DE202012100168U1 - Device for secure storage and release of access keys to a building or a building section - Google Patents

Abstract

Device for the safe storage and release of access keys (ZS) to a building or a building section with a firmly anchored key box (10) arranged accessible from an outside area of the building or building section with a lockable receiving space (17) in which at least one access key ( ZS) can be arranged in relation to the building or building section, the receiving space (17) being closed at least with an access flap (14) having a locking system, characterized in that the locking system comprises an electronic code lock (16) which is based on the entry of an opening code unlocked the access flap (14), the electronic code lock (16) containing a computer unit (19) which has an interface for connecting to an external computer (1), and wherein in a memory unit of the computer unit (19) an algorithm for Calculation of successive opening codes starting from is stored on a predeterminable start value, the device further comprising a central computer (3) which is separate from the key box (10) and is not connected to it via a data line, with ...

Description

The present invention relates to a device for secure storage and release of access keys to a building or a building section with the features of the preamble of claim 1 protection.

Such devices, which have an externally accessible from the exterior of the building or building section accessible, firmly anchored key box with a lockable receiving space, which is closed with a bolt system having access door, are known. Here, at least one receptacle for an access key to the building or building section is provided in the receiving space, in which this can be arranged. Often, however, there are also two or more access keys in the receiving space, which can be accessed via different doors which can be opened with the respective key, eg by means of access keys. B. allow in different areas of the building or building section.

Such devices are often found on large public buildings, but also on company buildings or the like. They serve to provide access for emergency responders in an emergency. If, for example, in the event of a fire in such a building or in the event of a burglary alarm, corresponding forces of the fire brigade or police are called in, they receive a key with which they unlock and open the access door provided with current security devices with the corresponding lock can then to remove from the interior one or more of the deposited there keys for corresponding access doors to the building or building section, they need for proper access to the building or building section. The corresponding release keys (security keys) for the access door are kept in stock and managed by the various operations centers. Thus, a suitable police patrol dispatched to a deployment to a building equipped with such a facility is given the appropriate security key for the access door of the key box by the operations management and provided along the way. Similarly, this is the case with appropriate fire department or other rescue services equipped with appropriate access to the equipment and equipped with the access key security key.

Even if this principle has proven itself in principle and appropriate facilities are nowadays secured with great security against vandalism and unauthorized access from the outside, for example by a further, the access to the access door closing the closure door, nevertheless proves the handling with a security key for opening the Access door as problematic in some respects. Thus, in particular when, for example, patrol vehicles for use on a routine inspection trip already have appropriate security keys for the access of access flaps to key boxes of buildings lying on the strip or building sections handed over and given not only the risk of loss of corresponding keys and the subsequent need for a security offered replacement of the security lock cylinder of the access door, it is also the handling of a variety of corresponding security key of several lying on the strip route of such an emergency vehicle access flaps of the respective key boxes impractical, the handling of corresponding key time consuming. Also, the administrative burden, which is associated with a corresponding procedure, in particular when handing over the security-relevant security key for access to the access flaps of the key boxes, more than high. Finally, a large number of corresponding security keys must be kept available for equipping the respective task forces of the various task forces who must be able to make use of such a security key, such as, for example, On the one hand, firefighters, on the other hand, the competent police.

Here is to be remedied with the invention by a simpler, but at the same time secure system is created, allowing for emergency services access to the interior of the corresponding key box and thus to the required entry into the corresponding building or the building section access keys becomes.

This object is achieved with a device for secure storage and release of access keys to a building or a building section with the features of claim 1. Advantageous further developments are specified in the dependent claims 2 to protection rights.

A first conceptual approach, which has played a significant role in the invention, is the idea of replacing the security key-operated security lock previously used for the lock system of the access door with an electronic code lock. This only requires the input a corresponding code to unlock it, so that the use of a physical key is no longer required. However, the inventors have also seen that a mere replacement of the security lock by an electronic code lock does not lead to the desired result, since due to safety considerations, a once awarded code can not be used permanently. Because such a code is, if used once, known in principle, so that an abuse can not be excluded. Accordingly, the inventors' further considerations were aimed at finding and enabling safe use of such a code. In particular, it had to be ensured that, after the single use of such a code to open the access door, it would lose its validity and be replaced by a new access code. Another problem facing the inventors on the way to the invention, however, was that the corresponding code should not be specified by persons involved. For a requirement by involved persons creates again a risk of a "leak", whereby such a predetermined code is made known to unauthorized persons with the risk that in the key box stored access key without authority in hands other than those of the rescue or emergency forces in action , Accordingly, it should be ensured here that such an access code for the electronic code lock is automatically calculated using cryptological methods and thus created without the intervention of human activity and the interposition of "associates". Here, the inventors have recognized that basically cryptological calculation methods can be used for cryptological algorithms. It was further to ensure that in a central, independent of the key box computer unit currently valid code is calculated in the same way and kept in stock, as happens in the code lock the key box. This is the only way in which a task force, for example, by telephone consultation, at a central office access to the central computer on which the codes are stored or the current code is calculated, request this and learn about it. A corresponding request to the central system can z. B. also be done automatically via a password-protected access, the respective current code can then be communicated automatically via appropriate communication channels, z. B. by SMS on a mobile device.

In order to avoid manipulation and also to keep the technical effort low, so the approach of the inventors, a connection of the computer unit should be avoided in the code lock of the key box with the central computer. Accordingly, the invention provides that the calculation of the opening codes for their availability in the central computer and the calculation of the opening codes in the arithmetic unit of the electronic code lock are carried out independently of each other, but on the basis of an identical algorithm and starting from a balanced and the same starting value. For this purpose, in particular for determining the starting value, the computer unit of the code lock is equipped with an interface by means of which it can be connected to an external computer for matching the starting value. In this case, this starting value z. B. be synchronized at such a balance system time of the computer unit or the computer (see, claim 3).

In this way, be it in advance calculation, be it currently in the computer unit of the code lock and outside the same lists of opening codes created in a corresponding computer, which are successively valid and discarded after one use in both systems. For example, when issuing an opening code from the central computer, it is deleted from the list of valid codes, the next valid code is called there. If this opening code has been used to open the access door on the key box, then the next opening code is activated by the computer unit in the electronic code lock, due to the use of the same algorithms, in particular cryptological algorithms, as well as the balanced common start value in the external computer and the arithmetic unit in the electronic code lock ensures that the newly opened opening codes are the same for the next access. For the establishment of the code lock, ie its activation via the interface, a computer connected to this, and it is set the common start value. Also, on this occasion, a corresponding algorithm can be dubbed in one direction or the other, ie from the computer connected to the interface to the computer unit or in the opposite direction to the computer. This computer, which is in particular a portable computer such as a laptop or a notebook, can be used subsequently as a central computer. However, he can also save only the corresponding data, namely in particular the predetermined starting value and transmit it in a subsequent data exchange with the central computer this for a local calculation of the opening codes. Equally, however, the calculation of the opening codes, be it only the first opening code or a list with several opening codes already done in this computer and the corresponding opening code or the list with the opening codes the Central computer to be transferred in a corresponding data exchange.

By means of the device according to the invention, it is thus possible to give emergency services access to the stored in the receiving space of the key box access keys, without having to carry a security key for opening the access door or only get handed. Instead, sufficient here is the simple transmission of an access code for the electronic code lock, such a transmission can be done quickly and easily if necessary, for. B. by transmitting an SMS to a mobile device or by other use of a Schreibfunkstandards in a written manner, but also by phone from a corresponding person who operates the central computer or an automated announcement.

The electronic code lock may in particular be an electronic combination lock, without being limited to such.

For further protection of the receiving space and the access key stored therein against unauthorized access from the outside, the key box in the inventive device as well as for previously known key cases also have provided a closure door, which is located outside the access door and blocks access to this access door and which is firmly closed in a normal position by an actuatable via an external signal locking element. Such a signal can be triggered, for example, by a corresponding sensor of the building provided with the key box itself, for example in case of fire by a signal given by smoke or fire alarm in the case of triggering or in the event of a break-in by a signal from an alarm system. Only by a corresponding signal, ie triggering a corresponding monitoring system in the building, the closure door is opened and the access to the access door and the electronic code lock arranged thereon released. For further security of the system it can then be provided that, triggered by a release of the closure door, the expiry of a predetermined period of time is set in motion, within which the current access code for the electronic code lock of the access flap remains valid. For this purpose, a corresponding data line can be provided to the computer unit of the electronic code lock, which triggers the beginning of a corresponding countdown of the validity period with the shutter signal for the shutter door. A corresponding period of time can be, for example, half an hour, one hour or three hours, depending on how long the usual duration until the arrival of authorized emergency services. Such additional backup by a passage of time and the loss of validity of the next code provides additional security, so that in particular once issued to emergency forces code even if it has not been entered into the electronic code lock, as for example the emergency services so in the Could reach buildings, z. B. by a burglar broken access door.

In order to be able to obtain access to the key box in the event that a corresponding signaling system of the building has not triggered and thus released the closure door, it can be provided that a corresponding signal can be triggered by an incident control center or in some other way Local rescuers or emergency services can be generated.

Finally, in order to provide further security, at least one sensor may be arranged in the receiving space, which monitors the presence of a key arranged there and outputs a corresponding sensor signal upon removal of the key. Thus, the corresponding device can signal when a key has been removed from the receiving space of the key box. Only with the return of the key in the receiving space, if the sensor detects the presence of the key, a reset will be possible. A simple realization of such a sensor is that on the access key, with this fixed via a link, z. B. a ring, connected, another key is arranged and in the receiving space a security lock, in which this further key inserted and which can be operated by the other key, is present, which holds the key in a closed position and in another Closed position releases the key, and that the closed positions of this security lock are monitored with appropriate sensors.

The invention and its description also disclose a method by means of which a device for the secure storage and release of access keys to a building or a building section can be operated or how such a release of access keys can be carried out. The corresponding features of the method will become apparent from the above description and further explanation below.

Further advantages and features of the device according to the invention will become apparent from the following description of an embodiment with reference to the accompanying figures. Showing:

1 a three-dimensional view of a key box, which is part of the device according to the invention, from the front.

2 : in a 1 Comparable three-dimensional view of the key box with open outer door and view of the underlying, secured with an electronic combination lock access door,

3 in a comparable three-dimensional view of the key box from the preceding figures with the open door and access door open and look into the receiving space with an access key and arranged therein

4 in a schematic block diagram, the components of the device according to the invention in their interaction.

An exemplary embodiment of the invention will be described in more detail below with reference to the attached figures, for further explanation and for a better understanding of the features according to the invention and their implementation. In the 1 to 3 is initially in different views, more precisely with different elements each open and insight into the underlying areas a key box 10 illustrated how it is part of a device according to the invention. Such a key box 10 is secured and anchored in a known manner in the area of a building, in particular integrated in a masonry and there secured accordingly against separation, that the in 1 Locking door shown in the closed position 11 accessible from the outside, but flush with a surrounding surface, in particular a building wall closes to provide any attack on levers or the like means for forced opening. The locker door 11 has a locking element 12 on which in 2 to recognize which is the key box 10 with opened locker door 11 reproduces. This locking element 12 is formed here by a trap behind a corresponding retaining plate 13 engages the locker door 11 to keep closed. This retaining plate 13 is pivoted outward and is released by a corresponding electrical signal for pivoting, so that the locker door 11 can be opened.

Furthermore, in 2 the access door closed there 14 to recognize, with the keypad 15 and other components of an electronic combination lock 16 , This electronic combination lock 16 locks the access door 14 and does not give the access door until a correct opening code has been entered 14 free for opening. This situation, so the key box 10 with not only opened lock door 11 but also opened access door 14 is in 3 shown. Good to see here is the behind the access door 14 lying recording room 17 in which an access key ZS to that with the key box 10 provided building is stored. The access key ZS is here connected by means of a ring to a surveillance key US, which is located in a surveillance lock 18 is located. This surveillance lock 18 has two closed positions, once in 3 Another time shown, in which the monitoring key US can not be deducted, a 90 ° rotated position, in which removing the surveillance key US from the monitoring lock 18 is possible. The closed position of the surveillance key US is monitored by a sensor not shown here, which then emits a signal for the secure presence of the access key ZS when the monitoring lock 18 in the in 3 shown locking position in which the monitoring key US can not be removed, is located. This signal is interrupted as soon as the monitoring lock 18 in the rotated by 90 ° position in which withdraw the surveillance key US and thus can be seen to remove the access key ZS, is moved. In this way, a secure presence of the access key ZS in the receiving space 18 be monitored.

In 4 is a schematic representation of the further structure and at the same time the mode of action of the device according to the invention is illustrated. Schematically represented here is the access door 14 not further illustrated key box 10 with electronic combination lock arranged on it 16 and its keypad 15 , Furthermore, with 19 one in the electronic combination lock 16 shown computer unit are calculated in the starting from a start value and after a predetermined algorithm stored in a corresponding memory sequential opening codes with which the electronic combination lock can be opened. A corresponding list of opening codes is under the reference number 20 illustrated. There, for example, the first access code is indicated with 123456789, the second access code with 234567890, a later following access code with 987654321.

Furthermore, with 1 denotes a calculator, as shown by the dashed line 2 illustrated with the computer unit 19 of the electronic combination lock 16 can be connected via a corresponding interface for data exchange. About this calculator 1 this is a mobile computer, especially a laptop, is the adjustment of a starting value for the calculation of the opening codes between the computer 1 and the computer unit 19 accomplished. For this purpose, in this embodiment, the system time of the computer 1 taken with the system time of the computer unit 19 synchronized and at a start time as the adjusted starting value for the further calculation of the access codes based on a predetermined cryptological algorithm forms the basis. This cryptographic algorithm is in a central computer 3 stored, being sure that in the central computer 3 stored algorithm is similar to the one in the computer unit 19 of the electronic combination lock is created. About one through another line 4 illustrated data connection between the computer 1 and the central computer 3 the calculator hands over 1 the starting value to the central computer 3 where internally also a list with opening codes is calculated, as with 5 is illustrated. This list of opening codes, since the same cryptographic algorithm has been based on a matching starting value, is completely consistent with the codelist 20 in the computer unit 19 of the electronic combination lock 16 is determined. The code list is not necessarily to be understood that this calculated at once and in the respective units (computer unit 19 or central computer 3 ) is kept in stock. Rather, the calculation of a subsequent code can only be done when the previous code has been retrieved, based on the data of the previous code and using the cryptological algorithm. at 6 is the output of a code, here the first code of the codelist 5 from the central computer 3 illustrated. Such issuance will be upon an authorized request from an authorized person, such as a task force manager or an authorized task force. This code can then be sent to an operational force, eg. B. a police or firefighters on site are transmitted to enter the electronic combination lock 16 , Because the codelists 20 and 5 are consistent, succeeds by entering this code in the electronic combination lock opening the access door, the hidden behind access key is reached. After using the code this will be from both codelists 20 and 5 deleted, the next code provided as active, or calculated and then provided. Again, the previous starting value (the last code) and the algorithm in the central computer 3 and the computer unit 19 are identical, this leads to the calculation of an identical code in both systems. When a new request so again can code to the output 6 given access to the interior by opening the access door 14 allows.

In 4 is to understand that the calculator 1 only temporarily via the data connection 2 with the computer unit 19 is connected to match the starting value and that a connection of the computer 1 over the data connection 4 with the central computer 3 also only temporary, to make the necessary data exchange here as well. In long-term operation exists between the central computer 3 and the computer unit 19 no data connection.

LIST OF REFERENCE NUMBERS

1

computer

2

line

3

mainframe

4

line

5

code list

6

output

10

key Cabinet

11

closing door

12

locking element

13

Retaining plate

14

access door

15

keypad

16

electronic combination lock

17

accommodation space

18

monitoring Castle

19

computer unit

20

access codes

US

monitoring key

ZS

access key

Claims (7)

Device for safely storing and releasing access keys (ZS) to a building or a building section with a firmly anchored key box accessible from outside the building or building section (US Pat. 10 ) with a lockable receiving space ( 17 ), in which at least one access key (ZS) can be arranged to the building or building section, wherein the receiving space (ZS) 17 ) at least with an access door having a locking system ( 14 ), characterized in that the locking system is an electronic code lock ( 16 ), which upon entry of an opening code out the access door ( 14 ), the electronic code lock ( 16 ) a computer unit ( 19 ), which provides an interface for connecting to an external computer ( 1 ), and wherein in a memory unit of the computer unit ( 19 ) an algorithm for the calculation of successive opening codes is stored starting from a predefinable start value, wherein the device further comprises one of the key box ( 10 ) and with this central computer (not connected via a data line) ( 3 ) comprising a memory containing the same algorithm for calculating successive opening codes as the memory unit and at a starting time with the computer unit ( 19 ) has values adjusted in such a way that both starting from the identical sequential start value calculated consecutive opening codes. Device according to claim 1, characterized in that the computer unit ( 19 ) is arranged in such a way that when using an opening code for opening the electronic code lock ( 16 ) deactivates it as consumed and activates a subsequent opening code calculated on the basis of the algorithm. Device according to one of the preceding claims, characterized in that it is set up as starting value for the calculation of the opening codes in the computer unit ( 19 ) and in the central computer ( 3 ) one when connecting the computer ( 1 ) via the interface with the computer unit ( 19 ) to use synchronized system time between these elements. Device according to one of the preceding claims, characterized in that the central computer ( 3 ) is set up to retrieve an opening code from the list of valid codes and to evaluate the subsequent calculated according to the algorithm opening code as current. Device according to one of the preceding claims, characterized in that the electronic code lock ( 16 ) is an electronic combination lock. Device according to one of the preceding claims, characterized in that the key box ( 10 ) a closure door ( 11 ) providing access to the access door ( 14 ) and locked in a normal position by an actuatable via an external signal locking element ( 12 . 13 ) is tightly closed. Device according to one of the preceding claims, characterized in that in the receiving space ( 17 ) at least one sensor is arranged, which monitors the presence of an access key (ZS) arranged there and outputs a corresponding sensor signal upon removal of the access key (ZS).

Images