DE102017114783A1 - security system - Google Patents

Abstract

Described and illustrated is a security system (1) for unlocking at least one door lock (200), in particular escape route security, wherein the security system (1) comprises a trigger element (10), in particular an emergency button (10), wherein the trigger element (10) a manually operable actuating element (11), wherein by actuation of the actuating element (11), an actuating signal for unlocking the door lock (200) can be generated. According to the invention, the safety system (1) comprises a door lock control (201), wherein the door lock control (201) and the trigger element (10) are interconnected via a first bus system (400), the door lock control (201) in particular a first digital Processing means (202) and a second digital processing means (203), wherein a locking mechanism (205) is controllable by the first processing means (202) and by the second processing means (203).

Description

The invention relates to a security system for unlocking at least one door lock, in particular for emergency exit, wherein the safety system comprises a triggering element, in particular an emergency button, wherein the triggering element comprises a manually operable actuating element, wherein an actuating signal for unlocking the door lock can be generated by actuation of the actuating element ,

Security systems for escape route security are known. The security systems comprise at least one latching emergency button and a door lock. If the actuating element of the emergency button is actuated, the actuating element remains in an actuating position. In the actuated position, a circuit is interrupted so that a door lock is transferred to an unlocked state. From the EP 2 725 172 A2 It is known to connect an emergency button and a door lock via a bus system with each other.

It is the object of the invention to provide a security system that ensures the security of the security system even using a bus system between the trigger element and the door lock.

This object is achieved by a security system according to independent claim 1. Advantageous developments of the safety system are given in the dependent device claims, the description and in the figures. The features mentioned in the description and in the claims may each be essential to the invention individually or in combination.

The previously derived and indicated object is achieved on the basis of the security system described above in that the security system comprises a door lock control. The door lock control and the trigger element are connected to each other via a first bus system. In particular, the door lock control comprises a first digital processing means and a second digital processing means, wherein a locking mechanism of the door lock can be actuated by the first processing means and by the second processing means.

As a lock, the transfer of the door lock is understood in the locked state. As unlocking the transfer of the Türverrieglung is understood in the unlocked state.

The security system may include the locking mechanism. The locking mechanism may, for. B. electromechanical or purely electromagnetic. The locking mechanism includes z. B. at least one coil. A control of the locking mechanism for locking or unlocking can be realized in particular in a switching off or on an electrical power supply. The electrical power supply can be used to supply the coil with electric current.

An electromagnetic locking mechanism is exemplary in the DE100 50 111 C1 described. In the unlocked state z. B. no magnetic forces on the door. In the locked state z. B. magnetic forces on a door.

An electromechanical locking mechanism has a mechanical connection to the door in the locked state. In the unlocked state, the mechanical connection can be canceled or canceled.

Thus, the electromechanical locking mechanism z. B. a locking element, d. H. a latch or a door latch, which is in the unlocked state of the door latch in a retracted position. In the retracted position, the locking element is disengaged from the door. In the locked state, the locking element is engaged with the door. In a further alternative of an electromechanical locking mechanism, the locking mechanism is constructed in the manner of a door opener. Ie. the locking mechanism comprises a latch element. In the locked state of the door lock is a door latch of the door engaged with the locking mechanism. In the unlocked state, the latch element releases the door latch so that the door latch, in particular by pressure on the door, can disengage from the locking mechanism.

Switching off the electrical power supply preferably leads to an unlocked state of the door lock. Thus, the activation of the locking mechanism for unlocking the door lock is realized by switching off the electrical power supply. Preferably, switching on the electrical power supply leads to a locked state of the door lock. Thus, the driving of the locking mechanism for locking is realized by turning on the electric power supply.

The security system may alternatively be configured without the locking mechanism. In this case, the security system merely actuates the locking mechanism. For example, the security system switches the electrical Power supply for the locking mechanism on or off or causes an on or off of the electrical power supply.

A "locking or unlocking control" is also present when the security system receives feedback about the state of the locking mechanism. A "lock or unlock control" is also present when, as detected by the feedback, the lock mechanism does not conform to the desired condition and therefore an alarm is issued and / or a retry attempt is made to reach the desired condition ,

The door lock controller controls the lock mechanism. For this purpose, the door lock control can switch the electrical power supply for the locking mechanism on and off.

The security system may include the door lock control but not the lock mechanism. The Türverrieglungssteuerung is formed in this case as a door lock adapter. The door locking adapter serves to use the security system according to the invention already mounted locking mechanisms.

The door lock comprises the locking mechanism and, if present, the door lock control. Particularly preferably, the security system comprises the door lock.

The door lock or the locking mechanism may be integrated in a mechanical lock.

In the following, a distinction is made between a user and an operator. A user can be any person using the security system. A user can, for. B. be a guest who wants to escape through the door secured by the security system. An operator serves to operate the security system. The operator has access to a security system of the security system and / or can authenticate himself to the security system, in particular to operate the security system. The watch device may be configured as a PC or a monitor. In the following, the actuation signal is understood to be the signal which is generated by the user by the actuation of the actuation element in order to unlock the door lock and to clear the escape route.

The security system is used in particular for escape route security. The security system thus serves to release the escape route. Ie. the actuation of the actuator leads to an unlocking without an authentication of the user. The unlocking can be immediate or delayed.

The triggering element is preferably designed as a emergency button. In this case, the actuating element corresponds to the actuating element of the emergency button. Alternatively, the triggering element may be formed as a panic bar assembly. The actuator is formed in this case as a panic bar. The triggering element can be designed as a fitting assembly. In this case, the actuator z. B. formed as a door handle.

The door lock control and the trigger element are connected to a first bus system. A connection to a bus system is understood below to mean an immediate connection, so that a component connected to the bus system is to be regarded as a subscriber of the bus system with its own bus address. The door lock control and the trigger element are connected to each other via the first bus system.

The triggering element causes a triggering of the locking mechanism for unlocking. In particular, when initiating a control, the sending of a message, e.g. B. via the first bus system understood, containing an information and / or a command that causes the immediate or indirect recipient of the message to make the drive. The sender of the message initiates the activation. Thus, by initiating a drive, an indirect drive is understood. So z. B. the trigger element send a message via the first bus system to the door lock control, whereupon the door lock control drives the locking mechanism for unlocking. In particular, the triggering element can initiate the unlocking of the locking mechanism in a time-delayed manner.

In that the door lock control comprises first and second digital processing means, and both the first and second digital processing means can drive the lock mechanism for unlocking, one-shot security is achieved.

The first and / or the second processing means may each comprise a processor. The first and / or the second processing means may, for. B. each be designed as a microprocessor or microcontroller. The first and / or the second processing means may each comprise a non-volatile memory.

By the first processing means, a first door lock switch is actuated. By the second processing means, a second door lock switch is actuated. The actuation, in particular the opening, of the first door lock switch is sufficient to switch off the electrical power supply for the locking mechanism. The actuation, in particular the opening, of the second door lock switch is sufficient to switch off the electrical power supply for the locking mechanism. Thus, a redundancy is given.

Preferably, after the generation of the actuation signal and / or in the presence of a fire alarm signal, both the first and the second processing means actuate the locking mechanism for unlocking. In this case, both the first and the second door lock switch are preferably actuated.

The triggering element, in particular the emergency button, may comprise an electronic unit. The electronics unit serves as a trigger element control. The electronic unit may comprise a first and a second digital trigger element processing unit, in particular a first and a second emergency button processing unit. The first and / or the second trigger element processing unit, in particular the first and / or the second emergency button processing unit, may each comprise a processor. The first and / or the second trigger element processing unit, in particular the first and / or the second emergency button processing unit, can be designed as a microprocessor or microcontroller. The first and second trigger element processing units may each comprise a non-volatile memory. In addition, the electronics unit may include a third digital trigger element processing unit. The third trigger element processing unit may include a processor. The third trigger element processing unit may be configured as a microprocessor or a microcontroller. The third trigger element processing unit may comprise a non-volatile memory and / or have access to a non-volatile memory. The third trigger element processing unit can be provided in particular for non-safety-related functions.

The first and second triggering element processing units may each independently detect an actuating signal. Here, a switch of the trigger element processing unit may open a first and a second circuit. Here, the first trigger element processing unit detects a first actuation signal and the second trigger element processing unit detects a second actuation signal. The first and the second trigger element processing unit can then each independently cause the actuation of the door locking mechanism for unlocking via the bus system. In this case, in particular at least one message in which the first and / or the second trigger element processing unit informs about the presence of the first or second actuating signal is sent to the door lock control via the first bus system. Here, in particular, the first triggering element processing unit informs the first processing means and the second triggering element processing unit informs the second processing means. As a result, in particular, both the first and the second processing means control the locking mechanism for unlocking, so turn off the electrical power supply.

A sign of life signal of the first and second trigger element processing units is preferably sent to the door lock controller on a regular basis. In each case, the first and the second triggering element processing unit in each case emit their own sign of life signal. The life sign signals can be contained in a message. The first processing means checks the sign of life of the first trigger element processing unit and the second processing means checks the sign of life of the second trigger element processing unit. If one of the sign of life signals fails once or several times, then the locking mechanism is actuated for unlocking by the first and the second processing means. Here, the one processing means may inform the other processing means of the absence of the sign of life.

The first and second processing means can monitor each other. Noticing one of the two processing means that the other processing means is defective or failed, the intact processing means in particular causes the locking mechanism to be activated for unlocking.

It may be that always the first trigger element processing unit, the security-related message, for. For example, the message about the presence of an actuation signal, the vital signs, or the signal that the actuation signal has previously been generated is sent to the door lock control. The message includes the information of the first and second trigger element processing units.

It is preferably provided that the safety system comprises an electronic device and is electronically prevented as a result of the actuation signal by the electronic device that without the presence of a cancellation condition Locking mechanism of the door lock for locking can be controlled. In other words, the actuation signal causes, with the aid of the electronic device, in particular in the electronic device, it is prevented electronically that a lock mechanism of the door lock can be actuated for locking without the presence of a cancellation condition. Thus, a triggering of the locking mechanism for locking is prevented until reaching the cancellation condition. This ensures that after actuation of the actuating element for unlocking the door lock a locking of the door lock is reliably prevented.

It can be provided that the actuation of the actuating element can be carried out in such a way that the actuating element can be moved from an initial position into an actuating position. Thus, the actuating element is mechanically movable. Preferably, the actuation signal is generated in the actuation position. This allows the actuator to give the user in a simple way a feedback on the operation.

Further, it is conceivable that the actuating element after actuation always without manual action, preferably by a return means, is movable from the actuation position to the starting position. The actuating element can by the return means z. B. be moved to a triggering of the return means or immediately after the end of the manual operation in the starting position. The return means may be a spring. Additionally or alternatively, an actuation of the actuating element always takes place without mechanical detents. In this case, when actuated, the actuating element can remain in the starting position or be moved to the starting position immediately after the end of the manual actuation. This ensures that even without a manual return of the actuating element, the actuating element is actuated again. The re-actuation of the actuating element can only cause an unlocking of the door lock, if the door lock is not already in the unlocked state. If the door lock is already in the unlocked state and the actuating element is actuated, in particular the locking mechanism is not actuated. The door lock remains in the unlocked state.

The actuating element preferably has an illuminating area. The Illuminierbereich is preferably provided centrally in the actuator. With the help of the Illuminierbereichs light of a color, especially red light is emitted. A light source located behind the actuator may be illuminated by the illuminator.

It can be provided that a first program code is stored in the electronic device, wherein the first program code as a result of the generation of the actuation signal prevents that without the presence of the cancellation condition, the locking mechanism can be actuated for locking. Hereby, the object of the invention can be achieved particularly easily. In particular, the first program code is stored in a first digital processing means of the electronic device. A second program code can be stored redundantly in a second processing means of the electronic device. By the first program code and by the second program code can be prevented in each case as a result of the generation of the actuation signal that without the presence of the cancellation condition of the locking mechanism for locking can be controlled. This achieves one-fault security.

Particularly preferably, the door lock, in particular in the door lock control, comprises the electronic device.

The triggering element can store electronically until the presence of the cancellation condition that an actuation signal, in particular the first and the second actuation signal, has been generated. In particular, the trigger element in the first trigger element processing unit and redundantly in the second trigger element processing unit electronically stores that an actuation signal has been generated. The storage may be in the non-volatile memories of the first and second trigger element processing units. In particular, the first triggering element processing unit stores that the first actuating signal has been generated and the second triggering element processing unit stores that the second actuating signal has been generated. This ensures that the safety system does not forget the actuation of the actuating element.

The door lock controller may electronically store until the suspend condition is present that an actuation signal has been generated. Specifically, the door lock controller in the first processing means and redundantly stores in the second processing means electronically that an operation signal has been generated. The storage may be in the nonvolatile memories of the first and second processing means.

It is preferably stored in both the trigger element and in the door lock control that an actuation signal has been generated.

In order to achieve a particularly high level of security, the triggering element repeatedly sends a signal that an actuation signal has previously been generated to the door lock control until the condition for cancellation is present. Preferably, the signal is always sent until the presence of the cancellation condition together with a sign of life signal. In this case, the first triggering element processing unit may repeatedly inform the first processing means of the generation of the operation signal until the cancellation condition is established, and the second triggering element processing unit may inform the second processing means accordingly. The information may be included in a message sent over the first bus system.

It can be provided that the electronic device comprises an electronic detection, wherein the electronic detection can be converted into an operating state as a result of the actuation signal. Upon reaching the cancellation condition, the electronic detection may be convertible to an initial state. In the operating state, the electronic determination prevents the locking mechanism from being activated for locking. In the initial state, the electronic determination allows the locking mechanism to be triggered for locking. Upon reaching the cancellation condition, the electronic detection is transferred to the initial state. The electronic detection is achieved in a particularly safe and simple way, the prevention of the lock after generating the actuation signal.

The electronic determination may include a first variable in addition to the first program code. The first program code includes the first variable or has access to the first variable. In an initial state of the electronic determination, the first variable is set to an initial value. In the actuated state, the first variable is set to an actuation value by which the locking of the door lock is prevented. The first variable can be binary. When the cancellation condition is reached, the value of the first variable is set to the initial value. The first program code detects the value of the first variable and allows latching of the door latch when the value of the first variable is equal to the initial value, and prevents locking of the door latch if the value of the first variable corresponds to the actuation value. The first variable is stored in the non-volatile memory of the first processing means. The second program code correspondingly handles the first variable redundantly stored in the nonvolatile memory of the second processing means.

The first variable may be stored in the first and second trigger element processing units. The first variable may be repetitively transmitted from the trigger element to the door lock controller.

To achieve the cancellation condition, a cancellation signal can serve, wherein the cancellation signal can be generated by a cancellation action taken directly on the trigger element. This ensures that the operator goes to the trigger element and convinced on site that there is no danger. The cancellation action may be at least by touching the triggering element or by near field communication.

The cancellation action, which is performed directly on the trigger element, can be generated by the actuation of the actuating element. As a result, the already provided for the release of the escape route actuator is conveniently used. Thus, it is possible to dispense with a further element on the triggering element and to achieve, to a particular extent, that the operator moves to the triggering element.

It may be that the cancellation condition is achievable without a rotational movement of the actuator. The cancellation act on the trigger element can be done without rotation of the actuator. In particular, it is conceivable that the actuating element is only translationally movable. In particular, the actuating element is movable only between the starting position and the actuating position.

It is conceivable that the cancellation signal corresponds to the actuation signal. Thus, the same action that is used to generate the actuation signal for unlocking the door lock, as a repeal act.

In order for the electronic device to recognize that actuation of the actuating element to achieve the cancellation condition and not to generate the actuation signal to enable the escape route, the electronic device must have a further information.

It may be that the security system comprises an activation device assigned to the triggering element or is in communication connection with the authentication device assigned to the triggering element. The communication can be wired or wireless.

Authentication to the authentication device may be, for example, by entering a code, wireless or wired Transmission of a code, recognition of a key by rotation, recognition of personal characteristics, such as fingerprint or iris done. The authentication device can be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader. The authentication device may be associated with one or more trigger elements. Preferably, the authentication device is associated with only one triggering element.

Upon successful authentication, the electronic device receives a positive identification signal via the authentication at the authentication device.

The security system may include a control device.

It is conceivable that the authentication device, if there is no danger, is used to cause an unlocked door lock for an authorized person. Here, the control device of the security system can receive a positive authentication signal from the authentication device and cause the unlocking of the door lock.

To achieve the cancellation condition, authentication at the authentication device can take place, in particular a receipt of a positive identification signal by the triggering element. To achieve the cancellation condition, it may be that both the cancellation signal has been generated and the authentication at the authentication device, in particular the reception of the positive identification signal, has taken place.

It may be that in order to achieve the cancellation condition, a predetermined time sequence in the generation of the cancellation signal and the authentication, in particular the reception of the positive identification signal, must be observed. Additionally or alternatively, to achieve the cancellation condition, it may be necessary to adhere to a predetermined order in the generation of the cancellation signal and the authentication, in particular the reception of the positive identification signal. The generation of the cancellation signal and the authentication that has taken place, in particular the generation of the cancellation signal and the authentication in which the time sequence and / or the sequence have been followed, may be sufficient to achieve the cancellation condition and thus at least allow the locking of the door lock.

In particular, the cancellation signal and the authentication, in particular the reception of the positive identification signal, must be present at least partially simultaneously. The authentication, in particular the reception of the positive identification signal, must preferably last longer than the generation of the cancellation signal.

For example, it may be sufficient to achieve the cancellation condition that first the actuator is actuated and while the actuator remains actuated, a key is rotated in the key switch. The key remains rotated while the actuator is released.

In another example of achieving the cancellation condition, it may be sufficient to first turn the key in the key switch and then actuate the actuator while the key remains rotated. The key remains rotated while the actuator is released.

It may be that always the cancellation signal, which is generated by an action taken directly on the trigger element, to achieve the cancellation condition is necessary. It may alternatively be that the cancellation signal, which is generated by an action taken directly on the triggering element, is necessary only for reaching the cancellation condition if the door has been opened after the generation of the actuation signal. For this purpose, a signal of at least one door condition monitoring device can be present to the security system, in particular the electronic device. Under a door can also be understood a door leaf.

The door condition monitor is for detecting whether the door is open or closed. In the door condition monitoring device may, for. B. to a door contact, a sensor, a switch and / or a door lock with detectable latch and / or trap position. The security system may include the door condition monitor or be connectable to the door condition monitor.

Particularly preferably, at least a first door condition monitoring device and a second door state monitoring device are provided for a door, in particular for a door leaf, and / or a door lock. This allows a one-fault security can be achieved. Preferably, the first door condition monitoring device differs in design from the second door state monitoring device. This increases the error safety.

• a.) seit dem Erzeugen des Betätigungssignals kein Signal der Türzustandsüberwachungsvorrichtung über das Öffnen des Türblatts innerhalb des vorbestimmten Zeitintervalls in dem Sicherheitssystem, insbesondere von der Elektronikvorrichtung, empfangen worden ist und
• b.) das vorbestimmte Zeitintervall verstrichen ist.

In particular, when the door, in particular the door leaf, remains closed after the generation of the actuation signal, the safety system has at least one further possibility of achieving the cancellation condition. For example, it may be sufficient in this case that a predetermined time interval, for. B. 60 s, has elapsed since the generation of the actuating signal. In the expression "since the generation of the actuation signal", a time to notify the electronic device via the actuation signal can be neglected. The predetermined time interval may be stored in the electronic device. Thus, it may be sufficient to achieve the cancellation condition if

• a.) has been received since the generation of the actuation signal, no signal of the door condition monitoring device on the opening of the door leaf within the predetermined time interval in the security system, in particular by the electronic device, and
• b.) the predetermined time interval has elapsed.

The electronic device may include a timer for determining the time interval.

The predetermined time interval can be predefined and stored immutable in the electronic device. Alternatively, an operator may set the predetermined time interval by a parameterization program. Here, a minimum time can be fixed.

• a.) weder ein Signal von der ersten Türzustandsüberwachungsvorrichtung noch von der zweiten Türzustandsüberwachungsvorrichtung, die für ein Türblatt und/oder eine Türverriegelung vorgesehen sind, über das Öffnen des Türblatts seit dem Erzeugen des Betätigungssignals innerhalb des vorbestimmten Zeitintervalls in dem Sicherheitssystem, insbesondere von der Elektronikvorrichtung, empfangen worden ist.

If the first and the second door condition monitoring device are provided, the condition a.) Can deviate from that

• a.) neither a signal from the first door condition monitoring device nor the second door condition monitoring device, which are provided for a door leaf and / or a door lock, on the opening of the door leaf since generating the actuation signal within the predetermined time interval in the safety system, in particular from the electronic device , has been received.

It can be provided that the security system comprises a central escape route control. The central escape route control is preferably connected to a second bus system.

In particular, a cancellation signal can be generated at the central escape route control. The cancellation signal or a message about the cancellation signal can be sent to the electronic device via at least one bus system, in particular at least via the second bus system. The cancel signal may serve to achieve the cancellation condition. In particular, an authentication of an operator to the central escape route control for generating the cancel signal is necessary. The escape route control may include an identification device for this purpose. The authentication at the central escape route control can be done by entering a code, wireless or wired transmission of a code, recognition of a key by rotation, recognition of personal characteristics, such as fingerprint or iris. For example, the central escape route controller may include a keypad, a key switch, a fingerprint sensor, or a reader as an identification device.

• c.) das Aufhebesignal an der zentralen Fluchtwegsteuerung erzeugt ist.

In particular, if the automatic re-locking after the predetermined time interval with closed door is not considered safe enough, it is conceivable that in addition to the conditions a) and b) to achieve the cancellation condition is provided as the following further condition that

• c.) the cancellation signal is generated at the central escape route control.

The conditions a.) To c.) May be sufficient for attaining the cancellation condition.

Preferably, it is conceivable that an allowable cancellation signal, which contributes to the achievement of the cancellation condition, can be generated only after the lapse of the predetermined time interval. On the other hand, authentication at the central escape route controller within the predetermined time interval does not result in an allowable cancellation signal contributing to the achievement of the cancellation condition. It may be that an elimination of the predetermined time interval at the central escape route control can be displayed optically. For this purpose, the central escape route control may comprise lighting means, with which in particular a delay of unlocking in consequence of the actuation of the trigger element can be displayed.

The central escape route control include a central emergency button. If the central emergency button is pressed, the locking mechanism is activated for unlocking. To operate the central emergency button an emergency button actuator is provided. The process that is actuated as a result of the operation of the central emergency button, the locking mechanism for unlocking, one-fault-safe and is thus suitable for hazardous situations.

The central escape route control may include an emergency module. The emergency module may comprise the lighting means in addition to the central emergency button and the identification device.

If the door lock has been unlocked due to a fire alarm signal and is then on Opening the door omitted, which is to be detected in particular by both the first and by the second door condition monitoring device, it can also be caused by the authentication of the identification device, a locking of the door lock after the end of the fire alarm signal. Only if the fire alarm signal has already been terminated does an authentication on the identification device again lead to an interlock. For this purpose, the door lock control receives a signal via the authentication. It may be that the possibility to initiate a locking of the door lock after the end of the fire alarm signal by an authentication on the identification device, is visually displayed on the central escape route control. In particular, the same bulbs are used for this purpose.

In particular, a signal about opening the door after the elapse of the predetermined time interval or upon completion of the fire alarm signal does not prevent the reaching of the cancellation condition.

It may be that conditions a.) And b.) Or a.) To c.) Are not sufficient to achieve the cancellation condition and thus allow locking of the door lock. Rather, it may be that the cancellation condition is only reached if in addition the electronic security system, in particular electronically deposited, that the existence of the conditions a.) And b.) To achieve the cancellation condition is permitted and / or is deposited in the security system that the conditions a.) to c.) for reaching the cancellation condition is permissible.

The deposit of the admissibility of can be made to an operator. The filing of the admissibility can be done with the aid of a parameterization program. In the parameterization program, the operator can manually set whether the conditions a.) And b.) And / or the conditions a.) To c.) For reaching the cancellation condition are permissible. It may be that the deposit may only be made when commissioning the security system.

If the safety system comprises several triggering elements, then it can be individually stored for each triggering element or for groups of triggering elements whether the conditions a.) And b) and / or the existence of the conditions a.) To c.) For achieving the cancellation condition are permissible is. The group of triggering elements may in particular comprise the triggering elements which are to be assigned to a door or a door lock. The admissibility is preferably stored electronically in the respective triggering elements.

If the security system comprises several door interlocks, it can be individually stored for each door interlock or for groups of door interlocks, whether the existence of the conditions a.) And b) and / or the existence of the conditions a.) To c.) To achieve the cancellation condition is permissible is. In particular, the group of door locks may include the door locks associated with a door or door leaf. The admissibility is preferably stored electronically in the respective door locks.

The electronic device, before the locking mechanism is activated for locking, checks whether the conditions a.) And b.) And / or the conditions a.) To c.) Have been set as permissible. If the conditions a.) And b) and / or the conditions a.) To c.) Have not been laid down as permissible, then permitting the lock to be locked or triggering the locking mechanism for locking is omitted. Thus, it may be sufficient to achieve the cancellation condition
the conditions a.) and b.) are satisfied and it is stipulated that the existence of the conditions a.) and b.) to achieve the cancellation condition is permissible.

As an alternative to achieving the cancellation condition, it may be sufficient that
the conditions a.) to c.) are fulfilled and it is stipulated that the existence of the conditions a.) to c.) to achieve the cancellation condition is permissible.

If in each case the triggering element and / or in the triggering element deposited, which conditions for reaching the cancellation condition is permitted, it may be that the electronic device before triggering the locking mechanism for locking the trigger element in which the actuation signal has been generated, asks whether the fulfilled conditions present to the electronic device are considered to be permissible for achieving the cancellation condition in the triggering element.

The security system may include several central escape route controllers. The central escape route controllers may each comprise an identification device. In this case, it can be deposited in the security system at which identification device a cancellation signal that is permissible for fulfilling the condition c.) Can be generated. This can be stored individually for several triggering elements and / or multiple door locks.

The triggering element can be converted into a deactivated state, wherein in the deactivated state upon actuation of the Triggering element fails to control a locking mechanism for unlocking. The triggering element can be converted into an activated state, wherein in the activated state upon actuation of the triggering element takes place an activation of the locking mechanism for unlocking. The triggering element can in particular be converted into the deactivated and / or activated state by a central escape route control.

It may be that in the activated state of the trigger element a previous operation of the trigger element in the deactivated state is ineffective on the activation of the locking mechanism. Characterized in that an actuation of the trigger element in the deactivated state is ineffective on the state of the locking mechanism when the trigger element is or is activated again, it can be prevented that upon activation of the trigger element or timely thereto, the locking mechanism is unlocked.

It can be provided that in the deactivated state, the actuating element is mechanically non-latching in the actuation position. The actuator can, for. B. be moved from the operating position to the starting position immediately after the operation and / or without manual intervention, in particular by a return means.

Further, it is conceivable that the actuating element in the activated state after the operation without manual action, preferably by a return means, and / or immediately after the operation of the actuating position is movable to the starting position. Preferably, the actuator is in both the deactivated and in the activated state by the return means, for. B. immediately after the operation, movable to the starting position. The return means may be a spring. Preferably, the movement of the actuator in the deactivated state and the activated state is identical.

It may be that the activated state and / or the deactivated state of the trigger element is stored in the trigger element electronically. For this purpose, z. B. be deposited a second variable in the electronics unit. Preferably, the second variable is stored in the first trigger element processing unit and redundantly stored in the second trigger element processing unit. The second variable may each be stored in the non-volatile memory of the first and second trigger element processing units. The second variable can be binary. If the trigger element is in the deactivated state, then the second variable is set to a deactivation value. If the trigger element is in the activated state, the second variable is set to an activation value. If the trigger element itself changes to the activated state, the trigger element can set the variable to the activation value.

The central escape route control and / or the connection of the central escape route control with the triggering element can be monitored for errors especially in the deactivated state of the triggering element. The connection between the central escape route control and the triggering element may be at least one bus system, in particular at least the second bus system. The central escape route control may be connected to the second bus system. The triggering element can be connected to the first bus system and optionally to the second bus system. The connection between the central escape route control can thus comprise the second bus system or the first and the second bus system.

If an error is detected during monitoring, the triggering element is transferred to the activated state. The error may in particular be a malfunction or failure of the central emergency button and / or a malfunction or interruption of the connection, in particular the bus system or at least one of the bus systems. As a result, the security can be increased on site, if via the central escape route control or the guard no activation or unlocking can be made more.

The central escape route security, in particular the central emergency button, may comprise a first emergency processing unit and a second emergency processing unit. The first and second emergency processing units may each include a processor. The first and / or the second emergency processing unit may each be designed as a microprocessor or microcontroller. The first and second emergency processing units may each comprise a nonvolatile memory. Additionally, the emergency button electronics unit may include a third digital emergency button processing unit. The third emergency processing unit may include a processor. The third emergency processing unit may be designed as a microprocessor or microcontroller.

The third emergency processing unit may comprise a non-volatile memory and / or have access to a non-volatile memory.

A life sign signal of the first emergency processing unit and the second emergency processing unit may be repetitively sent via the connection to the trigger element. The trigger element can receive the Check sign of life signals. In the event of a single or multiple failure of at least the sign of life signal of the first emergency processing unit or of the second emergency processing unit, the triggering element itself transfers into the activated state.

It may be that in the deactivated state, the electronic unit is functional. In the deactivated state, the trigger element can be supplied with electrical current. The deactivated state can be visually represented by the trigger element.

It is preferably provided that in the deactivated state of the trigger element is omitted, that the trigger element causes due to an actuation of the trigger element that the door lock control drives the locking mechanism for unlocking. It is preferably omitted that the trigger element sends a message about the operation of the trigger element to the door lock control. Thus, the triggering element can always first check, as a result of an actuation, whether the triggering element is deactivated and, on deactivation, fails to send a message to the door-locking control.

If the second variable corresponds to the deactivation value in only one trigger element processing unit and the second variable erroneously corresponds to the activation value in the other trigger element processing unit, the trigger element causes the locking mechanism to be triggered for unlocking.

It is preferred in the deactivated state that the door lock control receives a message about the generation of the actuation signal. As a result, there is no transfer of the electronic device into the operating state. It is particularly preferable to omit sending the actuation value of the first variable to the electronic device.

It may be that in the deactivated state of the trigger element is omitted, that the trigger element stores in response to an actuation of the trigger element, that the trigger element has been actuated. For this purpose, it may be that in the deactivated state of the trigger element, the trigger element fails due to a generation of an actuating signal to set the first variable to the actuation value.

The safety system is preferably designed to indicate an actuation of the actuation element in the deactivated state of the actuation element at the center, in particular at the central escape route control, a multi-door display device and / or the monitoring device. This allows an operator to identify a hazard to the user and act accordingly. The operator can bring the trigger element in the activated state or unlock the door lock.

The security system may include a video and / or audio module for monitoring an environment of the triggering element. A transfer into the deactivated state can preferably only take place if the video element and / or audio module assigned to the triggering element can be unlocked, in particular unlocked. As a result, a danger can always be perceived on the spot for the operator. If the audio and / or video module is part of the security system according to the invention, then a deactivation can be omitted if the audio and video module z. B. is not functional and / or the connection to the audio and video module is disturbed. This does not apply if the security system does not comprise an audio and video module, but a monitoring system separate from the security system is provided in the building.

It may be that, as a result of the actuation of the deactivated trigger element, the video and / or audio module assigned to the trigger element is released. In this case, the actuated and deactivated triggering element can enable or release the video and / or audio module assigned to the triggering element.

The central escape route control may comprise a first operating element. The first control element is used to deactivate the trigger element. The triggering element can be transferred by an actuation of the first operating element in the deactivated state, provided that the triggering element is in the activated state. An actuation of the first control element may comprise an authentication, in particular an input of a code, a wireless or wired transmission of a code, a recognition of a key by rotation, a recognition of personal characteristics, such as fingerprint or iris. The first control element can be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader.

The central escape route control may include a second control element. The triggering element can be brought into the activated state by an actuation of the second operating element, provided that the triggering element is in the deactivated state. To operate the second control, it may not be necessary for authentication to occur. Thus, the second control z. B. be designed as a button.

In the security system, in particular in the trigger element, can be deposited electronically, whether a deactivation is approved for the trigger element. If the deactivation is not permitted for the triggering element, an action by the operator to deactivate the triggering element does not result in the triggering element being transferred to the deactivated state. On the other hand, if the deactivation is permitted, an action of the operator, in particular the actuation of the first operating element, leads to the deactivation of the triggering element.

It is preferably provided that an action for activating the triggering element, in particular the actuation of the second operating element, always leads to the activation of the triggering element.

The safety system may include multiple tripping elements. By actuating the first operating element, the triggering elements can be transferred into the deactivated state. By actuating the second operating element, the triggering elements can be transferred into the activated state. Thus, in particular by the actuation of only a single control element, the deactivation and / or the activation of a plurality of triggering elements take place.

If the security system comprises a plurality of triggering elements, the triggering elements may be selectively convertible to the activated state and / or the deactivated state. As a result, it is possible to individually address different areas of the building. Thus, it can be deposited individually for each trigger element or groups of trigger elements in the security system, whether for the respective trigger element or for the group of trigger elements deactivation is allowed.

The filing of the authorization for deactivation can be carried out with the help of a communication device, eg. As a personal computer or a portable computer, executable parameterization program. Thus, an operator for the trigger element, in particular for each trigger element or groups of trigger elements, set whether the deactivation is allowed or not.

If, for at least one triggering element of the safety system, a deactivation is stored as approved and the deactivation is not permitted for at least one further triggering element, then upon actuation of the first operating element only the at least one triggering element is deactivated and the at least one further triggering element remains in the activated state. Thus, by the operation of a single control element selectively deactivation can be caused.

In particular, the approval of the deactivation is stored in the trigger element. Receives z. B. the triggering element a message that the first operating element has been actuated, the triggering element checks on the basis of the deposit, whether the deactivation is permitted. Only if the deactivation is defined as permissible does the trigger element change to the deactivated state. For this purpose, the triggering element z. B. u. a. set the second variable to the deactivation value.

The security system may include several central escape route controllers. In this case, it may be stored electronically in the security system, in particular in the triggering element, for which central escape route control upon actuation of the first operating element the deactivation is permitted. So z. For example, upon actuation of the first operating element of a first central escape route control, the deactivation may be permitted and / or deactivation may not be permitted upon actuation of the first operating element of a second central escape route control. If a plurality of triggering elements are present, it can be deposited individually for each triggering element or for groups of triggering elements for which central escape route control during an actuation of the first operating element the deactivation is permitted.

It is conceivable that the central escape route control is designed such that upon actuation of the first operating element, a first deactivation circuit and a second deactivation circuit are opened or closed. This achieves a one-fault safety in the generation of a deactivation signal which leads to the deactivation of the triggering element.

Additionally or alternatively, upon actuation of the second operating element, a first activation circuit and a second activation circuit can be opened or closed.

The central escape route control and the triggering element can be connected to one another via at least one bus system, in particular via at least the second bus system. The central escape route control may be connected to the second bus system. The triggering element may be connected to the second bus system. Alternatively, the triggering element may be connected to the first bus system, but not to the second bus system. The connection between the central escape route control and the triggering element can thus comprise the second bus system or the first and the second bus system.

If the triggering element is not connected to the second bus system, it may be particularly Preferably, the control device may be connected both to the first bus system and to the second bus system. The control device may forward messages from the central escape route controller to the trigger element. The control device can be designed to cause a non-safety-relevant activation of the locking mechanism for unlocking or locking.

It may be that the first and / or the second control element are electrically connected via the emergency module, in particular via the central emergency button, with the trigger element. In particular, it may be that the emergency module, in particular the central emergency button, is connected to the second bus system. Thus, the central emergency button and the trigger element can communicate with each other via the second bus system or via the first and the second bus system. In the latter case, the control device can preferably be provided to forward a message from the central emergency button to the triggering element. Additionally or alternatively, the control device may preferably be provided to forward a message from a bus user of the first bus system to the central emergency button.

Preferably, the first and / or the second control element are not connected to the second bus system. Ie. the first and / or the second operating element are not subscribers of the second bus system, but a message about the actuation of the first and / or second operating element is sent from the emergency module, in particular from the central emergency button to the trigger element. Particularly preferably, a signal via the actuation of the first and / or second operating element from the emergency module, in particular from the central emergency button, detected or processed. For this purpose, the emergency module, in particular the central emergency button, a digital Notfalltasterelektronikeinheit include.

Each of the first and second emergency processing units may independently detect a signal via an operation of an emergency button operation member. Here, the first emergency processing unit detects a first signal via the operation of the emergency button operation member, and the second emergency processing unit detects a second signal via the operation of the emergency button operation member. The first and second emergency processing units may then each independently cause the door lock mechanism to be unlocked. For this purpose, in particular at least one message in which the first and / or the second emergency processing unit informs about the presence of the first or second signal via the actuation of the emergency button actuating element is sent to the door lock control.

It may be that a deactivation signal of the first deactivation circuit from the first emergency digital processing unit of the central emergency button and a deactivation signal of the second deactivation circuit are detected by the second digital emergency processing unit of the central emergency button. In this case, in particular, at least one message in which the first and / or the second emergency processing unit informs about the presence of the first or second deactivation signal is sent to the triggering element. Particularly preferably, the triggering element is transferred to the deactivated state only when the triggering element has been informed of both the presence of the first deactivation signal and the presence of the second deactivation signal.

In addition, a signal of the first activation circuit may be detected by the first emergency digital processing unit of the central emergency button and a signal of the second activation circuit by the second digital emergency processing unit of the central emergency button. In this case, in particular, at least one message in which the first and / or the second emergency processing unit informs about the presence of the signal of the first and the second activation circuit is sent to the triggering element. Particularly preferably, the trigger element is then brought into the activated state, when the trigger element has been informed of either the presence of the signal of the first activation circuit or the presence of the signal of the second activation circuit.

Alternatively, a signal may be detected or processed by the third emergency processing unit via the operation of the second operating element. After detecting or processing the signal via an actuation of the second operating element, a message for activation can be sent to the triggering element. The central emergency button and the second control element are preferably connected via a bus, in particular an I ² C bus.

The deactivation module, in particular the first and / or the second operating element, is preferably designed to be processor-free. Characterized in that the signals on the operation of the first and / or second control element are detected or processed by the Notfalltasterelektronikeinheit, it is not necessary that the deactivation module has its own intelligence, eg. B. in the form of at least one processor.

Preferably, the trigger element and the door lock remain connected in the deactivated state of the trigger element.

The central escape route control may include a delay element. As a result of an actuation of the triggering element, the activation of the locking mechanism for unlocking can be delayed by a first delay time duration. An operation of the delay element within the first delay period causes an extension of the delay of a drive of the locking mechanism. An operation of the delay element may comprise an authentication, in particular an input of a code, a wireless or wired transmission of a code, a recognition of a key by rotation, a recognition of personal characteristics, such as fingerprint or iris. A manual operation can therefore be done by a physical contact or contactless. The delay element may be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader.

Preferably, the central escape route control comprises a termination element for terminating the delay. If the termination element is operated, the delay is terminated and the locking mechanism is activated directly for unlocking. To operate the termination element, it may not be necessary to authenticate. So the termination element z. B. be designed as a button.

The central escape route control can be modular. The central escape route control may include the emergency module. The emergency module may include the identification device in addition to the central emergency button.

The central escape route controller may include a deactivation module. The deactivation module may comprise the first control element and the second control element.

The central escape route control may include a delay module. The delay module may comprise the delay element and the termination element.

The deactivation module and / or the delay module can be arranged in a common escape route control housing together with the emergency module and in particular fixed. The emergency module may include a first mounting plate that secures the emergency module to the escape route control housing. The deactivation module may include a second mounting plate that secures the deactivation module to the escape route control housing. The deceleration module may include a third mounting plate that secures the deceleration module to the escape route control housing.

In particular, the central emergency push-button and the identification device are mechanically fastened to one another via the first fastening plate. In particular, the first and the second operating element are mechanically fastened to one another via the second fastening plate. In particular, the delay element and the termination element are fastened to one another by means of the third attachment plate.

The emergency module and / or the deactivation module may be securable at various locations in the escape route control housing. Preferably, the arrangement of the modules in the escape route control housing is variable. Thus, the modules can be arranged side by side in different orders. In particular, each module can be arranged on the right, left or in the middle. Thus, it may be that the emergency module is arrangeable both on the left and on the right of the deactivation module in the Fluchttwegsteuerungsgehäuse.

Preferably, it is conceivable that in addition to the central escape route control, a multi-door display device can be arranged in the escape route control housing. The Merhtüranzeigegerät and the central escape route control can be connected to each other via a third bus system. The third bus system may be configured as a CAN bus or a DCW bus. Thus, the central escape route control, in particular the central emergency button, and the multi-door display device can be connected to the third bus system.

The escape route control housing may include attachment options for variably securing the modules and / or the multi-door display device. The mounting options can be designed as a perforated strip or as a slot.

It is preferably provided that the extension of the delay of the actuation of the locking mechanism by the operation of the delay element takes place only within the first delay time period.

The first and / or the second delay time period may include several seconds. The second delay period may be longer than the first delay period. So z. For example, the first delay period is between 3 and 8 seconds, the second delay period between 30 and 180 seconds.

The central escape route control may comprise lighting means for optically displaying the first delay time period. The visualization of the first delay time period allows the operator to easily recognize whether and how long the operator remains to extend the delay, in particular by operating the delay element.

For example, the illumination means for optically displaying the first delay time period can be controlled in such a way that as the first delay time progresses, more or fewer bulbs light up and / or that as the first delay time progresses, more or fewer bulbs illuminate in one color.

It is conceivable that the actuation of the delay element, the delay is extended from the actuation of the delay element by a second delay period. The central escape route controller may comprise light sources for optically displaying the second delay time period. The lighting means can be controlled in such a way that with a progression of the second delay time period, increasing or decreasing number of lighting means illuminate and / or that with a progression of the second delay time duration, increasing or decreasing number of lighting means illuminate in one color.

Preferably, the same bulbs that optically represent the first delay time period can optically represent the second delay time period. In this case, the representation of the first and the second delay time period may differ from one another. This gives the operator a feedback about which delay period expires. The second delay time period can be represented in such a way that the visual representation of the time sequence is interrupted by a pattern which symbolizes a time sequence.

In particular, the emergency module may include the lighting means. Particularly preferably, the central emergency button comprises lighting means for optically displaying the first and / or second delay time duration.

The lighting means can serve at least for the optical representation of a further state of the security system. For example, the lighting means can serve to visually represent that the cancellation condition can be achieved by operating the identification device.

The lighting means can preferably be controlled individually at least in two groups, particularly preferably individually.

The delay element and / or the termination element can be electrically connected to the trigger element via the central emergency button.

Preferably, the delay element and / or the termination element are not connected to the second bus system.

Particularly preferably, a signal on the actuation of the delay element and / or the termination element of the emergency module, in particular from the central emergency button, detected or processed. For this purpose, the emergency module, in particular the central emergency button, a digital Notfalltasterelektronikeinheit include.

A signal about the actuation of the delay element and / or the termination element can be detected or processed in particular by the third emergency processing unit. After detecting or processing the signal via actuation of the delay element, a delay extension message may be sent to the trigger element. After detecting or processing the signal via an actuation of the termination element, a delay completion message may be sent to the trigger element. The central emergency button and the delay element and / or the termination element are preferably connected via a bus, in particular an I ² C bus.

Preferably, the delay module, in particular the delay element and / or the termination element is formed processor-free. Characterized in that the signals on the operation of the delay element and / or the termination element are detected or processed by the Notfalltasterelektronikeinheit, it is not necessary that the delay module has its own intelligence, eg. B. in the form of at least one processor.

Preferably, the triggering element comprises a timer. As a result of the actuation of the triggering element, the triggering element can let elapse by means of the timer, the first delay period before the triggering element drives the locking mechanism for unlocking or causes a triggering of the locking mechanism for unlocking.

Additionally or alternatively, after the triggering element receives a signal, in particular a message, for delaying the activation of the locking mechanism for unlocking has, let the trigger element elapse the second delay period by means of the timer before the trigger element drives the locking mechanism for unlocking or causes a triggering of the locking mechanism for unlocking. Preferably, the same timer is used to determine the first and second delay periods.

It may be stored in the security system, in particular in the trigger element, electronically, whether a delay in the actuation of the locking mechanism is permitted as a result of actuation of the trigger element. In this case, it may in particular be stipulated whether the delay is permitted by the first delay time period and / or whether the delay is permitted by the second delay time duration.

The deposit can be made by an operator. The deposit can be carried out with the aid of an executable on a communication device parameterization program. The operator can thus deposit the validity by means of the parameterization program.

Additionally or alternatively, in the security system, in particular in the triggering elements, individually for a single triggering element or for at least one group of triggering elements can be stored electronically, whether a delay by the first delay time period is allowed. If the delay is allowed by the first delay time period, then individually for a single trigger element or for at least one group of trigger elements it can be stored electronically whether a delay by the second delay time period is permitted. If the delay is not permitted for a first triggering element of the safety system, then the locking mechanism is activated directly as a result of the actuation of the triggering element. If a delay is allowed for a second trigger element of the safety system by the first delay time duration but not by the second delay time duration, the locking mechanism is triggered immediately after completion of the first delay time period for the release, irrespective of whether the delay element was operated during the first delay time period or not. If a delay is allowed for the first and second delay periods for a third trigger element of the security system, the locking mechanism is triggered for unlocking immediately after the first delay period has ended, if the delay element was not operated during the first delay period. If, on the other hand, the delay element has been operated during the first delay period, then the locking mechanism is actuated for unlocking only immediately after the end of the second delay time period.

The deposit can be made by the operator with the aid of the parameterization program. The deposit can be carried out with the help of an executable on the communication device parameterization program.

The first delay time period and / or the second delay time duration can be stored with the aid of a parameterization program executable on the communication device in the security system, in particular in the triggering element. Here, the operator can make the deposit. It may be that the length of the first and / or second delay time period is not completely freely selectable for the operator. Rather, it may be that the first delay time period can be defined within a first time window specified by the parameterization program and / or the second delay time period can be defined within a second time window specified by the parameterization program. For example, the first delay time can be fixed between 0 s and 8 s. The second delay time can be z. B. between 0 s and 180 s be determined. When selecting 0 s, the respective delay is not allowed at the same time.

If the safety system comprises a plurality of triggering elements, then for each triggering element or for groups of triggering elements, an individual first delay time duration and possibly an individual second delay time duration can be selectively stored in the safety system, in particular in each triggering element. This can be set by the operator through the parameterization program. In particular, only a first delay time period and preferably also a second delay time period can be stored for a group of triggering elements that are intended for a common door and / or assigned to a common door lock. Are for a first and a second trigger element of the security system z. B. different first delay periods have been deposited, so a first delay period of a first length for the first trigger element and a first delay period of a second length for the second trigger element, then the first trigger element after the first delay period of. As a result of the actuation of the first trigger element the first length, z. B. 4 s, cause an unlocking and as a result of the actuation of the second triggering element, the second triggering element after the first delay period of the second length, z. B. 6 s, cause an unlocking.

The security system may include several central escape route controllers. In this case, may be stored electronically in the security system, in particular in the trigger element, by which central escape route control in response to an operation of the delay element is allowed to delay a triggering of the locking mechanism for unlocking. This deposit can be stored individually for each triggering element or for at least one group of triggering elements. So z. For example, when operating the delay element of a first central escape route control, delaying activation of the locking mechanism for unlocking a trigger element and / or delaying activation of the locking mechanism for unlocking in the same trigger element may not be permitted when operating the delay element of a second central escape route control ,

It may be that is visualized by the central escape route control, whether by the operation of the delay element of the same escape route control, a delay by the second delay period of the currently actuated trigger element is allowed. For example, only in the event that the extension of the delay for the currently actuated trigger element is permitted and / or only at the central escape route control whose operation of the delay element for the currently actuated trigger element leads to an extension of the delay, the first delay time period can be visualized , Alternatively, the first delay time duration is always displayed optically, however, an additional optical representation indicates that an operation of the delay element leads to an extension. This optical representation can be carried out in particular by the lighting means.

If the termination element is operated, then it is conceivable that all delays of the activations of the locking mechanism are terminated immediately as a result of actuation of a triggering element. This applies both during the first and during the second delay period.

The control device may be connected to the first bus system.

By the control device one or more non-safety-related functions can be executed. In particular, the control device in non-safety-relevant cases, d. H. do not cause an actuation of the trigger element or in the presence of a fire alarm, unlocking or locking the door lock.

Thus, the control device can drive the door lock mechanism for unlocking upon receipt of a positive authentication signal or cause such a control (function h.). For this purpose, the control device can be connected or connectable to an access control system. The access control system may be connected or connectable to the first bus system. The access control system can, for. Example, a reader, a key switch, a keyboard for entering a code or a lock cylinder of a mechanical lock, in particular a self-locking panic lock, include or be designed.

The control device may, for. B. trigger the door lock mechanism for unlocking at a predetermined time or cause such control (function i.). The unlocking at a predetermined time can be provided if z. B. in a time window per day the door should be unlocked.

If there is no danger, d. H. If neither the triggering element has been actuated nor is there a fire alarm signal, then the control device can actuate the door locking mechanism for automatic re-locking after a predetermined period of time has elapsed or initiate such a control (function k.). This can be z. For example, if the door lock was previously unlocked due to a positive authentication signal. The predetermined period of time may be stored in the security system. The predetermined period of time may be selectable by an operator. The predetermined period of time may in particular some, z. B. ten, seconds, some, z. B. five, minutes or even some, z. B. eight hours correspond. The operator can deposit the predetermined period of time through a parameterization program.

Additionally or alternatively it can be provided that the control device directly activates the locking mechanism for automatic re-locking after receiving a signal via a closed state of the door or causes such a control (function 1). The closed state of the door may be detectable by at least the door condition monitoring device.

In addition to the non-safety locking and unlocking the door lock, the control device can hold more functions.

The security system, in particular the control device and / or the trigger element, an additional input and / or Have output. At the additional output z. B. connect a cable for a room lamp. At the additional input z. B. a meter can be connected. The control device can integrate the additional input and / or output so that signals can be evaluated via the additional input and / or signals can be transmitted via the additional output. The control device can control an external device via the additional output or initiate such a control (function v.).

The safety system, in particular the trigger element, may include an audible alarm.

The control device can control the acoustic alarm or cause a triggering of the acoustic alarm.

The security system, in particular the triggering element, may comprise a display device for visualizing a locking state of the door lock. A locked state is understood to be the locked and / or unlocked state of the door lock.

The safety system, in particular the triggering element, may comprise a display device for optically displaying a time-delayed activation of the locking mechanism after an actuation of the triggering element. In this case, both a first delay period, which must elapse before the locking mechanism is activated for unlocking, and / or a second delay period, which must elapse before the locking mechanism is actuated for unlocking, can be visualized. The optical representation of the first and second delay periods may differ.

The delayed activation of the door locking mechanism is achieved, in particular, by the triggering element, with a time delay, causing the door locking control to activate the door locking mechanism.

The security system, in particular the triggering element, may comprise a display for visualizing an alarm condition. The alarm state can indicate the danger case. The alarm state occurs in particular after an actuation of the triggering element and / or after receiving a fire alarm signal.

The security system, in particular the triggering element, can visually represent, if a re-locking fails, in particular the door remains open, which is detectable via the at least one door condition monitoring device. A fire door should always be closed after an inspection. Is z. B. has been unlocked due to a positive authentication signal, the door lock and the door was opened but not automatically re-locked after the predetermined period of time, this fact can be visualized. It can also be visually displayed if a storable opening time period is exceeded. By the door condition monitoring device, the opening period can be detected. An operator can choose the opening period. The operator can store the opening time through the parameterization program.

As a display device, as a display device, as a display for visual display of an alarm condition and / or for optical representation of the failed re-locking the trigger element may comprise lighting means. Preferably, the bulbs serve both as a display device, as a display device, as a display for the visual display of an alarm condition as well as for the optical representation of the failed re-locking. For this purpose, the lamps can be controlled in at least two groups. In particular, the lighting means are at least partially individually controllable. The control device can control the lighting means or cause an activation of the lighting means.

The control device can control the display device, in particular the lighting means, for optically displaying the locking state and / or cause such a control (function p.).

The control device can control the display device, in particular the lighting means, for optically displaying the time-delayed activation of the locking mechanism and / or cause such a control (function q). In this case, the control device can optically display the first and / or the second delay time duration.

The control device can control the display, in particular the light source for the visual display of an alarm condition and / or the audible alarm for the output of an acoustic alarm or cause such a control (function o. And / or function r.)

The control device may issue a visual or audible alarm if a re-lock fails, especially if the door remains open (function s.).

The control device may actuate or control the audible alarm to sound an alarm in response to a signal from the door condition monitoring device about the door being opened, especially if there is no authorization to walk the door (function m.). It may be that a door is unlocked, at least for a certain time window. If the door is opened in this time window, an acoustic alarm is issued. The audible alarm can always be output in the time window or only if there is no authorization to walk on the door.

In order to perform the functions, parameters can be stored in the control device. For this purpose, the control device in particular a non-volatile memory. The parameters can be set by an operator via the parameterization program. Thus, the control device can serve to deposit parameters (function u.). In the control device logical links with respect to the functions of the control device may be deposited (function u.).

The control device may comprise a radio module. About the radio module, the control device can communicate for parameterization. For this purpose, the control device preferably with a mobile communication device, such as a laptop, a tablet or a mobile phone, communicate (function n.). Alternatively, the control device can communicate by cable with a communication device for parameterization, in particular via the second bus system.

With the aid of the control device, a communication connection to the control center can be established and / or maintained. The control center may comprise the security device, the central escape route control and / or the multi-door display device (function t.). The control device may be connected or connectable to the second bus system. The security device and / or the central escape route control may also be connected to the second bus system. Thus, the control device can communicate with the center via the second bus system. The multi-door display device may be connected to the second bus system or alternatively be connected to the central escape route control via a third bus system. In the latter case, the control device can communicate with the multi-door display device via the central escape route control.

In particular, the control device can serve to forward a message via the operation of the central emergency button to the door lock control of the first bus system as a result of actuation of the central emergency button. In this case, the control device can adapt the format of the message to the first bus system. The control device can leave the message untouched itself.

The control device may be integrated in the triggering element. In other words, the triggering element may comprise the control device.

Alternatively, the control device may be integrated in the door lock control. In other words, the door lock control may include the control device.

In a further alternative, the control device is integrated neither in a trigger element nor in a door lock control. The control device may be connected to the trigger element and the door lock control via the first bus system. As a result, the control device z. B. be arranged away from the door in a technical room. For example, the control device in this variant may comprise a DIN rail housing.

The security system may include multiple trip elements and / or door lock controls. In this case, a first number m of triggering elements and a second number m 'of door locking controls can be connected to the first bus system. Here, m and / or m 'may correspond to a natural number from 1 to n. The natural number n may be at least two, preferably at least three, more preferably at least four. In one example, n is equal to four. The first number m may be equal to or different from the second number m '.

It may be that exactly one control device is provided for the first bus system.

If a plurality of triggering elements are connected to the first bus system, then the control device can be integrated in one of the triggering elements. The at least one further triggering element, which is connected to the first bus system, is formed without the control device. In this case, the control device, the display device, the display element, the display, the lighting means and / or the audible alarm of the trigger element, which includes the control device to drive. The at least one further triggering element can be caused by the control device to control the display device, the display element, the display, the lighting means and / or the acoustic alarm device of the at least one further triggering element. The control device causes the at least one door lock control, to control the door lock mechanism.

Alternatively, the control device may be integrated with one of the door lock controls when a plurality of door lock controls are connected to the first bus system. The at least one other door lock control connected to the first bus system is formed without the door lock control. In this case, the control device may drive the lock mechanism of the door lock control including the control device. The at least one further door lock control may be caused by the control device to actuate the associated locking mechanism.

In a further alternative, the control device is not integrated in any of the tripping elements connected to the first bus system nor in any of the door interlock controls associated with the first bus system. Rather, the control device may be connected to all the tripping elements connected to the first bus system and to all the door interlock controls connected to the first bus system via the first bus system. As a result, the control device z. B. be arranged away from the door in a technical room. For example, the control device in this variant may include the DIN rail housing. The control device causes the door lock controls to control the door lock mechanism. The control device causes the triggering elements, the display device, the display element, the display, the lighting means and / or the audible alarm device to be triggered.

The control device may have knowledge of the state of the door lock of the first bus system and / or of the state of the trigger element of the first bus system. The control device may be aware of communication, in particular of all communications, between the door lock control and the trigger element. In particular, the control device has knowledge of the state of all door locks connected to the first bus system and / or knowledge of the state of all the trigger elements connected to the first bus system. The control device may be aware of communications, in particular all communications, between the door interlock controls and the tripping elements connected to the first bus system. The control device can obtain the knowledge about the first bus system. In this case, the control device can overhear communication between at least one triggering element and at least one door lock control, which are connected to the first bus system. Additionally or alternatively, the control device can receive targeted messages about the states of the at least one door lock and / or the at least one triggering element.

If the control device is connected to the control center via the second bus system, the control device can send at least one message about at least one state of at least one door lock control and / or one trigger element to the control center. In particular, the control device can forward messages of the triggering element and / or the door lock control to the control center. For example, the control device may cause the first time delay duration to be displayed optically at the central escape route control, in particular at the central emergency call button. Additionally or alternatively, the control device may cause one possibility to be achieved by a Aufhebehandlung on the central escape route control to achieve a re-locking of the door lock after the actuation of a trigger element and / or after completion of a fire alarm signal, optically.

If the control device is connected to the control center via the second bus system, then the control device can forward at least one message from the control center, in particular the central escape route control, to at least one door locking control and / or one triggering element. A safety-relevant message of the central escape route control is forwarded by the control device preferably to all bus subscribers of the first bus system. The control device can thus forward the safety-relevant message to all tripping elements and all door lock controls. The security message can z. As a message about the operation of the central emergency button or a message about the operation of the first control element.

In the door lock control can be deposited, whether in response to the operation of the central emergency button, the locking mechanism is to be triggered for unlocking. It can be stored in the triggering element whether the triggering element is to be transferred to the deactivated state as a result of the actuation of the first operating element. The deposit can be carried out by the operator, in particular with the aid of the parameterization program. The deposit can in particular be made individually for each door lock control or for groups of door lock controls or for each trigger element or for groups of trigger elements. So while the Control device forward the message of the central escape route control to all bus users and yet selectively cause a release or deactivation.

The first bus system may be a different type of bus system than the second bus system. For example, the first bus system can be designed as a CAN bus or DCW bus. The second bus system can be designed as a LAN or LON bus.

The security system may include multiple bus systems that connect to the second bus system. The plurality of bus systems may be designed in accordance with the first type of bus system. The plurality of bus systems may each be connected to at least one triggering element and at least one door lock control. Each of the plurality of bus systems, in particular each of the plurality of bus systems with a trigger element and a door lock control, can be connected to a control device. In particular, each of the plurality of bus systems, in particular each of the plurality of bus systems with a trigger element and a door lock control, can be connected to exactly one control device. The control device of each of the plurality of bus systems may be connected to the second bus system. The control device of each of the plurality of bus systems may send or forward messages about a state of a bus user of the respective bus system to the center. The control device can send or forward messages from the control center to at least one bus subscriber. The control device of the respective bus system can for the respective bus system at least one of the functions h. to v., preferably several of the functions h. to v., particularly preferably all functions h. to. v. To run. As a result, the information and most functions of the security system can be bundled at the interface to the second bus system.

If a plurality of door lock controls and / or a plurality of trigger elements are connected to the first bus system, the control device that is connected to the first bus system can selectively notify the plurality of door lock controls and / or the multiple trigger elements. In particular, the control device may selectively drive or selectively initiate a drive. This may in particular be the described controls. The control device may selectively perform the functions described above. This may be at least one of the functions h.), I.), K.), L.), M.), O.) To s.), V.). The control device may include at least one of the functions h.), I.), K.), L.), M.), O.) To s.), V.) A locking mechanism, a display device, a display device device which can be connected to the additional output, lighting means and / or an acoustic alarm transmitter can be selectively activated or a control can be triggered selectively. Selective means that the function is not executed for all components reachable by the first bus system, but only for a selection or for a single component which can be reached via the bus system.

The following examples serve to illustrate: If the control device receives z. B. a positive authentication signal of an access control system, the control device causes only a release of the door lock, which is assigned to the access control system. If it is deposited only for a door lock of the first bus system that the door lock is to be unlocked at a predetermined time, then the control device causes only for the one door lock the unlocking at the predetermined time, the remaining door locks the first bus system remain locked. If a predetermined length of time of a first length has been deposited by the operator for a door lock of the first bus system and a predetermined time span of a second length has been set for a further door lock of the first bus system, which differs from the first length, then the control device initiates a automatic re-locking for the one door lock after the first length of the predetermined period of time and for the further door lock re-locking after the second length of the predetermined period of time. If, for a door lock, an automatic re-lock has been marked as approved immediately after the door has been closed and not yet for another door lock, then the control device effects automatic re-locking only for the first door lock immediately after closing the door.

By means of the selectivity, the control device can have a lock function (function j.): Thus, the control device can prevent activation of a further door locking mechanism after actuation of a first door locking mechanism until a condition is present such that a lock is formed. For example, a first door may be disposed at an entrance to a room and a second door at an exit of the same room. The control device may, for. B. cause in the presence of a positive authentication signal for a door lock the first door unlocking the door lock the first door. Even if there is a positive authentication signal for the door lock of the second door of the control device, the control device prevent the release of the door lock the second door until a condition exists. If the condition is present, then the control device causes an unlocking of the door lock of the second door. The door lock of the first door and the door lock of the second door are in this case preferably connected to the first bus system. The condition may be z. B. to a lock-time interval or the achievement of a measured variable, such as room temperature, humidity, air purity or number of people in the room act. For this purpose, the control device can be connected to a measuring device or connectable. The condition may include closing the first-opened door, which is detectable by the door state monitor of the first-opened door. The condition and the door locks or door lock controls involved in the lock can be stored in the control device.

It is conceivable that parameters and / or assignments for the selective execution of the functions are stored in the control device. The parameters and / or the assignments may contain, for example, or indicate to which authentication signal which locking mechanism according to the function h.) Is to be controlled, which locking mechanism is to be triggered at which time according to the function i.), Which locking mechanisms are part of a lock according to function j .), which locking mechanism is to be actuated after which time period according to function k), in which locking mechanism a control according to function 1) is permitted, for which door a monitoring according to the function m.) takes place and / or which acoustic alarms, Display devices and / or displays when actuating which triggering element are to be controlled. It can also be deposited in the control device which acoustic alarm device is to be controlled for which occasion with which volume and / or frequency, which light sources are to be controlled with which brightness, which color and / or which flashing frequency and / or which condition is to be fulfilled must before the control device causes a release of the further door lock the lock. Of course, the parameters may not be associated with the locking mechanisms but with the associated door locks or door lock controls in the control device. The same applies to the acoustic alarm and the bulbs.

To enable the selective activation or cause for activation, the security system can have at least one input device. For this purpose, the components which are connected to the first bus system may each include one respective input device. For example, the input device may include switches, in particular DIP switches. The components that are connected to the first bus system are called bus subscribers.

It is conceivable that the bus subscribers of the first bus system each have at least one bus address. The bus address may be manually adjustable on the input device. Bus subscribers with the same manual setting can be assigned to each other. This makes the security system particularly easy to configure.

It may be that the respective bus user modifies the setting in such a way that despite the same setting of several bus users, a different bus address is generated.

The manually adjustable bus address is provided in particular for non-safety-related functions. The at least one triggering element and the at least one door lock control may comprise the manually adjustable bus address as a second bus address adjacent to an unchangeable bus address for the safety-related functions.

The control device may comprise a digital processing unit. The digital processing unit may include a processor. The digital processing unit may include nonvolatile memory. In particular, the digital processing unit may be designed as a microprocessor or as a microcontroller. Particularly preferably, the control device comprises a first digital processing unit, a second digital processing unit and a third digital processing unit. The first, the second and / or the third processing unit may each comprise a processor. The first and / or the second digital processing unit may each comprise a non-volatile memory. The third digital processing unit may comprise a non-volatile memory and / or have access to a non-volatile memory. The first, the second and / or the third processing unit can be designed in each case as a microprocessor or as a microcontroller.

It is conceivable that at least one of the functions of the control device, preferably several of the functions of the control device, preferably all functions of the control device, are carried out with the aid of the processing unit. In particular, the at least one function can be carried out with the aid of the at least one processing unit. For this purpose, in the processing unit at least one program code be saved. In particular, the at least one function can be executed with the aid of the program code. As a result, the control device can be made spatially very compact.

It is conceivable that non-safety-relevant functions can be carried out with the aid of the third processing unit. The first and the second processing unit can serve for safety-related functions. Thus, the first and the second processing unit can receive a fire alarm signal. Upon receipt of the fire alarm signal, the control device may cause the door lock mechanism to be activated for unlocking. Particularly preferably, the control device can cause all door locks that are connected to the first bus system to be unlocked.

The safety system may include multiple trip elements and multiple door lock controls. In this case, a first number m of trigger elements and a second number m 'of door interlock controls can be connected to the first bus system. Here, m and / or m 'may correspond to a natural number from 1 to n. The natural number n may be at least two, preferably at least three, more preferably at least four. In one example, n is equal to four. The first number m may be equal to or different from the second number m '. Selective unlocking of the door locks can be provided. It may be that a number of door lock controls and a number of trigger elements are connected to each other via a common bus system and the number of door lock controls the number of trigger elements are assigned such that upon actuation of one of the trigger elements only the at least one Türverrieglungssteuerung that actuated Trigger element is assigned, the respective locking mechanism for unlocking controls. Thus, as a result of the actuation of one of the tripping elements connected to the first bus system, not all the door interlock controls connected to the first bus system will cause the respective interlocking mechanism to actuate but only those interlock controls previously associated with the actuated tripping element have been. The remaining door lock controls, which have not been assigned to the actuated trigger element, omit a triggering of the respective locking mechanism for unlocking.

This makes it possible to arrange the door locks, which are connected to the first bus system, on different doors. If the trigger element is actuated, z. B. only the door on which the trigger element is arranged to open. The other doors remain locked. It is also possible to assign the door lock controls such a triggering element that can be open on actuation of the trigger element several doors. For this purpose, only a corresponding number of door lock controls must be assigned to the trigger element. Characterized in that the door lock controls and the trigger elements are connected to each other via the first bus system, a material-saving possibility has been created to selectively unlock door locks.

It is also possible to assign all door lock controls at least one triggering element, in particular all triggering elements. In this case eliminates the selective unlocking upon actuation of the trigger element. However, at least the security system according to the invention allows the operator of the security system to choose whether a selective unlocking is desired or not.

The assignment of the number of door lock controls and the number of trigger elements to each other. Therefore, it can be said both that the door lock controls are assigned to the trigger elements, and that the trigger elements are assigned to the door lock controls.

It can preferably be provided that in the door lock controls, which belong to the number of door lock controls, is deposited in each case, to which at least one trigger element, the respective door lock control is assigned. This makes it possible for the door lock control to decide whether the trigger element that wants to cause the door lock to trigger the locking mechanism for unlocking, is actually assigned to the trigger element.

For this purpose, it may be provided that the triggering elements comprise a bus address. In each case a triggering element comprises at least one bus address. The bus address of the triggering element can be stored in the at least one door lock control associated with the triggering element for assignment. As a result, a secure assignment is possible. In particular, the bus address is stored immutable in the respective trigger element. Ie. a user or an operator can not change the bus address. Thus, the bus address can not be changed by a parameterization program or by an adjustment of the trigger element.

It may be that all door lock controls the number of door lock controls in consequence of the operation of the Trigger element are notified of the trigger element via the actuator. Among all the door lock controls of the number of door lock controls are all door locks associated with the first bus system. The trigger element that has been actuated sends a message about the actuation to all door lock controls of the first bus system. The notified door lock controls decide whether to activate the lock mechanism associated with the door lock controls for unlocking. For this purpose, each door lock control, which is connected to the first bus system, to check whether the respective door lock control is assigned to the message sending trigger element. Only when the door lock control determines that the door lock control is associated with the trigger element sending the message does the door lock control actuate the lock mechanism for unlocking.

It is preferably provided that the assignment of the door lock controls to the triggering elements takes place only when the safety system is put into operation. At startup, this means that the assignment takes place before the safety system starts to operate. In particular, parameters for the safety system are additionally set during commissioning.

The assignment of the door lock controls to the trigger elements can be done by a conscious action of an operator. The assignment of the door lock controls to the trigger elements can be done via the first bus system. In other words, the first bus system may be involved in the assignment of the door interlock controls to the tripping elements. Thus, it may be that in the course of the assignment a trigger element sends the bus address of the trigger element via the first bus system.

Particularly preferably, the assignment of the door lock controls to the trigger elements is set directly on the trigger elements and / or on the door lock controls. As a result, z. B. the assignment can only be made by the fact that the operator for setting the trigger element and / or the trigger element to be assigned to the door lock controls at least sees, in particular physically contacted and / or manually operated.

For example, when commissioning the security system in an assignment mode of the door lock control by a deliberate action taken on the trigger element to be assigned, the assignment of the door lock control located in the assignment mode to the trigger element on which the action is made can take place. The deliberate action to be taken on the triggering element may include an actuation of the triggering element. In particular, the deliberate action to be taken on the triggering element can correspond to an actuation of the triggering element. As a result, a particularly secure assignment can be achieved.

It may be that in both the first processing means and in the second processing means is deposited, to which at least one trigger element associated with the respective door lock control. This achieves redundancy.

The triggering element can be connectable to a fire alarm system. The trigger element can receive a fire alarm signal. After receiving the fire alarm signal, the triggering element can cause a triggering of at least one locking mechanism for unlocking (function b.). In particular, the trigger element sends a message about the presence of the fire alarm signal to the door lock control, whereupon the door lock control activates the locking mechanism for unlocking. In particular, the trip element sends such a message to all door lock controls connected to the first bus system. Preferably, only the at least one door lock control then actuates the respective locking mechanism for unlocking, which is assigned to the triggering element that sent the message.

It is conceivable that as a result of actuation of the central emergency button only a portion of the door lock controls the respective locking mechanism for unlocking control, while the other door lock controls omit such a drive. Thus, a selectivity of the unlocking is given as a result of the operation of the central emergency button. Thus, as a result of the operation of the central emergency button at least for a locking mechanism a control for unlocking omitted.

For this purpose, can be stored in the security system, preferably in the door lock controls the security system, whether unlocking is permitted as a result of actuation of the central emergency button. In particular, an operator can make the deposit. For this purpose, the operator z. B. set a parameterization program, which door lock is to be unlocked as a result of pressing the central emergency button.

If the door lock controller receives a message regarding the actuation of the central emergency button, the door lock controller may first check whether unlocking is permitted following actuation of the central emergency button. Only when the unlocking is permitted as a result of actuation of the central emergency button, does the door lock control actuate the locking mechanism for unlocking. If, on the other hand, unlocking is not permitted as a result of actuation of the central emergency button, activation of the locking mechanism for unlocking is omitted. This procedure is particularly useful if all door locking controls of the security system are notified by pressing the central emergency button.

It is conceivable that the security system comprises several central escape route controllers. For example, one of the central escape route controllers may be provided for placement in the guardroom. Another central escape route control may be provided for placement in a nurse's room. Thus, the security system may include multiple central emergency buttons.

Preferably, a selectivity with respect to a release of the door locks as a result of the operation of the different emergency button is given. Thus, it may be that in the security system, in particular in the door lock controls can be stored, as a result of the operation of which central emergency button a control for unlocking the locking mechanism takes place. Thus, it may be that a certain door lock control in response to the actuation of a first emergency button controls the locking mechanism and as a result of the operation of a second emergency button, the door lock fails to control the locking mechanism for unlocking. For this purpose, z. B. in the door lock control a list with the central emergency buttons can be stored, as a result, the locking mechanism is to be controlled for unlocking. The list is z. B. created by an operator in the parameterization program sets the selectivity of the central emergency button to the door locks. This procedure is particularly useful if all door locking controls of the security system are notified by pressing the central emergency button of the security system.

It is conceivable that parameters and / or assignments for selective activation are stored in the control device. In particular, it is deposited in the control device, which trigger element of the number of trigger elements which is associated with the door lock controls belonging to the number of door lock controls. This assignment is stored in the control device for all door lock controls of the first bus system.

If a triggering element is actuated and the triggering of the locking mechanism of the at least one actuation trigger associated door lock is to be controlled with a time delay, the control device causes only in all those triggering elements, which are assigned to the actuated trigger element associated door lock control, the time delay is displayed optically. If the control device is integrated in one of the affected triggering elements, the control device controls the display device for this purpose.

When a door lock controller detects a change in a lock state, the control device may cause the change of the lock state on the at least one trigger element associated with the recognizing door lock control to be optically displayed to change the lock state. The triggering elements, which are not associated with the recognizing door lock control, are not caused to do so.

If a triggering element is actuated, the control device preferably causes an alarm state to be visually and / or acoustically displayed only in those triggering elements which are assigned to the door-locking control associated with the actuated triggering element. If the control device is integrated in one of the trigger elements concerned, the control device controls the display and / or the acoustic alarm transmitter for this purpose.

If a triggering element receives a fire alarm signal, then the control device preferably causes an alarm state to be displayed optically and / or acoustically only in those triggering elements which are assigned to the door locking control associated with the triggering element receiving the fire alarm signal. If the control device is integrated in one of the trigger elements concerned, the control device controls the display and / or the acoustic alarm transmitter for this purpose.

The security system may comprise a communication interface, wherein the communication interface is used for communication with a communication module, wherein for the execution of at least one of the aforementioned functions of the security system, a communication via the communication interface with the communication module is carried out or previously done. The functions may preferably be at least one of Functions a.) To d.), F.) H.) To v.), Preferably by several of the functions a.) To d.), F.) H.) To v.). In addition, it may be the function of the selective activation of the at least one door lock control associated with the trigger element (function g.) And / or the function, the cancellation condition by the conditions a.) And b.) Or a.) To c.) to reach (function e.).

In this case, in particular, the control device of the security system may include the communication interface. The control device may perform the communication with the communication module.

The fact that a communication with the communication module is necessary to perform the function can be influenced by the choice of the communication module, whether the function is executable or not. Therefore, the security system according to the invention can be configured in a simple manner such that the security system can perform only one or a few functions or that the security system can perform multiple functions, depending on the communication with the communication module.

The communication can be done in particular by digital communication. The communication can be wired or wireless.

The communication can be provided in particular repetitive. Thus, it may be that the function for the security system is only executable when the security system is in communication with the communication module, and / or the security system is configured such that the security system controls whether communication via the communication interface with the communication module is possible and the function for the security system can only be executed if a communication with the communication module was previously possible within a predetermined period of time. It may be particularly preferred that the function for the security system is executable only if the security system, the information is available on the communication module and / or the security system is designed such that the security system repeatedly acquires knowledge of the information on the communication module, and the safety system function can only be carried out if the safety system has previously become aware of the information within a predetermined period of time. As a result, the security system is only functional beyond the given period if communication is possible or takes place.

The security system may thus comprise the communication module.

The period can be stored in the security system. The period can be fixed. The period may in particular be several minutes, several hours or several days. The period can z. B. between 5 and 60 minutes. The repetition of the check whether a communication is possible or the repetition of the communication with the communication module for obtaining the information preferably takes place regularly. Thus, the repetition can take place immediately after the expiry of the predetermined period. The security system, in particular the control device, may include a timer for determining the predetermined period.

Alternatively, it is conceivable that a z. B. One-time communication with the security system is sufficient for the security system to perform the function. In this case, the functional security system does not include the communication module, but the security system and the communication module together can be considered as a security unit. The such a security unit is also provided under protection.

It is conceivable that the function, to the executability of the communication is or is done, with the aid of a software module executable program code is executable. In the information on the communication module, it may, for. B. to act the software module.

It may be that the function can be unlocked via the communication with the communication module. Characterized in that the functions can be unlocked, the usability and / or the ability of the security system can be increased in a particularly simple manner. In particular, the software module with the executable program code can always be stored in the security system, by the execution of which the function can be executed. However, the security system can only perform the function after the activation.

The security system, in particular the control device, can perform a release check. If the release check is unsuccessful, the function remains locked. Only with a positive release check will the function be unlocked. Only after activation, the safety system can perform the function.

It may be that the security system repeats the release check. Preferably, the release test is in each case according to the predetermined Period repeated. If the function was previously enabled, the previously enabled function will be disabled in case of a negative release check. If the function was disabled, the function remains disabled during the negative release check. If the function was disabled, the function will be released during the positive release check. If the function has been previously enabled, the function remains enabled for a positive release check. This makes it possible to repeatedly activate the desired functions in the security system or disable functions that are no longer required.

It may be that at least one of the functions of the security system can be unlocked with the aid of a code of the communication module. The code can be encrypted. Preferably, the controller may gain knowledge of the code through the communication. For example, the controller may read the code from the communication module.

The security system may comprise a receptacle for accommodating the communication module in a reversibly detachable and / or electrically contacting manner. The communication module may be held positively and / or non-positively in the receptacle. Preferably, the control device may comprise the receptacle.

The receptacle may be inaccessible to an unauthorized user in the security system, in particular in the control device. So it may be that an operator must first authenticate himself before the operator comes to the recording. If an unauthorized user attempts to gain access to the recording, a sabotage switch may be provided. The sabotage switch triggers an alarm if there is no authentication.

It is preferably provided that the function for the safety system can only be carried out if the communication module is in the receptacle, and / or the safety system, in particular the control device, is designed such that the safety system, in particular the control device, repeatedly checks whether over the communication module is in the receptacle and the function for the security system can only be executed if the communication module was previously in the receptacle within a predetermined period of time. The period can be stored in the security system. The period can be fixed. The repetition of the control preferably takes place regularly. Thus, the repetition immediately after the expiration of the predetermined period may be conceivable.

It is preferably provided that for carrying out the function, in particular for enabling the function, a safety mechanism is executed by the safety system, in particular by the control device and / or by the communication module. The security mechanism can, for. Example, an authentication, an encryption method or a digital signature method. Thus, before the controller acquires knowledge of the information by communicating with the communication module, the controller may need to authenticate by password. Furthermore, it may be that the communication module encodes the information, in particular the code, and the control device must decrypt the information, in particular the code.

It is conceivable that the security system is only functional if the communication module communicates with the communication interface. Alternatively, it may be that the security system is only functional for longer than the predetermined period when the communication module communicates with the communication interface. Functional here means that the security system can perform at least one function for controlling and / or monitoring the at least one door lock.

It is preferably provided that the control device can only perform a function provided for the control device when the communication module is in communication connection with the communication interface. Alternatively, it may be that the control device can only perform a function provided for the control device for longer than the predetermined period if the communication module is in communication connection with the communication interface. Thus, the fact that the security system is a control device that is functional at least longer than the predetermined period, always the presence of the communication module of need.

It may be that exactly one bus subscriber of the first bus system is in communication with the communication module.

If a plurality of bus systems are provided which are each connected to at least one triggering element and at least one door lock control, a communication module is required for each of the bus systems. Thus, it may be that in each of the plurality of bus systems, at least one bus subscriber is in communication with a communication module. Particularly preferred is exactly one bus subscriber each of a plurality of bus system with a communication module in communication. For each of the multiple bus systems, another communication module may be used. Due to the different communication modules, different functions can be executed, in particular enabled, in each of the several bus systems.

It is conceivable that exactly one bus subscriber of the first bus system, which is in communication connection with the communication module, is connected to the second bus system. In this case, it is preferably conceivable for the exact bus subscriber of the first bus system, which is in communication connection with the communication module, to be the only bus subscriber who is in communication connection with the second bus system. If a plurality of bus systems are provided which are each connected to at least one triggering element and at least one door lock control, this can apply to each of the several bus systems.

It may be that the triggering element comprises the communication interface. If the triggering element is in communication connection with the communication module, the triggering element also comprises the control device. It may be that the trigger element comprises the recording. If the communication module is located in the receptacle, the triggering element also comprises the control device. By inserting the communication module in the recording, the trigger element can act as a control device. Preferably, after the removal of the communication module from the receptacle, the triggering element loses the function of the control device immediately or at the latest after the predetermined period of time.

If the security system comprises a plurality of triggering elements, at least one of the triggering elements may comprise the communication interface and / or the receptacle. Preferably, at least two triggering elements, particularly preferably all triggering elements, each comprise a communication interface and / or a receptacle. Thus, it is possible to have at least two of the triggering elements, preferably each of the triggering elements, by the communication with the communication module, in particular with the arrangement of the communication module in the receptacle, to include the control device. For this purpose, only the communication module must be inserted into the receptacle.

The triggering elements can thus each be designed to serve as a control device by communication with the communication module. Only the at least one triggering element, which communicates with a communication module, also serves as a control device. It may be provided that a plurality of triggering elements, which are connected to the first bus system, each comprise a receptacle, wherein in exactly one of the receptacles, a communication module is arranged. The triggering element, in the recording of which the communication module is located, also acts as a control device, while the remaining triggering elements, which are connected to the first bus system, do not function as a control device.

It may be that the door lock control comprises the communication interface. If the door lock control is in communication connection with the communication module, then the door lock control also comprises the control device. It may be that the door lock control comprises the receptacle. If the communication module is in the receptacle, the door lock control also comprises the control device.

It may be that processing electronics of the security system comprises the communication interface. The processing electronics is in communication with the communication module, the processing electronics serves as a control device. It may be that the processing electronics include the recording. If the communication module is located in the receptacle, the processing electronics serve as a control device. By inserting the communication module in the receptacle, the processing electronics can act as a control device. After removal of the communication module from the receptacle, the processing electronics preferably loses the function of the control device immediately or at the latest after the predetermined period of time. The processing electronics may be provided to provide the control device as a separate bus subscriber of the first bus system.

Preferably, several functions can be unlocked individually and / or as a function block with a plurality of functions. So it may be that several functions can be unlocked by a code. The functions which can be unlocked by only one code are thus combined in one function block.

The functions a.) To d.) And f.) Are preferably carried out by the triggering element. The functions e.) And g.) Are executed in particular by means of the door lock control. The functions h.) To t.) Are preferably carried out by the control device. The communication with the communication module is preferred by the control device performed. If the control device acquires information, in particular a code, by which a function executed on another bus subscriber of the first bus system is to be made executable, the control device notifies the other bus subscriber of the first bus system. The other bus participant of the bus system then activates the function. If the control device learns by repeating communication with the communication module that information, in particular a code, can no longer be read out, the code belonging to a function which is carried out on another bus subscriber of the first bus system, then it notifies Control device the other bus subscriber of the first bus system. The other bus subscriber of the bus system then blocks the function.

It can be provided that a function is disabled in such a way that the security system is transferred to a secure state. If z. B. the function d.) Locked, the trigger element is transferred to the activated state. If z. B. the function c.) Locked, the triggering element always causes the actuation of the locking mechanism for unlocking immediately as a result of actuation of the triggering element. If the function a.) Or b.) Locked, then the locking mechanism is controlled directly for unlocking.

Preferably, only parameters for the executable, in particular for the enabled, function for the operator are adjustable. The parameterization program displays on a screen for the operator only the adjustable parameters that belong to the executable functions. In particular, only one input option for the parameters of the executable, in particular unlocked, functions can be accessible to the operator. As a result, high protection against incorrect operation can be achieved. It may therefore be that parameters for at least part of the functions can be set by a parameterization program, with only parameters for the executable functions being able to be displayed for an operator.

It may be that the security system, in particular the control device is designed to detect whether it is the communication module, which is in communication via the communication interface, in particular that is included in the recording, is a parent module or an auxiliary module. In this case, a mother module is in particular a communication module, which is intended for permanent communication via the communication interface, in particular to the permanent arrangement in the recording. An auxiliary module is in particular a communication module which does not serve as a mother module. The auxiliary module can be provided to make an additional function for the security system executable. Here, the auxiliary module may be intended for a unique arrangement in the recording.

It can be provided that the security system, in particular the control device, carries out a first communication with the communication module, the first communication serving to provide the information, in particular the code, to the security system. The security system may cause a change in the communication module after the first communication. For this purpose, the security system, in particular the control device, change or delete the information on the communication module. As a result, it may be possible that the auxiliary module can not be used again for the executability of a function without first having to re-load the information. Preferably, with the help of the auxiliary module only once a function can be unlocked. After the auxiliary module has provided the information to the security system, in particular the control device, the security system preferably deletes information for executing a function on the auxiliary module.

The security system, in particular the control device, can leave the information for the execution of a function to the mother module after the mother module has provided the security system, in particular the control device, information for performing a function.

Preferably, the control device can recognize the release module as a mother module or as an auxiliary module based on an identifier stored on the mother module and / or on the auxiliary module. Thus, it is conceivable to use the same communication interface for the mother module and the auxiliary module.

In particular, after communication with the communication module, the control device can initiate a modification of the communication module only in the case of the recognition of an auxiliary module. It may be that after the auxiliary module of the control device has provided the information for performing a function, the control device deletes the information for performing a function on the auxiliary module. Thus, after reading the code of the auxiliary module, the code of the auxiliary module can be deleted. After reading the code of the mother module, however, omits a deletion of the code. Thus, in particular all codes can be stored on the mother module.

• 1. Erkennen eines Muttermoduls und Auslesen der darauf gespeicherten Information, insbesondere des darauf gespeicherten Codes,
• 2. Für den Fall, dass die Information ein Code ist, Freischalten der zu dem Code gehörenden Funktion.

Preferably, the control device may perform the following first method:

• 1. recognizing a mother module and reading the information stored thereon, in particular the code stored thereon,
• 2. In case the information is a code, unlock the function belonging to the code.

• 1. Erkennen eines Hilfsmoduls insbesondere in der Aufnahme, Auslesen einer darauf gespeicherten Information, insbesondere des darauf gespeicherten Codes, durch die Steuerungsvorrichtung
• 2. Speichern der ausgelesenen Information in der Steuerungsvorrichtung,
• 3. Löschen der Information, insbesondere des Codes, auf dem Hilfsmodul,
• 4. Erkennen des Muttermoduls, insbesondere in der Aufnahme, Schreiben der Information, die aus dem Hilfsmodul ausgelesen und in der Steuerungsvorrichtung gespeichert wurde, auf das Muttermodul.
• 5. Für den Fall, dass die Information ein Code ist, Freischalten der zu dem Code gehörenden Funktion.

Particularly preferably, the control device may perform the following second method:

• 1. detecting an auxiliary module, in particular in the recording, reading out information stored thereon, in particular the code stored thereon, by the control device
• 2. storing the read-out information in the control device,
• 3. deleting the information, in particular of the code, on the auxiliary module,
• 4. Recognizing the mother module, in particular in the recording, writing the information that was read out of the auxiliary module and stored in the control device, on the mother module.
• 5. In case the information is a code, unlock the function belonging to the code.

In the first method, storage of the information in the control device may be omitted. In the second method, the information may be deleted after step 4 in the control device. Between steps 3 and 4, it may be necessary for a user to replace the auxiliary module with the mother module in such a way that, in step 4, the control device communicates with the mother module instead of the auxiliary module. For example, the user can remove the mother module from the receptacle and insert the auxiliary module into the receptacle. Step 5. can be done after any one of steps 1 to 4. By carrying out the second method, all codes for activated functions can be stored on the mother module with the aid of a communication interface.

The communication module can be designed as a chip card, in particular as a code-storing unit. The communication module may include a processor unit. The processor unit preferably serves only for encryption, in particular for encryption of the code. Thus, a low-power processor can be used.

The triggering element may comprise an at least partially transparent covering means, which covers the actuating element, so that the covering means prevents the direct contact of the actuating element by a user, wherein upon actuation of the actuating element the covering means is movable from a starting position into an actuating position.

The covering means can be arranged undetachably. The fact that the covering means is arranged undetachably eliminates an abusive removal of the covering means.

It is conceivable that the actuating element in the starting position and / or the covering means are movable into the starting position by return means. Particularly preferably, the actuating element and the cover means are movable by the same return means.

The irreversible arrangement of the cover means can be designed variously. For example, the covering means can be mounted undetachably. Thus, the covering can be performed in particular movable in the emergency button. Additionally or alternatively, the covering means may be formed of an elastic material. For example, the covering means may comprise an elastic film stretched over the actuating element. As a result, the cover can contribute to the watertight execution of the emergency button. Additionally or alternatively, the covering means may be fixedly connected to the actuating element. For this purpose, the actuating means with the covering means form and / or non-positively and / or materially connected. In this way, a misuse can be prevented, wherein in particular the actuating element only together covering means is movable.

It is conceivable that the covering means is only translationally movable.

It is preferably provided that the covering means has a circular cross-section. As a result, the covering means can be guided particularly easily in the emergency button. Additionally or alternatively, the covering means may be at least partially geometrically similar to the actuating element. In particular, a cross section of the covering means and a cross section of the actuating element may be geometrically similar to one another, ie. H. by similarity pictures, into each other be translatable. As a result, the arrangement of the covering means in the emergency button can be facilitated. For example, the covering means and the actuating element comprise a circular cylindrical section and / or a circular cross section.

Furthermore, it can be provided that the emergency button has a cover. The lid can have a recess. Through the lid, the interior of the emergency button can be protected.

The covering means may extend through the recess. As a result, the emergency button can be easily operated. In addition, the actuating element preferably additionally extends through the recess. It is conceivable that the lid is formed of opaque material. Characterized in that the actuating element extends through the recess, the actuating element and / or illumination of the actuating element can be well perceived even for a laterally offset from the emergency button user. The Erststreckung through the recess takes place in particular against an actuating direction.

Preferably, the recess is at least partially geometrically similar to the actuating element and / or the cover means, d. H. through similarity pictures into each other convertible. As a result, a simple structure and / or good protection of the interior of the emergency button is achieved.

The recess may be circular.

It can be provided that the covering means has at least one surface which is formed at a distance from the actuating element. As a result, the cover means for the user noticeably lifts off from the actuator, so that the abuse of the emergency button is prevented.

The covering means and / or the actuating means preferably has at least one side surface. In this case, a surface with a normal vector, which is perpendicular to an actuating direction of the emergency button, is referred to as the side surface.

The covering means preferably has an actuating surface and / or the actuating means has at least one front surface. As the actuating surface of the cover means and as the front surface of the actuating element in each case the surface is referred to, which faces the user. The actuating surface may correspond to the surface of the cover means which the user touches upon actuation of the emergency button. The front surface may face the actuating surface.

The side surface of the cover means may be formed spaced from the side surface of the actuator. It is conceivable that the side surface of the covering means and the side surface of the actuating element are circular-cylindrical.

Additionally or alternatively, the actuating surface of the cover means is formed spaced from the actuating surface facing the front surface of the actuating element. In addition to the better visibility of the cover means for the user, the operation by the user can be made simple by this. So z. B. a spaced apart from the front surface actuating surface to a larger actuation path, i. contribute to a greater distance between the home position and the actuation position, and / or to a flat hand operation. In other words, it is not necessary for the operation of the actuating element, that the actuating element itself is operable for the user.

The actuating surface of the cover means may protrude in the initial position over the lid of the emergency button, so that the distance of the starting position and the actuating position in the direction of actuation to each other at most the distance of the actuating surface, in particular a survey of the actuating surface corresponds to the lid. As a result, the emergency button can be actuated with the flat hand.

The actuating element may comprise a flange-like portion.

Preferably, the covering means is attached to the flange-like portion of the actuating element. The cover can be positively or materially connected to the actuator. For example, the covering means may comprise extensions which are guided through passages of the actuating element. The extensions can form a positive connection with the actuator or, z. B. by heating, be materially connected with actuator.

The emergency button may have a light guide. The light guide may be provided to make light from bulbs arranged in the emergency button visible to the user. The lighting means are used, in particular, to indicate an unlocked state and a locked state of the door lock. Preferably, the lighting means are controllable in at least two groups. Particularly preferably, the lighting means are individually controllable. As a result, the bulbs can display additional information.

Additionally or alternatively, the flange-like portion can serve as a stop of the actuating element in and / or against the actuating direction. Thus, the actuating element with the flange-like portion in the starting position and / or in the operating position to rest on another element of the emergency button. For example, the actuator in the operating position on a Mounting plate of the emergency button and / or rest in the starting position on the light guide of the emergency button. As a result, the movement of the actuating element is limited. Preferably, the flange-like portion serves both for attachment of the cover means and as a stop.

It can be provided that the front surface of the actuating element is partially conical. A dome of the front surface may be formed as a translucent Illuminierbereich. Characterized in that the user actuates the actuating element via the covering means, the covering means can be adapted to the haptic needs of the user, while the actuating element thereof can be designed independently. Due to the conical configuration, the luminous area of the actuating element can be easily visible on all sides. This is especially true when the translucent Illuminierbereich protrudes beyond the lid. The projecting takes place counter to the direction of actuation.

The actuating element may comprise a base body made of opaque material. The main body may be formed of plastic. The main body may comprise an opening. This allows the Illuminierbereich be enabled. The main body may be formed homogeneously. In the opening, a translucent, in particular translucent insert can be arranged. The insert can be fixed in the opening, in particular pressed. The light from the light source can be directed through the insert.

Preferably, the light guide is arranged between the recess of the lid and the cover. The light guide may surround the cover means in a circle. Preferably, the optical fiber terminates substantially flush with the lid. Thus, the optical waveguide can deviate a maximum of ± 3 mm, preferably a maximum of ± 2 mm, particularly preferably a maximum of ± 1 mm, from a flat termination with the cover. The fact that the covering is transparent, yet good visibility of the light guide is given. As a result, the resulting information for the user can be easily visible even with different light emission of the bulbs.

It is preferably provided that at least two selected from the actuating element, the cover, the light guide and the recess of the lid have a common axis of symmetry. In particular, at least two selected from the actuating element, the cover, the light guide and the recess of the lid can be arranged concentrically. Preferably, the common axis of symmetry, in particular the concentric arrangement, applies to at least three, particularly preferably to all elements.

Preferably, both on actuation of the emergency button for unlocking a door lock and for achieving the cancellation condition, an action is made on the actuating element via the covering means. Thus, it is conceivable that the cover can cover or cover the actuating element both when the emergency button is pressed for unlocking and when the cancellation condition is reached.

It is conceivable that the actuating element is only translationally movable. As a result, the covering means can be realized in many different ways. Thus, it may not be necessary for the intended use of the emergency button, in particular for actuating the emergency button for unlocking, as well as to achieve the cancellation condition, a side surface of the cover means and / or the actuating element to grip. For example, the covering means as a plastic film can span the actuating element. So it may be that to achieve the cancellation condition, i. H. to enable re-interlocking of the door latch, an action is taken on the actuating surface.

The lighting means, which represent the locking state of the door lock optically, can be controlled in each case at least in two groups.

N denotes the total number of lighting elements of the triggering element. A group can contain in each case 1 to n-1 illuminants such that the number of illuminants of the groups add together to n. In particular, at least one of the lighting means is individually controllable. A group of light sources can therefore also comprise only one light source. Preferably, at least several of the lighting means are individually controllable. Particularly preferably, each light source can be controlled individually. In this case, the triggering element comprises n groups of lighting means, each group comprising only one of the lighting means.

The lighting means, which serve to indicate the locked and / or unlocked state, can be controlled in groups, in particular individually. As a result, the lighting means can additionally serve to indicate the at least one further state of the security system.

It is preferably provided that the lighting means are designed as multiple color lamps. This means that the bulbs can emit light of different colors. The lighting means can be designed in particular as a multi-color LED. Each one indicates this Bulb several single LEDs on. Particularly preferably, the lighting means are designed as RGB LEDs. The different colors are partly generated by the simultaneous light emission of the individual LED of the multi-color LED. In this case, different colors can be generated by different light components of the individual LEDs.

It is conceivable that the lighting means can be controlled in such a way that light can be emitted by the lighting means in at least two, preferably in at least three, more preferably in at least four different colors. For example, the bulbs can emit red, green, yellow and blue light. Due to the different colors, different states of the security system can be displayed particularly well.

The triggering element, in particular the emergency button, preferably comprises at least one triggering element processing unit, in particular an emergency button processing unit. Particularly preferably, the lighting means can be controlled by the triggering element processing unit. The trigger element processing unit, in particular the emergency button processing unit, can be designed digitally and / or electronically. The trigger element processing unit may include a processor. The trigger element processing unit may comprise at least one non-volatile memory. For example, the triggering element processing unit may be a microprocessor or microcontroller.

The lighting means can be connected to a bus, in particular a ring bus. By means of the bus, in particular of the ring bus, the triggering element processing unit can control the lighting means.

It is conceivable that the lighting means are controllable such that at the same time at least one light source emits light of one color and another light source emits light in another color. So z. B. a light source yellow light and another light emitting red or green light at the same time. As a result, significant perceptible light patterns can arise for the user. Additionally or alternatively, the lighting means can be controlled such that at least one light emitting means alternately emits light of different colors. A light source may, for. B. alternately flashing red and yellow. This can also result in significant perceptible patterns for the user. It is also possible that at least one light source continuously emits light in a time interval, while at least one further light source flashes.

As a particular example, the impression of a "circumferential color window" may arise in that adjacent illuminants in each case assume one color in succession, while in particular other illuminants otherwise glow in a further color or not at all.

Preferably, the lighting means are activated in order to indicate the presence of a fire alarm signal. Thus, in the further state of the security system, which is indicated by the illuminants that can be controlled in groups, the state of a security system that has a fire alarm signal can occur. For this purpose, a fire detector can transmit a fire alarm signal to the security system.

The lighting means can be activated when the actuating element has been actuated, in particular in order to unlock the door lock. Thus, in the further state of the security system, which is indicated by the group-controllable bulbs, may be the state of a security system in which an actuating element has been actuated act.

The deactivated state of the trigger element can be displayed by the bulbs. Thus, the further state of the security system, which is indicated by the group-controllable lighting means, may be the deactivated state.

The lighting means can be controlled such that the progression of the time delay is indicated by the lighting means. Thus, the further state of the security system, which is indicated by the group-controllable bulbs, can be the state of a safety system with time-delayed release. For example, the lighting means may be controllable in such a way that, as the time delay progresses, an increasing or decreasing number of lighting means in one color illuminate. In this case, both a first delay time period, which must pass before the door lock is transferred to the unlocked state, and / or a second delay time period, which must elapse before the door lock is transferred to the unlocked state, are optically displayed by the lighting means.

It is provided in particular that the lighting means are activated in order to indicate a fault of the safety system. Thus, the further state of the security system, which is indicated by the group-controllable bulbs, may be the state of a security system that is faulty.

The error may be a component of the security system not ready, defective, failed, deliberately switched off or removed. At least one of these errors for at least one component of the security system can be displayed by the lighting means. The component of the security system may be a control device, a door lock or a part of the control device, the door lock and / or the trigger element, for. For example, the trigger element processing unit. Additionally or alternatively, the error may be that the security system has a signal that a component connected to the security system, e.g. B. an alarm system, not ready, defective, failed, deliberately switched off or has been removed. At least one of these errors for at least one component connected to the security system can be displayed by the lighting means. Preferably, a plurality of said errors can be displayed by the lighting means. Different types of control of the lighting means are preferably provided for different errors. Thus, different errors are displayed in different ways by the bulbs.

It may be that the control of the acoustic alarm and / or the light source is redundancy-free. It is conceivable that the third trigger element processing unit controls the acoustic alarm transmitter and / or the lighting means.

It can be provided that the brightness of the lighting means can be adapted to the ambient brightness. In particular, the brightness of the lamps can decrease when the ambient brightness decreases. This can be prevented by annoying the user by excessive brightness. In order to adapt to the ambient brightness, in particular a brightness sensor can be provided in order to detect the ambient brightness. Depending on the detection of the ambient brightness, the brightness of the lamps can be adjusted. Alternatively or additionally, predetermined periods and thus correlated brightnesses for the lighting means can be stored in a nonvolatile memory of the security system. Due to the given time periods, the brightness can be preset for different times of day and night.

The triggering element, in particular the emergency button, preferably comprises the light guide. The light guide can serve to direct the light emitted by the light sources in the direction of the user-visible surface of the trigger element. By the light guide, the light emitted by bulbs light can be made particularly pleasing to the user visible.

The light guide is preferably designed such that the different activation of the at least two groups of light sources is visible to the user. In particular for this purpose, the optical waveguide can have optical waveguide regions which are assigned to each group of illuminants. If light sources can be controlled individually, then each light source which can be controlled individually can be assigned an optical waveguide region. Particularly preferably, each lighting means can be controlled individually and each lighting means is associated with an optical waveguide area.

It can be provided that light rays which are emitted by one of the lighting means are conducted essentially only in the light guide region associated with the respective lighting means. The user-visible surface of the light guide can be perceived as subdivided into light areas. Each light guide area may comprise a light area. Preferably, emitting light of a luminous means substantially only illuminates the associated luminous area. The bulbs are located in the direction of the surface of the trigger element centrally under the light areas.

It is conceivable that all luminous areas have the same surface area. The luminous areas can be thought-divisible by a straight line. As a result, the lighting areas z. B. shine like a beam.

Additionally or alternatively, the user visible surface of the light guide may be configured, for example, as a circular ring. The luminous regions may in particular correspond in each case to a sector of the circular ring.

It is conceivable that recesses are provided between the light guide regions. The recesses in the light guide are provided so that the light sources, which can be controlled differently, can not be conducted from one to the other light guide area. The recesses are located between the groups of bulbs, in particular the individual bulbs. The light guide areas are located in the direction of the surface of the trigger element on the bulbs.

The light guide regions preferably each comprise an expanding section. The expanding portion may serve to propagate the light emitted from the associated illuminant. As a result, the emitted light can be distributed over the associated luminous area. The spreading section can be in a projection z. B. in the form of a trapezoid, in particular in the form of an isosceles trapezoid.

The area of the spread-out end of the expanding section corresponds in particular in size and / or shape to the illuminated area. As a result, the emitted light can be distributed particularly well over the associated luminous area.

The expanding section is preferably arranged in the direction of the surface of the triggering element over the lighting means. As a result, the light emitted by the light sources reaches the light guide particularly well.

It is preferably provided that the optical waveguide region has a forwarding section to the light pipe, wherein the light of the lighting means can be conducted through the forwarding section to the spreading section. The forwarding section is thus arranged between the spreading section and the associated lighting means. The relaying section serves to forward the light emitted by the lighting device to the expanding section. The forwarding portion may spread at least less than the spreading portion. Thus, the forwarding section may have mutually parallel edges in the direction of the light pipe. The forwarding portion may be provided when the optical fiber is a plate, for. B. the mounting plate or a board, penetrates. Since the spreading section starts near the luminous area through the relaying section, the optical waveguide can have a small footprint at the height of the plate to be penetrated. Thus, a stability of the plate can be ensured.

The light guide is preferably formed in one piece. The light guide can also be formed of the same material. Particularly preferably, the light guide is monolithic. The light guide is formed in particular of translucent material.

The optical waveguide region may have a connecting section. The connection section can serve to connect the light guide regions to each other. In particular, the connecting regions of the optical waveguide regions merge integrally, particularly preferably monolithically, into one another. The light of the lighting means can preferably be conducted through the spreading section to the connection section. Thus, the connecting portion can connect in the direction of the light pipe to the expanding portion. The connecting portion may have the luminous area. The connection areas together may include the user-facing surface.

The connecting portion may have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the recesses are particularly deeply formed, so that the light guide regions are particularly largely separated. Thus, essentially only the luminous areas is illuminated by the associated luminous means. The depth of the connecting portion still allows a mechanically stable one-piece optical fiber.

It is conceivable that the light guide surrounds the actuating element. For example, the light guide and the actuator can be arranged concentrically with each other. The optical fiber, the actuator z. B. surrounded annularly.

It is preferably provided that the light guide has a contact surface for the actuating element. The contact surface can hold the actuating element in particular positively against an actuating direction. It may be that a restoring means presses the actuating element against the contact surface. The return means may serve to return the actuator after actuation to the starting position. Particularly preferably, the restoring means moves the actuating element back to the starting position without manual intervention. Thus, the actuator can return to the starting position immediately after the operation. The return means may be formed as a spring.

The trigger element may have a lid.

The light guide may have a flange with which the light guide is mounted within the trigger element. For example, the flange may be attached to a mounting plate. Due to the fact that the light guide itself is fastened inside the triggering element, the light guide can reliably hold the actuating element against the actuation direction with the contact surface. In particular, the hold is maintained even when the cover of the trigger element. Particularly preferably, the fastening means, which serve to attach the flange to the mounting plate, nor at least one further component, for. As a board, connect to the mounting plate.

It can be provided that a front surface of the actuating element is partially conical. A dome of the front surface may be formed as a translucent Illuminierbereich. Due to the conical configuration, the Illuminierbereich of the actuating element can be well visible on all sides. This is especially true when the translucent Illuminierbereich protrudes beyond the lid. The projecting takes place counter to the direction of actuation. The illuminator area is illuminated by a light source.

It is conceivable that a front surface of the actuating element, in particular the Illuminierbereich, protrudes at most 10 mm, preferably at most 7 mm, more preferably at most 5 mm above the light guide. As a result, the light guide is also clearly visible for obliquely standing in front of the trigger element user.

Preferably, the lighting means can be controlled in such a way that light sources which oppose one another emit the same optical signal. As a result, users standing obliquely in front of the triggering element, for whom a part of the luminous areas is covered by the actuating element, can recognize the luminous pattern. Underlying bulbs are understood in particular bulbs that are connected to each other by a straight line passing through a center of symmetry of the light-emitting device. In particular, the same optical signal is understood to mean the emission of the same color and / or the same frequency in the case of a flashing light source.

Preferably, the optical fiber terminates substantially flush with the lid. Thus, the optical waveguide can deviate a maximum of ± 3 mm, preferably a maximum of ± 2 mm, particularly preferably a maximum of ± 1 mm, from a flat termination with the cover.

The security system can be designed such that in addition to the unlocked and / or the locked state of the door lock in the presence of a further state of the security system, the lighting means for indicating the further state are controllable, the further state can be selected by an operator of the security system. Thus, it is conceivable that not only the manner of controlling the lighting means, but also to which state a control of the lighting means takes place, can be set by the operator. In particular, a color to be emitted by the lamps and / or a color pattern may be reserved for the adjustment. For example, an emitting of green and red light by all bulbs for the locked and unlocked state can be fixed. However, in which state of the security system the lamps emit blue light, the operator can choose himself. For example, the operator can set that in the deactivated state of the triggering element, the lighting means of the relevant triggering element emit blue light. In particular, the setting can be made via the mobile communication device, in particular a mobile telephone. The mobile communication device may communicate with a radio module of the trigger element.

Preferably, it is provided that the trigger element a plurality of door locks are assigned, so that a plurality of door locks is caused by the operation of the trigger element, which is adjustable in the security system, if the bulbs indicate a locked state until all the trigger element associated door lock are unlocked , or if the bulbs only indicate a locked state until at least one of the door locks associated with the trigger element is unlocked. The setting can, for example, via a switch, for. B. via a DIP switch done. The door locks can z. B. may be provided in each case for a standing and a moving leaf of a door. The door should be unlocked by the actuation of the trigger element. For this purpose, the door locks are actuated after actuation of the trigger element. Due to the adjustability, the operator can decide whether the bulbs only an unlocked state, eg. By emitting green light, when the full escape route width is available, d. H. the upright and the active leaf are unlocked, or if the bulbs indicate an unlocked state, if there is already a possibility of escape through a door leaf. This setting option represents an inventive idea, regardless of whether the bulbs are controlled in each case at least in two groups or not.

In particular with respect to the preceding paragraph, it may be that a plurality of door lock controls are provided for a door, wherein it is adjustable in the security system whether the door lock control immediately causes a locked state when the door lock control receives a lock signal, regardless of one within the door lock control Security system received signal over an open position of at least a portion of the door and the bulbs indicate an unlocked state until all door lock controls for the door have established a locked state, or if the door lock controls only the locked state, if within the security system at least one signal are present over a full closed position of the door and the bulbs indicate only an unlocked state when no door lock controls has made a locked state.

It is conceivable that, in particular when commissioning the safety system, the lighting means indicate the state of individual components of the safety system. It is conceivable that light sources are permanently assigned to the individual components. The state of the components can be displayed simultaneously. Thus, the operator can quickly get an overview of the commissioning. The components may be the door latch, the door latch control, the trigger element, the control device or parts of the trigger element or the control device, such as inputs and / or outputs of a processing unit and / or a trigger element processing unit act. The inputs and / or outputs may be the connection to the first bus system, a second bus system, a bus input via which authentication of an authorized user is communicated, the input of a key switch and / or the like.

It is conceivable that the security system has a plurality of trigger elements and / or a plurality of door lock controls. The plurality of trigger elements and / or the plurality of door latch controllers may be connected to the first bus system. The lighting means can in particular simultaneously display the state of the plurality of triggering elements and / or a plurality of door lock controls. It is conceivable that in each case one of the triggering elements and / or one of the door lock controls at least one light source are permanently assigned. The display can be made in particular during commissioning of the security system.

It is conceivable that can be represented by the lamps, which functions can perform the control device. In particular, the communication module used can be displayed by the lighting means. Which functions are executable can be displayed in particular during commissioning of the security system.

It may be that when commissioning the security system, the bulbs are controlled sequentially to indicate the state of the components or the executable functions of the security system. As a result, each illuminant can be assigned a plurality of states and / or functions to be displayed. Thus, the number of displayed states and / or functions may exceed the number of bulbs. For example, the states of the trigger elements and the door lock controls can be displayed first, then the states of inputs and outputs, and then the executable functions by the displayed communication module is displayed. Of course, another order can be selected. The control of the lighting means, which serves to indicate successively the state of the components or the executable functions of the control device, can therefore comprise at least one further activation of the lighting means, at least in addition to a first activation. The further control of the lighting means can be done after a predetermined time or alternatively in each case after a conscious action.

Overall, it may be that in particular when commissioning the security system, the lighting means are controlled such that the lighting means the feasibility of at least one function of the control device and / or the state of a component, in particular the door lock control or the door lock controls and / or the trigger element or Show triggering elements, in particular bulbs of a door lock control and / or a trigger element are assigned permanently.

The triggering element may in particular comprise at least two boards. This allows the trigger element to adapt to the spatial conditions particularly well.

It can be provided that the triggering element comprises a switch. The switch may be actuatable by the actuator. The switch can in particular serve to generate at least one actuation signal.

The switch can be integrated on the board or on one of the boards in a circuit. The switch can end in particular on one of the boards. As a result, the advantages of the board can be used especially for the switch.

In particular, it is provided that the switch is used on actuation of the actuating element for generating at least two actuation signals. The actuation signals can be generated by interrupting at least a first and a second circuit.

The switch can be arranged on a first circuit board. Preferably, the first trigger element processing unit and / or the second trigger element processing unit are arranged on a second board. Here, both an arrangement on an upper side or on an underside of the second circuit board is conceivable. The arrangement of the trigger element processing units can be provided for reasons of space on the second board.

In particular in order to ensure a secure signal transmission, it is conceivable that the actuating signals can be detected by the first triggering element processing unit and / or the second triggering element processing unit without cables. Thus, the first trigger element processing unit and / or the second trigger element processing unit may be electrically connected to the switch in a cable-free manner. For example, the trigger element processing units and the switch are electrically connected by plugs. From the connector, traces go to the switch on the first board and / or go out of the connector Tracks to the trigger element processing units on the second board.

It may be that the first and the second circuit board are connected to one another such that the first and the second circuit board are arranged at a fixed distance mechanically immovable to each other. For connecting the first and the second board with each other at least two fastening means may be provided. For example, the boards may be interconnected by bolts. The bolts can be detachable, z. B. by one or more screws to be arranged in the triggering element.

It is conceivable that the third trigger element processing unit is arranged on the second board.

Likewise, after the actuation of the actuation element, the switch can return from an actuation position to an initial position without manual intervention and / or can be actuated without restraint. For this purpose, the switch a reset device, for. B. a spring element having.

On the first board, the bulbs may possibly be arranged. Additionally or alternatively, the acoustic alarm can be arranged on the board, in particular on the first board.

The emergency button or central emergency button designed as a triggering element preferably has a mounting height AH of less than 48 mm, preferably less than 46 mm, particularly preferably less than 44 mm, from a front surface, in particular from a tip of the front surface of the actuating element. The construction height means the construction height which extends from the dome in the direction of installation. A lower limit may be limited by the technically feasible. For example, the assembly height AH may comprise at least 29 mm, preferably at least 27 mm, particularly preferably at least 25 mm.

It is conceivable that the emergency button designed as a trigger element or central emergency button comprises a mounting plate for attachment to a flush-mounted box.

The emergency button or the central emergency button can be constructed such that a built-in part of the emergency button or the central emergency button extends from the mounting plate in the direction of actuation, the mounting part in a flush box with a diameter of 60 mm and a depth of 41 mm can be arranged. Due to the possibility of installation in such a flush-mounted box, the possible uses of the emergency button according to the invention or central emergency button are particularly large.

In particular, in order to be able to be arranged in such a flush-mounted box, it may be that the first board and the second board are arranged one behind the other. One behind the other means in this case in installation direction. Thus, it may be that the first board is arranged between the front side of the actuating element and the second circuit board. Particularly preferably, the switch is integrated on the first board in a circuit. Additionally or alternatively, the switch on the first board may end. The fact that the switch ends on the first board, no space for the switch needs to be kept on the second board. Also, no through hole for the switch on the first board is needed.

In particular, to save space, a switch may be used which extends from the underside of the mounting plate is less than 15 mm, preferably less than 12 mm, more preferably less than 10 mm from the bottom of the mounting plate in the installation direction. A lower limit for the distance may be due to the technical feasibility. The extension can be as low as possible, for. B. at least 9 mm, preferably at least 7 mm, more preferably at least 5 mm.

The switch may extend from an upper side of the mounting plate against the mounting direction between 1 mm and 5 mm, preferably between 2 mm and 4 mm.

Preferably, a distance MP from a bottom of the mounting plate to a top of the board, with multiple boards a distance from a bottom of the mounting plate to a top of the board, which is farthest from the mounting plate, less than 22 mm, preferably less than 20 mm, more preferably less than 17 mm. As a result, the installation in the flush-mounted box can be ensured with a depth of 41 mm, with enough space for connection cable is kept. A lower limit for the distance may be due to the technical feasibility. The distance MP can be as low as possible, for. B. at least 17 mm, preferably at least 15 mm, more preferably at least 10 mm.

The trigger element may have a lid.

A sabotage switch can be arranged on the first board. Preferably, an actuating extension of the sabotage switch is passed through the mounting plate. Thus, the spatially compactness of the triggering element according to the invention can be used to directly contact the cover and the actuating extension above the mounting plate. This can do that Trigger element be even simpler and more space-saving.

Preferably, the actuating element and / or the switch are designed such that an operator can operate the actuating element and / or the switch only without rotation about an axis. Particularly preferably, the operator can operate the actuator and / or the switch only without rotation. Thus, the actuating element and / or the switch z. B. only translationally movable.

The described design of the actuating element and / or the switch can be used simply constructed switch. This allows a special compactness of the triggering element according to the invention.

It may be that the actuating element has at least one guide means. The guide means is used during the actuation of the actuating element for guiding the actuating element. Preferably, the guide means only allows a translational movement of the actuating element.

The actuating element may have an actuating means. The actuating means serves to actuate the switch. Thus, the switch may rest against the actuating means during actuation.

The guide means may be arranged parallel to an actuating means of the actuating element. Additionally or alternatively, the guide means may be arranged parallel to the switch. Due to the parallel arrangement height can be saved.

For example, the switch can be arranged eccentrically to an imaginary axis, in particular to a symmetry and / or center axis of the actuating element. It is possible to provide the guide means centrally in this case in the actuator.

Alternatively and particularly preferably, the guide means is arranged eccentrically to an imaginary axis, in particular to a symmetry and / or center axis, of the actuating element. It is possible that the switch is arranged in this case on the imaginary axis. The actuating means may also be provided centrally in the actuating element.

It is conceivable that the actuating element comprises a plurality of guide means, preferably at least three guide means. By the plurality of guide means, a rotational movement of the actuating element can be prevented. The plurality of guide means may be arranged parallel to each other. The guide means may be arranged in particular around the switch.

The actuator may include a bottom. The at least one guide means may extend rod-shaped from the underside.

The at least guide means can be received and guided in a guide sleeve. The guide sleeve may in particular be connected to the mounting plate. In the case of a plurality of guide means, each guide means may be guided in a guide sleeve.

It is possible that the plurality of guide means and / or the plurality of guide sleeves may be formed differently. Thus, a guide means and / or a guide sleeve may be formed longer than another guide means or guide sleeve. Here, the particularly well-guided guide means may serve the actual guidance of the actuating element, while the at least one other guide means essentially prevents only one rotation of the actuating element. This can save space. In particular, in order to achieve good guidance, at least one guide sleeve can extend at least to the first circuit board, preferably through the first circuit board.

It is preferably provided that the return means has a cavity. In the cavity, the actuating means and / or the switch may be at least partially disposed. This can save space.

The actuating means may be formed protruding. In particular, the actuating means protrudes from the underside of the actuating element. The actuating means may be circular-cylindrical. As a result, the switch can always be actuated independently of an orientation of the switch on the first board.

The actuating means may be formed with a hollow interior. In the switch, a light source may be provided. Light rays that are emitted from the light source can propagate through the hollow interior. The light rays may be visible to a user through an illumination area of the actuator. The Illuminierbereich of the actuating element is for this purpose transparent, in particular translucent, formed.

The actuating element may comprise a base body made of opaque material. The main body may be formed of plastic. The main body may comprise an opening. This allows the Illuminierbereich be enabled. The main body may be formed homogeneously. In the opening, a translucent, in particular translucent insert can be arranged. The insert can be fixed in the opening, in particular pressed. The light from the light source can be directed through the insert.

Under the second board, a radio module, in particular a Bluetooth module can be arranged. The radio module may be attached to the underside of the second board. The radio module can preferably serve for parameterization. This allows a very compact design allows.

The central emergency button can be almost identical to the emergency button. In particular, the actuator in function and structure corresponds to the emergency button actuator. The switch corresponds to z. B. the emergency button switch. Also, the central emergency button may include a return means corresponding return means. The central emergency button preferably comprises a first and a second board and / or a mounting plate, which are constructed according to the first board, the second board or the mounting plate and connected to each other. On the first board of the central emergency button, the alarm device and the lamps are arranged according to the alarm and the lamps of the emergency button. The first to third emergency processing unit are preferably arranged on the second circuit board of the central emergency button. The emergency button switch can end on the first board of the central emergency button. Upon actuation of the emergency button switch, a first and a second circuit can be opened on the first board, which in particular can be detected by the first and the second emergency processing unit cable-free. For this purpose, the first and the second board are connected via connectors. The light guide of the central emergency button corresponds preferably in construction and function of the light guide. The bulbs of the central emergency button can be controlled according to the light source of the emergency button.

It is conceivable that in the central emergency button a covering means corresponding to the cover means is configured differently or is missing. The lighting means of the central emergency button are not used in particular for the optical representation of a locking state of a emergency button. The illuminants of the central emergency button are used in particular for the optical representation of the first and the second delay time period and / or for optical representation that a Aufhebehandlung is possible.

The invention will be explained in more detail with reference to embodiments. Technical features with the same function are provided in the figures with identical reference numerals. Show it:

1 a top view of a security system according to the invention with an emergency button as a trigger element in a ready state to a door according to a first embodiment,

2 a functional diagram of the security system according to the invention 1 .

3 one too 2 Modified functional diagram of a security system according to the invention according to a second embodiment,

4 a top view of an inventive safety system with multiple emergency buttons in a ready state on a door according to a third embodiment,

5 a functional diagram of the security system according to the invention 4 .

6 one too 5 Modified functional diagram of a security system according to the invention according to a fourth embodiment,

7 a top view of a security system according to the invention in a ready state according to a fifth embodiment,

8th a functional scheme of a central escape route control of the security system 7 .

9 a functional diagram of the security system 7 .

10 a functional diagram of a security system according to the invention according to a sixth embodiment,

11 An embodiment of an emergency button according to the invention in a side view,

12 the emergency button off 11 in a longitudinal section,

13 the emergency button off 11 in an exploded view,

14 an actuator of the emergency button 11 in a perspective view,

15 another perspective view of the actuating element 14 .

16 a light guide from the emergency button 11 in a perspective view,

17 another perspective view of the light guide 16 and

18a -D is a schematic representation of a sequence of a function release in a security system according to the invention.

In the following, a distinction is made between a user and an operator. A user can be any person using the security system 1 used. A user can, for. B. be a guest by the security system 1 secured door wants to flee. An operator serves to operate the security system 1 , The operator can z. B. authenticate to the security system. The operator can z. B. be a member of a security guard. Particularly preferred, the operator can use the security system 1 to adjust.

In the following, the term "actuation of the emergency button" is understood to mean "actuation of the actuating element of the emergency button".

A connection to a bus system is understood below to mean an immediate connection, so that a component connected to the bus system is to be regarded as a subscriber of the bus system with its own bus address.

By initiating a control is meant, in particular, the transmission of a message via a first and / or second bus system which contains information and / or a command which causes the direct or indirect receiver of the message to carry out the activation. The sender of the message initiates the activation. Thus, by initiating a drive, an indirect drive is understood. The message can in particular correspond to a bus telegram.

As a result of an operation means that an actuation is the cause, regardless of whether the operation continues or not.

In the 1 and 2 is a first embodiment of a security system according to the invention 1 for a door 2 shown. The door 2 is not part of the security system according to the invention 1 , The safety system according to the invention 1 includes a door lock 200 and an emergency button 10 , The emergency button 10 comprises a control device 100 , The emergency button 10 is a key switch 500 assigned. The security system 1 can the key switch 500 include. Alternatively, the security system 1 , especially the emergency button 10 , Have a key switch input, via which a connection with the key switch 500 can be produced.

As in 2 shown are the emergency button 10 and the door lock 200 via a first bus system 400 connected with each other. The key switch 500 is with the emergency button 10 over a connection 402 electrically connected or connectable. The connection 402 is shown as a dashed arrow to represent signals above a position in the key switch 500 inserted key of an electronic unit 24 the emergency button 10 be supplied. Alternative to the connection 402 can the key switch 500 also with the first bus system 400 be connected (not shown). This alternative applies to all embodiments.

The emergency button 10 is designed to lock the door 200 as a result of pressing the emergency button 10 a message about the first bus system 400 to send and thereby cause an unlocking of the door lock. The message following the operation of the emergency button 10 can be delayed.

Likewise, the security system according to the invention 1 , especially the emergency button 10 to be connectable to a fire detector (not shown). If a fire alarm signal is present, the safety system initiates 1 also a release of the door lock 200 ,

The control device 100 does not perform safety-related functions: Thus, the control device 100 for authorized persons unlocking the door lock 200 cause. For this purpose, the control device 100 be connectable with an access control system, not shown. The access control system can in particular with the first bus system 400 be connected or connectable. The control device 100 receives from the access control system in particular via the bus system 400 a positive authentication signal about the authentication. After that, the control device causes 100 a release of the door lock 200 , The access control system can, for. Example, a reader, a key switch, a keyboard for entering a code or a lock cylinder of a mechanical lock, in particular a self-locking panic lock, include or be designed.

Likewise, the control device 100 at a predetermined time or after a predetermined period of time unlocking the door lock 200 automatically cause, for. B. if in a time window per day the door should be unlocked.

If there is no danger, ie was not the emergency button 10 actuated is still a fire alarm signal, so the control device 100 a Re-lock automatically after a predetermined period of time. In this case, the control device 100 receive an access signal of the access control system in addition to the positive authentication signal and / or measure the length of the positive authentication signal. By the access signal or by the length of the authentication signal, the control device 100 adjust the length of the predetermined period of time. So a person z. For example, hold an ID card long in front of the reader or turn the key for a long time. This signals that the predetermined period of time previously in the control device 100 deposited long period of time to correspond. If the person holds the ID card in front of the reader or if the user briefly turns the key, it is signaled that the predetermined period of time has elapsed before in the control device 100 deposited short period of time should correspond.

A first door condition monitoring device 204 and a second door condition monitoring device 206 detect if the door 2 is open or closed. The control device 100 receives, at least indirectly, a signal from the door condition monitoring devices 204 . 206 , Is the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 a re-locking the Türverrieglung 200 immediately and automatically cause as soon as the control device 100 with the help of door condition monitoring devices 204 . 206 the information is available that the door is initially opened and now closed again.

The emergency button 10 includes an audible alarm 23 and bulbs 41 (see also 13 ). The bulbs 41 serve to represent the locking or unlocking state of the door lock 200 and thus serve as a display device. The bulbs 41 serve for the optical representation of a time-delayed unlocking of the door lock 200 as a result of pressing the emergency button 10 and thus serve as a display device. The bulbs 41 are used for optical representation of an alarm condition after receiving the fire alarm or as a result of pressing the emergency button 10 and thus serve as a display. The bulbs 41 are used for visual display when a previously described re-locking fails.

The control device 100 controls the audible alarm 23 to emit an audible alarm when there is a danger, ie when receiving a fire alarm or the emergency button 10 was pressed. The control device 100 controls the audible alarm 23 to sound an audible alarm if a re-lock fails.

The control device 100 controls the bulbs 41 to the locking or unlocking the door lock 200 to visually represent a time-delayed release and / or to issue a visual alarm when a fire alarm signal is received or the emergency button 10 has been pressed or if a re-lock fails.

The control device 100 can in the unlocked state of the door lock 200 the opening of the door with the help of the door condition monitoring devices 204 . 206 monitor. The control device 100 If desired, it can sound an audible alarm when the door is open 2 during the unlocked state of the door lock 200 has been opened, at least if there is no positive authentication signal. This can be monitored when someone opens the door, even if the door is unlocked.

The emergency button 10 may include at least one additional output. The control device 100 can on the output of other components with the security system according to the invention 1 are connectable, drive, z. B. a room lamp.

In the control device 100 are the parameters for the execution of said functions of the control device 100 deposited. So z. The predetermined time (s), the predetermined time period (s), parameters for the audible alarms, e.g. B. in which volume with which frequency an acoustic alarm is to be output, and parameters for the various controls of the bulbs 41 for optical representation of the various states of the security system mentioned above 1 in the control device 100 saved. The parameters for the lighting means may include flashing frequencies, colors to be emitted, color intensities and / or light patterns. For parameterization, the control device 100 via a radio module 64 communicate with a mobile communication device. Alternatively, the parameterization with the aid of a watch 301 via a second bus system 401 take place (s. 9 and 10 ). For the parameterization, a parameterization program is provided which can be used on a communication device, eg. As a personal computer, a mobile phone and / or a tablet, is executable. The operator can set the parameters using the parameterization program.

In 2 is the construction of the door lock 200 and the emergency button 10 shown in more detail.

The emergency button 10 has a first emergency button processing unit 20 , a second emergency button processing unit 21 and a third one Nottasterverarbeitungseinheit 22 on. The first, second and third emergency button processing units 20 . 21 . 22 are each designed as microprocessors or microcontroller. The first and second emergency button processing units 20 . 21 include a non-volatile memory. The third emergency button processing unit 22 includes a non-volatile memory and / or has access to a non-volatile memory. The first, second and third emergency button processing units 20 . 21 . 22 be together as an electronics unit 24 the emergency button 10 designated.

The electronics unit 24 also serves as a control device 100 , Here, the first emergency button processing unit is used 20 as the first processing unit 103 the control device 100 , The second emergency button processing unit 21 serves as a second processing unit 104 the control device 100 , The third emergency button processing unit 22 serves as the third processing unit 105 the control device 100 ,

The first and second emergency button processing units 20 . 21 serve to execute the safety-related functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 is used to execute the non-safety-related functions. The safety-relevant functions include the cause of unlocking in case of danger. Non-safety-related functions include the remaining functions listed above.

By pressing the emergency button 10 becomes an actuator 11 from a starting position 11.I in an operating position 11.II moves, creating a switch 63 is pressed (see also 12 . 13 ). As a result, a first and a second actuation signal are generated. Thereby, a first and a second circuit (not shown) are opened. A signal on the opening of the first circuit is from the first emergency button processing unit 20 detected. A signal on the opening of the second circuit is from the second emergency button processing unit 21 detected. The actuating signal is understood to be the signal generated by the user by the actuation of the actuating element in order to unlock the door lock and to enable the escape route. The expression "as a result of pressing the emergency button 10 Is used in particular in the sense of "after generation of the actuation signal", ie, regardless of whether the actuator 11 still in the operating position 11.II is or already in the starting position 11.I has returned.

The first emergency button processing unit 20 and the second emergency button processing unit 21 cause each independently after detecting the actuation signal via the first bus system 400 a release of the door lock 200 , The second emergency button processing unit 21 thus acts redundantly to the first emergency button processing unit 20 ,

The door lock 200 includes a door lock control 201 , The door lock control 201 comprises a first processing means 202 and a second processing means 203 , The first and the second processing means 202 . 203 be together as an electronic device 207 designated. The first and the second processing means 202 . 203 are each designed as a microprocessor or microcontroller. The first and the second processing means 202 . 203 can each have a locking mechanism 205 the door lock 200 trigger for unlocking. In case of danger, ie as a result of pressing the emergency button 10 or upon receipt of a fire alarm signal, control both the first processing means 202 as well as the second processing agent 203 the locking mechanism 205 for unlocking. The second processing agent 203 is thus redundant to the first processing means 202 , This construction achieves one-fault safety.

The locking mechanism 205 is electromechanically formed. The locking mechanism 205 includes z. B. an electromechanically actuated latch member (not shown), which is a door latch of the door 2 in the locked state of the door lock 200 locks and in the unlocked state of the door lock 200 releases. When driving the locking mechanism 205 for interlocking, the first and second processing means switch 202 . 203 an electric current for the locking mechanism 205 at. When driving the locking mechanism 205 for unlocking, the first and second processing means switch 202 . 203 an electric current for the locking mechanism 205 from. Each a processing agent 202 . 203 For this purpose, a separate switch is assigned. Opening only one of the switches will turn off the power to the latching mechanism 205 ,

The door lock control 201 receives feedback on the state of the locking mechanism via a locking mechanism state monitoring device, not shown 205 , In particular, a position of an armature of a coil of the locking mechanism 205 supervised. Corresponds to the condition of the door lock 205 not the desired state, an alarm is issued. Additionally or alternatively, this case can be made a renewed attempt to reach the target state.

As a result of pressing the emergency button 10 communicate the first and the second Nottasterverarbeitungseinheit 20 . 21 with the first and the second processing means 202 . 203 over the first bus system 400 with the help of a message. The message may include the message about being actuated or a control command for unlocking. Here, the first emergency button processing unit informs 20 the first processing agent 202 and the second emergency button processing unit 21 the second processing means 203 , The message causes the first and second emergency button processing units 20 . 21 in that both the first and the second processing means 202 . 203 , the locking mechanism 205 to unlock, so turn off the electrical power.

The presence of a fire alarm signal is provided by the first and second emergency button processing units 20 . 21 detected. This is followed by the first and second emergency button processing units 20 . 21 by a message to the first and the second processing means 202 . 203 in that the locking mechanism 205 for unlocking the door lock control 201 is controlled. Here, the first emergency button processing unit informs 20 the first processing agent 202 and the second emergency button processing unit 21 the second processing means 203 , The message causes the first and second emergency button processing units 20 . 21 in that both the first and the second processing means 202 . 203 , the locking mechanism 205 to unlock, so turn off the electrical power.

The operation of the emergency button 10 or the presence of a fire alarm signal may be in a message from one of the two emergency button processing units 20 . 21 be sent, wherein the first emergency button processing unit 20 a first part of the message and the second emergency button processing unit 21 write a second part of the message. The first and the second processing means 202 . 203 are at least responsible for each part of the message. The emergency button processing units 20 . 21 . 22 and the first and second processing means 202 . 203 can each receive messages via the first bus system 400 receive. Here, the electronics unit 24 and the door lock control 201 each be assigned a bus address.

The first and second emergency button processing units 20 . 21 monitor each other. If an error is detected, the electronic unit initiates 24 , in particular the intact emergency button processing unit 20 . 21 in that the first and the second processing means 202 . 203 the door lock mechanism 205 trigger for unlocking. The first and the second processing means 202 . 203 monitor each other. If an error is detected, then at least the intact processing means becomes 202 . 203 the locking mechanism 205 activated for unlocking. Also, in case of a malfunction of the bus system 400 the locking mechanism 205 for unlocking the door lock control 201 driven. For this purpose and to check the first and the second emergency button processing unit 20 . 21 becomes a sign of life of the first and second emergency button processing units 20 . 21 regularly to the door lock control 201 Posted. If the sign of life signal is off, then the first and the second processing means are used 202 . 203 the locking mechanism 205 activated for unlocking. The first and the second processing means 202 . 203 communicate with each other when the door lock control 201 a message about the operation of the emergency button 10 and / or has received the presence of a fire alarm signal. Represents only the first processing agent 202 or the second processing means 203 fixed that the emergency button 10 has been actuated or a fire alarm signal is present, the detecting processing means controls 202 . 203 the door lock mechanism 205 for unlocking and initiating that other processing means 202 . 203 also the door locking mechanism 205 activates for unlocking. An error and a fault always include a failure of the respective component. In case of power failure, the locking mechanism goes 205 automatically in the unlocked state. The security described in this section is also provided by the security system 1 , in particular by means of the control device 100 , an audible and / or visual alarm.

If the actuation signal has been generated, the door lock is prevented electronically without the presence of a cancellation condition 200 is transferred to the locked state. This prevents the door from being locked while a hazardous condition persists. This is in the electronic device 207 integrated an electronic statement. The electronic detection is due to the actuation of the actuator 11 , which serves to release the escape route, transferred to an operating state. In the operating state, the control of the door lock 200 prevented for locking.

The electronic determination comprises a first program code. The first program code includes a first variable or has access to a first variable. In an initial state of the electronic determination, the first variable is set to an initial value. In the actuation state, the first variable is set to an actuation value, by which the control of the door lock 200 is prevented for locking. The first variable can be binary. If the cancellation condition is reached, then the electronic determination transferred back to an initial state. For this purpose, the value of the first variable is set to the initial value. In the initial state of the electronic detection is a control of the door lock 200 allowed for locking. The first program code detects the first value of the first variable and allows locking the door lock 200 if the value of the first variable corresponds to the initial value, and prevents locking the door lock 200 if the value of the first variable corresponds to the actuation value.

The electronic detection is in both the first processing means 202 as well as redundant in the second processing means 203 deposited. For this purpose, the first program code is in the first processing means 202 deposited. The first variable is in the nonvolatile memory of the first processing means 202 saved. A second program code having the same functionality as the first program code is in the second processing means 203 deposited. The first variable is redundant in the non-volatile memory of the second processing means 203 saved.

The first variable is additionally in the first emergency button processing unit 20 and in the second emergency button processing unit 21 each stored in the non-volatile memories. As a result of pressing the emergency button 10 becomes the first variable in the first and second emergency button processing units 20 . 21 transferred from the initial value in the actuation value. The changed value of the first variable becomes the electronic device 207 over the bus system 400 transmitted. The emergency button transmits until a cancellation condition is met 10 repeats the operation value of the first variable to the electronic device 207 , The transmission can take place at regular time intervals, in particular together with the sign of life signal.

At least if at least one of the door condition monitoring devices 204 . 206 has detected that the door 2 after pressing the emergency button 10 has been opened, so to achieve the cancellation condition is a cancellation act on emergency button 10 necessary.

The actuator 11 is non-latching. The actuator 11 becomes on actuation from the home position 11.I in the operating position 11.II transferred (s. 11 ). Immediately after the operation, the actuator moves 11 back to the starting position 11.I by the force of a return spring designed as a spring 12 back (s. 12 . 13 ). The actuation of the actuating element 11 is translational.

The suspension action at the emergency button 10 is performed by the actuator 11 is pressed. As a result, a cancellation signal is generated, which corresponds to the actuation signal. So that the control device 100 can detect whether an operation of the emergency button 10 for unlocking the door lock 200 or there is a cancellation action, another signal must be generated at the same time to achieve the cancellation condition. An operator authenticates for this purpose. The authentication takes place by inserting and turning a key in the key switch 500 , The actuation of the actuating element 11 and the authentication must overlap in time. Ie. the operator must keep the key in the rotated state while the actuator 11 in the operating position 11.II located. The actuator 11 must be in the starting position 11.I return while the key is in the rotated state. The course of action is sufficient to achieve the cancellation condition.

Have the door condition monitoring devices 204 . 206 that detects the door 2 as a result of pressing the emergency button 10 has remained permanently closed, so the cancellation condition can be achieved in at least one other way, namely by elapse of a predetermined time interval. So z. B. after 60 seconds after the last generation of the actuation signal, the cancellation condition be reached, if the door 2 has remained closed. An authentication at the key switch 500 and a suspension action at the emergency button 10 are not necessary in this case.

The first and second door condition monitoring devices 204 . 206 are designed to detect with a one-fault security that the door 2 as a result of pressing the emergency button 10 has always been closed. These are the door condition monitoring devices 204 . 206 preferably formed differently. The first door condition monitoring device 204 can z. B. be designed as a door contact. The second door condition monitoring device 206 can z. B. be designed as a case contact. Alternatively, z. B. at least one of the door condition monitoring magnetically, z. As a reed switch, the state of the door 2 monitor. The door lock control 201 receives a signal from each of the first and second door condition monitoring devices 204 . 206 about whether the door 2 is open or closed. Only if during the predetermined time interval neither of the first door condition monitoring device 204 still from the second door condition monitoring device 206 a signal about the opening of the door has been sent, the Cancellation condition can be achieved by elapse of the predetermined time interval.

The door lock control 201 includes a timer to measure the predetermined time interval. The door lock control 201 starts the timer as a result of pressing the emergency button 10 , Receives the door lock control 201 during the predetermined time interval, a signal of the first or second door condition monitoring device 204 . 206 That the door has been opened, so must a cancellation act on the emergency button 10 respectively. In this case, the elapse of the predetermined time interval is insufficient. The length of the predetermined time interval is in the door lock control 201 deposited.

The door lock control 201 checks whether reaching the cancellation condition by lapse of the predetermined time interval is allowed before the door lock control 201 the locking mechanism 205 activates for locking. This allows an operator to commission the security system 1 ie before the operation of the safety system begins 1 , deposit whether a lapse of the predetermined time interval without opening the door 2 as a cancellation condition is allowed and thus to a re-locking of the door 2 leads. The deposit can be in the emergency button 10 respectively. A check of permissibility, elapse of the predetermined time interval, and a lack of a signal from the first and second door condition monitors 204 . 206 about opening the door 2 is sufficient to achieve the cancellation condition.

The door lock control 201 communicates the open or closed state of the door over the bus 400 to the emergency button 10 and / or to the control device 100 ,

The electronics unit 24 includes a timer. In the electronics unit 24 a first delay period can be stored. Should unlock the door lock 200 delayed, the electronics unit waits 24 after the generation of the actuation signal, the first delay time period before the first and second emergency button processing units 20 . 21 over the first bus system 400 with the door lock control 201 communicate to cause a release.

The third processing unit 105 induces the 1 and 2 described non-safety-relevant unlocking and locking the door lock 200 , z. B. an unlock after receipt of the authentication signal, at a predetermined time or after a predetermined period of time or a lock after a predetermined period of time or immediately after closing the door 2 , For this purpose, the third processing unit communicates 105 over the first bus system 400 with the door lock control 201 , The communication can z. B. information or a control command containing the door lock control 201 causes the locking mechanism to trigger for unlocking or locking. Is the control device 100 connected to the second bus system (s. 7 ), the third processing unit is used 105 for forwarding messages from and / or to a central escape route control 300 ,

The third emergency button processing unit 22 controls the audible alarm 23 and the bulbs 41 at.

Is at least one of the processing means 202 . 203 before that the locking mechanism 205 has taken the unlocked state, then sends the processing means 202 . 203 a corresponding signal via the bus 400 to the electronics unit 24 , The electronic device 207 is with the door condition monitoring device 204 . 206 connected or connectable and receives signals about an open or closed state of the door of the door condition monitoring devices 204 . 206 ,

The functions mentioned, the control device 100 , the door lock control 2021 and / or the emergency button 10 can be executed with the help of software modules. In the electronic device 207 and / or the electronics unit 24 program codes are stored with the help of which the functions can be executed.

3 represents a variant of the in the 1 and 2 illustrated security system 1 Here is the control device 100 separately from the emergency button 10 and the door lock 200 educated. The control device 100 can z. B. in a hat rail housing (not shown) may be arranged. The control device 100 is not in an emergency button 10 or in a door lock 200 integrated. For example, the control device 100 be provided for arrangement in a technical room. The first bus system 400 connects the control device 100 , the door lock 200 and the emergency button 10 together. As in the first embodiment, the key switch is 500 with the emergency button 10 over a connection 402 electrically connected or connectable.

Unless otherwise described, the structure and the function correspond to the first embodiment, wherein the functions associated with the 1 and 2 with the help of the control device 100 or the processing units 103 . 104 . 105 are described by the control device 100 of the 3 be executed and the functions that to the 1 and 2 with the help of the emergency button 10 or the emergency button processing units 20 . 21 . 22 described by the emergency button 10 In particular, the first and second emergency button processing units detect 20 . 21 the actuation signal, communicate as a result of pressing the emergency button 10 with the first and the second processing means 202 . 203 over the first bus system 400 and thus cause an activation of the locking mechanism 205 through the door lock control 201 , The measures for achieving on-fail safety or redundancy are made with the aid of the first and second emergency button processing units 20 . 21 carried out. The first variable is in the first and second emergency button processing units 20 . 21 is stored and from there to the door lock control 201 transmitted. The emergency button 10 includes the timer for determining the first delay time period. The control device 100 is with the second bus system 401 connected or connectable. The third processing unit 105 induces the 1 and 2 described non-safety-relevant unlocking and locking the door lock 200 , z. B. unlocking upon receipt of the authentication signal, at a predetermined time or after a predetermined period of time or an automatic re-locking after a predetermined period of time or immediately after closing the door 2 ,

The first, second and third processing units 103 . 104 . 105 are each designed as a microprocessor or microcontroller. The first, second and third processing units 103 . 104 . 105 together form a processing electronics 101 , The first and the second processing unit 103 . 104 have a non-volatile memory. The third processing unit 105 includes a non-volatile memory and / or has access to a non-volatile memory.

A fire alarm signal can be both from the control device 100 as well as from the emergency button 10 be receivable. The presence of a fire alarm signal is thereby by the first and the second emergency button processing unit 20 . 21 for the emergency button 10 or from the first and second processing units 103 . 104 for the control device 100 detected. Accordingly, both the control device 100 with the help of the first and the second processing unit 103 . 104 as well as the emergency button 10 with the aid of the first and the second emergency button processing unit 20 . 21 a release of the door lock 200 cause. For this purpose, communication takes place via the first bus system 400 with the door lock control 201 instead of.

The control device 100 is via the first bus system 400 informed when the emergency button 10 a release of the door lock 200 caused, ie as a result of pressing the emergency button 10 or after receiving a fire alarm signal. Also, the control device 100 via a time-delayed unlocking of the door lock 200 as a result of pressing the emergency button 10 informed. The control device 100 is about the locking and unlocking the door lock 200 informed. The control device 100 is about the open or closed state of the door 2 informed.

The control device 100 initiates activation of the alarm transmitter 23 and the light source 41 for those to the 1 and 2 described acoustic alarms and visual representations. For this purpose, the control device 100 with the electronics unit 24 in particular with the third emergency button processing unit 22 , via the first bus system 400 communicate. The third emergency button processing unit 22 then controls the alarm 23 or the bulbs 41 at. These are the parameters for the alarm transmitter 23 and the bulbs 41 in the control device 100 deposited.

In the embodiments of the 1 to 3 includes the door lock 200 the door condition monitoring devices 204 . 206 , Alternatively, and not shown, the door condition monitoring devices 204 . 206 with the first bus system 400 or directly with the emergency button 10 and / or the control device 100 be connected.

In the embodiments of the 1 to 3 can at least another emergency button, not shown, with the first bus system 400 be connected without the control device 100 is trained. The further emergency button is like the emergency button 10 in 3 trained and can unlock the door lock when actuated 200 cause. The further emergency button corresponds in structure and functionality to the emergency button 10 of the 3 ,

In the embodiments of the 1 to 3 can at least one further door lock, not shown, with the first bus system 400 be connected. The further door lock is like the door lock 200 in 2 or 3 trained and can when pressing the emergency button 10 also be unlocked. The further door lock corresponds in structure and in the functionality of the door locks 200 of the 1 to 3 ,

In 4 is a third embodiment of a security system according to the invention 1 with several emergency buttons 10 . 1010 . 2010 . 3010 shown. The security system 1 includes several door locks 200 . 1200 . 2200 . 3200 , Every emergency button 10 . 1010 . 2010 . 3010 is a key switch 500 . 1500 . 2500 . 3500 assigned. The security system 1 used to arrange emergency buttons 10 . 1010 . 2010 . 3010 and door locks 200 . 1200 . 2200 . 3200 at different doors 2 . 2002 . 3002 , The doors 2 . 2002 . 3002 are not part of the security system according to the invention 1 , The several emergency buttons 10 . 1010 . 2010 . 3010 are with the first bus system 400 connected and thus correspond to a number of emergency buttons 10 . 1010 . 2010 . 3010 , The door locks 200 . 1200 . 2200 . 3200 are with the first bus system 400 connected and correspond to a number of door locks 200 . 1200 . 2200 . 3200 ,

In the example of 4 are the emergency buttons 10 . 1010 the door locks 200 . 1200 assigned. The emergency button 2010 is the door lock 2200 assigned. The emergency button 3010 is the door lock 3200 assigned. This is the result of an operation of one of the emergency button 10 . 1010 the two door locks 200 . 1200 unlocked, but not the door locks 2200 . 3200 , Will the emergency button 2010 operated, then only the door lock 2200 unlocked. Accordingly, when the emergency button 3010 is pressed, only the door lock 3200 unlocked. Thus, in this embodiment, the door locks 200 . 1200 . 2200 . 3200 selectively unlocked.

For example, the emergency buttons 10 . 1010 for mounting on a double-leaf door 2 be provided. One door lock each 200 . 1200 is each on a door leaf 3 . 4 the door 2 to arrange. The emergency button 2010 and the door lock 2200 are to be arranged on another door 2002 intended. The emergency button 3020 and the door lock 3200 are at a door 3002 to arrange, as in 4 shown.

The security system 1 out 4 can also for from 4 deviating selective unlocking be adjustable. At one too 4 Deviating example setting is when pressed one of the emergency button 10 . 1010 . 2010 . 3010 in each case only a single associated door lock 200 . 1200 . 2200 . 3200 unlocked. Thus, each is an emergency button 10 . 1010 . 2010 . 3010 only one door lock each 200 . 1200 . 2200 . 3200 assigned. In particular, such a set security system 1 for four single-leaf doors, each with one door lock 200 . 1200 . 2200 . 3200 suitable.

In another exemplary, not shown setting of the safety system 1 become one of the emergency buttons when pressed 10 . 1010 only the two door locks 200 . 1200 and when pressing one of the emergency buttons 2010 . 3010 only the two other door locks 2200 . 3200 unlocked. Thus, the emergency buttons 10 . 1010 the door locks 200 . 1200 and the emergency buttons 2010 . 3010 the door locks 2200 . 3200 assigned. In particular, the security system set in this way is 1 for two double-leaf doors, each with one door lock 200 . 1200 . 2200 . 3200 suitable for each door.

Likewise, the security system 1 be set so that when pressing an emergency button 10 . 1010 . 2010 . 3010 all door locks 200 . 1200 . 2200 . 3200 be unlocked.

Notwithstanding the security system 1 , this in 4 can be represented, a security system according to the invention 1 a number of emergency buttons 10 . 1010 . 2010 . 3010 include, which does not match the number of door locks 200 . 1200 . 2200 . 3200 covers. For example, in 4 the door 2 be designed with one wing and one of the emergency button 10 . 1010 or one of the door locks 200 . 1200 absence.

In 5 is shown that the emergency button 10 . 1010 . 2010 . 3010 and the door locks 200 . 1200 . 2200 . 3200 over the first bus system 400 connected to each other. One emergency button each 10 . 1010 . 2010 . 3010 is with a respective emergency button 10 . 1010 . 2010 . 3010 assigned key switch 500 . 1500 . 2500 . 3500 over a connection 402 . 1402 . 2402 respectively. 3402 electrically connected or connectable. Alternatively, the key switches 500 . 1500 . 2500 . 3500 with the first bus system 400 connected (not shown). In the embodiment of 4 and 5 is the control device 100 in one of the emergency buttons 10 . 1010 . 2010 . 3010 , z. B. the emergency button 10 , integrated. The first bus system 400 is only with a single control device 100 connected. Unless otherwise described below, the structure and functions of the door locks correspond 200 . 1200 . 2200 . 3200 the structure and functions of the door lock 200 of the 2 and 3 , the structure and functions of the emergency button 10 the structure and functions of the emergency button 10 of the 2 and the structure and functions of emergency buttons 1010 . 2010 . 3010 the structure and functions of the emergency button 10 of the 3 , The reference numerals from the 2 and 3 are used. It is understood that in each case the door locks 200 . 1200 . 2200 . 3200 its own door locking mechanism, own processing means etc. and the emergency buttons 10 . 1010 . 2010 . 3010 each own emergency button processing units, alarm, bulbs, switches and actuators include.

Thus the allocation of the emergency button 10 . 1010 . 2010 . 3010 to the door locks 200 . 1200 . 2200 . 3200 can be done during commissioning of the safety system 1 So before the start of the Operation of the safety system 1 , an assignment of emergency buttons 10 . 1010 . 2010 . 3010 to the door locks 200 . 1200 . 2200 . 3200 performed. For this purpose, one of the door locks 200 . 1200 . 2200 . 3200 into a mapping mode. After that, at the emergency rooms 10 . 1010 . 2010 . 3010 made a conscious act. The conscious act can be considered an actuation of the actuator 11 of the respective emergency button 10 . 1010 . 2010 . 3010 be executed. After all emergency buttons 10 . 1010 . 2010 . 3010 , that of the door lock 200 . 1200 . 2200 . 3200 becomes the assignment mode of the door lock, which are to be assigned in the assignment mode 200 . 1200 . 2200 . 3200 completed. In the embodiment of 4 is z. B. first the door lock 200 transferred to the assignment mode and then the emergency button 10 . 1010 pressed, causing the assignment of the emergency button 10 . 1010 to the door lock 200 he follows. Then, the assignment mode of the door lock becomes 200 completed. Subsequently, z. B. the door lock 1200 transferred to the assignment mode and then the emergency button 10 . 1010 pressed, causing the assignment of the emergency button 10 . 1010 to the door lock 1200 he follows. Then, the assignment mode of the door lock becomes 1200 completed. Now the door lock 2200 transferred to the assignment mode and then the emergency button 2010 pressed, causing the assignment of the emergency button 2010 to the door lock 2200 he follows. The assignment mode of the door lock 2200 will be terminated. Accordingly, afterwards with the door lock 3200 and the emergency button 3010 be moved.

The assignment is in the respective door locks 200 . 1200 . 2200 . 3200 , Especially in the respective door lock controls 201 , deposited, which emergency button 10 . 1010 . 2010 . 3010 the respective door lock 200 . 1200 . 2200 . 3200 is to be assigned. By the assignment is in the control device 100 for all emergency buttons 10 . 1010 . 2010 . 3010 and all door locks 200 . 1200 . 2200 . 3200 of the first bus system 400 the assignment of emergency buttons 10 . 1010 . 2010 . 3010 to the door locks 200 . 1200 . 2200 . 3200 deposited. For the assignment in each case a bus address, in particular an unchangeable bus address, the respective emergency button 10 . 1010 . 2010 . 3010 deposited.

The deposit of the assignment in the respective door locks 200 . 1200 . 2200 . 3200 occurs in each case in the first digital processing means 202 and redundant in the second digital processing means 203 in particular in the non-volatile memories of the processing means 202 . 203 ,

If z. B. the emergency button 10 pressed, then communicates the emergency button 10 with all door locks 200 . 1200 . 2200 . 3200 of the first bus system 400 , The door locks 200 . 1200 . 2200 . 3200 Check in each case on the basis of the deposit whether the respective door lock 200 . 1200 . 2200 . 3200 the pressed emergency button 10 has been assigned. Only in the case of assignment then control the associated door locks 200 . 1200 the respective door locking mechanism 205 at.

With a fire alarm signal the door locks become 200 . 1200 . 2200 . 3200 , the emergency button receiving the fire alarm signal 10 . 1010 . 2010 . 3010 are unlocked.

Should a door lock 200 . 1200 . 2200 . 3200 delayed due to the operation of an associated emergency button 10 . 1010 . 2010 . 3010 be unlocked, so is in that emergency button 10 . 1010 . 2010 . 3010 a first delay period deposited. The deposit takes place during commissioning of the security system 1 through the parameterization program. It can be for every emergency button 10 . 1010 . 2010 . 3010 a different first delay time period can be stored by the operator. For example, in the emergency button 10 a first delay time period, which differs from the first delay time duration, in the emergency button 2010 deposited, distinguishes. The emergency buttons 1010 . 3010 should unlock without delay a release of the associated door locks 2200 respectively. 3200 cause so in the emergency rooms 1010 . 3010 no first delay time period or a first delay time period of 0 s is stored. Alternatively, the security system 1 be designed such that in the emergency buttons 10 . 1010 . 2010 . 3010 , the same door lock 200 . 1200 . 2200 . 3200 are assigned, always the same first delay time period is stored. For this purpose, the parameterization program allows the operator only a common setting.

The control device 100 takes over the non-safety-relevant functions for unlocking and locking all door locks 200 . 1200 . 2200 . 3200 as before 1 and 2 described. For this purpose, the control device 100 with the door locks 200 . 1200 . 2200 . 3200 communicate selectively. Such is the control device 100 Defines which access control system which door lock 200 . 1200 . 2200 . 3200 is assigned, so that in the case of a positive authentication signal of an access control system, only the assigned door lock (s) 200 . 1200 . 2200 . 3200 be unlocked. Also in the control device 100 deposited, if and when yes, which door lock 200 . 1200 . 2200 . 3200 to be unlocked at what given time. Also, in the control device 100 be deposited, after which predetermined period of time or which predetermined periods of time which door lock 200 . 1200 . 2200 . 3200 should be locked again. Also in the control device 100 deposited, if and, if so, which door locks 200 . 1200 . 2200 . 3200 immediately after closing the door 2 . 2002 . 3002 to be locked again. In the control device 100 can be stored, if, and if so, for which door lock 200 . 1200 . 2200 . 3200 An audible alarm should be initiated when the unlocked door 2 . 2002 . 3002 is opened without a positive authentication signal. In the control device 100 can be stored, whether an audible alarm should be initiated when the door 2 . 2002 . 2003 not closed again. The deposits can be used for every door lock 200 . 1200 . 2200 . 3200 or for the groups of door locks 200 . 1200 . 2200 . 3200 standing at a door 2 . 2002 . 3002 are to be arranged differently.

The deposit is made with the aid of the parameterization program by the operator during commissioning.

The control device 100 causes an audible and visual alarm as a result of the operation of an emergency button 10 . 1010 . 2010 . 3010 even in the at least one other emergency button 10 . 1010 . 2010 . 3010 is issued, the same door lock 200 . 1200 . 2200 . 3200 like the pressed emergency button 10 . 1010 . 2010 . 3010 assigned. Is in the embodiment of 4 and 5 z. B. the emergency button 10 operated, so causes the control device 100 through communication with the electronics unit 24 the emergency button 1010 that too the audible alarm 23 and the bulbs 41 the emergency button 1010 to emit an audible or visual alarm.

Will after pressing an emergency button 10 . 1010 . 2010 . 3010 Delayed causes a release, so causes the control device 100 in that the first delay time period with which the unlocking is initiated also in the at least one further emergency button 10 . 1010 . 2010 . 3010 is shown, the same door lock 200 . 1200 . 2200 . 3200 like the pressed emergency button 10 . 1010 . 2010 . 3010 assigned. For this purpose, the control device communicates 100 with the electronics unit 24 the at least one other emergency button 1010 . 2010 . 3010 or controls the bulbs 41 the emergency button 10 in which the control device 100 is integrated.

The control device 100 can the non-safety-related assignment for selective communication, eg. B. the assignment of an access control system to a door lock 200 . 1200 . 2200 . 3200 using a bus address. Here, the participants of the first bus system 400 one setting device each for manual setting of a bus address. The adjustment device may include DIP switches. At least the participants of the first bus system 400 that have the same setting on the adjuster are automatically assigned to each other. Subscribers of the first bus system can assign subscribers with the same setting to different bus addresses 400 different key figures from which different bus addresses are configured with the aid of the setting made. The bus address detected with the help of the setting is for the emergency buttons 10 . 1010 . 2010 . 3010 and for the door locks 200 . 1200 . 2200 . 3200 just one more bus address, which is the emergency button 10 . 1010 . 2010 . 3010 and the door locks 200 . 1200 . 2200 . 3200 next to the bus address used in safety-related communication.

Has already been a door lock 200 . 1200 . 2200 . 3200 unlocked, so the control device 100 a release of another door lock 200 . 1200 . 2200 . 3200 prevent until there is a condition, unless there is a danger. If the condition is fulfilled, causes the control device 100 the unlocking of the other door lock 200 . 1200 . 2200 . 3200 , In this way, the control device 100 with several door locks 200 . 1200 . 2200 . 3200 communicate so that a lock is formed. For example, the door 2002 at an entrance to a room and the door 3002 be arranged at an exit of the same room. The control device 100 may be in the presence of a positive authentication signal for the door lock 2200 a release of the door lock 2200 cause. Even if a positive authentication signal for the door lock 3200 the control device 100 is present, the control device 100 until the presence of a condition unlocking the door lock 3200 prevent. If the condition is present, then the control device causes 100 a release of the door lock 3200 , The condition may be z. B. to a lock-time interval or the achievement of a measured variable, such as room temperature, humidity, air purity or number of people in the room act. The control device 100 For this purpose, it can be connected or connectable to a measuring device. The condition may be closing the first opened door 2002 What is covered by the door condition monitoring devices 204 . 206 is measurable. The condition and the door locks involved in the lock 2200 . 3200 can in the control device 100 be deposited. The deposit can be made by the operator using the parameterization program.

In 6 is a variant of the in the 4 and 5 illustrated security system 1 shown. Here is the control device 100 separate from the emergency buttons 10 . 1010 . 2010 . 3010 and the door locks 200 . 1200 . 2200 . 3200 educated. The first bus system 400 connects the control device 100 with the door locks 200 . 1200 . 2200 . 3200 and the emergency buttons 10 . 1010 . 2010 . 3010 , The control device 100 of the 6 corresponds in structure to the control device 100 of the 3 , The emergency button 10 of the 6 corresponds in construction to the emergency button 10 of the 3 , Incidentally, the structure and the functionalities previously agreed 5 described, the structure and the functionalities of the security system 1 of the 6 ,

Characterized in that in the embodiments of 4 to 6 the door locks 200 . 1200 . 2200 . 3200 , the emergency button 10 . 1010 . 2010 . 3010 and possibly the control device 100 as a participant of a single first bus system 400 are only the cables of the bus system 400 necessary so that the participants can communicate with each other. Thus, the security system points 1 only a few cables up.

The bus system 400 may comprise at least two cables for communication and at least two cables for the power supply. In particular, the bus system 400 exactly two cables for communication and two cables for power supply. In each of the embodiments of the security system according to the invention 1 is a power supply connected to a power grid at any point in the bus system 400 integrated. Thus, the power supply as an independent component of the security system 1 outside the emergency button 10 or the emergency button 10 . 1010 . 2010 . 3010 and the door lock 200 or the door locks 200 . 1200 . 2200 . 3200 be provided. This is the security system 1 flexible in space.

Are as in the third and fourth embodiments, several emergency buttons 10 . 1010 . 2010 . 3010 available and is one of the emergency buttons 10 . 1010 . 2010 . 3010 has been actuated, so electronically by the electronic detection only prevents the operated emergency button 10 . 1010 . 2010 . 3010 associated door locks 200 . 1200 . 2200 . 3200 be locked. The achievement of the cancellation condition allows the locking of the operated emergency button 10 . 1010 . 2010 . 3010 assigned door lock (s) 200 . 1200 . 2200 . 3200 , To achieve the cancellation condition is the overlapping operation of the actuator 11 that emergency button 10 . 1010 . 2010 . 3010 which was previously operated, and the authentication at the operated emergency button 10 . 1010 . 2010 . 3010 assigned key switch 500 . 1500 . 2500 . 3500 necessary. At least this course of action is for the one pressed emergency button 10 . 1010 . 2010 . 3010 assigned door lock 200 . 1200 . 2200 . 3200 necessary, at least one of the door condition monitoring devices 204 . 206 has detected that the door 2 or one of the doors 3 . 4 after pressing the emergency button 10 was opened.

Have the door condition monitoring devices 204 . 206 the pressed emergency button 10 . 1010 . 2010 . 3010 associated door locks 200 . 1200 . 2200 . 3200 that detects the door 2 after pressing the emergency button 10 . 1010 . 2010 . 3010 has remained permanently closed, the cancellation condition can be achieved by expiration of the predetermined time interval. Thus, the cancellation condition z. B. after 60 seconds after the last press of the emergency button 10 be reached. The admissibility of whether a lock after the lapse of the predetermined time interval with the door closed 2 . 2002 . 3002 It should be possible for every door lock 200 . 1200 . 2200 . 3200 or for groups of door locks 200 . 1200 . 2200 . 3200 , In particular for door locks, which are intended to be arranged on the same door, be individually adjustable and storable. The deposit can z. B. in the emergency rooms 10 . 1010 . 2010 . 3010 respectively. Likewise, for every door lock 200 . 1200 . 2200 . 3200 or for groups of door locks 200 . 1200 . 2200 . 3200 , Especially for door locks, which are intended to be arranged on the same door, the length of the predetermined time interval to be individually adjustable stored. This can be a minimum length, z. B. 60 s, be predetermined for the predetermined time interval. The deposit is made by the parameterization program.

In 7 is a fifth embodiment of the security system according to the invention 1 shown. The fifth embodiment includes the security system 1 according to the first embodiment of the 1 and 2 , That is, the emergency button 10 that the control device 100 includes is via the bus system 400 with the door lock 200 connected. The key switch 500 is about a connection 402 with the emergency button 10 connected or connectable. In the fifth embodiment are compared to the first embodiment, further components 300 . 301 . 510 intended.

The security system 1 includes the central escape route control 300 , The central escape route control 300 is intended to be away from the door 2 to be arranged. So can the central escape route control 300 z. B. together with a watch 301 , which may be designed as a monitor or personal computer, and / or a multi-door display device 350 (S. 10 ) in one Guard room to be. The watch device 301 is optional part of the security system according to the invention 1 , Alternatively, the watch device 301 to the security system according to the invention 1 be connectable.

The central escape route control 300 is modular. An emergency module 310 includes a first mounting plate 311 , The first mounting plate 311 takes a central emergency button 302 and an identification device designed by way of example as a key switch 312 on. By means of the first mounting plate 311 are the central emergency button 302 and the identification device 312 mechanically rigidly connected. The central emergency button 302 serves as a result of pressing the central emergency button 302 the door lock 200 is unlocked. Thus, by the central emergency button 302 away from the door 2 the door lock 200 be unlocked. The unlocking as a result of pressing the central emergency button 302 takes place with a one-fault-security. The operation of the central emergency button 302 is thus suitable for hazardous situations.

A deactivation module 320 comprises a first, designed as a key switch operating element 322 and a second, designed as a button control 323 , The first control 322 is used to disable the emergency button 10 , This is achieved by an actuation of the first operating element 322 the emergency button 10 converted into a deactivated state. Is the emergency button 10 in a deactivated state, so is omitted as a result of pressing the emergency button 10 a release of the door lock 200 , The second control 323 is used to activate the emergency button 10 , Is the emergency button 10 in the deactivated state and becomes the second operating element 323 pressed, then becomes the emergency button 10 converted into an activated state. In the activated state of the emergency button 10 causes the emergency button 10 a release of the door lock 200 when the emergency button 10 was pressed. The deactivation module comprises a second mounting plate 321 , The second mounting plate 321 serves to receive the first and the second control element 322 . 323 , The second mounting plate 321 connects the first and the second control element 322 . 323 mechanically rigid with each other.

A delay module 330 includes a third mounting plate 331 , The third mounting plate 331 takes a delay element 332 on. The delay element 332 is exemplified as a key switch. The delay element 332 serves to unlock the door lock within the first delay period 200 to delay further. The delay module 330 includes a termination element 333 , which is designed as a button. The terminator 333 is on the third mounting plate 331 attached. The terminator 333 is by means of the third mounting plate 331 mechanically rigid with the delay element 332 connected. By pressing the termination element 333 may delay the unlocking of the door lock 200 to be ended.

The central escape route control 300 includes a unilaterally open escape route control housing 340 in which the emergency module 310 , the deactivation module 320 and the delay module 330 are arranged. The deactivation module 320 and the delay module 330 are optional components of the central escape route security 300 , In the escape route control housing 340 can also, if available, the multi-door indicator 350 be arranged.

The escape route control housing 340 can the emergency module 310 , the deactivation module 320 and the delay module 330 mechanically fasten. The emergency module 310 , the deactivation module 320 and the delay module 330 are each individually on the escape route control housing 340 fastened, in particular screwed. For attachment to the escape route control housing 340 serve the first mounting plate 311 for the emergency module 310 , the second mounting plate 321 for the deactivation module 320 and / or the third mounting plate 331 for the delay module 330 , The escape route control housing 340 and the modules 310 . 320 . 330 are designed to have different sequences in which the modules 310 . 320 . 330 can be arranged side by side, are possible. So z. B. in a central escape route, not shown 300 z. B. the emergency module 310 between the deactivation module 320 and the delay module 330 be arranged. In another, not shown, exemplary central escape route control 300 can left a clearance, delay module 330 in the middle and the emergency module 310 be arranged on the right. The free space is created by the absence of the deactivation module 320 and is hidden by a plate. The escape route control housing 340 can rails for inserting the modules 310 . 320 . 330 exhibit. The escape route control housing 340 can attachment options, eg. B. perforated strips or slots, for variable attachment of the module 310 . 320 . 330 exhibit.

On the first mounting plate 311 , on the second mounting plate 321 and on the third mounting plate 331 is in each case a purely schematically illustrated display area 314 . 324 respectively. 334 intended. There are icons on the display area that indicate the function of the modules 310 . 320 . 330 explain. In addition, optical Lights to indicate states of the security system 1 in the ad areas 314 . 324 . 334 be provided.

In the embodiment of 7 includes the security system 1 also an audio and video module 510 , The audio and video module 510 is to be placed near the door 2 passing through the door lock 200 can be locked provided. Is the audio and video module 510 unlocked, so an operator in the guardroom with the user in front of the door 2 speak and the room near the door 2 members.

As in 8th shown, is the central emergency button 302 similar to the emergency button 10 built up. So includes the central emergency button 302 an emergency button electronics unit 308 , The emergency button electronics unit 308 includes a first emergency processing unit 303 , a second emergency processing unit 304 and a third emergency processing unit 305 , The first, second and third emergency processing units 303 . 304 . 305 are each designed as a microprocessor or microcontroller. The first and second emergency processing units 303 . 304 have a non-volatile memory. The third emergency processing unit 305 has nonvolatile memory and / or has access to nonvolatile memory. The central emergency button 302 is actuated by an emergency button actuator 306 is pressed. This will cause an emergency button switch 307 actuated. As a result, a first and a second signal are generated. For this purpose, a first and a second circuit (not shown) are opened. A signal on the opening of the first circuit is from the first emergency processing unit 303 detected. A signal on the opening of the second circuit is from the second emergency processing unit 304 detected.

The central emergency button 302 is with a second bus system 401 connected. As in 9 is shown, the control device 100 also with the second bus system 401 connected. In the second bus system 401 it is a different type of bus system than the first bus system 400 , For example, the second bus system 401 as a LON or LAN bus and the first bus system 400 be designed as a CAN or DCW bus.

In 9 includes the emergency button 10 the control device 100 , The emergency button 10 and the door lock 200 , in the 9 are shown correspond to the emergency button 10 and the door lock 200 of the 2 ,

In an alternative, not shown, are the control device 100 , the emergency button 10 and the door lock 200 according to the 3 educated. In this alternative, not shown, are the control device 100 , the emergency button 10 and the door lock 200 over the first bus system 400 connected to each other, wherein the control device 100 with the second bus system 401 connected is.

The control device 100 receives messages from the central escape route security 300 over the second bus system 401 , The control device 100 forwards the messages via the first bus system to other users of the first bus system 400 further. In particular, the message may contain information concerning an actuation of the central emergency button 302 , the key switch 312 , the first control element 322 , the second operating element 323 , the delay element 332 and / or the termination element 333 or a control command resulting from an operation of one of the aforementioned elements 302 . 312 . 322 . 323 . 332 . 333 be. Is the control device 100 in the emergency button 10 integrated, so eliminates forwarding to those emergency button 10 in which the control device 100 is integrated. For example, conducts according to the 9 the control device 100 the message to the door lock 200 further. Are control device 100 and the emergency button 10 over the first bus system 400 connected, so the control device conducts 100 the message to the emergency button 10 and / or the door lock 200 further. The control device 100 the message matches the format of the first bus system 400 at. Security-relevant messages are otherwise left untouched.

Is the central emergency button 302 have been actuated, then cause the first emergency processing unit 303 and redundantly, the second emergency processing unit 304 a release of the door lock 200 , Here, the central emergency button communicates 302 via the control device 100 with the door lock control 201 , in particular the first and the second processing means 202 . 203 , The first and the second processing means 202 . 203 then control the locking mechanism 205 at. Previously, the first and the second processing unit 103 . 104 forwarded the message. Here, the control device 100 the content of the message is left untouched.

The central emergency button 302 has an input for receiving a fire alarm signal. If the fire alarm signal is received, then the central emergency button causes 302 a release of the door lock 200 , For this purpose, the first and the second emergency processing unit communicate 303 . 304 via the control device 100 namely, the first and second processing units 103 . 104 , with the door lock control 201 , Like previously described.

A signal via an actuation of the key switch 312 of the first module 310 is from the emergency button electronics unit 308 , in particular the third emergency processing unit 305 , received. The emergency button electronics unit 308 sends a message regarding the operation of the key switch 312 over the second bus system 401 to the control device 100 , The control device 100 directs the message to the first bus system 400 further.

The emergency button actuator 306 is non-latching. The emergency button actuator 306 is identical to the actuator 11 the emergency button 10 trained (s. 13 to 15 ). This becomes the emergency operating element 306 on actuation from an initial position to an actuated position (analog 11 ). Immediately after the operation, the emergency operating member moves 306 back to the starting position by the force of a spring formed as a return means back (analog 11 ). The operation of the emergency operating element 306 is translational. Is due to the operation of the central emergency button 302 the door lock 200 transferred to the unlocked state, so prevents the electronic device 207 by the electronic statement that without the presence of a cancellation condition the door lock 200 can be converted back into the locked state. The cancellation condition after pressing the central emergency button 302 can by pressing the key switch 312 be achieved. In particular, an actuation of the key switch 312 sufficient to achieve the cancellation condition.

Includes the security system 1 the central escape route control 300 , as a result of pressing the emergency button 10 the cancellation condition may be achievable in another manner: have the door condition monitors 204 . 206 that detects the door 2 after pressing the emergency button 10 has remained permanently closed, the cancellation condition may be canceled by elapse of a predetermined time interval and cancellation treatment at the central escape route control 300 be reached after the predetermined time interval. The suspension action may be authentication at the central escape route control 300 , in particular an actuation of the key switch 312 , correspond. By the Aufhebehandlung, z. B. the operation of the key switch 312 , a Aufhebbesignal is generated. The cancel signal is sent via the control device 100 to the door lock control 201 forwarded. An authentication at the key switch 500 and a suspension action at the emergency button 10 are not necessary in this case.

The door lock control 201 checks whether reaching the cancellation condition by elapse of the predetermined time interval and the authentication at the central escape route control 300 when the door is closed 2 is allowed before the door lock control 201 the locking mechanism 205 activates for locking. This allows an operator to commission the security system 1 deposit whether a lapse of the predetermined time interval without opening the door 2 and the additional operation of the key switch 312 as a cancellation condition is allowed and thus to a re-locking of the door 2 leads. A check of admissibility, a lapse of the predetermined time interval, an operation of the key switch 312 after the predetermined time interval and the fact that neither of the first door condition monitoring device during the predetermined time interval 204 still from the second door condition monitoring device 206 a signal has been sent about opening the door is sufficient to achieve the cancellation condition.

This is a variant for achieving a cancellation condition, which belongs to the 1 and 2 has been described. This variant can z. B. be selected by the operator, if only the lapse of the predetermined time interval with the door closed 2 the operator does not seem confident enough. The operator can select and save this variant by means of the parameterization program.

In particular, if the operator has selected this option, the elapse of the predetermined time interval will be with the door closed 2 will be at the central escape route control 300 visually displayed. In particular, the bulbs are used 313 indicating that the predetermined time interval has elapsed without a signal on the opening of the door 2 was received within the predetermined time interval. The visual display tells the operator that through authentication at the central escape route control 300 the door 2 can be locked.

Have the door condition monitoring devices 204 . 206 no signal is sent about opening the door during the presence of a fire alarm signal, so after completion of the fire alarm signal lock the door lock 200 also by the same operation of the key switch 312 be achieved. Also the possibility by the operation of the key switch 312 after completion of the fire alarm signal locking the door lock 200 to reach, is optically through the bulbs 313 displayed.

The control device 100 conducts messages from the emergency button 10 and / or the door lock 200 over the second bus system 401 further. In this case, the control device fits 100 the message the format of the second bus system 401 at. The control device 100 sends information about the state of the emergency button 10 and / or the door lock 200 over the second bus system 401 ,

For example, the central escape route control 300 and the multi-door indicator 350 with a third bus system 403 be connected (s. 10 ). Preferably, the central emergency button 302 , particularly preferably the emergency button electronics unit 308 , with the third bus system 403 be connected (s. 8th ). The multi-door indicator 350 can lock and unlock the door lock 200 visually display. In addition, with the help of the multi-door indicator 350 one of the door locks 200 . 200' . 1200' . 2200' of the security system 1 (S. 10 ) are unlocked. The unlocking with the help of the multi-door indicator 350 is not one-error-safe. In the third bus system 403 It may be the same type of bus system as the first bus system 400 act, z. B. to a CAN or DCW bus.

The control device 100 conducts over the second bus system 401 to the central escape route control 300 continue if the emergency button 10 a first delay period waits before the emergency button 10 the door lock control 201 causes the locking mechanism 205 to trigger for unlocking.

The first delay time period is at the central escape route control 300 visually displayed. This is the central emergency button 302 according to the emergency button 10 built, as befits the 13 . 16 . 17 is described. For optical representation of the first delay time period, the lighting means 313 of the central emergency button 302 from the emergency button electronics unit 308 driven. As the first delay period progresses, fewer bulbs illuminate 313 in the same color. For example, fewer bulbs 313 in a first color and increasingly many bulbs 313 shine in a second color. The bulbs 41 the emergency button 10 are driven identically to optically represent the first delay time period.

During the first delay period, z. B. 8 s, the operator can the delay element 332 actuate. For this purpose, the operator turns a key in the key switch, as a delay element 332 serves. An actuation of the delay element 332 is from the emergency button electronics unit 308 , in particular the third emergency processing unit 305 , detected. A corresponding message is sent via the second bus system 401 and possibly the first bus system 400 Posted. The emergency button 10 receives the message. As a result of the actuation of the delay element 332 the emergency button stops 10 the first delay period and starts with a second delay period. The second delay period, e.g. B. 180 s, is longer than the first delay period. At the end of the second delay period, the emergency button causes 10 the unlocking of the door lock 200 , The second delay time is in the emergency button 10 determined by means of the same timer used to determine the first delay time period. During the second delay period, the key of the delay element must be 322 do not stay turned. Rather, a single turn of the key is sufficient to start the second delay period.

The second delay time period is at the central escape route control 300 and at the emergency button 10 visually displayed. The visual representation at the central escape route control 300 is similar to the visual display on the emergency button 10 , As the second delay period progresses, fewer bulbs illuminate 41 . 313 in the same color. For example, fewer bulbs 41 . 313 in a first color and increasingly many bulbs 41 . 313 shine in a second color. To illustrate that the second delay period lasts long, a time lapse pattern may be repetitively added within the second delay time period, e.g. B. a circumferential color point or a circumferential color window (see description to 16 . 17 ) are visually displayed.

During the first or the second delay period, the termination element 333 actuated, then detects the emergency electronics unit 308 , in particular the third emergency processing unit 305 , the actuation of the termination element 333 and sends a message regarding the actuation of the termination element 333 over the second bus system 401 , This causes the emergency electronics unit 308 the emergency button 10 not to delay the release further, but immediately unlocking the Türverrieglung 200 to induce. The terminator 333 is formed non-latching. One-time operation of the termination element 333 is sufficient to stop the delay of starting the unlocking.

The emergency button 10 can by an operation of the first operating element 322 be converted into the deactivated state. For this purpose, the operator turns a key in the key switch, the first control element 322 serves. An operation of the first operating element 322 is from the emergency button electronics unit 308 detected. Upon actuation of the first operating element 322 A first and a second deactivation circuit are opened or closed. The opening or closing of the first deactivation circuit is initiated by the first emergency processing unit 303 detected. The opening or closing of the second deactivation circuit is performed by the second emergency processing unit 304 detected. The first and second emergency processing units 303 . 304 communicate via the second bus system 401 with the emergency button 10 , Located between the emergency button 10 and the central emergency button 302 the first bus system 400 so the control device conducts 100 the message of the first and second emergency processing units 303 . 304 further. When forwarding, the format is changed, but the content remains unchanged.

In the deactivated state of the emergency button 10 is the operation of the emergency button 10 ineffective on the door lock 200 ,

The activated state and the deactivated state are in the emergency button 10 deposited electronically. Thereby, that the activated state and the deactivated state in the emergency button 10 stored, the key must be in the first control 322 not stay turned during the disabled state. Rather, a single turn of the key is sufficient to the emergency button 10 to disable.

The deactivation remains until the second control element 323 is pressed. The actuation of the second operating element 323 is from the emergency button electronics unit 308 , in particular the third emergency processing unit 305 , detectable. The emergency electronics unit 308 sends a message regarding the operation of the second control 323 over the second bus system 401 and optionally via the first bus system 400 to the emergency button 10 , whereupon the emergency button 10 is transferred to the activated state. The second control 323 is not restraining. By having the enabled and disabled states in the emergency button 10 is stored, reaches a single actuation of the second control element 323 to the emergency button 10 to transfer to the activated state.

The central escape route control 300 includes a bus 341 over which the emergency electronics unit 308 , in particular the third emergency processing unit 305 , Signals of the second control element 323 , the delay element 332 and the termination element 333 can capture. The emergency electronics unit 308 serves as the intelligence of the entire central escape route control 300 .. Only the emergency electronics unit 308 includes microprocessors. The deactivation module 320 and / or the delay module 322 can be configured processor-free. The bus 341 can be configured as an I ² C bus.

In order to deposit the activated and the deactivated state, in the first emergency button processing unit 20 and redundant in the second emergency button processing unit 21 , in particular in the non-volatile memories, a second variable may be stored. The second variable can be binary. Is the emergency button 10 in the deactivated state, the second variable is set to a deactivation value. Is the emergency button 10 in the activated state, the second variable is set to an activation value. As a result of an actuation of the first operating element 322 the second variable is set to the deactivation value. As a result of an actuation of the second operating element 323 the second variable is set to the activation value. Before the emergency button 10 the unlocking of the door lock 200 causes the emergency button checks 10 the value of the second variable. The emergency button detects that the emergency button 10 is deactivated, the communication of the emergency button is omitted 10 with the door lock control 201 to unlock 200 to induce.

The first emergency processing unit 303 and the second emergency processing unit 304 monitor each other for errors. If an error is detected, a message is sent via the second bus system 401 Posted. The emergency button 10 receives the message and then transfers itself to the activated state if the emergency button 10 is in the disabled state. For this the emergency button changes 10 the value of the second variable to the activation value.

The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly, in particular at regular intervals, send a sign of life signal via the second bus system 401 , The emergency button 10 receives the life sign signals. If a sign of life signal remains off once or several times, then the emergency button is transferred 10 in the activated state, if the emergency button 10 is in the disabled state.

Receives the security system 1 a fire alarm signal, so transfers the emergency button 10 in the activated state, if the emergency button 10 is in the disabled state.

The operation of the emergency button 10 in the deactivated state is at the central escape route control 300 , at the watch device 301 and / or at the multi-door indicator 350 displayed. If there really is a danger, then the emergency button 10 by the operator in the activated state, by the operator the second operating element 323 operated, or it can be controlled by the operator directly the door lock for unlocking. For this purpose, the operator can use the central emergency button 302 actuate. Whether a hazard exists, the operator z. B. via the audio and video module 510 perceive. As a result, increased security is achieved.

The deactivation can z. B. be made at night in a department store. Furthermore, it is conceivable to deactivate the emergency button 10 in a building where people with an impaired state of mind live. So can emergency button 10 can also be used on doors accessible to people with impaired mental state, eg On a psychiatry or dementia ward.

Will be in the disabled state of the emergency button 10 pressed and then the emergency button 10 converted into the activated state, which is carried out in the deactivated state pressing the emergency button 10 even after the transfer to the activated state not to unlock the door lock 200 , The operation of the emergency button in the deactivated state 10 remains ineffective. This is due, first, to the fact that the actuator 11 and the switch 63 are executed non-latching. The other was the operation of the emergency button 10 in the deactivated state not in the emergency button 10 saved. The door lock control 201 receives no message concerning the operation of the emergency button 10 in the deactivated state. The electronic detection was therefore not transferred to the operating state. This ensures that not immediately with the activation of the emergency button 10 the door lock 100 is unlocked, z. B. because long before the emergency button 10 was pressed. As a result, an increased building security is achieved.

In order to achieve a particularly high level of security, it can be provided that during the first and / or the second delay time period the audio and video module 510 is turned on. This switches the emergency button 10 the audio and video module 510 free at the beginning of the first and / or second delay period. Also will be the audio and video module 510 from the emergency button 10 unlocked when in the disabled state the emergency button 10 is pressed. The emergency button communicates with this 10 over the second bus system 401 and optionally via the first bus system 400 with the audio and video module 510 ,

It may be that the emergency button 10 only disables when the audio and video module 510 is unlockable. Is the audio and video module 510 Part of the security system according to the invention 1 , so deactivation can be omitted if the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module 510 is disturbed. This does not apply if the security system 1 no audio and video module 510 but one from the security system 1 separate monitoring system is provided in the building.

It may be that the emergency button 10 delays the cause of the unlocking only by the first and / or second delay time period when the audio and video module 510 is unlockable. Is the audio and video module 510 Part of the security system according to the invention 1 , so there may be a delay when the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module is disturbed. This does not apply if the security system 1 no audio and video module 510 but one from the security system 1 separate monitoring system is provided in the building.

In 10 is another embodiment of a security system according to the invention 1 shown. As in the embodiment of 7 to 9 includes the security system 1 a central escape route control 300 according to the 7 and 8th is constructed. To the respective emergency buttons 10 . 10' . 1010 . 1010' . 2010 associated key switch 500 . 500 ' . 1500 . 1500' . 2500 are not shown for the sake of clarity. The central escape route control 300 is with the second bus system 401 connected. With the second bus system 401 are a first subsystem 5 and a second subsystem 6 connected. The two subsystem 5 . 6 each include a first bus system 400 . 400' , With the respective first bus system 400 . 400' are emergency buttons 10 . 1010 respectively. 10' . 1010' . 2010 ' and door locks 200 respectively. 200' . 1200' . 2200' connected. At the first bus systems 400 . 400' it is the same bus system type, z. B. a CAN or a DCW bus. In the second bus system 401 it is another type of bus system, z. B. a LON or LAN bus.

The security system 1 includes the multi-door indicator 350 , The multi-door indicator 350 can z. B. visually indicate which door lock 200 respectively. 200' . 1200' . 2200' in the unlocked state and which door lock is in the unlocked state. With the help of the multi-door indicator 350 an operator can perform a non-safety-relevant locking and unlocking of individual door locks 200 respectively. 200' . 1200' . 2200' of the security system 1 make.

Every subsystem 5 . 6 includes only one control device 100 . 100' , In each case the control device 100 . 100' of the respective subsystem 5 . 6 is with the second bus system 401 connected. The control device 100 of the first subsystem 5 is with the emergency buttons 10 . 1010 and the door lock 200 of the first subsystem 5 over the first bus system 400 connected. The control device 100' of the second subsystem 6 is on the other hand in an emergency button 10' of the second subsystem 6 integrated and with the other emergency buttons 1010' . 2010 ' and the door locks 200' . 1200' . 2200' the further first bus system 400' connected.

In the subsystem 5 are a first emergency button 10 and a second emergency button 1010 intended. Will be one of the emergency buttons 10 . 1010 pressed, then the pressed emergency button causes 10 . 1010 one unlocking the door lock 200 ,

In the subsystem 6 are a first emergency button 10' , a second emergency button 1010' and a third emergency button 2010 ' intended. The emergency buttons 10' . 1010' . 2010 ' selectively trigger a release of the door locks 200' . 1200' . 2200' of the second subsystem 6 , For example, when pressing the first emergency button 10' only one unlocking of the first door lock 200' causes. Accordingly, upon actuation of the second emergency button 1010' only one unlocking of the second door lock 1200' and by pressing the third emergency button 2010 ' only one unlocking of the third door lock 2200' causes.

Various deviations are conceivable. Thus, a security system according to the invention 1 z. Without the first or the second subsystem 5 . 6 be designed. As the only or additional subsystem z. B. one of the in the 1 to 6 described safety systems according to the invention 1 be provided. The training and functions of emergency buttons 10 . 10' . 1010 . 1010' . 2010 ' and the door locks 200 . 200' . 1200' . 2200' are formed according to the preceding embodiments, as far as not described in addition or deviating.

In each of the door locks 200 . 200' . 1200' . 2200' of the security system 1 is stored, whether by pressing a central emergency button 302 a release of the respective door lock 200 . 200' 1200' . 2200' he follows. So z. B. the door locks 200 . 200' . 2200' a release as a result of pressing the central emergency button 302 allow the door lock 1200' not. Will the central emergency button 302 operated, so control the door lock controls 201 the door locks 200 . 200' . 2200' the respective locking mechanism 205 for unlocking. On the other hand, such a control is omitted in the door lock 1200' ,

Will the central emergency button 302 operated, get the control devices 100 . 100' a corresponding message from the central emergency button 302 over the second bus system 401 and forward the message to all door locks 200 respectively. 200' . 1200' . 2200' of the respective first bus system 400 . 400' further. The door locks 200 . 200' . 1200' . 2200' decide on the basis of the deposit, the admission of a release as a result of pressing the central emergency button 302 includes whether the respective door lock control 201 the door locks 200 . 200' . 1200' . 2200' the respective locking mechanism 205 to unlock or not.

The deposit, whether the door lock 200 . 200' 1200' . 2200' as a result of pressing the central emergency button 302 is unlocked, takes place at commissioning of the safety system 1 by the operator. The deposit is made by the parameterization program.

In each of the emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' is deposited, whether on actuation of the first operating element 322 a transfer to the deactivated state for the respective emergency button 10 . 1010 . 10' , 1010' . 2010 ' is allowed or not. This results in a selective deactivation by the operation of the single first control element 322 of the security system 1 , So z. As the emergency button 10 . 10' . 2010 ' in consequence of an actuation of the first operating element 322 be converted into the disabled state, the emergency button 1010 . 1010' not.

Will be the first control 322 operated, get the control devices 100 . 100' a corresponding message via the second bus system 401 and forward the message to all emergency buttons 10 . 1010 . 1010' . 2010 ' of the respective first bus system 400 . 400' that is not the control device 100 include, continue. The emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' of the security system 1 decide on the basis of the deposit on the authorization for deactivation, whether the respective emergency button 10 . 1010 . 10' . 1010' . 2010 ' himself as a result of the operation of the first control element 322 converted to the disabled state or not.

When depositing, whether a deactivation of the emergency button 10 . 1010 . 10' . 1010' . 2010 ' It should be a third variable. The third variable may be binary. The third variable is in the nonvolatile storage of the respective first and second emergency button processing units 20 . 21 every emergency button 10 . 1010 . 10' . 1010' . 2010 ' saved. Is the deactivation for the respective emergency button 10 . 1010 . 10' . 1010' . 2010 ' allowed, the third variable takes a first value. Is the deactivation for the respective emergency button 10 . 1010 . 10' . 1010' . 2010 ' prohibited, the third variable takes a second value. The emergency button 10 . 1010 . 10' . 1010' . 2010 ' checks the value of the third variable before the emergency button 10 . 1010 . 10' . 1010' . 2010 ' it deactivates and deactivates only if the third variable has the first value.

The deposit, whether the emergency button 10 . 1010 . 10' . 1010' . 2010 ' should be deactivated, takes place at startup of the security system 1 by the operator. This is stored with the aid of a parameterization program.

In each of the emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' is deposited, whether on actuation of the delay element 332 the respective emergency button 10 . 1010 . 10' , 1010' . 2010 ' the unlocking of the emergency button 10 . 1010 . 10' , 1010' . 2010 ' associated door locks 200 . 200' . 1200' . 2200' delayed by a second delay period or not. The second delay time is for the respective emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' adjustable for different lengths and in the security system 1 especially in the emergency rooms 10 . 1010 . 10' . 1010' . 2010 ' , deposited. Alternatively, the admission of the delay by the second delay time period and, if necessary, the length of the second delay time period can only be used for groups of emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' that a door lock 200 . 200' . 1200' . 2200' or a door 2 . 2002 . 3002 are assigned to be individually adjustable. The setting and the deposit are made by the operator using the parameterization program.

So z. As the emergency button 10 . 2010 ' in consequence of an actuation of the delay element 332 the unlocking of the door locks 200 respectively. 2200' delay further, the emergency button 1010 . 10' . 1010' not. The length of the second delay time for the emergency button 10 is different from the length of the second delay period for the emergency button 2010 ' selected. Will the emergency button 10 pressed and is within the first delay time period for the emergency button 10 is deposited, the delay element 332 pressed, so delayed the emergency button 10 from the actuation of the delay element 332 the unlocking by the second delay period in the emergency button 10 is deposited. Will the emergency button 2010 ' pressed and is within the first delay time period for the emergency button 2010 ' is deposited, the delay element 332 pressed, so delayed the emergency button 2010 ' from the actuation of the delay element 332 the release by the second delay time in the emergency button 2010 ' is deposited and distinguished from the second delay time for the emergency button 10 different. Will the emergency button 1010 pressed, so delayed the emergency button 1010 the release by the first delay time for the emergency button 1010 is deposited. Will during the first delay period of the emergency button 1010 , the delay element 332 pressed, the unlocking is not delayed by a second delay time, as this delay for the emergency button 1010 is not allowed, but the emergency button 1010 becomes after the first delay time immediately unlocking the door lock 200 cause. The emergency buttons 10' . 1010' delay the unlocking of the associated door lock 200' respectively. 1200' not at all. At the emergency rooms 10' . 1010' neither a first delay period nor a second delay period is allowed. Instead of a non-admission of a delay by the first and / or the second delay time period, a time duration of 0 s can also be stored. An actuation of the termination element 333 terminates any delay in unlocking.

Will the delay element 332 operated, get the control devices 100 . 100' a corresponding message via the second bus system 401 and forward the message to the emergency buttons 10 . 1010 . 1010' . 2010 ' of the respective first bus system 400 . 400' that is not the control device 100 include, continue. The emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' of the security system 1 decide on the basis of the deposit, how to proceed.

The deposit, whether the emergency button 10 . 1010 . 10' . 1010' . 2010 ' the delay allows for the second delay time period and, if so, the deposit of the length of the second delay time period, takes place at startup of the safety system 1 , The deposits are determined by the operator using the parameterization program. The first and / or the second delay time period can only be selected up to a maximum, permanently predetermined time duration.

Likewise, with the aid of the parameterization program, the operator can selectively store for which emergency button 10 . 1010 . 1010' . 2010 ' which cancellation condition is allowed. The cancellation condition for the on-site termination is always allowed. For every emergency button 10 . 1010 . 1010' . 2010 ' but may selectively achieve the cancellation condition by elapse of the predetermined time interval or the achievement of the cancellation condition by elapse of the predetermined time interval and subsequent operation of the identification device 312 when the door is closed 2 admitted or not.

The deposit, whether the emergency button 10 upon actuation of the first operating element 322 can be deactivated, whether the emergency button 10 upon actuation of the delay element 332 the To delay unlocking by a second delay period, the length of the first and the second delay period, the deposit of the cancellation condition and / or the deposit, whether the door lock 200 upon actuation of the central emergency button 302 can also be unlocked for the security system 1 according to the embodiment of the 7 to 9 be made.

Notwithstanding and not shown by the 7 to 10 can also use several central escape route controls 300 . 300' with the second bus system 401 be connected. For example, in a psychiatry a central escape route control 300 be provided for arrangement in a guard room and another central escape route control 300' be provided for arrangement in a nurse's room.

In the respective door locks 200 . 200' . 1200' . 2200' can be stored in each case with the help of the parameterization program, as a result of an operation which of the central emergency buttons 302 . 302' a release should take place. For this purpose, a list is stored in the door locks. In the respective emergency buttons 10 . 10' . 1010 . 1010' . 2010 ' can be stored in each case with the help of the parameterization program, as a result of an operation which of the first control elements 322 . 322' a deactivation is allowed. Deviating from the third variable is a list in the emergency buttons 10 . 10' . 1010 . 1010' . 2010 ' deposited.

The first to fourth embodiments of the security system according to the invention 1 does not have a second bus system 401 , no central escape route control 300 , no watch device 301 and no audio and video module 510 on. However, there are embodiments of the safety system according to the invention 1 conceivable in which the first to fourth embodiments additionally the missing components 401 . 301 . 300 and 510 at least partially. Is the security system 1 Designed for multiple doors, each door can have an audio and video module 510 be assigned. The emergency buttons 1010 . 2010 . 3010 that is not the control device 100 include, and the door locks 200 . 1200 . 2200 . 3200 are not connected to the second bus system 401 connected.

In the 1 to 10 are the door locks 200 . 200' . 1200 . 1200' . 2200 . 2200' . 3200 Part of the security system according to the invention 1 , It is conceivable, however, that in each case only the door lock controls 201 Part of the security system according to the invention 1 are. In this case, the door lock controls 201 each with the locking mechanism 205 and possibly the door condition monitoring devices 204 . 206 connectable. Unlocking the door lock 200 does not find in the security system in this case 1 instead, however, is part of the security system 1 in that the door lock control 201 the locking mechanism 205 controls, ie the door lock control 201 Switches the electric current for the locking mechanism 205 on or off. In this case, instead of the terms "lock or unlock the door lock" each "activation of the locking mechanism for locking or unlocking" are used.

In the 11 to 13 is an emergency button 10 shown. The in 11 emergency button shown 10 is as emergency button 10 . 10' . 1010 . 1010' . 2010 . 3010 in one of the security systems according to the invention 1 of the 1 to 10 can be used or used.

The emergency button 10 includes the actuator 11 , The actuator 11 can be from the starting position 11.I that in the 11 is shown in the operating position 11.II move in 11 is indicated. In 12 is the actuator 11 also in the starting position 11.I ,

In the operating position 11.II becomes the switch 63 actuated. The desk 63 also changes from a first 63.I in a second position 63.II , as in 12 indicated.

After actuation, the actuator returns 11 immediately and without manual intervention in the starting position 11.I back. For this purpose, a return means designed as a spring is provided 12 in the emergency button 10 intended. Also the switch 63 returns to the first position immediately after actuation without manual intervention 63.I back.

The emergency button 10 includes at least a first board 60 , This makes it possible, compact and with a secure operation of the emergency button 10 embody.

The emergency button 10 points from a dome 32 a front surface 19 of the actuating element 11 in the installation direction a mounting height AH of less than 48 mm, preferably less than 45 mm, more preferably less than 43 mm.

The desk 63 is on the first board 60 attached. The first and the second circuit will be on the first board 60 by the operation of the switch 63 interrupted.

The emergency button 10 also includes a second board 61 , On the second board 61 are the first, second and third emergency button processing units 20 . 21 . 22 arranged. The arrangement of the first, the second and the third Nottasterverarbeitungseinheiten 20 . 21 . 22 regardless of whether the first, the second and the third emergency button processing unit 20 . 21 . 22 as a processing unit 103 . 104 . 105 the control device 100 serve.

The opening of the first and second circuits is by the first and second emergency button processing unit, respectively 20 . 21 wirelessly detectable. These are the first and the second board 60 . 61 over plug 68 connected with each other.

The first and the second boards 60 . 61 are arranged at a fixed distance from each other. These are bolts 69 provided by screws 70 the first and the second board 60 . 61 attached to each other at a fixed distance from each other (s. 13 ). The first and the second boards 60 . 61 are arranged parallel to each other.

The emergency button 10 includes a mounting plate 62 , The mounting plate 62 is also at a fixed distance to the first and second boards 60 . 61 arranged. These are bolts 71 provided by screws 72 the mounting plate 62 with the first board 61 connect.

The mounting plate 62 serves for attachment to a flush-mounted box. The flush-mounted box can have a diameter of 60 mm and a depth of 41 mm. Extending from the mounting plate 62 in the installation direction extending part of the emergency button 10 is called a built-in part 73 designated. The built-in part 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm, more preferably less than 29 mm. This provides enough space for cables in the flush-mounted box. The distance MP from a bottom of the mounting plate 62 up to a top of the second board 62 is less than 22 mm, preferably less than 20 mm, more preferably less than 17 mm. The mounting plate 62 can also serve for attachment to a cover element of a surface-mounted housing (not shown). The distances mentioned apply in particular to an emergency button, in which the Bluetooth module 64 notwithstanding the representation in the figures on an underside of the second board 61 is attached.

As described above, the repeal action is immediately at the emergency button 10 is carried out without a rotational movement of the actuating element 11 and the switch 63 executed. This makes it possible to use a switch 63 to use with a low height. So that's the switch 63 formed such that the switch 63 is rotation free. The desk 63 has a height SH of less than 20 mm, preferably less than 17 mm, more preferably less than 15 mm.

The nature of the cancellation act and the low height of the switch 63 contributes to the low installation height AH of the emergency button 10 at.

Also contributes to the low height AH emergency button 10 at that, the switch 63 Centric under the actuator 11 is arranged and the actuating element 11 eccentric in the emergency button 10 is guided.

As in the 14 and 15 shown, the actuating element 11 rod-shaped guide means 35 on. The guiding means 35 are in guide sleeves 65 guided. The guide sleeves 65 are with the mounting plate 62 connected. To achieve good guidance, one of the guide sleeves extends 65 through the first board 60 ,

The guiding means 35 are parallel to the switch 63 arranged. The guiding means 35 prevent rotational movement of the actuator 11 around an imaginary axis 701 in the direction of actuation 700 runs.

Through the in the guide sleeves 65 guided guide 35 is the actuator 11 only translationally movable.

The actuator 11 has an actuating means 36 on. As in the 12 and 15 shown, is the actuating means 36 formed in the shape of a circular cylinder. This ensures that always the actuating means 36 the switch 63 actuated. In particular, so are always at the same time a first and a second switching element 74 . 75 of the switch pressed (s. 13 ). By the first switching element 74 becomes the first circuit and the second switching element 75 the second circuit is opened.

The actuating means 36 is with a hollow interior 38 educated. In the switch 63 a light source (not shown) is arranged. The light emitted by the light source passes through the hollow interior 38 to the dome 32 the front surface 19 of the actuating element 11 directed where the light passes through the actuator 11 occurs. The dome 32 thus serves as Illuminierbereich 32 of the actuating element 11 ,

The actuator 11 can be an opaque base body 33 include. The main body 33 may be provided deviating from the representation in the figures with an opening. In the opening, an unillustrated translucent, in particular translucent insert can be arranged. The insert can be fixed in the opening, in particular pressed. This allows the actuator 11 be particularly easy to produce.

The front surface 19 is partially conical. The illuminator area 32 forms the top of the truncated cone. The illuminator area 32 protrudes against the direction of actuation 700 from a lid 14 the emergency button 10 out. This is the light that is the Illuminierbereich 32 leaves, sideways from the emergency button 10 clearly visible.

The return means 12 has a cavity 37 on. In the cavity 37 protrude the actuating means 36 of the actuating element 11 and the switch 36 with the first and the second switching element 74 . 75 , This results in a space-saving arrangement.

The Bluetooth module 64 is between the first and the second board 60 . 61 arranged. The Bluetooth module 64 is used for parameterization. Alternatively and not shown and space saving is the Bluetooth module 64 at one of the actuator 11 opposite side of the second board 61 attached. This allows the distance of the first and the second board 60 . 61 be further reduced.

A sabotage switch 66 is on the first board 60 arranged. Due to the low construction height is an actuating extension 67 the sabotage switch 66 through the mounting plate 62 passed. The actuating extension 67 lies directly on the lid 14 the emergency button 10 at.

Is the control device 100 in the emergency button 10 integrated, so despite the low height AH the emergency button 10 include the functions described above and thus be designed intelligently. The functions described above are implemented by means of a program code which is present in at least one of the processing units 103 . 104 . 105 deposited, executed.

The emergency button 10 has a covering means 13 on. The covering agent 13 is transparent and covers the front surface 19 of the actuating element 11 from. This prevents the covering 13 the immediate contact of the actuator 11 by a user. The covering agent 13 serves as a mental obstacle for the user.

The covering agent 13 remains when pressing the emergency button 10 destructively. The covering agent 13 moves when the emergency button is pressed 10 from a starting position 13.I in an operating position 13.II , Through the cover 13 becomes the actuator 11 only indirectly via the cover 13 operated by the user.

The covering agent 13 is indispensable in the emergency button 10 arranged. This ensures that a user the covering 13 can not abusively remove.

The covering agent 13 is fixed to the actuator 11 connected. For this purpose, the covering means 13 projections 27 on that in 13 are shown. As in the 13 . 14 and 15 shown, the actuating element 11 holes 28 on, through which the extensions 27 guided and cohesively with the actuator 11 are connected.

The actuator 11 has a flange-like section 31 on, on which the covering means 13 is attached. The flange-like section 31 shows the holes 28 on.

The flange-like section 31 serves as a stop of the actuator 11 in the direction of actuation 700 , The actuator 11 reaches the operating position 11.II if the flange-like section 31 on the mounting plate 62 or on the guide sleeves 65 is applied.

The flange-like section 31 serves as a stop of the actuator 11 against the actuation direction 700 , The actuator 11 reaches the starting position 11.I if the flange-like section 31 on a light guide 40 is applied. The light guide 40 holds the actuator 11 against the force of the return means 12 , For this purpose, the light guide 40 a contact surface 51 on.

The light guide 40 is on the mounting plate 62 attached. This leaves the actuator 11 against the force of the return means 12 kept even when the lid 14 Will get removed. The light guide 40 has a flange 52 on, with which the light guide 40 on the mounting plate 62 is attached (s. 17 ). The light guide 40 is through the same screws 72 on the mounting plate 62 fastened by the mounting plate 62 on the first board 60 is attached.

Alternatively and not shown, the covering means 13 be formed as an elastic film, which is the actuating element 11 spans.

Due to the fixed connection correspond to the distance of the operating position 11.II and the starting position 11.I and the distance of the operating position 13.II and the starting position 13.I each other. Immediately after the end of the operation and without manual intervention is the covering 13 in the starting position 13.I moved back. This purpose is the return means 12 , The return means 12 transfers the cover 13 indirectly via the actuator 11 in the starting position 13.I ,

The covering agent 13 and the actuator 11 each have a circular cross-section. The lid 14 has a circular recess 15 on. The covering agent 13 protrudes against the direction of actuation 700 through the recess 15 , Also protrudes the actuator 11 through the recess 15 ,

The recess 15 , the actuator 11 and the covering means 13 have a common imaginary axis 701 on. The recess 15 , the actuator 11 and the covering means 13 are arranged concentrically.

The covering agent 13 has an actuating surface 17 spaced apart from the front surface 19 of the actuating element 11 is. Also, the cover means 13 a side surface 16 spaced apart from the side surface 18 of the actuating element 11 is trained.

By the spacing of the front surface 19 and the actuating surface 17 can the transparent cover 13 far from the lid 14 protrude while the partially opaque actuator 11 only to a small extent from the lid 14 protrudes. This leaves the light guide 40 , which essentially plan with the lid 14 closes, even for diagonally in front of the emergency button 10 standing users clearly visible. The light guide deviates a maximum of ± 3 mm, preferably a maximum of ± 2 mm, more preferably ± 1 mm from a flat finish with the lid 14 from.

Due to the fact that the covering means 13 far from the lid 14 stands out, is the emergency button 10 operable for the user with the flat hand. This is the covering 13 in the operating position 13.II plan with the lid 14 or the covering agent 13 is in the operating position 13.II against the actuation direction 700 from the lid 14 out. In other words, the distance ABS corresponds to the starting position 13.I and the operating position 13.II at most the distance DF of a survey 30 the actuating surface 17 to the lid 14 , Likewise, the amount of the distance AB corresponds to the operating position 11.II and the starting position 11.I at most the distance DF. In 11 The distance ABS and the amount of the distance AB correspond to the distance DF.

The emergency button 10 includes bulbs 41 , The bulbs 41 serve the unlocked and locked state of the door lock 200 display. For several emergency buttons 10 . 1010 . 2010 . 3010 show the bulbs 41 the unlocked and locked state of the associated door latch or door locks 200 . 1200 . 2200 . 3200 at. The bulbs 41 are concentric around the actuator 11 arranged. For example, the unlocked state is indicated by the green light and the locked state by the red light. In particular, all bulbs emit 41 the same light to indicate the locked and unlocked state, at least if there is no danger.

The bulbs 41 are controllable in at least two groups. Due to the different control z. Example, possible by the user other states of the security system 1 are displayed. Due to the additional display options, the user and / or the operator in a compact and simple way without additional display means a variety of states can be displayed. This will increase the security of the security system 1 elevated.

In 13 are of the exemplarily existing eight individual bulbs 41 six individual light sources shown, of which three bulbs with the reference numerals 41a . 41b . 41c are provided. The individual bulbs are below with 41a . 41b . 41c etc. referred to.

Each of the individually controllable groups of bulbs 41 can only use a single bulb 41a . 41b . 41c , etc. include. In the embodiment of 11 to 17 is every bulb 41a . 41b . 41c , etc. individually controllable. Every bulb 41a . 41b . 41c , etc. is each formed as an RGB LED. The bulbs 41a . 41b . 41c , etc. are so controllable that every bulb 41a . 41b . 41c , etc. can emit at least four different, preferably at least five different colors. This may be z. B. to red, blue, yellow, green and pink light act.

The bulbs 41 are from the third emergency button processing unit 22 driven. These are the emergency button processing unit 22 and the bulbs 41 connected to a ring bus (not shown).

The bulbs 41 are on the first board 60 arranged. Also is the audible alarm 23 on the first board 60 arranged. The acoustic alarm 23 is from the third emergency button processing unit 22 driven.

Are several door locks 200 . 1200 the emergency button 10 assigned, such. In 4 represented, at least two options are conceivable. For one, the emergency button 10 the unlocked state only then show when all the emergency button 10 associated door locks 200 . 1200 are in the unlocked state. In this case, the unlocked state is displayed only when the entire escape door width of the two leaves 3 . 4 to escape is available. Alternatively shows the emergency button 10 the unlocked state already when one of the door locks 200 . 1200 or all door locks of a door leaf 3 . 4 are in the unlocked state. This will be the Escape possibility indicated as early as possible, if already one of the doors 3 . 4 is unlocked. The options can be selected by the operator. For this purpose, z. B. a switch (not shown) in the security system 1 be provided.

Another condition of the security system 1 , which can be controlled by the bulbs that can be controlled in groups 41 is displayed is the danger case. Here, the bulbs 41 indicate whether a fire alarm signal is present or whether an actuation signal has been generated.

The bulbs 41 can be controlled such that the progression of the time delay of the unlocking after generation of the actuating signal by the lighting means 41 is shown. This emit z. B. increasingly less bulbs 41 Light of a color, especially red light.

As another condition of the security system 1 that by the bulbs 41 can be represented, can be a mistake by the bulbs 41 being represented. The thus representable error may be a failure of the security system 1 be. For example, it may be indicated that the control device 100 , the door lock control 200 or the first or second emergency button processing unit 20 . 21 of the security system 1 not ready, defective, failed, deliberately switched off or removed. The error can be a bug with the security system 1 connected alarm system that is not ready, defective, failed, intentionally switched off or removed.

The light guide 40 includes several fiber optic areas 44 (see the 16 and 17 ). Each of the bulbs 41a . 41b . 41c , etc. is each an optical fiber area 44 assigned. The light guide 40 can mentally into the light guide areas 44 split. Between the fiber optic areas 44 are recesses 46 intended. Through the recesses 46 the light essentially remains in the light guide regions 44 ,

Each fiber optic area 44 has a forwarding section 48 on. The forwarding section 48 is in the transmission direction 702 over the bulbs 41 arranged. The transmission direction 702 takes place counter to the direction of actuation 700 , The forwarding section 48 serves for the transmission of light up to an expanding section 45 of the fiber optic area 44 , The spreading section 45 spreads in the transmission direction 702 on.

The spreading section 45 joins the forwarding section 48 in the transmission direction 702 at. The spreading section 45 serves to broaden the light beam of the emitted light. The forwarding section 48 widened less than the spreading section 45 ,

The light guide 40 is integrally formed. The light guide 40 is formed of the same material, in particular monolithic. The light guide 40 is made of translucent material.

The fiber optic areas 44 have a connection section 49 on. The connecting section 49 closes in the transmission direction 702 to the expanding section 45 at. The connecting sections 49 the fiber optic areas 44 are integrally connected to each other in such a way that the one-piece and uniform material light guide 40 results.

The connecting portions may have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the light of one of the bulbs 41a . 41b . 41c etc. almost to a light area 50a . 50b . 50c . 50d . 50e . 50f . 50g . 50h on the user facing surface 47 of the light guide 40 limited. In this case, each fiber-optic area comprises 44 a light area 50a . 50b . 50c . 50d . 50e . 50f . 50g . 50h ,

The surface 47 of the light guide 40 corresponds to a circular ring. The lighting area 50a . 50b . 50c . 50d . 50e . 50f . 50g . 50h are configured as sectors of the annulus. By emitting the light of a light source 41a . 41b . 41c , etc. becomes the associated luminous area 50a . 50b . 50c . 50d . 50e . 50f . 50g . 50h enlightened. The circular ring encloses the actuating element 11 ,

The bulbs 41 are controllable such that at least one light source 41a . 41b . 41c , etc. the light of one color and at least one other light source 41a . 41b . 41c , etc. simultaneously emit the light of a different color. For example, in this way the luminous areas 50a . 50b . 50e . 50f Show light of a color and the light areas 50c . 50d . 50g and 50h Light of another color. While the light areas 50a . 50b . 50e . 50f z. B. are continuously lit, the luminous areas 50c . 50d . 50g and 50h of bulbs 41 , which emit flashing light, be illuminated.

Are z. B. first, the luminous areas 50a . 50b . 50e . 50f illuminated by the light of a first color and the luminous areas 50c . 50d . 50g and 50h from the light of a second color; then the illuminated areas 50a . 50h . 50d . 50e illuminated by the light of the first color and the illuminated areas 50b . 50c . 50f and 50g the light of the second color; subsequently the light areas 50h . 50g . 50d . 50c illuminated by the light of the first color and the illuminated areas 50a . 50b . 50e and 50f from the light of the second color, this creates the impression of a circumferential color window.

The opposite luminous areas 50 ie the illuminated areas 50 on a through the imaginary Ache 701 leading straight lie, in 14 namely 50a and 50e respectively. 50b and 50f respectively. 50c and 50g respectively. 50d and 50h , are preferably illuminated in the same way, ie in the same color and the same blinking frequency. Thus, the pattern is also for diagonally in front of the emergency button 10 to suspect standing users, even if by the actuator 11 at least one of the opposing light areas 50 covered.

So that the light guide 40 As little as possible is hidden, is the Illuminierbereich 32 at most 10 mm, preferably at most 7 mm, particularly preferably at most 5 mm above the light guide 40 out.

The emergency button 10 may include a brightness sensor (not shown). The brightness sensor measures the ambient brightness of the emergency button 10 , If the ambient brightness decreases, so does the light intensity of the light sources 41 emitted light is reduced.

About the Bluetooth module 64 can be set via a mobile communication device parameters, eg. B. in which way the bulbs in which state of the security system 1 are to be controlled. The parameters include the flashing frequencies of the lamps 41 whether a continuous or a flashing light should be emitted, which state should be indicated by which color. The settings are after parameterization in an electronic memory of the safety system 1 , in particular the control device 100 , deposited. Also, the display of certain states for security reasons can not be selected for the operator and constantly stored in the electronic memory. The server can be states of the security system 1 choose yourself, the operator through the bulbs 41 want to show. For this purpose, colors and / or patterns through the bulbs 41 emissable, which are not assigned to any condition predetermined. For example, the operator may choose which condition the operator would like to see through blue light. In addition to the parameterization via the Bluetooth module 64 is the parameterization via the watch device 301 possible.

The change of the state of the door lock 200 is then displayed after the door lock control 201 the state change to the control device 100 has communicated. The control device 100 then controls the bulbs 41 or causes a control of the bulbs 41 ,

When commissioning the safety system 1 at fixed intervals one after the other several initialization views through the bulbs 41 generated. In one of the initialization views become possible enabled functions of the control device 100 displayed. In a second initialization view, those are added to the security system 1 lockable emergency button 10 . 1010 . 2010 . 3010 and door locks 200 . 1200 . 2200 . 3200 is displayed, with the status shown as error-free / faulty / non-existent. A third initialization view displays the status of inputs and outputs.

The central emergency button 302 is almost identical to the emergency button 10 built up. In particular, the actuating element corresponds 11 in function and structure the emergency button actuator 306 , The desk 63 corresponds to the emergency button switch 307 , Also includes the central emergency button 302 a return means 12 corresponding return means. The central emergency button 302 includes a first and a second board and / or a mounting plate corresponding to the first board 60 , the second board 61 or the mounting plate 62 constructed and interconnected. On the first board of the central emergency button 302 are the alarm device 309 and the bulbs 313 according to the alarm device 23 and the bulbs 41 arranged. On the second board of the central emergency button 302 are the first to third emergency processing units 303 . 304 . 305 arranged. The emergency button switch 307 ends on the first board of the central emergency button 302 , Upon actuation of the emergency button switch 307 A first and a second circuit are opened on the first board, which is wireless through the first and second emergency processing units 303 . 304 is detectable. For this purpose, the first and the second board are connected via connectors. The light guide of the central emergency button 302 corresponds in construction and function to the light guide 40 , The bulbs 313 are according to the bulbs 41 controllable.

It is conceivable that at the central emergency button 302 a the Abdeckmittel 13 appropriate cover 13 differently designed or missing. The bulbs 313 in particular do not serve for the optical representation of a locking state of an emergency button 10 , The bulbs 313 serve for the optical representation of the first and the second delay time period and / or for visual representation that a Aufhebehandlung is possible.

The safety system according to the invention 1 does not necessarily have all the features in the Description of at least one of 1 to 10 is mentioned, can perform. Rather, while in the security system 1 the functions described in the description to at least one of 1 to 10 are mentioned, deposited. However, to be able to perform the functions, the functions must be enabled. This is done by the control device 100 with a communication module 801 communicated. The communication module 801 is executed as a chip card. The communication module 801 comprises a memory in which at least one code is stored for activating at least one function. The communication module 801 includes a microprocessor that only serves to encrypt the code. The communication module 801 will be in a recording 77 the control device 100 inserted (s. 18a ). By the arrangement in the recording 77 becomes the communication module 801 positive and / or non-positive mechanically in the recording 77 held. At the same time, the communication module 801 through the arrangement in the receptacle 77 electrically contacted, so that the control device 100 the at least one code from the communication module 801 can read. The control device 100 and the communication module 801 are here wired (not shown).

To read the code must first the control device 100 with the help of a password access to the communication module 801 receive. The control device 100 must decrypt the at least one code before the function can be unlocked. By activating the function, the program code, with the aid of which the function is executable, is released.

To unlock the function, the program code, with the aid of which the function is executable, is released. Is the program code on the emergency button 10 deposited and are the control device 100 and the emergency button 10 through the first bus system 400 connected together, so causes the control device 100 after reading the code of the communication module 801 an activation in the emergency button 10 over the first bus system 400 , Is the program code in the door lock control 201 deposited, so causes the control device 100 after reading the code of the communication module 801 an activation in the door lock control 201 over the first bus system 801 ,

A code can unlock one function or several functions, in particular function blocks.

The parameterization program can only set parameters for the functions that were previously enabled. Only these parameters are displayed on the screen.

The function remains enabled only if the code is repeated again, in particular at regular intervals, from the communication module 801 is read out. For this purpose, predetermined, non-adjustable time intervals in the control device 100 be deposited. After expiration of the predetermined time interval locks the control device 100 the function if the associated code is not from the communication module 801 could be read. Will the function by the emergency button 10 performed with the control device 100 over the first bus system 400 is connected, then causes the control device 100 over the first bus system 400 a blocking of the function. Will the function be through the door lock control 201 performed with the control device 100 over the first bus system 400 is connected, then causes the control device 100 over the first bus system 400 a blocking of the function.

On the communication module 801 Several codes Code1, Code2 can be stored for different functions (s. 18a ).

If an additional function is to be released, it is conceivable to use the communication module 801 from the recording 77 to remove and another communication module 802 in the recording 77 to insert (s. 18b ). The communication module 801 is hereafter referred to as mother module 801 designated. The further communication module 802 is referred to below as an auxiliary module. The auxiliary module 802 is designed as a chip card. The auxiliary module 802 comprises a memory in which at least one code is stored for activating the additional function. The auxiliary module 802 includes a microprocessor that only serves to encrypt the code. The code Code3, which is on the helper module 802 is deposited by the control device 100 read out (s. 18b ). To read code Code3 must first the control device 100 with the help of a password access to the auxiliary module 802 receive. The control device 100 must decrypt the at least one code before the function can be unlocked. The code Code3 of the auxiliary module 802 is in a store 107 the control device 100 saved (s. 18c ). After that, the code of the auxiliary module 802 on the auxiliary module 802 deleted (s. 18c ). The auxiliary module 802 will be out of the recording 77 away. Thereafter, the mother module 801 in the recording 77 inserted (s. 18d ). The code of the auxiliary module 802 will be on the mother module 801 saved (s. 18d ). The code is taken from the memory of control device 100 deleted (s. 18d ). The additional function will be unlocked.

With a mother module 801 on the other hand, the code does not become in the control device 100 saved (s. 18a , d). With a mother module 801 the code is not deleted. Rather, the mother module is used 801 to a permanent arrangement in the recording 77 , The on the mother module 801 stored codes Code1, Code2, Code3 are read out repeatedly. The control device 100 decides on the basis of an identifier K801, K802 of the communication module 801 . 802 whether it is a mother module 801 or an auxiliary module 802 is. The identifier K801, K802 is in particular on the mother module 801 and the auxiliary module 802 stored electronically. The identifier K801 of the mother module 801 differs from the identifier K802 of the auxiliary module 802 ,

The insertion and removal from the recording 77 is done manually. The remaining processes are automatic.

The insertion and removal from the recording 77 may be reserved for an operator. This is the recording 77 arranged inaccessible to an unauthorized user. In particular, the sabotage switch 66 in an unauthorized attempt to get to the recording operated. The recording can be between the first board 60 and the second board 61 , z. B. on an underside of the first board 60 be arranged.

So the security system 1 becomes functional, must be a mother module 801 in a recording 77 of the security system 1 to be ordered. So the security system 1 remains functional for more than the specified time interval, the mother module must 801 in the recording 77 remain.

Every emergency button 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 includes a recording 77 , Exactly a mother module 801 is for every first bus system 400 . 400' of the security system 1 necessary and provided. Only if the mother module 801 into the recording of an emergency button 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 is inserted, so serves the emergency button 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 at the same time as a control device 100 for the corresponding first bus system 400 . 400' , At the other emergency buttons 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 of the security system 1 in which there is no mother module 801 are the same program codes as in the control device 100 deposited. Without mother module 801 however, the program codes are not unlocked, leaving the remaining emergency buttons 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 not as a control device 100 can serve. Because of that, the mother module 801 in the recording 77 is located, serves the emergency button 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 as a control device 100 ,

If the control device 100 separate from the emergency buttons 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 and the door locks 200 . 200' . 1200 . 1200' . 2200 . 2200' . 3200 be formed, so is a mother module 801 in a recording 77 the processing electronics 101 inserted. Because of that, the mother module 801 in the recording 77 is located, is the processing electronics 101 capable of the functions of the control device 100 perform.

Includes the security system 1 several subsystems 5 . 6 and thus several first bus systems 400 . 400' so includes the security system 1 exactly the same number of mother modules 801 . 801' as are subsystems 5 . 6 gives (s. 10 ). The emergency button 10' who with the mother module 801' communicates, and the processing electronics 101 the control device 100 out 10 that with the mother module 801 communicate, are also intended to communicate with the second bus system 401 to be connected.

The mother module 801 . 801' can for any subsystem 5 . 6 contain different codes and thus unlock different functions. So z. B. the mother module 801' of the second subsystem 6 a code for the selective assignment of the door locks 200' . 1200' . 2200' to the emergency rooms 10' . 1010' . 2010 ' include. On the other hand, the code for a selective assignment of door locks to emergency buttons on the mother module 801 for the subsystem 5 unnecessary.

The communication module 801 . 801' . 802 can a gap 803 have, through which a particular self-adhesive tape is guided. The self-adhesive tape is used for manual removal of the communication module 801 . 801' . 802 from the recording 77 , The self-adhesive tape includes information about the functions performed by those on the respective communication module 801 . 801' . 802 stored codes are unlocked. The information may be a color code, a QR code and / or a bar code.

Alternatively, the communication module 801 . 801' . 802 be designed as a chip card with a flexible portion. Part of the exception 77 outstanding part of the chip card can be provided with the information, ie the color code, the QR code and / or the bar code.

One time in a security system 1 inserted mother module 801 can in a recording 77 another security system according to the invention 1 be used again.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• EP 2725172 A2 [0002]
• DE 10050111 C1 [0008]

Claims (15)

Security system ( 1 ) for unlocking at least one door lock ( 200 ), in particular emergency exit, whereby the security system ( 1 ) a trigger element ( 10 ), in particular an emergency button ( 10 ), wherein the trigger element ( 10 ) a manually operable actuator ( 11 ), wherein by actuation of the actuating element ( 11 ) an actuating signal for unlocking the door lock ( 200 ), characterized in that the security system ( 1 ) a door lock control ( 201 ), wherein the door lock control ( 201 ) and the trigger element ( 10 ) via a first bus system ( 400 ), wherein the door lock control ( 201 ), in particular a first digital processing means ( 202 ) and a second digital processing means ( 203 ), wherein the first processing means ( 202 ) and by the second processing means ( 203 ) a locking mechanism ( 205 ) is controllable. Security system ( 1 ) according to claim 1, characterized in that the security system ( 1 ) an electronic device ( 207 ) and in response to the actuation signal by the electronic device ( 207 ) is prevented electronically, without the presence of a cancellation condition, the locking mechanism ( 2205 ) of the door lock ( 200 ) is controllable for locking, wherein the door lock control the electronic device ( 207 ). Security system ( 1 ) according to claim 1 or 2, characterized in that to achieve the cancellation condition, a cancellation signal can be generated by a cancellation action taken directly on the actuating element, wherein the cancellation signal corresponds to the actuation signal. Security system ( 1 ) according to one of the preceding claims, characterized in that the triggering element ( 10 ) is in a deactivated state, wherein in the deactivated state as a result of an actuation of the triggering element ( 10 ) an activation of a locking mechanism ( 205 ) is omitted for unlocking, and the trigger element ( 10 ) in an activated state, wherein in the activated state as a result of an actuation of the trigger element ( 10 ) a control of the locking mechanism ( 205 ) takes place for unlocking, wherein the security system ( 1 ) a central escape route control ( 300 ) and the trigger element ( 10 ) by the central escape route control ( 300 ), in particular by a first control element ( 322 ) of the central escape route control ( 300 ), in the activated state and / or in the deactivated state, wherein the deactivated state and / or the activated state in the triggering element ( 10 ) is stored electronically. Security system ( 1 ) according to one of the preceding claims, characterized in that in the activated state of the triggering element ( 10 ) a previous actuation of the trigger element ( 10 ) in the deactivated state ineffective on the activation of the locking mechanism ( 205 ). Security system ( 1 ) according to one of the preceding claims, characterized in that the central escape route control ( 300 ) a delay element ( 332 ), in particular as a key switch, wherein as a result of an actuation of the trigger element ( 10 ) the activation of the locking mechanism ( 205 ) can be delayed for unlocking by a first delay time period and an actuation of the delay element ( 332 ) within the first delay period, an extension of the delay of a drive of the locking mechanism ( 205 ), wherein the delay element ( 332 ) via a central emergency button ( 302 ) with the trigger element ( 10 ) is electrically connected. Security system ( 1 ) according to one of the preceding claims, characterized in that the central emergency button ( 302 ) a first digital emergency processing unit ( 303 ) and a second digital emergency processing unit ( 304 ) and at least one circuit board, wherein the first and / or the second emergency processing unit ( 303 . 304 ) are arranged on the board. Security system ( 1 ) according to one of the preceding claims, characterized in that the security system ( 1 ) several trigger elements ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) and for each triggering element ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) or groups of triggering elements ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) is selectively stored in the security system, whether by the respective trigger element ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) or by the respective group of triggering elements ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) as a result of an actuation of the first operating element ( 322 ) a deactivation of the respective triggering element ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ), wherein in particular the deposit can be carried out with the aid of an executable on the communication device parameterization program. Security system ( 1 ) according to one of the preceding claims, characterized in that the security system ( 1 ) a control device ( 100 ), wherein the Control device ( 100 ) via the first bus system ( 400 ) with the trigger element ( 10 ) and / or with the door lock control ( 201 ) and by means of the control device ( 100 ) at least one of the following functions, preferably more of the following functions, particularly preferably all of the following functions, is executable: h. Causing activation or activation of the door locking mechanism ( 205 ) for unlocking upon receipt of a positive authentication signal, wherein in particular via a bus input, the positive authentication signal is receivable, i. Causing activation or activation of the door locking mechanism ( 205 ) for unlocking at a given time; j. Prevention of the activation of another door locking mechanism ( 205 ) after activation of a first door locking mechanism ( 205 ) until there is a condition such that a lock is formed, k. Causing an activation or activation of the locking mechanism ( 205 ) for automatic re-locking after a lapse of a predetermined period of time, in particular after performing the functions h., i. and / or jl causing activation or activation of the locking mechanism ( 205 ) for automatic re-locking after receiving a signal on a closed state of the door, in particular after performing the functions h and / or j., Preferably, the closed state of the door by at least one door condition monitoring device ( 204 . 206 ) is detectable; m. Causing a triggering or triggering of an acoustic alarm device ( 23 ) for outputting an alarm in response to a signal from the door condition monitoring device ( 204 . 206 ) about the opening of the door, in particular if there is no authorization to walk on the door; n. Communication via a radio module ( 64 ) preferably for the parameterization of the security system ( 100 ), wherein the parameterization is preferably carried out via a mobile communication device; o. causing an activation or activation of an acoustic alarm device ( 23 ) for issuing an audible alarm as a result of an actuation of the trigger element ( 10 ) or after receiving a fire alarm, p. Causing a driving or driving a display device ( 41 ) for optical representation of a locking state of the door lock ( 200 ), q. Causing a driving or driving a display device ( 41 ) for optically displaying the time-delayed activation of the door locking mechanism ( 205 ), in particular for unlocking and in particular after actuation of the triggering element ( 10 ); r. Causing a triggering or driving of a display ( 41 ) for the visual display of an alarm condition, in particular as a result of an actuation of the triggering element ( 10 ) or after receiving a fire alarm, s. Causing an audible and / or visual alarm to be output if a re-lock fails, in particular the door remains open, which is detectable via the door condition monitoring device, t. Establishing and / or maintaining a communication connection ( 401 . 403 ) between the control device ( 100 ) and a central, in particular a central escape door control ( 300 ), a watch device ( 301 ) and / or a multi-door display device ( 350 ); u. Deposit of parameters and / or links to perform at least one of the functions h.) To t.) And / or v.), V. Integration of at least one additional input and / or output of the control device ( 100 ) and / or a component, in particular a triggering element ( 10 ). Security system ( 1 ) according to one of the preceding claims, characterized in that a number of door lock controls ( 201 ) of the security system ( 1 ) and a number of trigger elements ( 10 . 1010 . 2010 . 3010 ) of the security system ( 1 ) via a common bus system ( 400 ) and the number of door interlock controls ( 201 ) the number of trigger elements ( 10 . 1010 . 2010 . 3010 ) are assigned such that upon actuation of one of the trigger elements ( 10 . 1010 . 2010 . 3010 ) only the at least one door lock control ( 201 ), the actuated trigger element ( 10 . 1010 . 2010 . 3010 ), the respective locking mechanism ( 205 ) for unlocking. Security system ( 1 ) according to one of the preceding claims, characterized in that the triggering element ( 10 ) the control device ( 100 ) or that the triggering element ( 10 ) with the control device ( 100 ) via the first bus system ( 400 ) connected is. Security system ( 1 ) according to one of the preceding claims, characterized in that the control device ( 100 ) of the security system ( 1 ), a communication interface, wherein the communication interface for communicating with a Communication module ( 801 . 801' . 802 ), to perform a function of the security system ( 1 ) communication via the communication interface with the communication module ( 801 . 801' . 802 ), the function for the security system ( 1 ) is executable only if the security system ( 1 ) information on the communication module ( 801 . 801' . 802 ), and / or the control device ( 100 ) is designed such that the control device ( 100 ) in particular at predetermined time intervals aware of the information on the communication module ( 801 . 801' . 802 ), and the function for the security system ( 1 ) is executable only if the security system (within a given 1 ) Has gained knowledge of the information. Security system ( 1 ) according to one of the preceding claims, characterized in that the triggering element ( 10 ) at least partially transparent covering means ( 13 ), which the actuating element ( 11 ), so that the covering means ( 13 ) the direct contact of the actuating element ( 11 ) prevented by a user, wherein upon actuation of the actuating element ( 11 ) the covering means ( 13 ) from a starting position ( 13.I ) in an actuating position ( 13.II ) is movable, and the covering means ( 13 ) is arranged undetachably. Security system ( 1 ) according to one of the preceding claims, characterized in that the triggering element ( 10 ) Illuminants ( 41 ) for indicating a locked and / or unlocked state of a door lock ( 200 ), wherein the lighting means ( 41 ) are each at least controllable in two groups, wherein in particular at least one of the lighting means ( 41 ) is individually controllable. Security system ( 1 ) according to one of the preceding claims, characterized in that the triggering element ( 10 ) at least two boards ( 60 . 61 ) and a switch ( 63 ), the switch ( 63 ) on the board ( 60 ) closer to the actuator ( 11 ) than the other board ( 61 ) is arranged, is involved in at least one circuit.

Images