EP1281827A1 - Electronic closing system for access control - Google Patents

Abstract

The system has a mechanical bearer for storing user/operation codes representing times at which the bearer is output, an electromechanical lock system, output devices for storing coded information re user bearers, programming devices for transferring information to electronic door circuits and a computer for managing the whole installation and sending information to output devices for user cards and to programming devices for door module units.

Description

The present invention relates to an electronic locking system for Access control of the type mentioned in the preamble of claim 1.

Electronic locking systems are widely used to control access from closed rooms used for a limited number of people.

The usual mechanical locks do not solve the problem of losing the Keys and invalidating the keys in a simple and versatile way.

There are many different electronic locking systems on the market that are different Use carriers (cards or electronic keys, etc.) where the one of User lost carrier is easily invalidated, being a new one Carrier is issued for this user. When the castle reads this bearer, do it automatically invalidates the previous carrier and accepts the new carrier as valid.

U.S. Patent 4,519,228 (Electronic Recodeable Lock) to Tor Sornes describes one electronic lock with a punch card with a magnetic stripe. By doing A decoding command is stored on the magnetic stripe, indicating that the access code of the Lock must be changed by coding the punch card.

The disadvantage of this solution is the high cost of the composite card (perforated and magnetic) compared to the solutions that use a conventional magnetic card.

U.S. Patent 3,906,447 ("Security system for lock and key protected secured areas") from Crafton describes a locking system of the type mentioned for controlled Spaces with the help of electronic locks, in which each user has a carrier (Punch card, magnetic card, etc.). To gain access to a restricted area received, the lock must read the user's carrier. Every castle and everyone The user's carrier stores a code. If the code of the carrier is that of a Lock is read, matches the code stored in the lock, this allows access to the area to which access is through the castle is limited. On each carrier of the user there is also a follow or Opcode stored representing a time. This time coincides with the time together in which each carrier is spent. The castle compares that Operation code of the wearer with that in the lock at the time of reading the Bearer of the user's saved time. If the wearer's operation code is larger than the time stored in the lock at the time of reading the wearer, the lock stores the wearer's code as a new code, the previous one Carrier code is invalidated. The system described in this patent exists from a device which is intended for coding the user carrier. This Device has means for storing a counter representing a time as well as devices for incrementing this counter at regular intervals. The castle has facilities for storing a counter in a similar form represents a time. The carrier of a user also stores a code that the Represents time when his access to the door expires. The lock automatically does that Carrier code invalid if the time stored by the lock matches the expiry time of the Carrier matches.

The basic disadvantage of this system is that it requires one permanent synchronization between the internal time of the locks and the time in the Maintain output device for the carrier. If for any reason If these two times are desynchronized, the system stops working or no longer works correctly.

Another disadvantage is that it is only possible to have one carrier code per lock store, with access to the door by two users with different Sluggish is not possible.

Another disadvantage of this known invention is that in each lock additional space to store the carrier's expiration time in addition to that Carrier code must be available.

ES Patent 532,333 ("Nueva cerradura electronica programable" ("Novel programmable electronic lock ")) by Juan Imedio, describes a electronic lock that has a card that stores a code that consists of a Card code and a sequential code. When the one read from a castle Card code matches the code stored by the lock this gives access to the area limited by the castle. If the card code is one unit larger than the code stored in the lock, it does so previous code is invalid and stores the new card code.

ES Patent 9202223 ("Nueva cerradura electronica programable" ("Novel programmable electronic lock ")) by Juan Imedio, describes a electronic lock with cards based on ES patent 532,333 of the same Author. The basic difference from the previous patent is that if the card code is one or more units larger than that in the lock stored code, the previous code is invalidated, and the new card code is saved.

The basic disadvantage of this type of system is that it is sequential Code of these locks will only be switched if the new user enters their Insert the carrier into the locks. The sequential is often switched Codes of the locks are only allowed if the difference between the card code and the stored sequential code in the lock a maximum value exceeds. Otherwise access to the castle will not be allowed. If on the other hand new carriers are issued, and with this initially no access to a castle is carried out (for example at an entrance with little traffic, as is the case for an emergency exit may be the case), the lock switches its saved sequential codes no longer and will be reissued compared to the codes of Delayed carrier so that its resynchronization with the help of an outside of Lock arranged device is required when the new carrier with a Code is output that the code stored in the lock around this Exceeds the maximum value.

Another disadvantage of this system is the complexity of manufacturing it predated user carriers. Occasionally it is necessary to issue carriers that become valid at a time after the date of issue of the institution. One in these The method used is to assign a sequential code to the is several units larger instead of assigning the sequential code below. This method is unsatisfactory in the case where it cannot be foreseen how many carriers are issued before the previously issued and pre-dated carrier is read from the castle. In the case where the number of carriers issued the number of carriers exceeds that previously when the predated carrier was issued this is not valid because its sequential code is smaller than that is currently stored in the castle, so that its resynchronization with a Establishment outside the castle is required.

Another disadvantage of this system is the difficulty of user carriers from each other. Because it is required at all times the sequential code stored in the locks at the time of issue to know a new carrier, it is imperative that one has a Facility that can be used to derive this code, or it must be one synchronized copies of these codes can be kept at each delivery station for carriers. This necessitates the frequent exchange of information by any means Data transmission system, resulting in greater costs and greater complexity conditionally.

The present invention has for its object a locking system of the beginning to create the kind that does not require any kind of synchronism between the time counter of the lock and the delivery device of the carrier maintain so the need for some kind of communication between Output devices for carriers which are arranged at a distance from one another and / or with the locks are eliminated.

This object is achieved by the features specified in claim 1.

Advantageous refinements and developments of the invention result from the Dependent claims.

• einem mechanischen Träger, der einen Benutzercode und einen Ordnungsoder Operationscode speichern kann, der die Zeit darstellt, zu der der Träger ausgegeben wird, und der wahlweise irgendwelche Zonen-Codes speichern kann, die die Zonen darstellen, die mit diesem Träger zugänglich sind, sowie einem mechanischen Träger, auf dem die enthaltene Information in entsprechend einem Verschlüsselungsalgorithmus und einem geheimen Schlüssel, der für jede Einrichtung unterschiedlich ist, verschlüsselter Form gespeichert ist
• einem elektromechanisches Schließsystem, das den Zugang an diese Zonen kontrolliert,
• Ausgabeeinrichtungen für Träger, die in der Lage sind Informationen auf den Trägem der Benutzer zu speichern, wobei diese Informationen in gemäß einem Verschlüsselungsalgorithmus und einem geheimen Schlüssel, der für jede Einrichtung unterschiedlich ist, verschlüsselter Form gespeichert sind,
• Programmiereinrichtungen, die Informationen an die elektronischen Schaltungen der Türen übertragen können,
• einem Rechner, der die gesamte Einrichtung verwaltet und die Aufgabe hat, Informationen an die Ausgabeeinrichtungen für die Karten der Benutzer und an die Programmiereinrichtungen der Moduleinheiten der Türen zu senden.

The system according to the invention enables access control of users of a facility to predetermined zones and consists of the following elements:

• a mechanical carrier that can store a user code and an order or operation code that represents the time the carrier is dispensed and that can optionally store any zone codes that represent the zones that are accessible with that carrier and one mechanical medium on which the information contained is stored in an encrypted form in accordance with an encryption algorithm and a secret key which is different for each device
• an electromechanical locking system that controls access to these zones,
• Output devices for carriers which are able to store information on the carriers of the users, this information being stored in a form encrypted in accordance with an encryption algorithm and a secret key, which is different for each device,
• Programming devices that can transmit information to the electronic circuits of the doors,
• a computer that manages the entire device and has the task of sending information to the output devices for the cards of the users and to the programming devices of the module units of the doors.

• eine elektronische Schaltung, die ein elektronisches Signal zur Entsperrung des elektromechanischen Blockiersystems erzeugt,
• eine Lese-Moduleinheit oder Lese-Moduleinheiten, die die Informationen lesen können, die auf den Trägern der Benutzer enthalten sind,
• ein elektromechanisches Sperrsystem, das durch ein elektrisches Signal gesteuert wird das den Zugang an eine Zone sperren kann.

The electromechanical locking system is preferably formed by the following elements:

• an electronic circuit that generates an electronic signal to unlock the electromechanical blocking system,
• a reading module unit or units that can read the information contained on the carriers of the users,
• an electromechanical locking system that is controlled by an electrical signal that can block access to a zone.

° Es ist nicht erforderlich, irgendeinen Synchronismus zwischen dem Zeitzähler des Schlosses und der Ausgabeeinrichtung der Träger aufrechtzuerhalten.

° Es entfällt die Notwendigkeit irgendeine Art von Kommunikation zwischen Ausgabeeinrichtungen für Träger vorzusehen, die entfernt voneinander angeordnet sind. Genauso wenig ist es erforderlich, daß deren Zeitzähler synchronisiert sind. Diese Zeitzähler können mit der Normal-Uhrzeit synchronisiert werden, was eine einfache und universelle Form der Synchronisation ist.

° Die elektronischen Schaltungen können nicht gegenüber den ausgegebenen Trägem entsynchronisiert werden, weil ein neuer Träger für den Zugang an eine genehmigte Zone es immer ermöglicht, daß dieser mit einem späteren Operationscode ausgegeben wird.

The main advantages of the system described are the following:

° It is not necessary to maintain any synchronism between the lock time counter and the bearer dispenser.

° There is no need to provide any type of communication between carrier output devices which are spaced apart. Nor is it necessary for their time counters to be synchronized. These time counters can be synchronized with the normal time, which is a simple and universal form of synchronization.

° The electronic circuits cannot be desynchronized from the issued carriers because a new carrier for access to an approved zone always allows it to be issued with a later operation code.

A preferred embodiment of the locking system according to the invention explained below.

• Installationen, bei denen die Benutzer, die einen Zugang an die Installation haben, häufig wechseln. In derartigen Installationen ist eine einfache Einrichtung zum Ungültigmachen früherer Benutzer zweckmäßig, ohne daß es erforderlich ist die Schlösser neu zu programmieren. Außerdem ist ein Verfahren erforderlich, das den Zugang an bestimmte Zonen zuläßt, ohne daß die Notwendigkeit einer Umprogrammierung der Schlösser besteht. Beispiele dieser Arten von Installationen sind Universitäten, Altenheime, usw.
• Installationen, bei denen die Benutzer, die einen Zugang an die Installation haben, nicht häufig wechseln. Bei derartigen Installationen ist es zweckmäßig, eine einfache Einrichtung zur Modifikation der Zugangsbedingungen an die Zonen ohne die Notwendigkeit der Umprogrammierung der Träger der Benutzer, zu haben. Beispiele dieser Art von Installationen sind Büros, Fabriken, usw.

Access control installations can be classified depending on the type of users who access these zones. There are three types of installations:

• Installations in which the users who have access to the installation change frequently. In such installations, a simple facility for invalidating previous users is useful without the need to re-program the locks. A procedure is also required which allows access to certain zones without the need to re-program the locks. Examples of these types of installations are universities, retirement homes, etc.
• Installations in which the users who have access to the installation do not change frequently. In such installations, it is useful to have a simple facility for modifying the access conditions to the zones without the need to re-program the users' carriers. Examples of this type of installation are offices, factories, etc.

On the other hand, there are installations where both types of users are side by side exist, so that a system is required that solves both problems. Examples this type of installation will be hotels, museums, etc., for which certain Users have temporary access (customers, visitors), while others have one have permanent access (cleaning staff, security guards, etc.).

The system according to the invention enables the control of an access control installation, in the frequently changing user and rarely changing user coexist.

• Mechanische Träger, die in der Lage sind, Informationen bezüglich der Benutzer zu speichern. Jeder Benutzer besitzt einen dieser Träger. Diese Träger können von unterschiedlicher Art sein (Magnetkarten, elektronische Schlüssel, Chipkarten mit Kontakten, Hochfrequenz-Fernsteuerschaltungen, Chipkarten mit Kontakten, usw.).
• Elektromechanische Blockiersysteme, die durch ein elektrisches Signal gesteuert werden und den Zugang an eine Tür sperren können.
• Lese-Einrichtungen, die Informationen lesen können, die auf den Trägem der Benutzer enthalten sind.
• Elektronische Schaltungen, die Informationen speichern können, die auf die Träger der Benutzer bezogen sind.
• Eine elektronische Schaltung, die die Information speichert, die auf die Träger bezogen ist, die einen Zugang an die Zone haben.

The system consists of the following elements:

• Mechanical carriers capable of storing user information. Each user owns one of these carriers. These carriers can be of different types (magnetic cards, electronic keys, chip cards with contacts, high-frequency remote control circuits, chip cards with contacts, etc.).
• Electromechanical locking systems that are controlled by an electrical signal and can block access to a door.
• Reading devices that can read information contained on the carriers of the users.
• Electronic circuits that can store information related to the wearers of the users.
• An electronic circuit that stores the information related to the carriers that have access to the zone.

Each user has one of the media that stores information about that user. If the user wishes to access a zone, he presents his carrier to the reader of the blocking system, which is assigned to a restricted zone. The reading device of the blocking system reads the information from the carrier and transmits it to the electronic blocking module. This electronic module checks the validity of the carrier. If the wearer's access to this zone is permitted, the electronic module sends an electrical signal to the blocking device, thereby allowing access to the zone. Carrier of the user user code opcode Code zone A Code zone B ........ Code zone Z Electronic module unit memory Zone Code User code 1 Operation code 1 User code 2 Operation code 2 -------------------------- -------------------------- Code of the user N Operation code N

Each carrier stores a code of the user that identifies it. each electronic circuitry associated with a zone stores a list of the codes of users who have access to this zone. The electronic The circuit compares the user code stored on the carrier with the User codes stored in the circuit's memory. If any of these User codes matches the user code of the read carrier, goes electronic module unit for comparing the operation code via.

An operation code representing the time of issue of this carrier was stored on each carrier. The list of users stored in the electronic control module units also stores the operation code of each carrier. As soon as the carrier has been read and the user code has been checked, the operation code stored on the carrier is compared with the operation code corresponding to this carrier and stored in the electronic module unit. If the operation code of this carrier is equal to the operation code corresponding to that carrier stored in the electronic module unit, the electronic module unit allows access to the restricted zone, whereby the electromechanical blocking system is released. If the operation code of this carrier lies after the operation code corresponding to this carrier, which is stored in the electronic module unit, the latter is replaced by the new operation code of the read carrier, in this way the carriers issued before the read carrier are invalidated.
This system enables a carrier's access to a zone to be removed simply by issuing a new carrier to that user and presenting it to the associated reader associated with that zone.

The information about the user is on the carrier in a corresponding manner Encryption algorithm stored in encrypted form, which is a random sequence in Dependence on the information stored on the carrier as well as a secret Generates key that depends on each installation. The encrypted in the carrier Information contained in the form can only be interpreted if the Encryption algorithm and the secret key knows. That way avoided the possibility that carriers of Readers of another installation can be read. The encryption algorithm can be any of those commonly used in communication systems Encryption algorithms (DES, 3DES, RSA, etc.).

The basic improvement of the present system over Crafton is in that the electronic circuit that controls access to a zone stores different user codes with their respective operation codes, which the Access to this zone with different supports. Another improvement over the Crafton patent is that the one received by the carrier Operation code is stored in the electronic circuit. In this way the operation codes of the carriers are not compared with the time when the reader reads the information contained on the carrier, but this operation code is included compared to the last operation code used for this carrier in the electronic Module unit was saved. Using this method is not a perfect one Synchronization between the time counter of the carrier output device and the Electronic circuit timer required. In fact, it is not necessary to provide a time counter in the electronic circuits that gives access to this Control zones, resulting in lower costs and a reduction in space requirements Circuits conditional.

A list of zones is stored in the carrier, optionally for the user is accessible. This list is created at the time the carrier is issued so that it does so at the time of issue of this carrier it is possible to determine the zones to which the user has access. This The procedure is very frequent for users of the installation used. The modification of the access conditions for these users is done by Issuing a new carrier and storing this information on the carrier realized instead of reprogramming the electronic module units.

The user codes remain unchanged during the issuance of new carriers, and they are used to register the operations performed by the institutions. Because it is not necessary to change the user codes, neither are combinations required to prevent these codes from repeating, causing memory is reduced, which is required to store these codes.

The use of the time at which the carriers are dispensed as a measure to Annulment of the previous institution requires that whenever a new institution comes along Permitted access to a zone is issued, the security results that if it is valid, the others are made invalid. There are no problems the synchronization between the opcode that is reissued on a Carrier is stored, and the codes in the electronic module units stored that control access to these zones, regardless of the number of carriers previously issued.

Claims (6)

Electronic locking system for access control, which allows to control the access of users of an installation to certain zones, characterized by : a mechanical carrier configured to store a user code and an operation code representing the time at which the carrier is dispensed and which may optionally store any zone codes representing the zones accessible by that carrier, wherein the information contained on the carrier is stored encrypted with an encryption algorithm and a secret key, which is different for each installation; an electromechanical locking system that controls access to these zones; Bearer output devices capable of storing information on the bearers of users, this information being stored in a form encrypted by an encryption algorithm and a secret key that is different for each installation; Programming devices that can transmit information to the electronic circuits of the doors, a computer that manages the entire installation and has the task of sending information to the output devices for the cards of the users and to the programming devices of the module units of the doors. Electronic locking system according to claim 1, characterized in that the electromechanical locking system comprises the following elements: an electronic circuit that generates an electronic signal to unlock the electromechanical blocking system, a reading module unit or units which can read the information contained on the carriers of the users, an electromechanical locking system that is controlled by an electrical signal that can block access to a zone. Electronic locking system according to claim 1 or 2, characterized in that the electronic circuit of the electromechanical locking system is formed by the following elements: a device for storing data, a counter that is incremented at regular predetermined time intervals, and means for comparing data received from the carriers with the data stored in the electronic circuit. Electronic locking system according to claim 3, characterized in that the device for storing data for storing its zone code, a list of user codes and the operation codes assigned to them can be operated. Electronic locking system for access control according to claim 3 or 4, characterized in that the comparator means for comparing the code of the user contained in a carrier with each of the user codes stored in the memory of the electronic circuit and for supplying an electrical signal is operable in which the code of the carrier and the operation code corresponding to that carrier match one of the carrier codes and its operation code stored in the memory. Electronic locking system according to one of claims 3 to 5, characterized in that the comparator means for comparing the operation code of a carrier with the operation code of one of the carriers stored in the memory of this circuit and for storing the operation code of the read carrier as a new operation code for this carrier can be operated if the operation code of the carrier lies after the operation code for this memory, which is stored in the memory of the circuit.