EP1281827B1 - Electronic closing system for access control - Google Patents

Description

The present invention relates to an electronic locking system for Access control of the type mentioned in the preamble of claim 1.

Electronic locking systems are widely used for access control of closed rooms used for a limited number of people.

The usual mechanical locks do not solve the problem of loss of Key and invalidating the keys in a simple and versatile way.

There are many different types of electronic locking systems on the market Use carriers (cards or electronic keys, etc.) where one of User lost carrier is invalidated in a simple way, with a new one Carrier is spent for this user. When the lock reads this vehicle, does it automatically invalidates the previous bearer and accepts the new bearer as valid.

The US Patent 4,519,228 ("Electronic Recodeable Lock") by Tor Sornes describes electronic lock with a punched card with a magnetic strip. By doing Magnetic strip is stored a decoding command indicating that the access code of the Lock must be changed by the coding of the punched card.

The disadvantage of this solution is the high cost of the composite card (perforated and magnetic) over the solutions using a conventional magnetic card.

U.S. Patent 3,906,447 ("Security system for lock and key protected secured areas") by Crafton describes a locking system of the type mentioned for controlled Rooms with the help of electronic locks, where each user has a carrier (Punched card, magnetic card, etc.). To gain access to a restricted area the lock must read the user's vehicle. Every castle and every one Carrier of the user stores a code. If the code of the carrier, of a Lock is read, matches the code stored in the lock, this allows access to the area to which the access through the castle is limited. On each carrier of the user is additionally an episode or Operation code stored representing a time. This time coincides with the time together, in which each carrier is issued. The castle compares the Operation code of the carrier with the in the lock at the time of reading the User's stored time. If the operation code of the carrier is larger when the time stored in the lock is at the time of reading the wearer, the lock stores the code of the carrier as a new code, the previous one Carrier code is invalidated. The system described in this patent exists from a device intended to encode the user carrier. These Device has means for storing a counter representing a time and means for indexing this counter at regular intervals. The lock has means for storing a counter similar in form represents a time. The wearer of a user also stores a code containing the Time at which his access to the door expires. The lock will automatically do that Carrier code invalid if the time stored by the lock coincides with the expiration time of the Carrier agrees. The fundamental disadvantage of this system is that it required is a permanent synchronization between the internal time of the locks and to maintain the time in the dispenser for the wearers. When out For some reason these two times are desynchronized, the system stops do not work or work correctly anymore. Another disadvantage is that it it is only possible to store one carrier code per lock, with access to the door by two users with different carriers is not possible.

From EP-A1-1 083 277 is still a locking system with a transponder having known keys, in which the transponder one in several Code areas have divided code, the code areas of respective zones are assigned, which are accessible with this transponder.

ES Patent 532,333 ("Nueva cerradura electronica programable" ("Novel programmable electronic lock ")) by Juan Imedio, describes one electronic lock having a card storing a code consisting of a Card code and a sequential code exists. When the one read from a castle Card code matches the stored by the lock code allows this access to the limited by the castle area. If the card code one unit greater than the code stored in the lock, it does so invalidated earlier code and saved the new map code.

The ES patent 9202223 ("Nueva cerradura electronica programable" ("Novel programmable electronic lock ")) by Juan Imedio, describes one electronic lock with cards based on ES patent 532,333 of the same Author. The basic difference from the earlier patent is that when the card code is one or more units larger than the one in the lock is stored code, the previous code is invalidated, and the new map code is stored.

The basic disadvantage of this type of system is that the sequential Code of these locks is only forwarded when the new users their Insert the carrier into the locks. Frequently, the sequencing of the sequential Codes of locks are only allowed if the difference between the card code and the stored sequential code in the lock is not a maximum value exceeds. Otherwise access to the lock will not be allowed. On the other hand new carriers are issued, and with these initially no access to a lock carried out (for example, on a low traffic access road, as for an emergency exit may be the case), so the lock switches its stored sequential codes do not continue and will be reissued compared to the codes Trägem desynchronizes, so that its resynchronization using an outside of the Lock arranged arrangement is required when the new carrier with a Code are output, the code stored in the lock to this Maximum value exceeds.

Another disadvantage of this system is the complexity of manufacturing pre-dated user carriers. Occasionally, it is necessary to issue carriers that become valid at a time after the date of issue of the carrier. One in these Cases used method is to assign a sequential code to several units is larger, instead of assigning the sequential sequential code. This method is not satisfactory in the case where it can not be foreseen how many carriers are issued before the previously issued and predicted carrier is read from the castle. In the case where the number of issued carriers exceeds the number of carriers previously present in the output of the predicted carrier is not valid, because its sequential code is smaller than the currently stored in the lock, so that its resynchronization with a Facility outside the castle is required.

Another disadvantage of this system is the difficulty of user-carrier output from each other. Because it is necessary at any time the sequential code stored in the locks at the time of issue Knowing a new carrier, it is essential that you have a Has facility over which this code can be derived, or it must have a synchronized copy of these codes are carried at each output station for carriers. This requires the need for frequent information exchange by means of any Data transmission system, resulting in greater costs and greater complexity conditionally.

The present invention is based on the object, a locking system of the above in which it is not necessary to have any kind of synchronism between the time counter of the lock and the output device of the carrier maintain, so that the need some kind of communication between Output devices for carriers, which are arranged remote from each other, and / or with the locks are omitted.

This object is achieved by the features specified in claim 1.

Advantageous embodiments and developments of the invention will become apparent from the Dependent claims.

• einem mechanischen Träger, der einen Benutzercode und einen Ordnungs- oder Operationscode speichern kann, der die Zeit darstellt, zu der der Träger ausgegeben wird, und der wahlweise irgendwelche Zonen-Codes speichern kann, die die Zonen darstellen, die mit diesem Träger zugänglich sind, sowie einem mechanischen Träger, auf dem die enthaltene Information in entsprechend einem Verschlüsselungsalgorithmus und einem geheimen Schlüssel, der für jede Einrichtung unterschiedlich ist, verschlüsselter Form gespeichert ist
• einem elektromechanisches Schließsystem, das den Zugang an diese Zonen kontrolliert,
• Ausgabeeinrichtungen für Träger, die in der Lage sind Informationen auf den Trägem der Benutzer zu speichern, wobei diese Informationen in gemäß einem Verschlüsselungsalgorithmus und einem geheimen Schlüssel, der für jede Einrichtung unterschiedlich ist, verschlüsselter Form gespeichert sind,
• Programmiereinrichtungen, die Informationen an die elektronischen Schaltungen der Türen übertragen können,
• einem Rechner, der die gesamte Einrichtung verwaltet und die Aufgabe hat, Informationen an die Ausgabeeinrichtungen für die Karten der Benutzer und an die Programmiereinrichtungen der Moduleinheiten der Türen zu senden.

The system according to the invention allows the access control of users of a device to predetermined zones and consists of the following elements:

• a mechanical support capable of storing a user code and an order or operation code representing the time at which the support is issued, and which may optionally store any zone codes representing the zones accessible by that support; and a mechanical carrier on which the contained information is stored in encrypted form according to an encryption algorithm and a secret key different for each device
• an electromechanical locking system that controls access to these zones,
• Output means for carriers capable of storing information on the carriers of the users, this information being stored in encrypted form according to an encryption algorithm and a secret key different for each device,
• Programming devices that can transmit information to the electronic circuits of the doors,
• a computer that manages the entire device and has the task of sending information to the output devices for the cards of the users and to the programming devices of the module units of the doors.

• eine elektronische Schaltung, die ein elektronisches Signal zur Entsperrung des elektromechanischen Blockiersystems erzeugt,
• eine Lese-Moduleinheit oder Lese-Moduleinheiten, die die Informationen lesen können, die auf den Trägem der Benutzer enthalten sind,
• ein elektromechanisches Sperrsystem, das durch ein elektrisches Signal gesteuert wird das den Zugang an eine Zone sperren kann.

The electromechanical locking system is preferably formed by the following elements:

• an electronic circuit which generates an electronic signal for unlocking the electromechanical locking system,
• a read module unit or read module units that can read the information contained on the carriers of the users,
• an electromechanical locking system controlled by an electrical signal that can block access to a zone.

° Es ist nicht erforderlich, irgendeinen Synchronismus zwischen dem Zeitzähler des Schlosses und der Ausgabeeinrichtung der Träger aufrechtzuerhalten.

° Es entfällt die Notwendigkeit irgendeine Art von Kommunikation zwischen Ausgabeeinrichtungen für Träger vorzusehen, die entfernt voneinander angeordnet sind. Genauso wenig ist es erforderlich, daß deren Zeitzähler synchronisiert sind. Diese Zeitzähler können mit der Normal-Uhrzeit synchronisiert werden, was eine einfache und universelle Form der Synchronisation ist.

° Die elektronischen Schaltungen können nicht gegenüber den ausgegebenen Trägem entsynchronisiert werden, weil ein neuer Träger für den Zugang an eine genehmigte Zone es immer ermöglicht, daß dieser mit einem späteren Operationscode ausgegeben wird.

The main advantages of the described system are as follows:

° It is not necessary to maintain any synchronism between the time counter of the lock and the output device of the carrier.

There is no need to provide any kind of communication between dispensers for carriers located remotely. Nor is it necessary for their time counters to be synchronized. These timers can be synchronized with the normal time, which is a simple and universal form of synchronization.

The electronic circuits can not be desynchronized with respect to the issued carriers because a new carrier for access to an approved zone always allows it to be output with a later operation code.

A preferred embodiment of the locking system according to the invention is explained below.

• Installationen, bei denen die Benutzer, die einen Zugang an die Installation haben, häufig wechseln. In derartigen Installationen ist eine einfache Einrichtung zum Ungültigmachen früherer Benutzer zweckmäßig, ohne daß es erforderlich ist die Schlösser neu zu programmieren. Außerdem ist ein Verfahren erforderlich, das den Zugang an bestimmte Zonen zuläßt, ohne daß die Notwendigkeit einer Umprogrammierung der Schlösser besteht. Beispiele dieser Arten von Installationen sind Universitäten, Altenheime, usw.
• Installationen, bei denen die Benutzer, die einen Zugang an die Installation haben, nicht häufig wechseln. Bei derartigen Installationen ist es zweckmäßig, eine einfache Einrichtung zur Modifikation der Zugangsbedingungen an die Zonen ohne die Notwendigkeit der Umprogrammierung der Träger der Benutzer, zu haben. Beispiele dieser Art von Installationen sind Büros, Fabriken, usw.

Access control installations may be classified based on the type of users accessing these zones. So there are three types of installations:

• Installations where users who have access to the installation frequently change. In such installations, a simple means of invalidating prior users is expedient without the need to reprogram the locks. In addition, a method is required which allows access to certain zones without the need for reprogramming the locks. Examples of these types of installations are universities, retirement homes, etc.
• Installations where users who have access to the installation do not change frequently. In such installations, it is desirable to have a simple means of modifying the access conditions to the zones without the necessity of reprogramming the users' carriers. Examples of this kind of installations are offices, factories, etc.

On the other hand, there are installations where both types of users side by side exist, so that a system is needed that solves both problems. Examples These types of installations will be hotels, museums, etc., to which certain Users have temporary access (customers, visitors) while others have one have permanent access (cleaning staff, security guards, etc.).

The system according to the invention makes it possible to control an access control installation, in the frequently changing users and rarely changing users exist side by side.

• Mechanische Träger, die in der Lage sind, Informationen bezüglich der Benutzer zu speichern. Jeder Benutzer besitzt einen dieser Träger. Diese Träger können von unterschiedlicher Art sein (Magnetkarten, elektronische Schlüssel, Chipkarten mit Kontakten, Hochfrequenz-Fernsteuerschaltungen, Chipkarten mit Kontakten, usw.).
• Elektromechanische Blockiersysteme, die durch ein elektrisches Signal gesteuert werden und den Zugang an eine Tür sperren können.
• Lese-Einrichtungen, die Informationen lesen können, die auf den Trägem der Benutzer enthalten sind.
• Elektronische Schaltungen, die Informationen speichern können, die auf die Träger der Benutzer bezogen sind.
• Eine elektronische Schaltung, die die Information speichert, die auf die Träger bezogen ist, die einen Zugang an die Zone haben.

The system consists of the following elements:

• Mechanical carriers capable of storing information regarding the user. Each user owns one of these carriers. These carriers can be of different types (magnetic cards, electronic keys, chip cards with contacts, high-frequency remote control circuits, chip cards with contacts, etc.).
• Electromechanical locking systems that are controlled by an electrical signal and can block access to a door.
• Reading devices that can read information contained on the carriers of the users.
• Electronic circuits capable of storing information related to users' carriers.
• An electronic circuit that stores the information related to the carriers having access to the zone.

Each user is in possession of one of the carriers who stores the information about that user. When the user desires access to a zone, he presents his carrier to the reader of the blocking system associated with a restricted zone. The reader of the blocking system reads the information of the carrier and transmits it to the electronic blocking module. This electronic module checks the validity of the carrier. If access of the carrier to this zone is permitted, the electronic module sends an electrical signal to the blocking device, thereby releasing access to the zone. Carrier of the user user code opcode Code Zone A Code Zone B ........ Code Zone Z Memory of the electronic module unit Zone Code User code 1 Operation code 1 User's code 2 Operation code 2 -------------------------- -------------------------- User N code Opcode N

Each bearer stores a code of the user who identifies it. each Electronic circuitry associated with a zone stores a list of codes the user who has access to this zone. The electronic Circuit compares the user code stored on the carrier with the User codes stored in the memory of the circuit. If one of these User codes match the user code of the read carrier goes electronic module unit for comparing the operation code via.

On each carrier an opcode was stored representing the time of issue of that carrier. The list of users stored in the electronic control module units also stores the operation code of each carrier. Once the carrier has been read and the user code has been verified, the operation code stored on the carrier is compared with the operation code corresponding to that carrier which is stored in the electronic module unit. If the operation code of this carrier is equal to the operation code corresponding to that carrier stored in the electronic module unit, the electronic module unit allows access to the restricted zone and the electromechanical lock system is released. If the operation code of this carrier is after the operation code corresponding to that carrier stored in the electronic module, the latter is replaced by the new operation code of the read carrier, thereby invalidating the carriers output before the read carrier.
This system makes it possible to remove a carrier's access to a zone simply by issuing a new bearer for that user and presenting it to the associated reader associated with that zone.

The information about the user is on the carrier in accordance with one Encryption algorithm stored in encrypted form, which is a random sequence in Dependence on the information stored on the carrier as well as a secret Key generated by each installation. The encrypted in the carrier Form contained information can only be interpreted, if one the Encryption algorithm and the secret key knows. This way will avoided the possibility of carriers issued by an installation of Readers of another installation can be read. The encryption algorithm can be any of the commonly used in communication systems Encryption algorithms (DES, 3DES, RSA, etc.).

The fundamental improvement of the present system over Crafton exists in that the electronic circuit controlling access to a zone various user codes with their respective operation codes stores what the Access with different carriers to this zone allows. Another improvement in contrast to Crafton's patent, the one received by the carrier Operation code is stored in the electronic circuit. In this way For example, the opcodes of the carriers are not compared to the time the reader came to reads the information contained on the carrier, but this operation code is with compared to the last operation code for this carrier in the electronic Module unit was saved. This method is not perfect Synchronization between the time counter of the carrier output device and the Time counter of the electronic circuit required. In fact, it is not necessary to provide a time counter in the electronic circuits that provide access to them Control zones, resulting in lower costs and a reduction in the space requirements of these Circuits conditioned.

The carrier optionally stores a list of zones for the user is accessible. This list is created at the time when the carrier is output, so that it is in this way at the time of issue of this carrier it is possible to determine the zones to which the user has access. This Procedure is for users of installation with high frequency of change used. The modification of the access conditions for these users is by Output of a new carrier and storage of this information on the carrier realized, rather than by reprogramming the electronic module units.

The user codes remain unchanged during the release of new media, and they are used to register the operations performed by the carriers. Because it is not necessary to change the user codes are not combinations necessary to prevent these codes from repeating, causing the memory which is required to store these codes.

The use of the time to which the carriers are issued as a measure of Invalidate the previous carrier conditional that whenever a new carrier with If a permissible access to a zone is output, the security results that if it is valid, the others will be invalidated. There are no problems the synchronization between the opcode, which is on a newly issued Carrier is stored, and the codes that are in the electronic module units that control access to these zones, regardless of the number of previously issued carriers.

Claims (5)

1. An electronic locking system for access control, which permits control of the access of the user of an installation to certain areas, comprising:

   a mechanical bearer which can store a user code and an operation code which represents the time at which the bearer is issued and which can selectively store any area codes representing the areas which are accessible with the bearer,

   an electromechanical locking system which controls access to those zones and has an electronic circuit for producing an electronic signal for unlocking the electromechanical locking system, wherein the electronic circuit has a memory for storing a list of user codes and operation codes associated therewith and a comparison device which is operable to compare the operation code of a bearer to the operation code which is stored for said bearer in the memory of said circuit and to store the operation code of the read bearer as a new operation code for said bearer in the case where the operation code of the bearer is after the operation code for said memory, which is stored in the memory of said circuit;

   issuing devices for bearers, which are capable of storing information on the bearers of the users, wherein said information is stored on the bearer in a form which is encrypted in accordance with an encryption algorithm and a private key which is different for each installation,

   programming devices which can transfer information to the electronic circuits of the doors, and

   a computer which manages the entire installation and sends information to the issuing devices for the bearers of the users and to the programming devices of the module units of the doors.
2. An electronic locking system for access control according to the preceding claim characterised in that the electromechanical locking system is formed by the following elements:

   said electronic circuit which produces an electronic signal for unlocking the electromechanical blocking system,

   a reading module unit or reading module units which can read the information contained on the bearers of the users, and

   an electromechanical lock system which is controlled by an electrical signal which can block access to an area.
3. An electronic locking system for access control according to the preceding claim characterised in that the electronic circuit of the electromechanical locking system is formed by the following elements:

   a device for storing data, and

   a counter which is advanced at regular predetermined intervals of time and a device for comparing data received from the bearers to the data stored in the electronic circuit.
4. An electronic locking system for access control according to claim 3 characterised in that the electronic circuit uses the device for storing data for storing the area codes thereof, a list of user codes and their corresponding operation codes.
5. An electronic locking system for access control according to claim 3 characterised in that in the electronic circuit the comparison device is used for comparing the code of the user which is contained in a bearer to each of the user codes which are stored in the memory of said circuit and for delivering an electrical signal in the case where the code of the bearer and the operation code which corresponds to said bearer are identical to one of the carrier codes and its operation code which are stored in the memory.