EP0238361A2 - Système de fermeture électronique - Google Patents

Système de fermeture électronique Download PDF

Info

Publication number
EP0238361A2
EP0238361A2 EP87302464A EP87302464A EP0238361A2 EP 0238361 A2 EP0238361 A2 EP 0238361A2 EP 87302464 A EP87302464 A EP 87302464A EP 87302464 A EP87302464 A EP 87302464A EP 0238361 A2 EP0238361 A2 EP 0238361A2
Authority
EP
European Patent Office
Prior art keywords
key
door
zone
codes
keys
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP87302464A
Other languages
German (de)
English (en)
Other versions
EP0238361A3 (fr
Inventor
Bruce A. Clarkson
Ronald Joseph Frere
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Emhart Industries Inc
Original Assignee
Emhart Industries Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US06/842,681 external-priority patent/US4789859A/en
Application filed by Emhart Industries Inc filed Critical Emhart Industries Inc
Publication of EP0238361A2 publication Critical patent/EP0238361A2/fr
Publication of EP0238361A3 publication Critical patent/EP0238361A3/fr
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • E—FIXED CONSTRUCTIONS
    • E05—LOCKS; KEYS; WINDOW OR DOOR FITTINGS; SAFES
    • E05B—LOCKS; ACCESSORIES THEREFOR; HANDCUFFS
    • E05B49/00—Electric permutation locks; Circuits therefor ; Mechanical aspects of electronic locks; Mechanical keys therefor
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/20—Individual registration on entry or exit involving the use of a pass
    • G07C9/21—Individual registration on entry or exit involving the use of a pass having a variable access code
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00896—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys specially adapted for particular uses
    • G07C9/00904—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys specially adapted for particular uses for hotels, motels, office buildings or the like
    • E—FIXED CONSTRUCTIONS
    • E05—LOCKS; KEYS; WINDOW OR DOOR FITTINGS; SAFES
    • E05B—LOCKS; ACCESSORIES THEREFOR; HANDCUFFS
    • E05B47/00—Operating or controlling locks or other fastening devices by electric or magnetic means
    • E05B47/06—Controlling mechanically-operated bolts by electro-magnetically-operated detents
    • E05B47/0611—Cylinder locks with electromagnetic control
    • E05B47/0619—Cylinder locks with electromagnetic control by blocking the rotor
    • E05B47/0626—Cylinder locks with electromagnetic control by blocking the rotor radially
    • E05B47/063—Cylinder locks with electromagnetic control by blocking the rotor radially with a rectilinearly moveable blocking element
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00571—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by interacting with a central unit
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/20—Individual registration on entry or exit involving the use of a pass
    • G07C9/27—Individual registration on entry or exit involving the use of a pass with central registration
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C2009/00753—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys
    • G07C2009/00761—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by connected means, e.g. mechanical contacts, plugs, connectors

Definitions

  • the present invention relates to electronic locking systems, and more particularly to a method, for use in an electronic locking system, of a method of keying the door locking units and keys of an installation, said door locking units and keys carrying codes which are electronically processed in a given door locking unit upon insertion of a given key.
  • Electronic security systems have been well known for many years, and in recent years have seen a wide variety of approaches to designing electronically controlled door locking systems.
  • Some of the early commercial systems have required a hard-wired connection between a central processor and the electronics of the locking systems of given doors.
  • a disadvantage of such systems is the need to install connections between the central controller and individual lock assemblies.
  • Another variable of these systems is the ability to "re-key" at the door, i.e. to change the coding of the key where such recoding is required by a given keying system function.
  • a principal concern in the design of such locking systems is the security afforded by the system -- in the sense of the ease with which an unauthorised party can determine keying system information which could be used to open one or more locks, rather than the sense of the mechanical integrity of the locking mechanisms.
  • System specifications relating to such security include the number of possible values of the keying system codes, the ability to update such codes, and the effect on the management system of a given installation if security has been breached.
  • the keying systems of the present invention are used to particular advantage with electronic lock technologies which provide a large number of possible values per code and which permit rekeying at the door locking system.
  • an architecture matrix is defined which logically represents the configuration of door locking units of said installation, and a plurality of zone codes is assigned to various door units and keys of said installation, each zone code representing a feature which is common to all the keys and door locking units carrying it, such that, in using a given key to attempt to unlock a given door locking unit, each of the key zone codes is compared with each of the door zone codes and a positive comparison between any one key zone code and any one door unit zone code results in an "allow access" decision.
  • the invention further provides, in another of its several aspects, an electronic locking system of the type including encoded key members and encoded door locking units wherein, upon recognition of a key member by a door unit, one or more codes on the key member are compared with one or more codes in the door locking unit, such that a positive comparison results in an "allow access” decision, characterised in that each of the key members and each of the door locking units carry a plurality of "zone codes", each of the key zone codes being compared with each of the door unit zone codes, whereby a "zone” comprises a set of key members and door locking units sharing a common zone code.
  • the keying system architect can define various "zones", each comprising a defined set of keys and door locking units which carry a common zone code, so that any of the keys will open any of the locking units.
  • This keying system provides flexibility, efficient use of key and door unit memory, security advantages, and other benefits.
  • the zone coding scheme may be extended to implement various keying system routines, by including in a control logic assembly which processes the zone codes, memory for keying system feature routines.
  • the zone codes (desirably of both key and door unit) may be accompanied by one or more "feature" codes, which may be set to cause the running of an appropriate keying system routine by the control logic assembly.
  • these keying system routines may include the step of recoding the key, the step of recoding the cylinder, or both.
  • one or more of the zone codes is associated with a "key class", such key class identifying a recognised type of key user.
  • Each key class as assigned a set of zone codes which is independent of the zone codes for other key classes, so that if the zone codes have to be recoded for one key class other key classes will not be affected.
  • key issuing operators can be authorised to issue keys of certain key classes only.
  • the present invention resides in the design of improved keying systems which may be utilised in connection with a wide variety of electromechanical locking system technologies.
  • the keying system of this invention is illustrated below in connection with an electronic locking system of the recodable key variety (i.e. wherein the "key” is similar to design to a traditional mechanical key), but the invention is easily adapted to card-reader technologies such as so-called “smart cards", to optically based systems, etc.
  • card-reader technologies such as so-called “smart cards”, to optically based systems, etc.
  • such locking systems should be capable of storing a large volume of data, permit the use of multiple codes within the door locking unit and the "key”, and permit the recoding of the key at the door unit when appropriate.
  • Fig. 1 shows highly schematically the principal elements of the electronic locking system, in which a key 30 is inserted into mortise lock cylinder 50 to open the lock.
  • Cylinder control circuitry 100 within cylinder 50 recognises the full insertion of key 30 and extracts electronically encoded information from the key memory 40 via key connectors 45 and cylinder connectors 59.
  • Control circuitry 100 stores and processes keying codes received from key memory 40 as well as resident cylinder codes.
  • the control circuitry 100 can alter not only the codes in key memory 40 based on data transmitted from cylinder 50 but also codes stored within the cylinder based on data from key memory 40.
  • control circuitry 100 The processing of access codes from the key and cylinder by control circuitry 100 results in a decision to grant or deny access. If an "authorised access” decision is made, release mechanism 70 receives a drive signal from control circuitry 100, causing it to withdraw a radially oriented locking pin 72 from cylinder plug 55. A user may then turn key 30 to rotate cylinder plug 55 as in a mechanical mortise lock, and rotate a cam (not shown) to release a door locking mechanism. Cylinder 50 also houses a key centring and retention device 90, which interacts with a single bit 37 or notch in the key to ensure the proper location of key 30 within keyway 57.
  • Electronically alterable key memory 40 has the ability to store a substantial number of access codes, each of which will have a much larger range of possible values than found in traditional mechanical locks.
  • This non-volatile integrated circuit technology involves memory which may be read like traditional read-only-memory (ROM) and may be written to after being electronically erased.
  • ROM read-only-memory
  • Such memory devices are commonly known as EEPROM integrated circuits.
  • EEPROM is a medium density memory, which retains adequate key memory within devices in the order of 2-3mm micron geometry. To store data in such devices, the word must be erased and then written.
  • An alternative integrated circuit technology which may be employed for the key memory 40 and cylinder memory 180 is so-called EPROM.
  • Fig. 2 is a block schematic diagram of the logic circuitry constituting the cylinder control circuitry 100, which supervises the various electronic functions of lock cylinder 50.
  • Control circuitry 100 is a microprocessor-based system including central processing unit (CPU) 105 as its central element.
  • CPU central processing unit
  • key serial interface 110 which provides synchronous serial communications of access code data to and from the key memory 40
  • timing circuitry 120 which provides various timing signals
  • key sensing circuitry 150 which produces signals indicative of the full insertion of a key in keyway 57, and of the withdrawal of the key
  • power control circuitry 140 which regulates the delivery of power from battery 68 to the various elements of the control circuitry 100
  • release driver 130 which outputs actuating signals to the release mechanism 70 in response to an appropriate command from CPU 105.
  • the control circuitry 100 Under the supervision of power control circuit 140, the control circuitry 100 undergoes various states of power distribution to the various subassemblies with a view to low power consumption.
  • Control circuitry 100 also encompasses various types of memory, including random access memory (RAM) 160, read only memory (ROM) 170, and electronically alterable memory (EEPROM) 180.
  • RAM 160 receives data from key interface 110 and permits high-speed processing of this data by CPU 105.
  • ROM 170 stores the firmware for the control circuitry; certain routines are explained below in the discussion of the lock's keying system.
  • EEPROM 180 comprises non-volatile memory for the access codes resident in cylinder 50 and may take the form of any of a number of commercially available devices.
  • timing circuitry 120 also comprises a real time clock to provide a time-of-day signal, i.e. a resolution of some number of minutes.
  • this clock takes the form of a dedicated clock IC.
  • the energy source 68 (Fig. 1) is designed to provide continuous input power to this clock IC. The inclusion of such clock significantly affects the access code memory structure, and keying system firmware, as discussed below.
  • Fig. 3 is a high-level flowchart of the basic operating program 350 for cylinder control circuitry 110, which is resident in ROM 170 (Fig. 2).
  • the key sensing circuitry 150 detects the valid insertion of a key, causing power control circuitry 140 to provide power to CPU 105 and key 30, at 353.
  • the logic selects a suitable communication protocol for key serial I/O 110 (Fig. 2); different protocols would typically be required for normal key 30 and for a cylinder recombinating device 355 (shown in Fig. 5 and discussed below).
  • the key serial I/O reads data from the key memory 40 into RAM 160.
  • the key and cylinder memories are structured in the preferred embodiment in a plurality of "zone code" keying data F1, F2...FN.
  • data is read from the key at 356 on a code-by-code basis.
  • the program selects the appropriate function subprogram stored in ROM 170 based upon a function associated with the given zone code and interprets the just-read key codes.
  • this interpretation process may result in an "authorise access" decision, may yield data which is intended to be delivered to the key or key-like device (such as for recombinating a key 30 or for providing information about cylinder 50 to a clerk console 350), and may result in commands to re-code the cylinder memory 180. Cylinder re-coding, if required, advantageously takes place at this stage.
  • the CPU tests the key data in RAM 160 to determine whether an "end of data" flag is present, while at 364 the redundant check codes in the key data are analysed to confirm the valid key data had been received. A failure of the latter test causes the re-reading of the invalid key data.
  • any output codes resulting from the prior processing of the key codes are written to the key or key-like device (e.g. to change one or more zone codes of a key 30).
  • the CPU determines whether the function processing had resulted in an "authorise access” state, and if such a state is present actuates the release driver 130 to open the lock. In the absence of an "authorise access” flag the system enters a "time out” state at 367, wherein the timing circuitry 120 clocks a predetermined time interval during which the key sensing circuitry 150 is not permitted to output a valid key insertion signal. Time out step 367 limits the frequency with which an unauthorised user can feed a large number of random codes to the control circuitry 100 using a key-like device. The time out state may be effected after a prescribed number of key insertions.
  • the power control circuitry 140 turns off the supply of power to CPU 105 and release driver 130.
  • Table 1 shows an advantageous memory map for access codes contained within the cylinder or door unit EEPROM 180 (Fig. 2).
  • This memory map schematically illustrates the logical addressing scheme of the lock's control program to sequentially retrieve data from memory cells within EEPROM 180, but does not necessarily depict the physical layout of such memory cells.
  • Memory 180 includes various fixed format fields - fields with a predetermined number of assigned data bits - and a variable format portion for function storage. Fixed format fields includes a "door unit identification" - a serial number that identifies the particular cylinder 50, but has no security function - and the "programming code", a security code which must be transmitted to cylinder control circuitry 100 in order to allow modification of memory 180, as discussed below. Other fixed format fields not shown in Table 1 may be included depending on the requirements of the door unit firmware.
  • the function storage fields contain the data associated with the particular keying system functions programmed into cylinder access code memory 180; this is illustrated below in Tables 2 and 3.
  • key memory 40 is structured similarly to the cylinder code map of Table 1, but omits the programming code field.
  • Table 2 illustrates the record structure of a particular keying system feature - i.e. the zone function.
  • the zone function implements a comparison of each of a set of key zone codes with each of a set of cylinder zone codes, and permits access if any match occurs.
  • the header byte of this memory map gives the number of zone function records (here four). Together with preknowledge of the memory occupied by the records of each function, the header byte enables the addressing routine to scan through logical memory to locate the next function within function storage (Table 1). In each record, the code combination represents the code which must be matched to initiate the corresponding function.
  • the status bits S1-S5 (five are shown for purposes of illustration are associated with specialised zone features, so that the setting of a particular use bit (at most one is set) identifies the code combination with that feature. For example, S1 might be associated with "one use” - which allows keys to be issued for one time use only; and S2 might be identified with “electronic lockout” - permits a special lockout key to prevent access by normal keys, until the lockout key is reused. If no status bit S1-S5 is set, the code combination will be a Basic Zone code which yields an "authorise access" decision upon matching of key and door unit zone codes, without further processing.
  • each key and each door unit advantageously contains multiple codes, each code representing one zone.
  • each zone may be defined as a collection of door units and keys which share a common code.
  • Storage is required in door units and keys for each zone in which it participates -- i.e. storage limits correlate with the number of types of access to be granted. This storage scheme is much superior to having each door unit store a list of authorised keys, or conversely having each key store a list of authorised door units, both such schemes being vulnerable to security breaches, and being wasteful of storage capacity.
  • access codes are assigned a given code width (number of binary digits per code) which determines by inverse relationship the total number of available codes in EEPROM. Higher code widths will decrease processing speed, but increase the resistance of the system to fraudulent access attempts by means of random codes electrically fed to the lock; in addition higher-width codes are less likely to be inadvertently duplicated in system management.
  • Tables 3 and 4 give simplified record structures for cylinder and key memory function storage fields for basic zone and one use functions, and should be referenced together with the flow chart schematic diagram of Fig. 4 to illustrate the relationship between the access code memory structures and the associated keying system software routines in ROM 170.
  • the door unit or cylinder record structure includes three zone records with associated "one use" status bits S1 (Table 3), while the key memory structure contains five zone records but no associated status or use bits (Table 4).
  • the control firmware includes various subroutines associated with particular keying system features, including the "basic zone/one use subroutine" of Fig. 4.
  • This routine includes nested loops wherein key pointer I (e.g. pointing to a particular record or row: see Table 4) and cylinder pointer J (e.g. pointing to a given cylinder zone record: see Table 3) are each incremented from 1 to the respective "number of records” value. For each pair of values I, J, this routine compares the "code combination" for the relevant cylinder and key zone records at step 335.
  • the program determines at 338 whether the CYL.S1 flag for the relevant record J is set. If this "one use” flag is not set, the routine simply returns a "grant access” decision at 341. If the flag is set, however, the routine first updates CYLCODE (J) with a pseudorandom number generated by the management system; this prevents a repeated use of the key to open the same lock cylinder.
  • the locking system of the invention can achieve all of the traditional keying system features found in mechanical mortise cylinders (e.g. great grand master keying, cross-keying, etc.), as well as additional useful functions.
  • the cylinder access code memory 180 can include updating key codes, which may be written to the key memory 40 in implementing certain keying system functions. Specialised keying system functions may be designed to control unauthorised copying of key codes, and in general to selectively update the key memory 40 for enhanced flexibility together with security.
  • the keying system associates with each zone code a meaningful zone code identifier based upon the characteristics of the door units and keys which carry such code, in order to facilitate this recoding process.
  • the keying system may utilise a special code to "prime" given keys and cylinders for recoding.
  • the keying system can be extended to include time-of-day control.
  • Time-of-day can be associated with each keying function.
  • a time can be associated with each door unit zone (i.e. set of lock cylinders containing a common zone code).
  • the keying system functions could be modified to include one or more time access windows, to include automatic cylinder recording at a given time of day, and other features.
  • the cylinder memory structure must be supplemented with time-of-day codes, i.e. one byte for each significant time interval within a day.
  • the electronic locking system of the invention may be incorporated in "hard-wired" electronic lock installations, comprising a communication network linking the various lock cylinders and a central management system processor.
  • the lock cylinder 50 comprises a stand-alone system, with no hard-wired communication.
  • the IC packages 41 (or 42) within each key 30 serve as a substitute for a direct communication link with a central controller, inasmuch as the key can be encoded at a remote station to transmit codes to lock cylinder 50.
  • Key 30 can be encoded with special codes which are recognised by cylinder access code memory 180. As shown in Fig.
  • the management system advantageously includes one or more key/cylinder consoles 250, which may take the form for example of a portable microcomputer with specialised input/output devices.
  • Key receptacle 252 accepts insertion of a key 30, and links the inserted key to internal logic circuitry for initialising or recoding a key.
  • Cylinder recombinating device 255 includes a key blade 256 similar to a normal key blade 33 (Fig. 8), and a plug 257 which mates with an outlet (not shown) at the rear of console 250.
  • the portable consoles 250 may be carried to given door units 50 for the purpose of initializing or recombinating the door unit memory 180.
  • the management system is advantageously adapted to the requirements of institutional users such as hotels and universities.
  • the system might include a plurality of "clerk consoles" 250 a - d in accordance with the device of Fig. 5, which communicate with a central controller 260.
  • Controller 260 acts as the central repository of the management system data base for the entire installation and downloads data into the various consoles 250 a - d .
  • controller 260 tracks all zone codes which have been assigned, together with the identities (e.g. door unit identifiers - Table 1) of all keys and door units which carry each zone code.
  • Consoles 250 a - d encode keys as required by the keying system data base and records to whom they are issued.
  • a given console 250 can interrogate the central controller 260 to inspect the central database; sensitive information can be protected by features such as passwords and orher techniques (see references below to operator authorisation, key classes, etc.)
  • This preferred management system may be characterised as a distributed processing system, with all real time processing effected at individual lock cylinders 50.
  • timing circuitry 120 includes a real time clock
  • key/initialisation console 1350 and central controller 1360 must have the ability to keep time-of-day in operating the management system.
  • the keying system incorporates a set of rules for logically and efficiently assigning zone codes to door units and keys.
  • the keying system architect establishes a logical structure ("architecture matrix") within the framework of certain design rules, such logical structure being based upon the geographic and functional characteristics of the door units of a given installation.
  • the architecture matrix may take the form a multidimensional array including one or more parameters representing the configuration of door locking units.
  • such parameters include "choice rule" limitations governing the key-issuing operator's assignment of door units and features to a key being issued.
  • the system automatically assigns zone codes to the issued keys in accordance with pre0established assignment rules, based upon the door unit and feature assignments.
  • the architecture matrix design rules and the rules for interpreting a given architecture map are pre-established, and the keying system architect generates or modifies a given architecture matrix in accordance with the requirements of a given installation.
  • the process of designing a keying system for a given installation, and the issuance of keys and other aspects of the management system rely upon an architecture matrix based upon "door groups", which in the simplest case may be defined as "a door unit or collection of door units". To permit a hierarchical definition of "door groups”, however, this term is broadened to include "groups of door groups".
  • Each door group has an identifier chosen by the keying system architect, most desirably a name related to local geography or function.
  • the code assigned to given zones is desirably chosen to have no obvious relationship to its related doors, door groups, and keys, thereby reducing the impact of disclosure of the key data to an unauthorised party.
  • door groups affords tremendous flexibility in system design -- these may be defined by a keying system architect based only in the requirements of a given installation, unconstrained by the particular keying system employed. Optimal use of this scheme calls for multiple zones in both the door and key.
  • the invention provides a logical scheme for designing a keying system architecture matrix for given installations, using the concepts of "door groups".
  • the keying system architect defines a "door group graph” in the form of a "directed acyclic network” in which each node represents a door group; in this logical scheme, then, each door group corresponds to a unique node of the graph.
  • a directed acyclic network as used in this specification means a hierarchial graph or network consisting of nodes with interconnecting edges or branches, each edge having a defined direction; when this graph is traversed from node to node along the defined directions, one never returns to an earlier-encountered node.
  • Such networks typically consist of “trees” in the mathematical sense, i.e. acyclic graphs wherein each node has only one immediately preceding (or predecessor") node, but also include graphs wherein multiple branches may meet at a single "successor" node.
  • the key-issuing operator begins at an authorised starting node, as explained below, and traverse the subordinate nodes according to defined “choice rules" until only terminal nodes -- typically identifying particular door units -- ­remain.
  • Choice rules are a set of rules one of which is assigned to each node of a door group graph except terminal nodes, in order to govern the key-issuing operator's decision in selecting none, one or more of the immediate subordinate node(s).
  • An advantageous set of choice rules to be utilised in defining a keying system architecture might include the following:
  • the first two cover most decisions which the keying system architect would need to establish; these impose strict limitations on the key issuing operator's decision (in fact, the first rule requires no decision).
  • the third rule, "each of”, has exactly the same effect as "all of” from the perspective of the key-issuing operator, but has certain security advantages discussed below. "Any of” provides the most flexibility in choosing door groups. "At least one of” is similar to “any of”, but precludes the possibility of choosing no door groups; ths could be used for example to permit the issuance of one or more locker door keys to a patron of a gymnasium.
  • the key-issuing process may be implemented using a management system such as that illustrated in Figure 6 as an "on-line" system wherein a series of "screens" are displayed at a clerk console 250 to guide the key-issuing operator through relevant portions of the door group graph, presenting the appropriate choices, and possibly reporting the results of the decisions.
  • This graph-traversing process is continued node by node until only terminal nodes remain.
  • a menu would be displayed appropriate for the choice rule for that node, and the door groups for that node and the successor nodes identified using nomenclature created by the keying system architect (desirably according to key function or local geography).
  • the key-issuing operator only implements the decisions previously established by the keying system architect, which decisions may be designed to ensure proper security, completeness, and reasonableness of issued keys.
  • Figure 7 illustrates a given portion of a door group graph for an academic institution, i.e. a graph 400 for issuing keys to dorm residents.
  • a graph 400 for issuing keys to dorm residents.
  • TABLE 5 should be consulted to determine the significance of the various door groups and door units shown in these figures.
  • node 401 represents the door group consisting of all doors of a given dormitory.
  • the issuer must branch to both the "Entrances" door group 402 and the "floors” door group 404.
  • the operator At the "Floors" node 4040, the operator must elect between floors 1 and 2 (nodes 408 and 409).
  • the issued key will be coded for both the front and the rear entrances, for one of the floors (including the stair well 511 for a second floor resident), for the entrance and bathroom doors to a given suite, and for one of the rooms of that suite.
  • the key-issuing program might, for example, display screens corresponding to nodes in the sequence 401, 402, 404, 405, 403, 408, 412, 415, 417, 413, 422 -- thereby encoding the key for the front and rear building entrances, the entrance and bath doors for suite 101, and door of room A of that suite.
  • Each door group is assigned a "level index" representing its level within the keying system architecture hierarchy -- ­this is visually represented by the degree of indentation of the door group name.
  • Each door group has an associate choice rule, except for terminal door groups (i.e. door units).
  • the key-issuing program can process the elements of such listing in the sequence of the counting index, or any of a variety of other sequences known from graph theory, and at each level applies the choice rule to the elements at the successor level.
  • the coding in the preceding example would be effected by assigning three zone codes to the key: one encompassing the front and rear entrance doors to the dorm, one including the entrance and both for the suite, and one for the student's bedroom (see TABLE 7).
  • zone codes are an extremely flexible one and that many alternative schemes could be employed for assigning zones to groups of doors and keys.
  • the same door units could be assigned to a given key using just two zones, one encompassing the building entrances and one including the individual student's bedroom as well as the entrance and bath door for his suite (see TABLE 8).
  • key-issuing operators are authorised to commence the process only at defined door groups. Therefore, the access of each such operator is limited to those door groups and door units including his authorised starting door groups and those subordinate thereto. The system will not permit such operator to view the remainder of the door group graph during key issuance. Privileged operators may be given access to a top node or nodes by which they can see the entire structure.
  • Keying system architectures in accordance with the invention advantageously make use of "key classes", which in common sense terms correspond to recognisable types of key users.
  • key classes might include dorm residents, housekeeper, plumber, security personnel, resident adviser, etc.
  • Each individual key class is associated with a defined starting node for issuing keys to members of such class, and each key class would be assigned an independent set of zone codes.
  • the keying system would include two sets of zone codes in parallel. Therefore, if the zone codes for one key class were divulged, zone codes of other key classes would not be compromised.
  • the door groups at which key issuing operators may start are advantageously associated with key classes. Other mechanisms for operator key-issuing authorisation are possible, however.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Electromagnetism (AREA)
  • Lock And Its Accessories (AREA)
EP87302464A 1986-03-21 1987-03-23 Système de fermeture électronique Withdrawn EP0238361A3 (fr)

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US842681 1986-03-21
US06/842,681 US4789859A (en) 1986-03-21 1986-03-21 Electronic locking system and key therefor
US1310687A 1987-02-10 1987-02-10
US13106 1987-02-10

Publications (2)

Publication Number Publication Date
EP0238361A2 true EP0238361A2 (fr) 1987-09-23
EP0238361A3 EP0238361A3 (fr) 1988-02-24

Family

ID=26684439

Family Applications (1)

Application Number Title Priority Date Filing Date
EP87302464A Withdrawn EP0238361A3 (fr) 1986-03-21 1987-03-23 Système de fermeture électronique

Country Status (2)

Country Link
EP (1) EP0238361A3 (fr)
KR (1) KR870009095A (fr)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2202354A (en) * 1987-03-12 1988-09-21 Security Services Plc Keys
FR2635895A1 (fr) * 1988-08-26 1990-03-02 Unidel Securite Systeme de gestion d'acces pour cartes a microcalculateur incorpore et procede s'y rapportant
EP0559605A2 (fr) * 1992-03-04 1993-09-08 Bauer Kaba Ag Système d'identification de personnes
WO1997031347A1 (fr) * 1996-02-22 1997-08-28 Volumatic Limited Systeme de securite a cle

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR100307665B1 (ko) * 1997-05-23 2001-10-19 하재홍 전자정보키시스템

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE2325566A1 (de) * 1973-05-19 1974-12-05 Zeiss Ikon Ag Mit magnetischen mitteln arbeitendes schloss, insbesondere zylinderschloss, und hiermit ausgestattete verschlussanlage
DE2851396A1 (de) * 1978-11-28 1980-06-04 Kadex Inc Elektronische schliessvorrichtung
DE3006128A1 (de) * 1980-02-19 1981-08-20 Sachs Systemtechnik Gmbh, 8720 Schweinfurt Schliesseinrichtung
GB2118614A (en) * 1982-04-16 1983-11-02 Leonard Joseph Genest Method of code changing for electronic lock
WO1986001360A1 (fr) * 1984-08-17 1986-02-27 Computerized Security Systems, Incorporated Systeme de verrouillage commande par micro-ordinateur

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE2325566A1 (de) * 1973-05-19 1974-12-05 Zeiss Ikon Ag Mit magnetischen mitteln arbeitendes schloss, insbesondere zylinderschloss, und hiermit ausgestattete verschlussanlage
DE2851396A1 (de) * 1978-11-28 1980-06-04 Kadex Inc Elektronische schliessvorrichtung
DE3006128A1 (de) * 1980-02-19 1981-08-20 Sachs Systemtechnik Gmbh, 8720 Schweinfurt Schliesseinrichtung
GB2118614A (en) * 1982-04-16 1983-11-02 Leonard Joseph Genest Method of code changing for electronic lock
WO1986001360A1 (fr) * 1984-08-17 1986-02-27 Computerized Security Systems, Incorporated Systeme de verrouillage commande par micro-ordinateur

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2202354A (en) * 1987-03-12 1988-09-21 Security Services Plc Keys
US4926665A (en) * 1987-03-12 1990-05-22 Security Services Plc Remotely programmable key and programming means therefor
GB2202354B (en) * 1987-03-12 1991-03-06 Security Services Plc Remotely programmable key and programming means therefor
FR2635895A1 (fr) * 1988-08-26 1990-03-02 Unidel Securite Systeme de gestion d'acces pour cartes a microcalculateur incorpore et procede s'y rapportant
EP0559605A2 (fr) * 1992-03-04 1993-09-08 Bauer Kaba Ag Système d'identification de personnes
EP0559605A3 (en) * 1992-03-04 1995-06-21 Bauer Kaba Ag Individual identification system
WO1997031347A1 (fr) * 1996-02-22 1997-08-28 Volumatic Limited Systeme de securite a cle

Also Published As

Publication number Publication date
KR870009095A (ko) 1987-10-23
EP0238361A3 (fr) 1988-02-24

Similar Documents

Publication Publication Date Title
JPS63575A (ja) 改良キ−イングシステム
JP4906212B2 (ja) キー及びロックデバイス
US6000609A (en) Mechanical/electronic lock and key therefor
US5397884A (en) Electronic kay storing time-varying code segments generated by a central computer and operating with synchronized off-line locks
US5204663A (en) Smart card access control system
US5508691A (en) Self-contained electronic lock with changeable master and slave codes
US5347267A (en) Electronic lock reset system and method
US5349345A (en) Electronic lock
US5170431A (en) Electronic bolt lock with enhanced security features
AU2001239626A1 (en) Key and lock device
CA2559378C (fr) Systeme de commande d'acces avec code d'acces a parties multiples et suppression de listes nulles automatique
EP1244863A1 (fr) Serrure mecanique/electronique et cle pour cette serrure
EP0239342A2 (fr) Systèmes de verrouillage électronique
US20070061272A1 (en) Access administration system and method for a currency compartment
CA1276039C (fr) Systeme de verrouillage de portes commande par micro-ordinateur
EP0238361A2 (fr) Système de fermeture électronique
CN1145735C (zh) 自主式随机动态密码锁系统
KR910001667B1 (ko) 키잉 시스템
JPS62154083A (ja) デ−タ管理手段を有するｉｃカ−ド
JPH0288863A (ja) Ｉｃカード入退室管理システム
JP2683056B2 (ja) Ｉｃカード入退室管理システム
JP2764406B2 (ja) Ｉｃカード入退室管理システム
Lincoln Key control
JPH0288862A (ja) Ｉｃカード入退室管理システム
JPH0288858A (ja) Ｉｃカード入退室管理システム

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): DE FR GB IT

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): DE FR GB IT

17P Request for examination filed

Effective date: 19880721

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: EMHART INDUSTRIES, INC.

17Q First examination report despatched

Effective date: 19900828

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN WITHDRAWN

18W Application withdrawn

Withdrawal date: 19901130

RIN1 Information on inventor provided before grant (corrected)

Inventor name: FRERE, RONALD JOSEPH

Inventor name: CLARKSON, BRUCE A.