EP0111186B1 - Locking system for movable mechanical parts - Google Patents

Abstract

The moveable mechanical closure has no direct mechanical connecting element between lock (20) and operating device (25). The operating device on the outside of the door does not indicate the position of the locks (20) and blocking points (14l...14m...14n). The armour plating of the door is not perforated at critical points by connecting elements. The number of locks (20) and blocking points (14) can be multiplied to form the operating unit. Locks and blocking points can be varied in position from door to door, because they are independent of the position of the connecting elements and operating device. An electronic operating device (45) has storage means (45<III>, 45<IV>) and contains a microprocessor (45'). A keyboard (35) of the operating means for the lock (20) or locks can be arranged remotely from the door (1). <IMAGE>

Description

The invention relates to a locking system for a movable termination device and a method for its operation according to the preamble of patent claim 1.

Movable mechanical closures are devices that temporarily open and temporarily block an opening, such as e.g. B. Doors of all kinds (hinged doors, sliding doors, revolving doors, folding doors, lattice doors, etc.), windows, lids and barriers.

Contrary to the current security requirements for door locks are still some "weak points" inherent in the state of the art. All known means are used to improve such weaknesses in terms of security; these measures are varied and mainly concern armor. A known mechanical vulnerability can be found e.g. B. on the locking rod for bolt actuation. The locking bar connects a bolt or a bolt bar provided with several bolts to the locking point of the lock.

It is therefore obvious to design a locking rod mechanically only for such a task. Wherever large forces can be exerted, for example on the bolts, these are designed to be as oversized as possible for the highest possible security, which in a sense also affects the bolt beam. The locking rod or the locking rods, on the other hand, partly already lying in the protective area of an additional armor, are in spite of everything also significantly oversized in order to make the severing as difficult as possible. At one mechanical point, however, at which the lock mechanism is articulated to the locking rod, one of the most eminent is the Prior art inherent mechanical weaknesses in terms of security; this is the blocking point. A lock construction, however sophisticated, may appear to have multiple locking points, but each lock reduces security to a single point where the entire locking system can be attacked.

Drilling away the locking point causes the locking rod to be released from the locking mechanism which inhibits the free movement of the bolt; the lock loses its locking effect, and the locking bar with the locking bolts engaging in the frame can be moved freely once it has been released. Inevitably, the locking points must be specially protected, for example by covering the lock and locking point by means of particularly hard cover plates which resist drilling, such as, for example, mixing plates of a corundum metal mixture.

A lockable safe is known from US Pat. No. 3,881,171, the bolt of which is locked with the aid of a magnetically actuated lock which engages in the bolt at the blocking point. An operating device arranged on the outside of the accessible part of the safe releases the lock of the bolt, which in turn can be actuated via a handle also arranged on the outer, accessible side of the safe and thereby leaves the safe door open, for example.

However, the location of the blocking points must remain secret, despite the protective measures described, since if the location is known, the protective means would be destroyed with perseverance. The normally unknown location of the blocking points will, however, be found within a range of what is possible, as one knows the location of the lock, and the location of the lock is determined within certain limits by the lock opening device on the outside of the armored door. This narrowing of the possible area of the blocking point locations, together with knowledge of the type of lock - individual types of lock are extremely widespread - is an opening of the security door without a key or code absolutely in the range of what can be done. In addition, the number of locks and therefore also the locking points is very limited, because each lock requires a connecting element that leads directly out through a hole in the armor and an operating element on the outside that indicates the position of the lock and locking point.

A further vulnerability, no less to be assessed, is inherent in the lock mechanism itself. The combination locks used in security locks can be determined by a code that can be defined inside the lock in the form of a very specific, predetermined combination of a number of coding disks, ie unlock by their position to each other. With the "inner" unlocking, the lock mechanism can be operated and the "outer" unlocking, for example between the door and frame, can be carried out; the security clearance is now open.

If the combination lock is now operated in the sense of decoding the coding disks in any angular position with respect to a properly locked security lock, for example a reinforced door, this is nothing more than a targeted arrangement of the positions of all unlocking points on the coding disk. If this ordering is carried out according to the recipe and the lock mechanism can be actuated by "internal" unlocking to open, the order of the coding disks brought about by opening is or is frozen as it were. This state does not simply disappear after the door is closed again, the order must be removed in a very targeted manner, and the expert speaks of code rejection. Discarding the code, which unfortunately often happens in practice, must not be forgotten; because in the case of ordered coding disks, this can be done with bolts Open the firmly closed door again without further ado.

Correct discarding of the opening code comprises the mixing of the state of each individual and all coding disks, of which a majority, for example three to four in number, can be used. A fleeting discarding can perhaps twist the release groove of a single pane by perhaps only ten degrees, with the effect that the door is probably closed and locked, but can be unlocked and opened again by simple, skillful exploitation of this fact with a small turn of the combination button.

It must be assumed that the persons authorized to open and close the door do not understand the function of the lock and must strictly follow the operating instructions in order to avoid errors. An almost feared measure is the periodic change of the opening code. In spite of the most detailed instructions, this procedure always fails; the most unpleasant is that a supposedly entered new code can no longer unlock the lock and the door can no longer be opened. The respect for such Incidents mean that the code originally set in the factory is retained for years, regardless of staff fluctuations and the code becoming known to unauthorized persons.

On a locking system, a hard and a soft security aspect are practically equally important. Ultimately, it doesn't matter whether mistakes made to the point of negligence or tougher measures, such as cracking, lead to a break-in.

It is therefore an object of the invention to overcome the known, in particular the detailed, disadvantages in the prior art by means of a locking system which offers the highest possible level of security.

This object is achieved in a generic locking system by the characterizing features of claim 1.

A method for operating the locking system according to Claim 1 is also specified. This method is defined by the features of claim 10.

Furthermore, it is an object of the invention to provide a locking system which offers a high level of security against serious failures in the permissible range with a locking system and the consequences of which, if they occur, can be easily neutralized.

It is one of the aims of the invention to achieve an improvement against unauthorized opening by means of "hard" and "soft" methods and against a safety-threatening behavior. This object is achieved by the invention specified in the patent claims.

Fig. 1, 1'

in prinzipieller Darstellung als Beispiel eine gepanzerte Tür gemäss den Stand der Technik,

Fig. 2, 2'

in ebenso prinzipieller Darstellung als Beispiel eine gepanzerte Tür gemäss der Erfindung,

Fig. 3

ein Beispiel der elektrischen Fernsteuerung des Schlosses der Tür gemäss Figur 2,

Fig. 4,

die elektrische Steuerung gemäss Figur 3 in Zusammenhang mit Details der gepanzerten Türe.

The invention is subsequently explained in detail together with the figures listed below. Show:

1, 1 '

in principle representation as an example an armored door according to the prior art,

2, 2 '

an armored door according to the invention in an equally basic representation as an example,

Fig. 3

an example of the electrical remote control of the lock of the door according to Figure 2,

Fig. 4,

the electrical control according to Figure 3 in connection with details of the armored door.

According to FIG. 1, the armored door 1 is shown in a front view without the always necessary frame area. On one side, for example, two door hinges of the usual type are indicated as two rectangles 11. On the other side of the door there is also only a simplified drawing showing a number of bolts 12 seated on a locking bar 15. These bars 12 can be moved in translation and can be inserted into corresponding frame recesses and pulled out of them again.

The locking bar 15 can be moved together with the locking bars 12; this movement is transmitted to the locking bar 15 with the aid of a locking drive 30. For the sake of simplicity, the mechanism of the lock 20, which is already known in any case, is only represented by a dashed square and a circle, which circle an operating device 25 is to indicate, for example a number combination button or even simply a keyhole with an associated key.

The locking rod 13 is connected on the one hand at point 13 to the locking bar 15 and articulated on the other side to the locking point 14. The blocking point 14 blocks or releases the locking rod 13 and it is advantageously protected behind the armor 22.

This representation, shown in only the essential points, corresponds to the state of the art known today.

Figure 2 shows again very simplified a reinforced door 1 with a locking beam 15 carrying the bolts 12 and two hinges 11, a lock 20, the mechanism of which is connected to the locking beam 15 via a locking rod 13.

According to the invention you can also see blocking point coordinates 14 1 ... 14 _m ... 14 _n distributed over large parts of the door area, which of course extend in any order or disorder over the door area. A blocking point coordinate is selected by an optional selection method, in the present case the blocking point coordinate 14 _m , in the area of which the lock 20 is placed.

The functioning of this measure naturally presupposes that there are no longer any direct bushings to the outside of the door for actuating the lock. The lock 20 is therefore operated remotely by electrical means. The door hinges can be used to ensure that cables for the power supply line from the outside to the interior of the door meet the desired security.

The locks 20 shown in FIG. 2 'and arranged at different locations 14 _index , the electrical feed lines 40 which start from these locks and which connect the operating device 25, and also the operating device 25 itself, can also be present several times and not only individually. This means that, for example, the location 14 _m and a further location 14 could be occupied by a lock at the same time, wherein two locking bars 13 also act on the locking bar at the same time Alternatively, unlock the two locks and thus release the locking bar to open the door. These possibilities, which are thus significantly expanded, are described below in connection with the third figure.

FIG. 3 shows a schematic representation of the elements 45 that can be used for an electrical remote control of the mechanism for the “inner” locking and unlocking The necessity to store the code in the lock mechanism itself, to store it mechanically, and on the other hand, if electronic storage means are already provided in order to store the opening code therein, the µP solution is advantageously used. A typical schematic illustration of a microprocessor 45 'with typical wiring can be seen on the left in FIG it remains open whether, for example, the program memory 45 '''is used or whether an operating program is implemented in hardware by means of a simple logic network. The data memory 45 ^IV is used, for example, to record the opening or closing code and other data, the use of which increases security.

An input / output circuit 45 ^V finally connects the processor 45 'to the periphery, which now includes one or more mechanical terminations. The armored door according to FIG. 2 is shown again in this example. The electrical feed lines 40 lead through a door hinge 11 to the lock 20, in the interior of which a motor-operated mechanism for "internal" unlocking is activated. If the lock 20 is then, as it were, open, the "outer" lock formed by the bolt 12 with the door frame can be released with the aid of a bolt drive 30. Door 1 is also open. For example, an input keypad 35 can be used to enter the opening code. For example, status messages, memory contents, etc. would be displayed on a display 34 as usual.

According to FIG. 1, an operating device is indicated by reference number 25. According to FIG. 1, as already mentioned, this is, for example, a number combination button or a keyhole with an associated key. In FIG. 2, the operating device 25 is a number combination button; but they can also be a keyboard 35, which is attached as far as possible outside the door area, the electrical circuit parts 45 ', 45' '.... necessary for operating the lock being located on the protected side of the door. In FIG. 3, the entire actuating device 45 comprises the processor with memory and peripheral interface as well as the keyboard 35. One or more keyboards can be placed on the door, in the immediate vicinity and / or far from the door. In this way, an authorization hierarchy can be established, for example as follows:

The cashier wants to open the security door and types his known code into a keyboard 35 near the door; However, the lock 20 is only unlocked when, for example, the director advised for this purpose types in the code known to him and only to the director himself on a keyboard 35 in his office. Only the interaction of both codes unlocks the lock 20; the cashier can fully open door 1 by means of bolt drive 30.

For example, it would be completely impossible to force access to the cashier who, in this situation, releases the code known to him. For example, the director, blackmailed via cashier but not visible, may also reveal his code for the physical security of his cashier, but at the same time actuates locking and alarm devices and advises the police.

Figure 4 now shows an embodiment according to the general circuit in Figure 3, in which the microprocessor with the memory for the application program and the memory for the key data and the I / O network within the door area 1, that is, arranged within the security zone is. Leads 40 lead from the I / O circuit through the hinge 11 to a keyboard 35 which is located outside the door area and which is connected through the leads 40 to the electronics in the door area. An electrical supply line 50 leads from the I / O network to the lock actuation 55, which converts electrical values into a mechanical drive. This lock actuation 55 can be, for example, a motor for a rotary solution or a magnet for a translatory solution. This special effect of converting an electrical to a mechanical value via the lock actuation 55 was represented by an electrical feed line 50 for the lock actuation and a mechanical connection of the lock actuation to the lock 20 with the reference number 50 '. 50 'thus represents a mechanical connection to the lock 20, via which the lock 20 can be opened in order to actuate the locking rod 13 articulated at the locking point 14 with the locking bar 15. On the locking bar 15, the bolt 12 are shown, which in turn with the door frame are engaged. The operating method for actuating door 1 is stored in the memory for the user program, the memory for the key data then receives all the user-specific security data which are necessary for the electronic management of the security locks. The traffic with such data then takes place via the keyboard 35 located outside the door area.

Within the operating procedure, the electrical operating variables are generated for the lock actuation. The operating procedure is designed in such a way that only dynamic processes of a predetermined specificity have an effect. Static states should have no effect on the lock actuation. For this purpose, for example, AC motors that are controlled with these operating variables are used as the lock actuation 55. The control is designed for frequency-dependent operation, for example, so that the torque band of the motor can be used specifically in this solution. It should therefore not be possible, as is the case, for example, in the case of a DC motor, that a voltage level of the same polarity which persists over a longer period of time could activate the lock actuation 55. This is no longer the case with frequency-dependent operation, and, as has already been mentioned before, only dynamic electrical quantities that correspond to the predetermined parameters can open a door. Any other condition keeps the mechanical closure closed for safety reasons.

• 1. Aufbereiten einer Betriebsfrequenz
• 2. Empfang einer Statusmeldung der Schlossposition
• 3. Entscheidung durch das Programm, ob geöffnet oder nicht geöffnet werden soll
• 4. Statusmeldung beispielsweise innerhalb eines Zeitfensters, ob das Schloss OFFEN bzw. nicht ZU ist; wird diese Bedingung nicht erfüllt, erfolgt eine Fehler-Meldung
• 5. Rückstellung von Schloss und Elektronik in einen Initialisierzustand

The main steps of the operating procedure are as follows:

• 1. Preparation of an operating frequency
• 2. Receive a status message of the lock position
• 3. The program decides whether to open or not
• 4. Status message, for example within a time window, whether the lock is OPEN or not CLOSED; if this condition is not met, an error message is issued
• 5. Reset of lock and electronics to an initialization state

• a.) Der Zustand a) bedeutet, dass die Türe 1 geschlossen ist und die Riegel 12 vorgeschoben sind. Dieser Zustand entspricht auch elektronisch einem Neutralzustand bzw. einer Fixfunktion. Wird dieser Zustand vom geöffneten Schliessystem her gesehen erreicht, so bedeutet dies, dass der Vorgang des Verschliessens nun abgeschlossen ist.
• b.) Ist die Türe 1 schon geschlossen, das heisst in ihren Schliesszustand geschwenkt - der Türstellungssensor meldet eine geschlossene Türe 1 - jedoch der Riegel 12 noch offen, das heisst noch nicht vorgeschoben, so kann diese Türe 1 natürlich ohne weiteres wieder geöffnet werden. Dieser Zustand der wohl geschlossenen, aber nicht verschlossenen Panzertüre 1 wird oft übersehen, und es kommt vor, dass der Sicherheitsabschluss in diesem Zustand belassen wird. Beim erfindungsgemässen Verfahren meldet sich der Microprozessor innerhalb eines Zeitfensters und zeigt diesen anomalen Zustand an.
• c.) Der Zustand, dass bei geöffneter Tür 1 die Riegel 12 vorgeschoben sind, soll vorzugsweise verhindert werden. Dies ist mit dem geeigneten Anwenderprogramm ohne weiteres möglich, indem ähnlich wie beim Zustand b) innerhalb eines Zeitfensters ein anomaler Zustand durch den Microprozessor gemeldet wird. Vorteilhafter ist es jedoch schaltungstechnisch, diesen Zustand überhaupt nicht aufkommen zu lassen.
• d.) Aehnlich wie beim Zustand a) ist auch dieser Zustand ein zu erreichendes Ziel; nämlich die Riegelposition geöffnet und die Türstellung ebenfalls offen ist genau die Bedingung, die gefordert werden muss, um in einen Sicherheitsraum hineinzukommen. Geschieht dies bspw. ausserhalb eines vorgegebenen Zeitfensters, in diesem Fall die Arbeitszeit des Kassiers, so schaltet der Microprozessor in einen Alarmzustand. Damit soll verhindert werden, dass das Sicherheitssystem ausserhalb von vorgegebenen Zeiten,die unter Umständen auch wechseln können, auch durch dazu befugte Personen geöffnet wird.Der Zustand d), also Riegel 12 offen und Türe 1 ausgeschwenkt, ist der Zustand, in dem das ganze System programmierbar ist. Irgendwelche Bedienungsfehler bei geöffnetem Schliessystem haben zumindestens den Vorteil, dass der Zugang zum Sicherheitsraum noch offen ist während der Zeit, in der der Fehler behoben wird. Die Möglichkeit, in diesem Zustand das Sicherheitssystem neu zu programmieren, ist gleichsam ein scharfer Zustand, bei dem wohl Fehlbedienungen möglich sind, jedoch nicht so, dass nach einer Fehlbedienung der Zutritt zum Sicherheitsraum verwehrt würde.

To monitor the armored door 1, the positions of the bolts 12 on the one hand and the position of the door leaf on the other hand are determined. This information can be determined, for example, via microswitch positions; the position detection of the door leaf is preferably carried out using the means specified in Swiss Patent No. 629 565. The truth table shown below shows the main states of the locking system:

• a.) Condition a) means that the door 1 is closed and the bolts 12 are advanced. This state also corresponds electronically to a neutral state or a fixed function. If this state is seen from the open locking system, this means that the closing process is now complete.
• b.) If the door 1 is already closed, that is to say pivoted into its closed state - the door position sensor reports a closed door 1 - but the bolt 12 is still open, that is to say not yet pushed forward, this door 1 can of course be opened again without further ado. This state of the well-closed but not closed armored door 1 is often overlooked, and it can happen that the security lock is left in this state. At the According to the method according to the invention, the microprocessor reports within a time window and displays this abnormal state.
• c.) The condition that the bolts 12 are advanced when the door 1 is open should preferably be prevented. This is easily possible with the appropriate user program by reporting an anomalous state by the microprocessor within a time window, similar to state b). In terms of circuitry, however, it is more advantageous not to let this state arise at all.
• d.) Similar to state a), this state is also a goal to be achieved; namely the bolt position opened and the door position also open is exactly the condition that must be required in order to enter a security room. If this happens, for example, outside a predetermined time window, in this case the working time of the cashier, the microprocessor switches to an alarm state. This is to prevent the security system from being opened by authorized persons outside of specified times, which can also change under certain circumstances. State d), i.e. bolt 12 open and door 1 swung out, is the state in which the whole System is programmable. Any operating errors with the locking system open have at least the advantage that access to the security room is still open while the error is being remedied. The possibility of reprogramming the safety system in this state, is a sharp state, as it were, in which incorrect operation is possible, but not in such a way that access to the security room would be denied after incorrect operation.

The electronic management of security closures, as previously described, has the following advantages:

After entering the security zone and closing door 1 and then locking door 1 - not lock 20 - it is possible to automatically reject the code. A failure as described at the beginning or even forgetting is no longer possible or has no negative consequences.

The setting of new codes, that is also the periodic changeover, is greatly simplified by a redundancy provided. An incorrect code is simply eliminated by the new entry. This is not the case with mechanical locks. When entering an incorrect code, the lock 20 must be brought into neutral by a specialist in order to finally be able to enter the new, correct code.

The lock 20 is automatically locked, whereby an automatic closing of the door 1 can also be included.

The redundancy for security can be increased quickly and easily, for example by assigning a third, fourth, etc. code, which is not possible with the mechanical code lock.

The intelligence involved allows a number of variants without a mandatory measure to change the locking system.

It does not have to be described again in detail how confusing it is with a reinforced door 1 according to the invention to deactivate a blocking point; first, the location of the castle 20 is unknown and can no longer be derived from external features; secondly, the number of locks 20 and locking points 14 can be multiplied without additional holes through the armor and without additional connecting elements 40 to the outside.

A blocking point 14 to be put out of action is always behind protective armor layers, in the area of which the lock 20 is also located, without the blocking point area being able to be estimated, as in the known prior art.

The risk of a successful break-in is reduced many times over if several locks 20 are arranged arbitrarily, the position of which cannot be determined from the outside and are arranged differently from case to case.

Claims (11)

1. A locking system for a movable locking appliance (1) with a lock (20) arranged on the inner closed side of the locking appliance (1), which lock releases or locks a locking element (14) connected to a bolt (12), with a bolt drive (30), an operating device (25, 35) arranged on the outer accessible side of the locking appliance (1) for actuating the locking element (14) via the lock (20), and at least one connecting element (40) between the operating device (25, 35) and the lock (20)
   characterized in that
   the lock (20) is arranged in such a way that its position cannot be deduced by marks on the accessible outer side of the locking appliance (1).
2. A locking system according to claim 1, characterized in that one operating device (25, 35) is assigned to a plurality of locks (20).
3. A locking system according to claim 2, characterized in that between the operating device (25, 35) and the lock (20), multiple connecting elements (40) are arranged in a parallel layout, being provided for interchangeable use for reasons of operational reliability and triggering a signal in the case of a malfunction, wherein the connecting elements (40) disposed in parallel and their assigned locks (20) that are not affected by the malfunction, do fully perform the desired functions.
4. A locking system according to one of the above mentioned claims, characterized by an operation by means of electronic control elements with a memory for the storage of at least one lock permutation and with a time function.
5. A locking system according to one of the above mentioned claims, characterized in that after the locking of the locking appliance and of the bolts (12), the locks (20) are locked automatically.
6. A locking system according to one of the above mentioned claims, characterized in that the locks (20) can be easily reset to new permutations by means of the operating device (25, 35), so that the locks (20) need not be accessible for this procedure.
7. A locking system according to claim 4, characterized in that, for the actuation of the lock, the electronic control elements (45) are connected to a means (55) which translates the electronically prepared values into a mechanical action.
8. A locking system according to claim 7, characterized in that the means (55) for the actuation of the lock is an alternating current motor or a pulsating direct current motor.
9. A locking system according to one of the above mentioned claims, characterized in that there are arranged at least two decentralised operating devices (25, 35) independent of each other which actuate the locks (20) only in the case of an overall correct operation.
10. A method for operating the locking system according to claim 1, characterized by the following procedural steps:

    - generating the electrical parameters for the lock actuating means

    - measuring the signal produced by the door or bolt position

    - deciding to apply the electric parameters to the lock actuating means - opening/closing

    - applying the electric parameters to the lock actuating means.
11. A method according to claim 10, characterized by the use of time windows, within which the electric parameters operate for the lock actuating means.

Images