4 hierarchically increase from the lowest user authorization level B1 to the highest user authorization level B4. Each user authorization level B1, B2, B3 and B4 are respectively assigned to certain of the component access categories K1, K2, K3 and K4. The highest user privilege level B4 includes all of the four component access categories K1, K2, K3, and K4, whereas the lowest user privilege level B1 includes only the component access category K1. In addition, a neutral component access category K0 and a negative component access category K-1 are provided, which will be explained later in more detail. It is understood that more component access categories may be provided for each of the user authorization levels B1, B2, B3 and B4.

It is further understood that a user authorization level B, such as the third highest user authorization level B3, need not necessarily include the component access categories K1, K2 and K3, but other component access categories K may be grouped within the user authorization level B3, such as only the component access categories K1 and K4. Finally, the number and combination of component access categories K will depend on which scope of authority is assigned to a user.

The component access categories K0, K1, K2, K3 and K4 define a scope of authorization of a user. The neutral component access category K0 defines here that a user has no authorization and thus none of the building security components 12a . 12b to 12n can access. The component access category K1 may be a basic authorization, with which a user, for example, has restricted access to information and / or operating functions of the building security components 12a . 12b to 12n Has. In the component access category K2, an extended authorization of the user can be defined, such as full access to information and / or operating functions of the building security components 12a . 12b to 12n , The component access category K3 is a full permission of the user. For example, in the component access category K3, full access to information and operation functions and limited access to configuration functions of the building backup components may be provided 12a . 12b to 12n be defined. In the highest component access category K4, the user has full authorization, ie, for example, he has full access to the information, operation and configuration functions of the building security components 12a . 12b to 12n ,

It is understood that in the respective component access categories K1 to K4 also each other scope of authorization can be determined. For example, in the component access category K1, a user may have full access to information, operation, and configuration functions, but only for a single building backup component 12 so that the user only has access to a single particular building section, which is protected by the building security component 12 is secured.

Alternatively, in the component access categories K1 to K4, for example, the following authorizations may also be defined: opening a door only in the case of a disarmed intruder alarm system, opening a door even if the intruder alarm system is armed, accessing different areas of a building or administrator functions such as creating new registered persons or changing the user authorization level ,

To what extent a user has access to information, operation and configuration functions and / or building security components 12a . 12b to 12n However, not only does it depend on the user privilege level B associated with it, but also on the current user authenticity level G determined. Thus, to access the functions of a particular component access category K, the user requires a certain minimum user authenticity level G, the minimum user authenticity level G being all the same The higher the component access category K, the higher it must be. This is in 3 by the current user authenticity degree G and the respective component access category K. To be able to access the functions of a particular component access category K, the level of user authenticity degree G must be in 3 at least equal to the height of this component access category K.

Thus, a user who is assigned the user authorization level B4 needs at least the user authentication level G4 in order to be able to access all the functions of the component access categories K1 to K4. Should the evaluation and control device 16 have detected a lower user authenticity level G, the user with the user authorization level B4 is no longer able to access the functions of the component access category K4. For example, if a current user authentication level G located between user authentication levels G2 and G3 has been determined, the user with user authorization level B4 will only have access to the functions of component access category K2 and the underlying component access category K1. A lesser current user authenticity level G may, as related to 2 explained, for example, be determined when a user accidentally entered a PIN several times wrong. It is understood that if the evaluation and control device 16 upon re-determination of the user authenticity level G, a higher user authenticity level G is determined, the user with a particular user privilege level can re-access the higher component access category K functions, provided that these higher component access categories K are even available in the user privilege level concerned.

Conversely, if a user with user authorization level B1, which by definition only allows access to the functions of component access category K1, determines a high level of user authenticity G4, this does not mean that he automatically also has access to the functions of higher component access categories K2, K3, K4 has.

Apart from this general system, a user can also be classified as unauthorized if the evaluation and control device 16 determines a current user authenticity level G which is below a first lower threshold. In the specific embodiment, the first lower threshold is given by the user authentication level G1, so that only one user with a current user authenticity level G, which is lower than the user authentication level G1, is assigned the neutral component access category K0 (user is currently unauthorized).

Determines the evaluation and control device 16 a current user authenticity degree G, which is even below a second lower threshold defined herein by the ordinate, ie, a negative user authenticity level G-1, will be assigned a negative component access category K-1 to an access seeker and the person will become a potential intruder classified. In this case, the evaluation and control device can be designed, for example, to generate an alarm signal.

Hereinafter, referring to 1 a typical flow of access to a building security component 12 explained. A person requests access to a building security component 12 (Eg, a door opening device), for example, by holding an RFID transponder to a wall scanner. The building security component 12 transmits a release request to the evaluation and control device 16 , The evaluation and control device 16 determines the access authorization both via the user authorization level B assigned to the person (if applicable) and via a current user authorization level G. The evaluation and control device 16 transmitted to the building security component 12 depending on the test result, either an access authorization signal or an access denied signal.

But it may also be provided a decentralized authorization check, ie the evaluation and control device 16 does not necessarily have to be a central unit, but the evaluation and control device 16 can also be at least partially distributed to several units (eg network nodes) and in particular partially in the building security components 12 be integrated. Furthermore, the storage device 14 also an integral part of the evaluation and control device 16 be.

LIST OF REFERENCE NUMBERS

10

 detection device

12

 Building security component

14

 memory device

16

 Evaluation and control device

18

 identification feature

20

 start signal

22

 determining step

24

 evaluation step

26

 end signal

K

 Component access Category

B

 User Authorization Level

G

 Users authenticity degree

W

 rating

f

 weighting factor

Claims (18)

Building security system, comprising: - a plurality of detection devices ( 10 ) for detecting various identification features ( 18 ) one person, - several building security components ( 12 ), - a memory device ( 14 ), and - an evaluation and control device ( 16 ) connected to the detection devices ( 10 ), the building security components ( 12 ) and the memory device ( 14 ) and which is adapted to provide a requested access to one of the building security components ( 12 ) to authorize or deny selectively; wherein in the memory device ( 14 ) for each of the building security components ( 12 ) an associated component access category (K) is stored, wherein a plurality of different component access categories (K) are available in an ascending order; wherein in the memory device ( 14 ) for each of a plurality of registered persons an associated user authorization level (B) is stored, wherein a plurality of different user authorization levels (B) are available corresponding to different groups of assigned component access categories (K); wherein the evaluation and control device ( 16 ) is designed, depending on at least two identification features ( 18 ) obtained from two different ones of the multiple detection devices ( 10 ) for the same person to obtain a current user authenticity degree (G) for that person, wherein several different user authenticity degrees (G) are available in an ascending order corresponding to the component access categories (K); and wherein the evaluation and control device ( 16 ) is further adapted, in the case of a person requested access to one of the building security components ( 12 ) to perform an access authorization check and to authorize the access only if the user authorization level (B) assigned to this person matches that of the building security component ( 12 ) and if the current user authenticity degree (G) determined for that person is at least that of the Building security component ( 12 ) corresponding to the component access category (K). Building security system according to claim 1, wherein the evaluation and control device ( 16 ) is designed for the purpose of the access authorization test: - that of the building security component concerned ( 12 ) associated component access category (K) from the storage device ( 14 ) read out; To identify the one of the registered persons who requested the access and to the identified person the assigned user authorization level (B) from the storage device ( 14 ) read out; To determine the current user authenticity degree (G) for the identified person; To check whether the read-out user authorization level (B) comprises at least the read-out component access category (K); - further to check whether the determined current user authenticity degree (G) corresponds at least to the read-out component access category (K); and - authorize access only if the two tests provide a positive result and otherwise deny access. A building backup system according to claim 1 or 2, wherein the user authorization levels (B) are hierarchically arranged such that each user authorization level (B) is assigned a component access category (K) of a particular significance and additionally the component access categories (K) of lesser importance. A building security system according to at least one of claims 1 to 3, wherein for all user authorization levels (B) the same assigned component access category (K) corresponds to the same current user authenticity level (G) as is at least required for a positive result of the authentication. Building security system according to at least one of the preceding claims, wherein the evaluation and control device ( 16 ) is adapted to compare the current user authenticity degree (G) of a person with a first lower threshold value and to give the person the status of an unauthorized person if the current user authenticity degree (G) falls below the first lower threshold value. Building security system according to at least one of the preceding claims, wherein the evaluation and control device ( 16 ) is adapted to compare the current user authenticity degree (G) of a person with a second lower threshold and to give the person the status of a potential intruder if the current user authenticity degree (G) is less than the second lower threshold. A building security system according to at least one of the preceding claims, wherein in the memory device ( 14 ) for each of the registered persons a last determined user authenticity degree (G) is stored, whereby the evaluation and control device ( 16 ) is adapted, for determining the current user authenticity degree (G) of the respective person: - the last determined user authenticity degree (G) of the person from the memory device ( 14 ) read out; The read user authenticity degree (G) as a function of the identification features detected for that person ( 18 ) to modify; and the modified user authenticity degree (G) as the current user authenticity degree (G) in the memory device ( 14 ) save. A building security system according to claim 7, wherein the evaluation and control device ( 16 ) is adapted to modify the user authenticity degree (G) stored for a person if that person has access to one of the building security components ( 12 ) and / or if by one of the detection devices ( 10 ) an identification feature ( 18 ) is recorded to this person. A building security system according to claim 7 or 8, wherein the evaluation and control device ( 16 ) is adapted for modifying the user authenticity degree (G) stored for a person to have at least one identification feature currently registered to the person ( 18 ) to compare with a respective expectation value and, depending on the result of the comparison, to increase or decrease the user authenticity degree (G) or to leave it unchanged. A building security system according to claim 9, wherein the evaluation and control device is designed, depending on a degree of agreement of the respective identification feature ( 18 ) with the expected value to increase or decrease the user authenticity degree (G) differently. A building security system according to claim 9 or 10, wherein the detection devices ( 10 ) are assigned to different relevance categories, whereby the evaluation and control device ( 16 ) is designed, depending on the relevance category of the detection device ( 10 ), the respective identification feature ( 18 ) to increase or decrease the user authenticity degree (G) differently. Building security system according to at least one of the preceding claims, wherein the evaluation and control device ( 16 ) is adapted to identify at least two identification features ( 18 ) to compare with a respective expected value and, depending on the result of the comparison, to increase or decrease the user authenticity degree (G) or to leave it unchanged, the evaluation and control device ( 16 ) the identification feature acquired at an earlier point in time ( 18 ) is weighted less than the identification feature ( 18 ). Building security system according to at least one of the preceding claims, wherein the evaluation and control device ( 16 ) for determining the current user authenticity degree (G) of the respective person of at least one of the at least two detected identification features ( 18 ) is used to identify the person as a registered person and at least one other of the at least two identifiers ( 18 ) is used to set the user authenticity degree (G) or to modify a user authenticity degree (G) stored for the identified person. A building security system according to at least one of the preceding claims, wherein the at least two different detection devices ( 10 ) at least one detection device to be actively actuated by the user ( 10 ) and at least one user detection device ( 10 ). A building security system according to at least one of the preceding claims, wherein the at least two different detection devices ( 10 ) at least one biometric detection device ( 10 ) used to acquire a biometric identification feature ( 18 ) of the person is formed, and at least one code detection device ( 10 ), which is designed to detect a code carrier or to detect a code input. A building security system according to at least one of the preceding claims, wherein the detection devices ( 10 ) comprise a code input device, a code detection device and / or a biometric detection device. A building security system according to at least one of the preceding claims, wherein the detection devices ( 10 ) comprise a video camera, wherein the evaluation and control device ( 16 ) or an independent evaluation device is adapted to capture by image analysis a current user feature and to compare the detected current user feature with a stored previous user feature and to determine a degree of agreement between the current and the stored previous user feature. A building security system according to at least one of the preceding claims, wherein the building security components ( 12 ) - a door opening device; and / or - an operating device for arming or disarming a burglar alarm system include.

Images