EP3267451B1 - Safety system - Google Patents

Description

The invention relates to a security system for controlling and/or monitoring at least one door lock for securing escape routes, with at least one triggering element, in particular an emergency button, and with a door locking control for controlling a locking mechanism, the triggering element and the door locking control being connected to one another via a first bus system. Security systems with an emergency button to secure escape routes are known. When the emergency button is pressed, a door lock is unlocked so that a user can escape in the event of danger. From the EP 2 725 172 A2 It is known to connect an emergency button and a door lock via a bus system. It remains unclear whether and how non-security-relevant functions can be integrated into a security system. The question also arises as to how a connection between a control center and the emergency button and the door lock can be designed.

The document WO 2013/189998 A1 disclosed in one embodiment Figure 3 a control device for controlling the door lock, which is arranged between a first and a second bus system, the control device being remotely controlled and programmed by a control center via the second bus system, e.g. B. updated, or can be read.

It is therefore the object of the present invention to provide a security system which, in particular, meets a wide range of tasks in a simple and/or safe manner.

This task is solved by a security system according to independent claim 1. Advantageous developments of the security system are specified in the dependent claims, the description and in the figures. The features mentioned in the description and in the claims can each be essential to the invention individually or in combination.

The previously derived and demonstrated task is solved based on the security system described at the outset in that the security system comprises a control device, the control device being connected to the triggering element and/or to the door locking control via the first bus system.

The security system includes the first bus system. In the following, a connection to a bus system is understood to mean a direct connection, so that a component connected to the bus system is to be viewed as a bus participant of the bus system with its own bus address.

The trigger element and the door lock control are connected to the first bus system. The control device is connected to the first bus system. The control device preferably serves to carry out at least one non-safety-relevant function. The fact that the control device with the first Bus system is connected, the control device can easily communicate with the at least one further bus participant of the first bus system.

The trigger element includes an actuating element. As a result of an actuation of the actuating element, the locking mechanism can be activated for unlocking.

The trigger element is preferably designed as an emergency button. In this case, an actuating element of the trigger element corresponds to the actuating element of the emergency button. Alternatively, the trigger element can be designed as a panic bar assembly. In this case, the actuating element is designed as a panic bar. The trigger element can be designed as a fitting assembly. In this case the actuating element is z. B. designed as a door handle.

Locking is understood to mean the transfer of the door lock or the locking mechanism into a locked state. Unlocking is understood to mean the transfer of the door lock or the locking mechanism to an unlocked state.

The security system may include the locking mechanism.

The locking mechanism can e.g. B. be electromechanical or purely electromagnetic. The locking mechanism includes e.g. B. at least one coil. A control of the locking mechanism for locking or unlocking can be implemented in particular by switching off or on an electrical power supply. The electrical power supply can be used to supply the coil with electrical current.

An electromagnetic locking mechanism is exemplified in the DE100 50 111 C1 described. When unlocked, z. B. no magnetic forces on the door. In the locked state z. B. magnetic forces on a door.

An electromechanical locking mechanism has a mechanical connection to the door when locked. In the unlocked state, the mechanical connection can be canceled or canceled.

The electromechanical locking mechanism can z. B. have a locking element, ie a bolt or a door latch, which is in a retracted position in the unlocked state of the door lock. In the retracted position, the latch member is disengaged from the door. In the locked state, the locking element is in engagement with the door. In another alternative of an electromechanical locking mechanism is the locking mechanism designed like a door opener. i.e. the locking mechanism includes a latch element. When the door lock is locked, a door latch of the door engages the locking mechanism. In the unlocked state, the latch element releases the door latch in such a way that the door latch can disengage from the locking mechanism, in particular by pressing on the door.

Switching off the electrical power supply preferably results in the door lock being unlocked. The locking mechanism for unlocking the door lock is thus activated by switching off the electrical power supply. Switching on the electrical power supply preferably leads to a locked state of the door lock. The locking mechanism is thus activated for locking by switching on the electrical power supply.

The security system can alternatively be designed without the locking mechanism. In this case, the security system only controls the locking mechanism. For example, the security system switches the electrical power supply for the locking mechanism on or off or causes the electrical power supply to be switched on or off.

A “control for locking or unlocking” also occurs when the security system receives feedback about the status of the locking mechanism. A "control for locking or unlocking" also occurs if, as detected by the feedback, the locking mechanism does not correspond to the target state and an alarm is therefore issued and/or a new attempt is made to achieve the target state .

The door lock control controls the locking mechanism for locking and unlocking. For this purpose, the door lock control can switch the electrical power supply for the locking mechanism on and off.

The security system may include the door lock control but not the locking mechanism. In this case, the door locking control is designed as a door locking adapter. The door locking adapter is used to use the security system according to the invention with locking mechanisms that have already been installed.
The door lock includes the lock mechanism and the door lock control. The security system particularly preferably includes the door lock. The door latch or locking mechanism may be integrated into a mechanical lock. Does the security system include door locking Instead of the expression "controlling the locking mechanism to unlock or lock", the expression "unlocking the door lock or locking the door lock" can be used. If the security system does not include the locking mechanism, the expression “controlling the locking mechanism for unlocking or locking” should be used instead of the expression “unlocking the door lock or locking the door lock”.

A distinction is made below between a user and an operator. A user can be any person who uses the security system. A user can e.g. B. a guest who wants to escape through the door secured by the security system. An operator is used to operate the security system. The operator has access to a guard device of the security system and/or can authenticate himself to the security system, in particular in order to operate the security system. The monitoring device can be designed as a PC or a monitor.

The security system is used in particular to secure escape routes. The security system therefore serves to release the escape route. I.e. Actuation of the actuation element leads to unlocking without authentication of the user. Unlocking can take place immediately or with a time delay.

The trigger element can trigger the locking mechanism to be activated to unlock it. Initiating a control is understood in particular to mean sending a message via the first bus system and/or a second bus system, which contains information and/or a command that causes the direct or indirect recipient of the message to carry out the control. The sender of the message initiates the control. Thus, causing a control is understood to mean an indirect control. So can e.g. B. the trigger element sends a message via the first bus system to the door locking control, whereupon the door locking control controls the locking mechanism for unlocking. The trigger element can, in particular, cause the locking mechanism to be unlocked with a time delay.

One or more non-safety-relevant functions can be carried out by the control device. In particular, the control device can be used in non-safety-relevant cases, i.e. H. do not cause the door lock to be unlocked or locked after the trigger element has been actuated or in the presence of a fire alarm signal.

The control device can thus control the door locking mechanism for unlocking after receiving a positive authentication signal or such Initiate activation (function h.). For this purpose, the control device can be connected or connectable to an access control system. The access control system can be connected or connectable to the first bus system. The access control system can e.g. B. include a reader, a key switch, a keyboard for entering a code or a locking cylinder of a mechanical lock, in particular a self-locking panic lock, or be designed in such a way. A positive authentication signal can be a signal in which the access control system has previously checked the authorization and decided that access authorization exists. Alternatively, an authentication signal can be a signal in which the control device itself checks the access authorization. The authentication signal can also be a signal that was generated in a key switch by turning a suitable key.

The control device can z. B. control the door locking mechanism for unlocking at a predetermined time or initiate such control (function i.). Unlocking at a predetermined time can be provided if, for. B. the door should be unlocked in a time window per day.

If there is no danger, i.e. H. If neither the trigger element has been actuated nor is there a fire alarm signal, the control device can activate the door locking mechanism for automatic relocking after a predetermined period of time has elapsed or can initiate such activation (function k.). This can e.g. This may be the case, for example, if the door lock was previously unlocked due to a positive authentication signal. The predetermined period of time can be stored in the security system. The predetermined period of time can be selectable by an operator. The predetermined period of time can in particular be some, e.g. B. ten, seconds, some, e.g. B. five, minutes or even a few, e.g. B. correspond to eight hours. The operator can store the predetermined period of time using a parameterization program.

Additionally or alternatively, it can be provided that the control device directly controls the locking mechanism for automatic relocking after receiving a signal about a closed state of the door or initiates such a control (function I.). The closed state of the door can be detectable by at least one door state monitoring device.

The door condition monitoring device is used to detect whether the door is opened or closed. The door condition monitoring device can be, for. B. a door contact, a sensor, a switch and/or a door lock act with detectable bolt and/or latch position. The security system may include the door condition monitoring device or be connectable to the door condition monitoring device.

Particularly preferably, at least a first door condition monitoring device and a second door condition monitoring device are provided for a door leaf and/or a door lock. In this way, one-fault security can be achieved. The first door condition monitoring device preferably differs in its design from the second door condition monitoring device. This increases error security.

In addition to the non-safety-relevant locking and unlocking of the door lock, the control device can have other functions.

The security system, in particular the control device and/or the trigger element, can have an additional input and/or output. At the additional output, e.g. B. a cable for a room light can be connected. The additional input can be used, for example: B. a measuring device can be connected. The control device can integrate the additional input and/or output so that signals can be evaluated via the additional input and/or signals can be sent via the additional output. The control device can control an external device via the additional output or initiate such a control (function v.).

The security system, in particular the trigger element, can include an acoustic alarm.

The control device can control the acoustic alarm device or cause the acoustic alarm device to be activated.

The security system, in particular the triggering element, can include a display device for visually displaying a locking state of the door lock. A locking state is understood to mean the locked and/or unlocked state of the door lock.

The security system, in particular the triggering element, can include a display device for visually displaying a time-delayed activation of the locking mechanism after the triggering element has been actuated. Here, both a first delay period that must elapse before the locking mechanism is activated for unlocking and/or a second delay period that must elapse before the locking mechanism is activated for unlocking can be visually represented become. The visual representation of the first and second delay periods may differ from one another.

The time-delayed activation of the door locking mechanism is achieved in particular by the triggering element causing the door locking control to activate the door locking mechanism with a time delay. To determine the first and/or the second delay period, the trigger element can comprise a timer. The delay by a second delay period can be triggered by operating a delay element of a central escape route control of the security system.

The security system, in particular the triggering element, can include a display for visually displaying an alarm condition. The alarm state can indicate a dangerous situation. The alarm state occurs in particular after actuation of the trigger element and/or after receipt of a fire alarm signal.

The security system, in particular the triggering element, can visually represent if relocking fails, in particular if the door remains open, which can be detected via the at least one door status monitoring device. A fire door should always be closed after an inspection. Is e.g. B. the door lock was unlocked due to a positive authentication signal and the door was opened but not automatically relocked after the predetermined period of time, this fact can be displayed visually. It can also be visually displayed when a stored opening time period has been exceeded. The opening time period can be detected by the door condition monitoring device. An operator can choose the opening time duration. The operator can store the opening time using the parameterization program.

As a display device, as a display device, as a display for the visual representation of an alarm state and/or for the visual representation of the failed relocking, the triggering element can comprise lighting means. The lighting means preferably serve both as a display device, as a display device, as a display for the visual representation of an alarm state and for the visual representation of the failed relocking. For this purpose, the lamps can be controlled in at least two groups. In particular, the lamps can at least partially be controlled individually. The control device can control the lamps or cause the lamps to be activated.

The control device can control the display device, in particular the lighting means, to visually display the locking state and/or cause such a control (function p.).

The control device can control the display device, in particular the lighting means, for the optical representation of the time-delayed activation of the locking mechanism and/or cause such activation (function q.). Here, the control device can display the first and/or the second delay period optically.

The control device can control the display, in particular the lighting means for visually displaying an alarm state and/or the acoustic alarm device for issuing an acoustic alarm, or can initiate such control (function o. and/or function r.)

The control device can issue a visual or acoustic alarm if relocking fails, especially if the door remains open (function see).

The control device can control or have the acoustic alarm device controlled in order to issue an alarm, depending on a signal from the door condition monitoring device about the opening of the door, in particular if there is no authorization to enter the door (function m.). It may be that a door is unlocked at least for a certain time window. If the door is opened during this time window, an acoustic alarm is emitted. The acoustic alarm can always be issued in the time window or only if there is no authorization to enter the door.

In order to be able to carry out the functions, parameters can be stored in the control device. For this purpose, the control device in particular has a non-volatile memory. The parameters can be set by an operator via the parameterization program. The control device can therefore be used to store parameters (function etc.). Logical links relating to the functions of the control device can be stored in the control device (function etc.).

The control device can include a radio module. The control device can communicate for parameterization via the radio module. For this purpose, the control device can preferably communicate with a mobile communication device, such as a laptop, a tablet or a mobile phone (function n.). Alternatively, the control device can communicate in a wired manner with a communication device for parameterization, in particular via the second bus system.

With the help of the control device, a communication connection to a control center is established and/or maintained. The control center can be the security device, the central escape route control and/or a multi-door display device include (function t.). The control device is connected to the second bus system. The guarding device and/or the central escape route control can also be connected to the second bus system. The control device thus communicates with the control center via the second bus system. The multi-door display device can be connected to the second bus system or alternatively connected to the central escape route control via a third bus system. In the latter case, the control device can communicate with the multi-door display device via the central escape route control.

The central escape route security can include a central emergency button. If the central emergency button is pressed, the locking mechanism is activated to unlock. The process by which the locking mechanism is activated for unlocking as a result of pressing the central emergency button is one-fault-safe and is therefore suitable for emergency situations.

In particular, the control device can serve to forward a message about the operation of the central emergency button to the door lock control of the first bus system as a result of an actuation of the central emergency button. The control device can adapt the format of the message to the first bus system. The control device can leave the message itself untouched.

The control device can be integrated in the trigger element. In other words, the trigger element can include the control device.

Alternatively, the control device can be integrated in the door lock control. In other words, the door lock control may include the control device.

In a further alternative, the control device is integrated neither in a trigger element nor in a door lock control. The control device can be connected to the trigger element and the door lock control via the first bus system. As a result, the control device can z. B. be arranged away from the door in a technical room. For example, the control device in this variant can comprise a top-hat rail housing.

The security system may include multiple trigger elements and/or door lock controls. Here, a first number m of trigger elements and a second number m' of door locking controls can be connected to the first bus system. Here m and/or m' can correspond to a natural number from 1 to n. The natural number n can be at least two, preferably at least three, particularly preferably at least four. In one example, n is four. The first number m can be the same as the second number m' or different from the second number m'.

It may be that exactly one control device is provided for the first bus system.

If several triggering elements are connected to the first bus system, the control device can be integrated in one of the triggering elements. The at least one further trigger element, which is connected to the first bus system, is designed without the control device. In this case, the control device can control the display device, the display element, the display, the lighting means and/or the acoustic alarm generator of the trigger element, which includes the control device. The at least one further triggering element can be caused by the control device to control the display device, the display element, the display, the lighting means and/or the acoustic alarm generator of the at least one further triggering element. The control device causes the at least one door lock control to activate the door lock mechanism.

Alternatively, the control device can be integrated in one of the door lock controls if several door lock controls are connected to the first bus system. The at least one further door lock control, which is connected to the first bus system, is designed without the door lock control. In this case, the control device can control the locking mechanism of the door lock controller that includes the control device. The at least one further door locking control can be caused by the control device to activate the associated locking mechanism.

In a further alternative, the control device is integrated neither in one of the trigger elements connected to the first bus system nor in one of the door lock controls connected to the first bus system. Rather, the control device can be connected via the first bus system to all trigger elements that are connected to the first bus system and to all door lock controls that are connected to the first bus system. As a result, the control device can z. B. be arranged away from the door in a technical room. For example, the control device in this variant can include the top-hat rail housing. The control device causes the door lock controls to To activate the door locking mechanism. The control device causes the triggering elements, the display device, the display element, the display, the lighting means and/or the acoustic alarm to be activated.

The control device can have knowledge of the state of the door lock of the first bus system and/or of the state of the trigger element of the first bus system. The control device can have knowledge of communication, in particular of all communications, between the door lock control and the trigger element. In particular, the control device has knowledge of the state of all door locks that are connected to the first bus system and/or knowledge of the state of all trigger elements that are connected to the first bus system. The control device may have knowledge of communications, in particular all communications, between the door lock controls and the trigger elements connected to the first bus system. The control device can obtain knowledge of the first bus system. Here, the control device can monitor communication between at least one trigger element and at least one door lock control, which are connected to the first bus system. Additionally or alternatively, the control device can receive targeted messages about the states of the at least one door lock and/or the at least one trigger element.

If the control device is connected to the control center via the second bus system, the control device can send at least one message to the control center about at least one state of at least one door lock control and/or a trigger element. In particular, the control device can forward messages from the trigger element and/or the door locking control to the control center. For example: the control device can cause the first time delay period to be displayed visually on the central escape route control, in particular on the central emergency button. Additionally or alternatively, the control device can cause a possibility of relocking the door locking after the actuation of a triggering element and/or after the termination of a fire alarm signal to be visually displayed by means of a lifting treatment on the central escape route control.

If the control device is connected to the control center via the second bus system, the control device forwards at least one message from the control center, in particular the central escape route control, to at least one door lock control and/or a trigger element. A safety-relevant message from the central escape route control is sent Control device preferably forwards it to all bus participants of the first bus system. The control device can thus forward the safety-relevant message to all trigger elements and all door locking controls. The security-relevant message can e.g. B. be a message about the operation of the central emergency button or a message about the operation of a first control element. The central escape route control can include the first control element. The first control element is used to transfer the trigger element to a deactivated state. In the deactivated state, a locking mechanism for unlocking is not activated as a result of an actuation of the trigger element. In the activated state, the locking mechanism is activated for unlocking as a result of an actuation of the trigger element.

It can be stored in the door locking control whether the locking mechanism is to be activated for unlocking as a result of the central emergency button being pressed. It can be stored in the triggering element whether the triggering element is to be transferred to the deactivated state as a result of the actuation of the first control element.

The operator can carry out the deposit in particular with the help of the parameterization program. The deposit can be made in particular individually for each door locking control or for groups of door locking controls or for each triggering element or for groups of triggering elements. The control device can therefore forward the message from the central escape route control to all bus participants and still selectively effect unlocking or deactivation.

The triggering element can be converted into a deactivated state by the central escape route control. As a result of an actuation of the central escape route security to activate or deactivate the triggering element, the control device can forward a message from the central escape route security to the triggering element.

The first bus system can be a different type of bus system than the second bus system. For example, the first bus system can be designed as a CAN bus or DCW bus. The second bus system can be designed as a LAN or LON bus.

The security system can include several bus systems that connect to the second bus system. The multiple bus systems can be designed according to the first type of bus system. The multiple bus systems can each be connected to at least one trigger element and at least one door lock control. Each of the multiple bus systems, in particular each of the multiple bus systems with a trigger element and a door lock control, can be connected to a control device. In particular, each of the multiple bus systems, in particular each of the multiple bus systems with a trigger element and a door lock control, can be connected to exactly one control device. The control device of each of the plurality of bus systems may be connected to the second bus system. The control device of each of the several bus systems can send or forward messages about a status of a bus subscriber of the respective bus system to the control center. The control device can send or forward messages from the control center to at least one bus participant. The control device of the respective bus system can have at least one of the functions h. to v., preferably several of the functions h. to v., particularly preferably all functions h. until. v. carry out. This means that the information and most of the functions of the security system can be bundled at the interface to the second bus system.

If a plurality of door locking controls and/or a plurality of triggering elements are connected to the first bus system, the control device that is connected to the first bus system can selectively notify the plurality of door locking controls and/or the plurality of triggering elements. In particular, the control device can selectively control or selectively cause control. This can in particular be the controls described. The control device can selectively perform the functions described above. This can be at least one of the functions h.), i.), k.), I.), m.), o.) to s.), v.). The control device can carry out at least one of the functions h.), i.), k.), I.), m.), o.) to s.), v.) a locking mechanism, a display device, a display device Device, light source and/or an acoustic alarm device that can be connected to the additional output can be selectively controlled or a control can be selectively initiated. Selective means that the function is not carried out for all components accessible via the first bus system, but only for a selection or for a single component that is accessible via the bus system.

The following examples serve for illustrative purposes: If the control device receives e.g. B. a positive authentication signal from an access control system, the control device only causes the door lock that is assigned to the access control system to be unlocked. If it is only stored for a door lock of the first bus system that the door lock is to be unlocked at a predetermined time, the control device only initiates this One door lock unlocks at the specified time, the other door locks of the first bus system remain locked. If a predetermined period of time of a first length has been deposited by the operator for a door locking of the first bus system and a predetermined period of time of a second length, which is different from the first length, has been deposited for a further door locking of the first bus system, the control device initiates a automatic relocking for one door lock after the first length of the predetermined period of time and for the further door locking a relocking after the second length of the predetermined period of time. If an automatic relocking immediately after closing the door has been set as permitted for a door locking and not for another door locking, the control device only initiates an automatic relocking immediately after closing the door for the first door locking.

Due to the selectivity, the control device can have a lock function (function j.): The control device can prevent a further door locking mechanism from being activated after a first door locking mechanism has been activated until a condition is met such that a lock is formed. For example, a first door can be arranged at an entrance to a room and a second door at an exit from the same room. The control device can z. B. in the presence of a positive authentication signal for a door lock of the first door, cause the door lock of the first door to be unlocked. Even if there is a positive authentication signal for the door lock of the second door of the control device, the control device can prevent the unlocking of the door lock of the second door until a condition is met. If the condition exists, the control device causes the door lock of the second door to be unlocked. The door lock of the first door and the door lock of the second door are preferably connected to the first bus system. The condition can be e.g. B. about a lock time interval or the achievement of a measurement variable, such as room temperature, humidity, air purity or number of people in the room. For this purpose, the control device can be connected or connectable to a measuring device. The condition may include closing the door opened first, which is detectable by the door condition monitor of the door opened first. The condition and the door locks or door lock controls involved in the lock can be stored in the control device.

Until the condition is met, the lamps can indicate that the activation of the further door locking mechanism is prevented. In this way, the user receives, in particular, feedback that the absence of a positive authentication signal does not prevent the second door from being unlocked.

It may be that the actuation of a trigger element causes only some of the door locking controls connected to the first bus system to activate the locking mechanism. The part of the door locking controls connected to the first bus system can also only be a door locking control. For this purpose, the trigger elements that are connected to the first bus system are assigned to the door lock controls that are connected to the first bus system. The control device can only control the display device and/or cause control (function q.) and/or control the display and/or cause control (function r.) for the trigger elements that are assigned to the same door lock control as the actuated trigger element and /or activate the acoustic alarm and/or initiate such activation (function or similar). It is conceivable that the control device stores which trigger elements of the first bus system are assigned to which door lock controls of the first bus system.

It is conceivable that parameters and/or assignments for the selective execution of the functions are stored in the control device. The parameters and/or the assignments can, for example, contain or indicate for which authentication signal which locking mechanism is to be activated according to function h.), which locking mechanism is to be activated at what time according to function i.), which locking mechanisms are part of a lock according to function j .) which locking mechanism is to be activated according to function k) after which period of time, which locking mechanism is permitted to be activated according to function l.), which door is monitored according to function m.) and/or which acoustic alarm devices, Display devices and/or displays when actuating which trigger element is to be activated. It can also be stored in the control device which acoustic alarm device is to be activated on which occasion, with which volume and/or frequency, which lamps are to be activated on which occasion, with which brightness, which color and/or which flashing frequency and/or which condition must be fulfilled must be done before the control device initiates an unlocking of the further door lock of the lock. Of course, the parameters cannot be used for the locking mechanisms, but for them associated door locks or door lock controls in the control device. The same applies to the acoustic alarm devices and the lamps.

To enable selective control or cause of control, the security system can have at least one input device. For this purpose, the components that are connected to the first bus system can each comprise an input device. For example, the input device can have switches, in particular DIP switches. The components that are connected to the first bus system are referred to as bus participants.

It is conceivable that the bus participants of the first bus system each have at least one bus address. The bus address can be set manually on the input device. Bus participants with the same manual setting can be assigned to each other. This makes the security system particularly easy to configure.

It may be that the respective bus participant modifies the setting so that a different bus address is generated despite the same setting of several bus participants.

The manually adjustable bus address is intended in particular for non-safety-relevant functions. The at least one trigger element and the at least one door lock control can include the manually adjustable bus address as a second bus address in addition to an unchangeable bus address for the safety-relevant functions.

The control device can include a digital processing unit. The digital processing unit may include a processor. The digital processing unit may include a non-volatile memory. In particular, the digital processing unit can be designed as a microprocessor or as a microcontroller. Particularly preferably, the control device comprises a first digital processing unit, a second digital processing unit and a third digital processing unit. The first, the second and/or the third processing units can each comprise a processor. The first and/or the second digital processing unit can each comprise a non-volatile memory. The third digital processing unit may include a non-volatile memory and/or have access to a non-volatile memory. The first, the second and/or the third processing unit can each be designed as a microprocessor or as a microcontroller.

It is conceivable that at least one of the functions of the control device, preferably several of the functions of the control device, preferably all functions of the control device are carried out with the aid of the processing unit. In particular, the at least one function can be carried out with the aid of the at least one processing unit. For this purpose, at least one program code can be stored in the processing unit. In particular, the at least one function can be carried out with the help of the program code. As a result, the control device can be designed to be spatially very compact.

It is conceivable that non-safety-relevant functions can be carried out with the help of the third processing unit. The first and second processing units can be used for security-relevant functions. The first and second processing units can thus receive a fire alarm signal. After receiving the fire alarm signal, the control device can cause the door locking mechanism to be activated for unlocking. Particularly preferably, the control device can cause all door locks that are connected to the first bus system to be unlocked.

The central emergency button can include a first digital emergency processing unit and a second digital emergency processing unit. The first and second emergency processing units may each include a processor. The first and/or the second emergency processing unit can each be designed as a microprocessor or microcontroller. The first and second emergency processing units may each include non-volatile memory. In addition, the emergency button electronics unit can include a third digital emergency button processing unit. The third emergency processing unit may include a processor. The third emergency processing unit can be designed as a microprocessor or microcontroller. The third emergency processing unit may include and/or have access to non-volatile memory.

In particular, to monitor for errors, the central emergency button can repeatedly send a sign-of-life signal via the control device into the first bus system. Preferably, a sign-of-life signal is sent from the first emergency processing unit and a sign-of-life signal from the second emergency processing unit. The control device forwards the sign-of-life signal to the first bus system. The trigger element can check the reception of the sign of life signal. In the event of a one-time or multiple failure of at least the sign of life signal from the first emergency processing unit or the second emergency processing unit, this can happen Trigger element transfers itself to an activated state, provided that the trigger element was previously deactivated.

It may be that the triggering element, the door locking control and/or processing electronics comprises a receptacle and that the triggering element, the door locking control or the processing electronics functions as a control device by arranging a communication module in the receptacle. A part of the control device is referred to as processing electronics, which is connected to the door locking control or to all door locking controls and to the triggering element or to all triggering elements of the first bus system only via the first bus system. Thus, only by arranging the communication module in the receptacle can the control device carry out at least one of the functions described.

After removing the communication module, the trigger element, the door locking control or the electronic unit can lose the function of the control device immediately or at the latest after a predetermined time interval. This makes it necessary that there is always a communication module in the receptacle for a functional control device. Only by arranging the communication module does the security system permanently have a functional control device. It is preferably provided that the control device can only carry out functions intended for the control device when the communication module is arranged in the receptacle.

If several bus systems of the first type of bus system are provided, the arrangement of a communication module is necessary in each bus system of the first type of bus system in order to create a control device.

Fig. 1

eine Draufsicht auf ein erfindungsgemäßes Sicherheitssystem mit einem Nottaster als Auslöseelement in einem betriebsfertigen Zustand an einer Tür gemäß einem ersten Ausführungsbeispiel,

Fig. 2

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 1,

Fig. 3

ein zu Fig. 2 modifiziertes Funktionsschema eines erfindungsgemäßen Sicherheitssystems gemäß einem zweiten Ausführungsbeispiel,

Fig. 4

eine Draufsicht auf ein erfindungsgemäßes Sicherheitssystem mit mehreren Nottastern in einem betriebsfertigen Zustand an einer Tür gemäß einem dritten Ausführungsbeispiel,

Fig. 5

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 4,

Fig. 6

ein zu Fig. 5 modifiziertes Funktionsschema eines erfindungsgemäßen Sicherheitssystems gemäß einem vierten Ausführungsbeispiel,

Fig. 7

eine Draufsicht auf ein erfindungsgemäßes Sicherheitssystem in einem betriebsfertigen Zustand gemäß einem fünften Ausführungsbeispiel,

Fig. 8

ein Funktionsschema einer zentralen Fluchtwegsteuerung des Sicherheitssystems aus Figur 7,

Fig. 9

ein Funktionsschema des Sicherheitssystems aus Figur 7,

Fig. 10

ein Funktionsschema eines erfindungsgemäßen Sicherheitssystems gemäß einem sechsten Ausführungsbeispiel,

Fig. 11

ein Ausführungsbeispiel für einen erfindungsgemäßen Nottaster in einer Seitenansicht,

Fig. 12

der Nottaster aus Figur 11 in einem Längsschnitt,

Fig. 13

der Nottaster aus Figur 11 in einer Explosionsdarstellung,

Fig. 14

ein Betätigungselement des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 15

eine weitere perspektivische Ansicht des Betätigungselements aus Figur 14,

Fig. 16

ein Lichtleiter des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 17

eine weitere perspektivische Ansicht des Lichtleiters aus Figur 16 und

Fig. 18a-d

eine schematische Darstellung eines Ablaufs einer Funktionsfreigabe in einem erfindungsgemäßen Sicherheitssystem.

The invention is explained in more detail below using exemplary embodiments. Technical features with the same function are provided with identical reference numbers in the figures. Show it:

Fig. 1

a top view of a security system according to the invention with an emergency button as a triggering element in a ready-to-use state on a door according to a first exemplary embodiment,

Fig. 2

a functional diagram of the security system according to the invention Figure 1 ,

Fig. 3

one to Fig. 2 modified functional diagram of a security system according to the invention according to a second exemplary embodiment,

Fig. 4

a top view of a security system according to the invention with several emergency buttons in an operational state on a door according to a third exemplary embodiment,

Fig. 5

a functional diagram of the security system according to the invention Figure 4 ,

Fig. 6

one to Fig. 5 modified functional diagram of a security system according to the invention according to a fourth exemplary embodiment,

Fig. 7

a top view of a security system according to the invention in a ready-to-use state according to a fifth exemplary embodiment,

Fig. 8

a functional diagram of a central escape route control of the security system Figure 7 ,

Fig. 9

a functional diagram of the security system Figure 7 ,

Fig. 10

a functional diagram of a security system according to the invention according to a sixth exemplary embodiment,

Fig. 11

an exemplary embodiment of an emergency button according to the invention in a side view,

Fig. 12

the emergency button off Figure 11 in a longitudinal section,

Fig. 13

the emergency button off Figure 11 in an exploded view,

Fig. 14

an actuating element of the emergency button Figure 11 in a perspective view,

Fig. 15

another perspective view of the actuating element Figure 14 ,

Fig. 16

a light guide from the emergency button Figure 11 in a perspective view,

Fig. 17

Another perspective view of the light guide Figure 16 and

Fig. 18a-d

a schematic representation of a function release process in a security system according to the invention.

A distinction is made below between a user and an operator. A user can be any person who uses the security system 1. A user can e.g. B. be a guest who wants to escape through the door secured by the security system 1. An operator is used to operate the security system 1. The operator can e.g. B. authenticate to the security system. The operator can e.g. B. Be a member of a security guard. The operator can particularly preferably adjust the security system 1.

In the following, the term “actuation of the emergency button” is understood to mean “actuation of the actuation element of the emergency button”.

In the following, a connection to a bus system is understood to mean a direct connection, so that a component connected to the bus system is to be viewed as a participant in the bus system with its own bus address.

Initiating a control is understood in particular to mean sending a message via a first and/or second bus system, which contains information and/or a command that causes the direct or indirect recipient of the message to carry out the control. The sender of the message initiates the control. Thus, causing a control is understood to mean an indirect control. The message can correspond in particular to a bus telegram.

As a result of an activity means that an activity is causal, regardless of whether the activity continues or not.

In the Figures 1 and 2 A first exemplary embodiment of a security system 1 according to the invention for a door 2 is shown. The door 2 is not part of the security system 1 according to the invention. The security system 1 according to the invention comprises a door lock 200 and an emergency button 10. The emergency button 10 includes a control device 100. A key button 500 is assigned to the emergency button 10. The security system 1 can include the key switch 500. Alternatively, the security system 1, in particular the emergency button 10, can have a key button input via which a connection to the key button 500 can be established.

As in Figure 2 shown, the emergency button 10 and the door lock 200 are connected to one another via a first bus system 400. The key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402. The connection 402 is shown as a dashed arrow to show that signals about a position of a key inserted into the key switch 500 are fed to an electronics unit 24 of the emergency button 10. As an alternative to the connection 402, the key switch 500 can also be connected to the first bus system 400 (not shown). This alternative applies to all exemplary embodiments.

The emergency button 10 is designed to send a message via the first bus system 400 to the door lock 200 as a result of an actuation of the emergency button 10 and thereby cause the door lock to be unlocked. The message as a result of pressing the emergency button 10 can be delayed.

The security system 1 according to the invention, in particular the emergency button 10, can also be connectable to a fire detector (not shown). If there is one Fire alarm signal causes the security system 1 to also unlock the door lock 200.

The control device 100 does not carry out security-relevant functions: The control device 100 can trigger the door lock 200 to be unlocked for authorized persons. For this purpose, the control device 100 can be connectable to an access control system, not shown. The access control system can in particular be connected or connectable to the first bus system 400. The control device 100 receives a positive authentication signal from the access control system, in particular via the bus system 400, about the authentication that has taken place. The control device 100 then causes the door lock 200 to be unlocked. The access control system can, for. B. include a reader, a key switch, a keyboard for entering a code or a locking cylinder of a mechanical lock, in particular a self-locking panic lock, or be designed in such a way.

The control device 100 can also cause the door lock 200 to be unlocked automatically at a predetermined time or after a predetermined period of time, e.g. B. if the door should be unlocked in a time window per day.

If there is no danger, i.e. If the emergency button 10 has not been pressed nor is there a fire alarm signal, the control device 100 can automatically initiate relocking after a predetermined period of time has elapsed. In this case, the control device 100 can receive an access signal from the access control system in addition to the positive authentication signal and/or measure the length of the positive authentication signal. The control device 100 can adjust the length of the predetermined period of time using the access signal or based on the length of the authentication signal. For example, a person can B. hold an ID card in front of the reader for a long time or turn the key for a long time. This signals that the predetermined period of time should correspond to a long period of time previously stored in the control device 100. If the person holds the ID card briefly in front of the reader or the user briefly turns the key, it is signaled that the predetermined period of time should correspond to a short period of time previously stored in the control device 100.

A first door condition monitoring device 204 and a second door condition monitoring device 206 detect whether the door 2 is open or closed. The control device 100 at least indirectly receives a signal from the door status monitoring devices 204, 206. If the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 can immediately and automatically cause the door lock 200 to be relocked, as soon as the control device 100 has the information with the aid of the door status monitoring devices 204, 206 that the door is initially opened and now closed again.

The emergency button 10 includes an acoustic alarm 23 and lighting means 41 (see also Figure 13 ). The lamps 41 serve to display the locking or unlocking state of the door lock 200 and thus serve as a display device. The lamps 41 serve to visually represent a time-delayed unlocking of the door lock 200 as a result of an actuation of the emergency button 10 and thus serve as a display device. The lamps 41 are used to visually display an alarm state after receiving the fire alarm signal or as a result of an actuation of the emergency button 10 and thus serve as a display. The lamps 41 serve to provide a visual representation if a previously described relocking fails.

The control device 100 controls the acoustic alarm generator 23 to issue an acoustic alarm when there is a danger, i.e. H. if a fire alarm signal was received or the emergency button 10 was pressed. The control device 100 controls the acoustic alarm generator 23 to issue an acoustic alarm if relocking fails.

The control device 100 controls the lighting means 41 to display the locking or unlocking state of the door lock 200, to visually display a time-delayed unlocking and/or to issue a visual alarm when a fire alarm signal is received or the emergency button 10 has been pressed or when a relocking fails.

When the door lock 200 is in the unlocked state, the control device 100 can monitor the opening of the door using the door condition monitoring devices 204, 206. The control device 100 can, if desired, issue an audible alarm if the door 2 has been opened during the unlocked state of the door lock 200, at least if there is no positive authentication signal. This means it can be monitored when someone opens the door, even if the door is unlocked.

The emergency button 10 can include at least one additional output. The control device 100 can use the output to control further components that can be connected to the security system 1 according to the invention, e.g. B. a room light.

The parameters for executing the mentioned functions of the control device 100 are stored in the control device 100. So are e.g. B. the predetermined time(s), the predetermined time period(s), parameters for the acoustic alarms, e.g. Am which volume and frequency an acoustic alarm should be issued, and parameters for the various controls of the lamps 41 for the visual representation of the various states of the security system 1 mentioned above are stored in the control device 100. The parameters for the lamps can include flashing frequencies, colors to be emitted, color intensities and/or lighting patterns. For parameterization, the control device 100 can communicate with a mobile communication device via a radio module 64. Alternatively, the parameterization can be done with the help of a monitoring device 301 via a second bus system 401 (see. Figures 9 and 10 ). For the parameterization, a parameterization program is provided that runs on a communication device, e.g. B. a personal computer, a mobile phone and / or a tablet, can be executed. The operator can set the parameters using the parameterization program.

In Figure 2 the structure of the door lock 200 and the emergency button 10 is shown in more detail.

The emergency button 10 has a first emergency button processing unit 20, a second emergency button processing unit 21 and a third emergency button processing unit 22. The first, second and third emergency button processing units 20, 21, 22 are each designed as microprocessors or microcontrollers. The first and second emergency button processing units 20, 21 include a non-volatile memory. The third emergency button processing unit 22 includes a non-volatile memory and/or has access to a non-volatile memory. The first, second and third emergency button processing units 20, 21, 22 are collectively referred to as the electronics unit 24 of the emergency button 10.

The electronics unit 24 also serves as a control device 100. Here, the first emergency button processing unit 20 serves as a first processing unit 103 of the control device 100. The second emergency button processing unit 21 serves as a second processing unit 104 of the control device 100. The third emergency button processing unit 22 serves as a third processing unit 105 of the control device 100.

The first and second emergency button processing units 20, 21 are used to execute the safety-relevant functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 is used to carry out the non-safety-relevant functions. The safety-relevant functions include triggering unlocking in the event of danger. The non-security-relevant functions include the other functions listed above.

When the emergency button 10 is actuated, an actuating element 11 is moved from a starting position 11.1 to an actuating position 11.II, whereby a switch 63 is actuated (see also Figures 12 , 13 ). This generates a first and a second actuation signal. This opens a first and a second circuit (not shown). A signal about the opening of the first circuit is detected by the first emergency button processing unit 20. A signal about the opening of the second circuit is detected by the second emergency button processing unit 21. The actuation signal is understood to be the signal that is generated by the user by actuating the actuating element in order to unlock the door lock and clear the escape route. The expression "as a result of an actuation of the emergency button 10" is used in particular in the sense of "after generation of the actuation signal", that is, regardless of whether the actuation element 11 is still in the actuation position 11.II or has already returned to the starting position 11.1.

The first emergency button processing unit 20 and the second emergency button processing unit 21 each initiate an unlocking of the door lock 200 independently of one another after detecting the actuation signal via the first bus system 400. The second emergency button processing unit 21 thus acts redundantly to the first emergency button processing unit 20.

The door lock 200 includes a door lock controller 201. The door lock controller 201 includes a first processing means 202 and a second processing means 203. The first and second processing means 202, 203 are collectively referred to as an electronic device 207. The first and second processing means 202, 203 are each designed as a microprocessor or microcontroller. The first and second processing means 202, 203 can each control a locking mechanism 205 of the door lock 200 for unlocking. In case of danger, i.e. H. As a result of the operation of the emergency button 10 or after receiving a fire alarm signal, both the first processing means 202 and the second processing means 203 control the locking mechanism 205 for unlocking. The second processing means 203 is therefore redundant to the first processing means 202. This structure achieves one-fault security.

The locking mechanism 205 is designed electromechanically. The locking mechanism 205 includes e.g. B. an electromechanically actuated latch element (not shown) which locks a door latch of the door 2 in the locked state of the door lock 200 and releases it in the unlocked state of the door lock 200. When the locking mechanism 205 is activated for locking, the first and second processing means 202, 203 switch on an electrical current for the locking mechanism 205. When the locking mechanism 205 is activated for unlocking, the first and second processing means 202, 203 switch on electrical current for the locking mechanism 205. A separate switch is assigned to each processing means 202, 203 for this purpose. Opening just one of the switches will turn off the power to the locking mechanism 205.

The door lock controller 201 receives feedback about the state of the locking mechanism 205 via a locking mechanism state monitoring device, not shown. In particular, a position of an armature of a coil of the locking mechanism 205 is monitored. If the state of the door lock 205 does not correspond to the target state, an alarm is issued. Additionally or alternatively, in this case a new attempt can be made to achieve the target state.

As a result of an actuation of the emergency button 10, the first and second emergency button processing units 20, 21 communicate with the first and second processing means 202, 203 via the first bus system 400 with the aid of a message. The message can contain the notification of the actuation or a control command for unlocking. Here, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 informs the second processing means 203. Through the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 to activate the locking mechanism 205 to unlock, i.e. switch off the electrical power.

The presence of a fire alarm signal is detected by the first and second emergency button processing units 20, 21. The first and second emergency button processing units 20, 21 then cause the locking mechanism 205 to be activated by the door lock control 201 for unlocking by sending a message to the first and second processing means 202, 203. Here, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 informs the second processing means 203. Through the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 to activate the locking mechanism 205 to unlock, i.e. switch off the electrical power.

The actuation of the emergency button 10 or the presence of a fire alarm signal can be sent in a message from one of the two emergency button processing units 20, 21, with the first emergency button processing unit 20 writing a first part of the message and the second emergency button processing unit 21 writing a second part of the message. The first and second processing means 202, 203 are each for at least part of the Message responsible. The emergency button processing units 20, 21, 22 and the first and second processing means 202, 203 can each receive messages via the first bus system 400. Here, the electronic unit 24 and the door lock control 201 can each be assigned a bus address.

The first and second emergency button processing units 20, 21 monitor each other. If an error is detected, the electronics unit 24, in particular the intact emergency button processing unit 20, 21, causes the first and second processing means 202, 203 to control the door locking mechanism 205 for unlocking. The first and second processing means 202, 203 monitor each other. If an error is detected, the locking mechanism 205 is activated for unlocking at least by the intact processing means 202, 203. Likewise, in the event of a fault in the bus system 400, the locking mechanism 205 is activated by the door lock control 201 for unlocking. For this purpose and to check the first and second emergency button processing units 20, 21, a sign of life signal from the first and second emergency button processing units 20, 21 is regularly sent to the door lock control 201. If the sign of life signal does not appear, the locking mechanism 205 is activated for unlocking by the first and second processing means 202, 203. The first and second processing means 202, 203 communicate with one another when the door lock control 201 has received a message about the actuation of the emergency button 10 and/or the presence of a fire alarm signal. If only the first processing means 202 or the second processing means 203 determines that the emergency button 10 has been pressed or that a fire alarm signal is present, the determining processing means 202, 203 controls the door locking mechanism 205 for unlocking and initiates that the other processing means 202, 203 also does so Door locking mechanism 205 is activated for unlocking. An error and a malfunction always include a failure of the respective component. In the event of a power failure, the locking mechanism 205 automatically switches to the unlocked state. During the processes described in this section, the security system 1 also issues an acoustic and/or visual alarm, in particular by means of the control device 100.

Once the actuation signal has been generated, the door lock 200 is electronically prevented from being transferred to the locked state without the existence of a cancellation condition. This prevents the door from locking while a hazardous condition persists. For this purpose, an electronic detection is integrated into the electronic device 207. The electronic detection is activated as a result of the actuation of the actuating element 11, which serves to release the escape route Actuation state transferred. In the actuation state, activation of the door lock 200 for locking is prevented.

The electronic determination includes a first program code. The first program code includes a first variable or has access to a first variable. In an initial state of the electronic determination, the first variable is set to an initial value. In the actuation state, the first variable is set to an actuation value that prevents the door lock 200 from being activated for locking. The first variable can be binary. If the cancellation condition is reached, the electronic determination is returned to an initial state. For this purpose, the value of the first variable is set to the initial value. In the initial state of the electronic detection, activation of the door lock 200 for locking is permitted. The first program code detects the first value of the first variable and allows locking of the door lock 200 when the value of the first variable corresponds to the initial value and prevents locking of the door lock 200 when the value of the first variable corresponds to the actuation value.

The electronic determination is stored both in the first processing means 202 and redundantly in the second processing means 203. For this purpose, the first program code is stored in the first processing means 202. The first variable is stored in the non-volatile memory of the first processing means 202. A second program code with the same functionality as the first program code is stored in the second processing means 203. The first variable is stored redundantly in the non-volatile memory of the second processing means 203.

The first variable is additionally stored in the first emergency button processing unit 20 and in the second emergency button processing unit 21 in the non-volatile memories. As a result of the actuation of the emergency button 10, the first variable in the first and second emergency button processing units 20, 21 is transferred from the initial value to the actuation value. The changed value of the first variable is transmitted to the electronic device 207 via the bus system 400. Until a cancellation condition is present, the emergency button 10 repeatedly sends the actuation value of the first variable to the electronic device 207. The sending can take place at regular time intervals, in particular together with the sign of life signal.

At least if at least one of the door status monitoring devices 204, 206 has detected that the door 2 was opened after the emergency button 10 was pressed, a cancellation action on the emergency button 10 is necessary to achieve the cancellation condition.

The actuating element 11 is designed to be non-latching. The actuating element 11 is transferred from the starting position 11.1 to the actuating position 11.II during actuation (see Fig. Figure 11 ). Immediately after actuation, the actuating element 11 moves back into the starting position 11.1 by the force of a restoring means 12 designed as a spring (see Fig. Figure 12 , 13 ). The actuation of the actuating element 11 takes place translationally.

The cancellation action on the emergency button 10 is carried out by actuating the actuating element 11. This generates a cancellation signal that corresponds to the actuation signal. In order for the control device 100 to be able to recognize whether an actuation of the emergency button 10 serves to unlock the door lock 200 or whether there is a cancellation action, a further signal must be generated at the same time to achieve the cancellation condition. For this purpose, an operator authenticates himself. Authentication is carried out by inserting and turning a key in the key switch 500. The actuation of the actuating element 11 and the authentication must overlap in time. I.e. the operator must keep the key turned while the actuating element 11 is in the actuating position 11.II. The actuating element 11 must return to the starting position 11.1 while the key is in the turned state. The course of action is sufficient to achieve the cancellation condition.

If the door condition monitoring devices 204, 206 have detected that the door 2 has remained constantly closed as a result of the actuation of the emergency button 10, the cancellation condition can be achieved in at least one further way, namely by the elapse of a predetermined time interval. So can e.g. B. after 60 seconds after the last generation of the actuation signal, the cancellation condition can be reached, provided that the door 2 has remained closed. In this case, authentication on the key switch 500 and a cancellation action on the emergency button 10 are not necessary.

The first and second door status monitoring devices 204, 206 are provided to detect with one-fault security that the door 2 has remained permanently closed as a result of the emergency button 10 being actuated. For this purpose, the door condition monitoring devices 204, 206 are preferably designed differently. The first door condition monitoring device 204 can, for. B. be designed as a door contact. The second door condition monitoring device 206 can, for. B. be designed as a trap contact. Alternatively, e.g. B. at least one of the door condition monitors is magnetic, e.g. B. as a reed switch, monitor the condition of the door 2. The door lock controller 201 receives a signal from the first and second door condition monitoring devices 204, 206, respectively, as to whether the door 2 is opened or closed. Only if during of the predetermined time interval, neither the first door condition monitoring device 204 nor the second door condition monitoring device 206 sent a signal about the opening of the door, the cancellation condition can be achieved by expiration of the predetermined time interval.

The door lock controller 201 includes a timer to measure the predetermined time interval. The door locking control 201 starts the timer as a result of the operation of the emergency button 10. If the door locking control 201 receives a signal from the first or second door status monitoring device 204, 206 during the predetermined time interval that the door has been opened, a cancellation action must be carried out on the emergency button 10. In this case, the lapse of the predetermined time interval is not sufficient. The length of the predetermined time interval is stored in the door lock control 201.

The door lock controller 201 checks whether it is permissible to reach the cancellation condition by elapse of the predetermined time interval before the door lock controller 201 controls the lock mechanism 205 to lock. So an operator can when commissioning the security system 1, i.e. H. before the start of operation of the security system 1, determine whether an elapse of the predetermined time interval without opening the door 2 is permissible as a cancellation condition and thus leads to the door 2 being relocked. The deposit can be made in the emergency button 10. A check of admissibility, an elapse of the predetermined time interval and a lack of a signal from the first and second door condition monitoring devices 204, 206 about an opening of the door 2 is sufficient to achieve the cancellation condition.

The door lock control 201 communicates the open or closed state of the door via the bus 400 to the emergency button 10 and/or to the control device 100.

The electronic unit 24 includes a timer. A first delay period can be stored in the electronic unit 24. If the door lock 200 is to be unlocked with a time delay, the electronics unit 24 waits for the first delay period after the actuation signal has been generated before the first and second emergency button processing units 20, 21 communicate with the door lock control 201 via the first bus system 400 in order to initiate unlocking .

The third processing unit 105 initiates this Figure 1 and 2 described non-safety-relevant unlocking and locking of the door lock 200, e.g. B. unlocking after receiving the authentication signal, at a predetermined time or after a predetermined period of time has elapsed or a lock after a predetermined period of time has elapsed or immediately after the door 2 has been closed. For this purpose, the third processing unit 105 communicates with the door locking controller 201 via the first bus system 400. The communication can e.g. B. contain information or a control command that causes the door lock control 201 to control the locking mechanism for unlocking or locking. Is the control device 100 connected to the second bus system (see. Fig. 7 ), the third processing unit 105 is used to forward messages from and/or to a central escape route control 300.

The third emergency button processing unit 22 controls the acoustic alarm device 23 and the lighting means 41.

If at least one of the processing means 202, 203 indicates that the locking mechanism 205 has assumed the unlocked state, the processing means 202, 203 sends a corresponding signal via the bus 400 to the electronic unit 24. The electronic device 207 is connected to the door condition monitoring device 204, 206 or connectable and receives signals about an open or closed state of the door from the door state monitoring devices 204, 206.

The functions mentioned, which the control device 100, the door lock control 2021 and/or the emergency button 10 carry out, can be carried out with the help of software modules. Program codes are stored in the electronic device 207 and/or the electronic unit 24, with the help of which the functions can be carried out.

Figure 3 represents a variant of the in the Figures 1 and 2 security system 1 shown. Here, the control device 100 is designed separately from the emergency button 10 and the door lock 200. The control device 100 can z. B. be arranged in a top-hat rail housing (not shown). The control device 100 is not integrated in an emergency button 10 or in a door lock 200. For example, the control device 100 can be provided for placement in a technical room. The first bus system 400 connects the control device 100, the door lock 200 and the emergency button 10 with each other. As in the first exemplary embodiment, the key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402.

Unless otherwise described, the structure and function correspond to the first exemplary embodiment, with the functions belonging to the Figures 1 and 2 with the help of the control device 100 or the processing units 103, 104, 105 are described by the control device 100 of the Figure 3 are executed and the functions, the ones to the Figures 1 and 2 with the help of the emergency button 10 or the emergency button processing units 20, 21, 22 are described, are executed by the emergency button 10: In particular, the first and the second emergency button processing units 20, 21 detect the actuation signal, communicate as a result of an actuation of the emergency button 10 with the first and the second processing means 202, 203 via the first bus system 400 and thus cause the locking mechanism 205 to be activated by the door locking controller 201. The measures to achieve on-fault safety or redundancy are carried out with the help of the first and second emergency button processing units 20, 21. The first variable is stored in the first and second emergency button processing units 20, 21 and is transmitted from there to the door lock control 201. The emergency button 10 includes the timer for determining the first delay period. The control device 100 is connected or connectable to the second bus system 401. The third processing unit 105 initiates this Figure 1 and 2 described non-safety-relevant unlocking and locking of the door lock 200, e.g. B. an unlocking after receiving the authentication signal, at a predetermined time or after a predetermined period of time or an automatic relocking after a predetermined period of time or immediately after closing the door 2.

The first, second and third processing units 103, 104, 105 are each designed as a microprocessor or microcontroller. The first, second and third processing units 103, 104, 105 together form processing electronics 101. The first and second processing units 103, 104 have a non-volatile memory. The third processing unit 105 includes a non-volatile memory and/or has access to a non-volatile memory.

A fire alarm signal can be received by both the control device 100 and the emergency button 10. The presence of a fire alarm signal is detected by the first and second emergency button processing units 20, 21 for the emergency button 10 or by the first and second processing units 103, 104 for the control device 100. Accordingly, both the control device 100 with the aid of the first and second processing units 103, 104 and the emergency button 10 with the aid of the first and second emergency button processing units 20, 21 can cause the door lock 200 to be unlocked. For this purpose, communication takes place via the first bus system 400 with the door lock control 201.

The control device 100 is informed via the first bus system 400 when the emergency button 10 causes the door lock 200 to be unlocked, i.e. as a result of an actuation of the emergency button 10 or after receiving a fire alarm signal. Also the control device 100 is informed about a time-delayed unlocking of the door lock 200 as a result of the emergency button 10 being actuated. The control device 100 is informed about the locking and unlocking status of the door lock 200. The control device 100 is informed about the opened or closed state of the door 2.

The control device 100 causes the alarm device 23 and the lighting means 41 to be activated for the Figures 1 and 2 acoustic alarms and visual displays described. For this purpose, the control device 100 can communicate with the electronics unit 24, in particular with the third emergency button processing unit 22, via the first bus system 400. The third emergency button processing unit 22 then controls the alarm device 23 or the lamps 41. For this purpose, the parameters for the alarm device 23 and the lamps 41 are stored in the control device 100.

In the exemplary embodiments of Figures 1 to 3 The door lock 200 includes the door condition monitoring devices 204, 206. Alternatively and not shown, the door condition monitoring devices 204, 206 can be connected to the first bus system 400 or directly to the emergency button 10 and/or the control device 100.

In the exemplary embodiments of Figures 1 to 3 At least one further emergency button, not shown, can be connected to the first bus system 400, which is designed without the control device 100. The additional emergency button is like the emergency button 10 in Figure 3 designed and can cause the door lock 200 to be unlocked when actuated. The additional emergency button corresponds to the emergency button 10 in terms of structure and functionality Figure 3 .

In the exemplary embodiments of Figures 1 to 3 At least one further door lock, not shown, can be connected to the first bus system 400. The further door lock is like the door lock 200 in Figure 2 or 3 designed and can also be unlocked when the emergency button 10 is pressed. The other door lock corresponds to the structure and functionality of the door locks 200 Figures 1 to 3 .

In Figure 4 a third exemplary embodiment of a security system 1 according to the invention with several emergency buttons 10, 1010, 2010, 3010 is shown. The security system 1 includes several door locks 200, 1200, 2200, 3200. Each emergency button 10, 1010, 2010, 3010 is assigned a key button 500, 1500, 2500, 3500. The security system 1 is used to arrange the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 on different doors 2, 2002, 3002. The doors 2, 2002, 3002 are not part of the security system 1 according to the invention. The several Emergency button 10, 1010, 2010, 3010 are connected to the first bus system 400 and thus correspond to a number of emergency buttons 10, 1010, 2010, 3010. The door locks 200, 1200, 2200, 3200 are connected to the first bus system 400 and thus correspond to a number of door locks 200, 1200, 2200 , 3200.

In the example of the Figure 4 the emergency buttons 10, 1010 are assigned to the door locks 200, 1200. The emergency button 2010 is assigned to the door lock 2200. The emergency button 3010 is assigned to the door lock 3200. As a result of pressing one of the emergency buttons 10, 1010, the two door locks 200, 1200 are unlocked, but not the door locks 2200, 3200. If the emergency button 2010 is pressed, only the door lock 2200 is unlocked. Accordingly, when the emergency button 3010 is pressed, only the door lock 3200 is unlocked. Thus, in this embodiment, the door locks 200, 1200, 2200, 3200 are selectively unlocked.

For example, the emergency buttons 10, 1010 can be provided for arrangement on a double-leaf door 2. A door lock 200, 1200 is to be arranged on a door leaf 3, 4 of the door 2. The emergency button 2010 and the door lock 2200 are intended to be arranged on another door 2002. The emergency button 3020 and the door lock 3200 are to be arranged on a door 3002, as in Figure 4 shown.

The security system 1 off Figure 4 can also for from Figure 4 different selective unlockings can be set. At one too Figure 4 deviating exemplary setting, when one of the emergency buttons 10, 1010, 2010, 3010 is pressed, only a single assigned door lock 200, 1200, 2200, 3200 is unlocked. This means that only one door lock 200, 1200, 2200, 3200 is assigned to each emergency button 10, 1010, 2010, 3010. In particular, a security system 1 set in this way is suitable for four single-leaf doors, each with a door lock 200, 1200, 2200, 3200.

In another exemplary setting of the security system 1, not shown, when one of the emergency buttons 10, 1010 is actuated, only the two door locks 200, 1200 are unlocked and when one of the emergency buttons 2010, 3010 is actuated, only the other two door locks 2200, 3200 are unlocked. The emergency buttons 10, 1010 are therefore assigned to the door locks 200, 1200 and the emergency buttons 2010, 3010 are assigned to the door locks 2200, 3200. In particular, the security system 1 set in this way is suitable for two double-leaf doors, each with a door lock 200, 1200, 2200, 3200 per door leaf.

The security system 1 can also be set so that when an emergency button 10, 1010, 2010, 3010 is pressed, all door locks 200, 1200, 2200, 3200 are unlocked.

Deviating from the security system 1, which is in Figure 4 is shown, a security system 1 according to the invention can include a number of emergency buttons 10, 1010, 2010, 3010, which does not correspond to the number of door locks 200, 1200, 2200, 3200. Eg can in Figure 4 the door 2 can be single-leaf and one of the emergency buttons 10, 1010 or one of the door locks 200, 1200 is missing.

In Figure 5 It is shown that the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 are connected to one another via the first bus system 400. Each emergency button 10, 1010, 2010, 3010 is electrically connected or connectable to a key button 500, 1500, 2500, 3500 assigned to the respective emergency button 10, 1010, 2010, 3010 via a connection 402, 1402, 2402 or 3402. Alternatively, the key switches 500, 1500, 2500, 3500 are connected to the first bus system 400 (not shown). In the exemplary embodiment Figures 4 and 5 is the control device 100 in one of the emergency buttons 10, 1010, 2010, 3010, e.g. B. the emergency button 10, integrated. The first bus system 400 is only connected to a single control device 100. Unless otherwise described below, the structure and functions of the door locks 200, 1200, 2200, 3200 correspond to the structure and functions of the door lock 200 Figures 2 and 3 , the structure and functions of the emergency button 10 the structure and functions of the emergency button 10 the Figure 2 and the structure and functions of the emergency button 1010, 2010, 3010 the structure and functions of the emergency button 10 Figure 3 . The reference numbers from the Figures 2 and 3 are used. It is understood that the door locks 200, 1200, 2200, 3200 each include their own door locking mechanism, their own processing means, etc. and the emergency buttons 10, 1010, 2010, 3010 each include their own emergency button processing units, alarm devices, lamps, switches and actuating elements.

So that the emergency buttons 10, 1010, 2010, 3010 can be assigned to the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010 are assigned when the security system 1 is put into operation, i.e. before the start of operation of the security system 1 , 2010, 3010 to the door locks 200, 1200, 2200, 3200. For this purpose, one of the door locks 200, 1200, 2200, 3200 is transferred to an assignment mode. A conscious action is then carried out on the emergency buttons 10, 1010, 2010, 3010. The conscious action can be carried out as an actuation of the actuating element 11 of the respective emergency button 10, 1010, 2010, 3010. After all emergency buttons 10, 1010, 2010, 3010 that are to be assigned to the door lock 200, 1200, 2200, 3200 that is in the assignment mode have been pressed, the assignment mode of the door lock 200, 1200, 2200, 3200 is ended. In the exemplary embodiment Figure 4 will e.g. B. first the door lock 200 is transferred to the assignment mode and then the emergency buttons 10, 1010 are pressed, whereby the The emergency buttons 10, 1010 are assigned to the door lock 200. Then the association mode of the door lock 200 is ended. Then z. B. the door lock 1200 is transferred to the assignment mode and then the emergency buttons 10, 1010 are actuated, whereby the emergency buttons 10, 1010 are assigned to the door lock 1200. Then the association mode of the door lock 1200 is ended. Now the door lock 2200 is transferred to the assignment mode and then the emergency button 2010 is actuated, as a result of which the emergency button 2010 is assigned to the door lock 2200. The association mode of the door lock 2200 is ended. You can then proceed accordingly with the door lock 3200 and the emergency button 3010.

Through the assignment, it is stored in the respective door locks 200, 1200, 2200, 3200, in particular in the respective door lock controls 201, which emergency button 10, 1010, 2010, 3010 is to be assigned to the respective door lock 200, 1200, 2200, 3200. Through the assignment, the assignment of the emergency buttons 10, 1010, 2010, 3010 to the door locks 200, 1200, 2200, 3200 deposited. For the assignment, a bus address, in particular an unchangeable bus address, of the respective emergency buttons 10, 1010, 2010, 3010 is stored.

The assignment is stored in the respective door locks 200, 1200, 2200, 3200 in the first digital processing means 202 and redundantly in the second digital processing means 203, in particular in the non-volatile memories of the processing means 202, 203.

Will e.g. B. the emergency button 10 is actuated, the emergency button 10 communicates with all door locks 200, 1200, 2200, 3200 of the first bus system 400. The door locks 200, 1200, 2200, 3200 each check based on the deposit whether the respective door lock 200, 1200, 2200, 3200 has been assigned to the activated emergency button 10. Only in the case of assignment do the assigned door locks 200, 1200 then control the respective door locking mechanism 205.

In the event of a fire alarm signal, the door locks 200, 1200, 2200, 3200, which are assigned to the emergency button 10, 1010, 2010, 3010 that receives the fire alarm signal, are unlocked.

If a door lock 200, 1200, 2200, 3200 is to be unlocked with a time delay as a result of the actuation of an assigned emergency button 10, 1010, 2010, 3010, a first delay time period is stored in that emergency button 10, 1010, 2010, 3010. The deposit takes place when the security system 1 is put into operation by the Parameterization program takes place. A different first delay period can be stored by the operator for each emergency button 10, 1010, 2010, 3010. For example, a first delay period is stored in the emergency button 10, which differs from the first delay period stored in the emergency button 2010. The emergency buttons 1010, 3010 should trigger an unlocking of the assigned door locks 2200 and 3200 without a time delay, so that no first delay period or a first delay period of 0 s is stored in the emergency buttons 1010, 3010. Alternatively, the security system 1 can be designed in such a way that the same first delay time is always stored in the emergency buttons 10, 1010, 2010, 3010, which are assigned to the same door lock 200, 1200, 2200, 3200. For this purpose, the parameterization program only allows the operator to make one common setting.

The control device 100 takes over the non-safety-relevant functions for unlocking and locking all door locks 200, 1200, 2200, 3200, as before Figure 1 and 2 described. For this purpose, the control device 100 can selectively communicate with the door locks 200, 1200, 2200, 3200. So it is stored in the control device 100 which door lock 200, 1200, 2200, 3200 is assigned to which access control system, so that in the event of a positive authentication signal from an access control system, only the assigned door lock(s) 200, 1200, 2200, 3200 are unlocked. It is also stored in the control device 100 whether and when which door lock 200, 1200, 2200, 3200 should be unlocked and at what predetermined time. It can also be stored in the control device 100 after which predetermined time period or which predetermined time periods which door lock 200, 1200, 2200, 3200 should be locked again. It is also stored in the control device 100 whether and, if so, which door locks 200, 1200, 2200, 3200 are to be locked again immediately after the door 2, 2002, 3002 is closed. It can be stored in the control device 100 whether, and if so, for which door lock 200, 1200, 2200, 3200 an acoustic alarm should be triggered when the unlocked door 2, 2002, 3002 is opened without a positive authentication signal being present. It can be stored in the control device 100 whether an acoustic alarm should be triggered if the door 2, 2002, 2003 is not closed again. The deposits can be made differently for each door lock 200, 1200, 2200, 3200 or for the groups of door locks 200, 1200, 2200, 3200 that are to be arranged on a door 2, 2002, 3002. The storage is carried out by the operator during commissioning using the parameterization program.

The control device 100 causes an acoustic and visual alarm to be triggered as a result of the actuation of an emergency button 10, 1010, 2010, 3010 in at least one another emergency button 10, 1010, 2010, 3010 is output, which is assigned to the same door lock 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. In the exemplary embodiment the Figures 4 and 5 e.g. B. the emergency button 10 is actuated, the control device 100 causes the acoustic alarm generator 23 and the lamps 41 of the emergency button 1010 to also issue an acoustic or visual alarm through communication with the electronic unit 24 of the emergency button 1010.

If an unlocking is initiated with a time delay after an emergency button 10, 1010, 2010, 3010 has been pressed, the control device 100 causes the first delay period with which the unlocking is initiated to also occur in the at least one further emergency button 10, 1010, 2010, 3010 is shown, which is assigned to the same door lock 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. For this purpose, the control device 100 communicates with the electronic unit 24 of the at least one further emergency button 1010, 2010, 3010 or controls the lamps 41 of the emergency button 10, in which the control device 100 is integrated.

The control device 100 can use the non-safety-relevant assignment for selective communication, e.g. B. assign an access control system to a door lock 200, 1200, 2200, 3200 based on a bus address. Here, the participants of the first bus system 400 each have a setting device for manually setting a bus address. The setting device can include DIP switches. At least the participants of the first bus system 400 who have the same setting on the setting device are automatically assigned to one another. In order to be able to assign different bus addresses to participants with the same setting, participants of the first bus system 400 have different key figures, from which different bus addresses are configured using the setting made. The bus address that is determined using the setting is for the emergency buttons 10, 1010, 2010, 3010 and for the door locks 200, 1200, 2200, 3200, just another bus address that the emergency buttons 10, 1010, 2010, 3010 and use the door locks 200, 1200, 2200, 3200 next to the bus address used in safety-related communication.

If a door lock 200, 1200, 2200, 3200 has already been unlocked, the control device 100 can prevent unlocking of a further door lock 200, 1200, 2200, 3200 until a condition is met, provided there is no danger. If the condition is met, the control device 100 initiates the unlocking of the further door lock 200, 1200, 2200, 3200. In this way, the control device 100 communicates with several door locks 200, 1200, 2200, 3200 so that a lock is formed. For example, the door 2002 may be located at an entrance to a room and the door 3002 may be located at an exit from the same room. The Control device 100 can cause the door lock 2200 to be unlocked if there is a positive authentication signal for the door lock 2200. Even if there is a positive authentication signal for the door lock 3200 of the control device 100, the control device 100 can prevent the unlocking of the door lock 3200 until a condition is met. If the condition exists, the control device 100 causes the door lock 3200 to be unlocked. The condition can be, for example: B. about a lock time interval or the achievement of a measurement variable, such as room temperature, humidity, air purity or number of people in the room. For this purpose, the control device 100 can be connected or connectable to a measuring device. The condition may include the closing of the first opened door 2002, which is measurable by the door condition monitors 204, 206. The condition and the door locks 2200, 3200 involved in the lock can be stored in the control device 100. The deposit can be done by the operator using the parameterization program.

In Figure 6 is a variant of the in the Figures 4 and 5 security system 1 shown. Here, the control device 100 is designed separately from the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200. The first bus system 400 connects the control device 100 with the door locks 200, 1200, 2200, 3200 and the emergency buttons 10, 1010, 2010, 3010. The control device 100 of Figure 6 corresponds to the structure of the control device 100 Figure 3 . The emergency button 10 Figure 6 The structure corresponds to emergency button 10 Figure 3 . Otherwise, the structure and functionalities correspond to those previously Figure 5 are described, the structure and functionalities of the security system 1 Figure 6 .

Because in the exemplary embodiments Figures 4 to 6 the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010, 2010, 3010 and possibly the control device 100 act as participants of a single first bus system 400, only the cables of the bus system 400 are necessary so that the participants can communicate with each other. The security system 1 therefore only has a few cables.

The bus system 400 may include at least two cables for communication and at least two cables for power supply. In particular, the bus system 400 has exactly two cables for communication and two cables for power supply. In each of the exemplary embodiments of the security system 1 according to the invention, a power supply unit can be integrated as a connection to a power network at any point in the bus system 400. The power supply can thus be used as an independent component of the security system 1 outside the emergency button 10 or the emergency buttons 10, 1010, 2010, 3010 and the door lock 200 or the door locks 200, 1200, 2200, 3200 can be provided. This makes the security system 1 flexible in its spatial structure.

If, as in the third and fourth exemplary embodiments, there are several emergency buttons 10, 1010, 2010, 3010 and one of the emergency buttons 10, 1010, 2010, 3010 has been pressed, the electronic detection only prevents the emergency button 10, 1010, 2010, 3010 assigned door locks 200, 1200, 2200, 3200 can be locked. Reaching the cancellation condition enables the door lock(s) 200, 1200, 2200, 3200 assigned to the actuated emergency button 10, 1010, 2010, 3010 to be locked. 1010, 2010, 3010, which was previously pressed, and authentication on the key switch 500, 1500, 2500, 3500 assigned to the pressed emergency button 10, 1010, 2010, 3010. At least this course of action is necessary for the door lock 200, 1200, 2200, 3200 assigned to the activated emergency button 10, 1010, 2010, 3010, in which at least one of the door condition monitoring devices 204, 206 has detected that the door 2 or one of the door leaves 3, 4 was opened after pressing the emergency button 10.

The door -conditions monitoring devices 204, 206 of the door lock, which is assigned to the operated emergency button 10, 1010, 2010, 3010, 200, 1200, 2200, 3200, the door 2 has remained closed after pressing the emergency button 10, 1010, 2010, 3010 the cancellation condition can be achieved by expiry of the predetermined time interval. The cancellation condition can e.g. B. be reached after 60 seconds after the emergency button 10 was last pressed. The admissibility of whether a lock should take place after the predetermined time interval has elapsed with the door 2, 2002, 3002 remaining closed can be determined for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, in particular for door locks , which are intended for arrangement on the same door, can be individually adjusted and stored. The deposit can e.g. B. in the emergency buttons 10, 1010, 2010, 3010. Likewise, for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, in particular for door locks that are intended for arrangement on the same door, the length of the predetermined time interval can be stored in an individually adjustable manner. A minimum length, e.g. B. 60 s, be fixed for the predetermined time interval. The storage is done by the parameterization program.

In Figure 7 a fifth exemplary embodiment of the security system 1 according to the invention is shown. The fifth exemplary embodiment includes the security system 1 according to the first exemplary embodiment Figures 1 and 2 . That means the emergency button 10, which... Control device 100 includes, is connected to door lock 200 via bus system 400. The key switch 500 is connected or can be connected to the emergency button 10 via a connection 402. In the fifth exemplary embodiment, additional components 300, 301, 510 are provided compared to the first exemplary embodiment.

The security system 1 includes the central escape route control 300. The central escape route control 300 is intended to be arranged away from the door 2. The central escape route control 300 can, for example, B. together with a monitoring device 301, which can be designed as a monitor or personal computer, and / or a multi-door display device 350 (see. Fig. 10 ) to be arranged in a guard room. The guarding device 301 is optionally part of the security system 1 according to the invention. Alternatively, the guarding device 301 can be connectable to the security system 1 according to the invention.

The central escape route control 300 has a modular structure. An emergency module 310 includes a first fastening plate 311. The first fastening plate 311 accommodates a central emergency button 302 and an identification device 312 designed, for example, as a key button. By means of the first fastening plate 311, the central emergency button 302 and the identification device 312 are mechanically rigidly connected to one another. The central emergency button 302 is used to unlock the door lock 200 as a result of an actuation of the central emergency button 302. The door lock 200 can thus be unlocked by the central emergency button 302 away from the door 2. Unlocking as a result of pressing the central emergency button 302 takes place with one-fault security. The operation of the central emergency button 302 is therefore suitable in the event of danger.

A deactivation module 320 comprises a first control element 322 designed as a key switch and a second control element 323 designed as a button. The first control element 322 is used to deactivate the emergency button 10. Thus, by actuating the first control element 322, the emergency button 10 is deactivated State transferred. If the emergency button 10 is in a deactivated state, the door lock 200 is not unlocked as a result of an actuation of the emergency button 10. The second control element 323 is used to activate the emergency button 10. If the emergency button 10 is in the deactivated state and becomes the second control element 323 is pressed, the emergency button 10 is transferred to an activated state. In the activated state of the emergency button 10, the emergency button 10 causes the door lock 200 to be unlocked when the emergency button 10 has been pressed. The deactivation module includes a second mounting plate 321. The second mounting plate 321 serves to accommodate the first and the second operating element 322, 323. The second fastening plate 321 mechanically rigidly connects the first and second operating elements 322, 323 to one another.

A delay module 330 includes a third mounting plate 331. The third mounting plate 331 accommodates a delay element 332. The delay element 332 is designed, for example, as a key switch. The delay element 332 serves to further delay the unlocking of the door lock 200 within the first delay period. The delay module 330 includes a termination element 333, which is designed as a button. The termination member 333 is attached to the third mounting plate 331. The termination element 333 is mechanically rigidly connected to the delay element 332 by means of the third fastening plate 331. By operating the termination element 333, the delay in unlocking the door lock 200 can be ended.

The central escape route control 300 includes an escape route control housing 340 that is open on one side and in which the emergency module 310, the deactivation module 320 and the delay module 330 are arranged. The deactivation module 320 and the delay module 330 are optional components of the central escape route security 300. The multi-door display device 350, if present, can also be arranged in the escape route control housing 340.

The escape route control housing 340 can mechanically attach the emergency module 310, the deactivation module 320 and the delay module 330. The emergency module 310, the deactivation module 320 and the delay module 330 are each individually attached to the escape route control housing 340, in particular screwed. The first fastening plate 311 for the emergency module 310, the second fastening plate 321 for the deactivation module 320 and/or the third fastening plate 331 for the delay module 330 are used to fasten to the escape route control housing 340. The escape route control housing 340 and the modules 310, 320, 330 are designed in such a way that different orders in which the modules 310, 320, 330 can be arranged next to one another are possible. So can e.g. B. in a central escape route safety device 300 (not shown) z. B. the emergency module 310 can be arranged between the deactivation module 320 and the delay module 330. In another exemplary central escape route control 300, not shown, a free space can be arranged on the left, delay module 330 in the middle and the emergency module 310 on the right. The free space is created by the absence of the deactivation module 320 and is covered by a plate. The escape route control housing 340 can have rails for inserting the modules 310, 320, 330. The escape route control housing 340 can Fastening options, e.g. B. perforated strips or elongated holes for variable attachment of the module 310, 320, 330.

On the first fastening plate 311, on the second fastening plate 321 and on the third fastening plate 331 a purely schematically illustrated display area 314, 324 and 334 is provided. There are symbols on the display area that explain the function of the modules 310, 320, 330. In addition, optical lights for displaying states of the security system 1 can be provided in the display areas 314, 324, 334.

In the exemplary embodiment Figure 7 The security system 1 further includes an audio and video module 510. The audio and video module 510 is intended to be arranged near the door 2, which can be locked by the door lock 200. If the audio and video module 510 is activated, an operator in the guard room can speak to the user in front of the door 2 and view the room near the door 2.

As in Figure 8 shown, the central emergency button 302 is constructed similarly to the emergency button 10. The central emergency button 302 thus comprises an emergency button electronics unit 308. The emergency button electronics unit 308 comprises a first emergency processing unit 303, a second emergency processing unit 304 and a third emergency processing unit 305. The first, second and third emergency processing units 303, 304, 305 are each designed as a microprocessor or microcontroller. The first and second emergency processing units 303, 304 have non-volatile memory. The third emergency processing unit 305 has a non-volatile memory and/or has access to a non-volatile memory. The central emergency button 302 is actuated by actuating an emergency button actuator 306. This causes an emergency button switch 307 to be activated. This generates a first and a second signal. For this purpose, a first and a second circuit (not shown) are opened. A signal about the opening of the first circuit is detected by the first emergency processing unit 303. A signal about the opening of the second circuit is detected by the second emergency processing unit 304.

The central emergency button 302 is connected to a second bus system 401. As in Figure 9 shown, the control device 100 is also connected to the second bus system 401. The second bus system 401 is a different type of bus system than the first bus system 400. For example, the second bus system 401 can be designed as a LON or LAN bus and the first bus system 400 can be designed as a CAN or DCW bus.

In Figure 9 The emergency button 10 includes the control device 100. The emergency button 10 and the door lock 200, which are in Figure 9 shown correspond to the emergency button 10 and the door lock 200 Figure 2 .

In an alternative, not shown, the control device 100, the emergency button 10 and the door lock 200 are according to Figure 3 educated. In this alternative, not shown, the control device 100, the emergency button 10 and the door lock 200 are connected to one another via the first bus system 400, with the control device 100 being connected to the second bus system 401.

The control device 100 receives messages from the central escape route security 300 via the second bus system 401. The control device 100 forwards the messages via the first bus system to other participants in the first bus system 400. The message can in particular contain information regarding an actuation of the central emergency button 302, the key button 312, the first operating element 322, the second operating element 323, the delay element 332 and/or the termination element 333 or a control command as a result of an actuation of one of the aforementioned elements 302 , 312, 322, 323, 332, 333. If the control device 100 is integrated in the emergency button 10, there is no need for forwarding to the emergency button 10 in which the control device 100 is integrated. E.g. directs according to the Figure 9 the control device 100 forwards the message to the door lock 200. If the control device 100 and the emergency button 10 are connected via the first bus system 400, the control device 100 forwards the message to the emergency button 10 and/or the door lock 200. The control device 100 adapts the message to the format of the first bus system 400. Security-relevant messages are otherwise left untouched.

If the central emergency button 302 has been pressed, the first emergency processing unit 303 and, redundantly, the second emergency processing unit 304 cause the door lock 200 to be unlocked. Here, the central emergency button 302 communicates via the control device 100 with the door lock control 201, in particular the first and second processing means 202, 203. The first and second processing means 202, 203 then control the locking mechanism 205. Previously, the first and second processing units 103, 104 forwarded the message. Here, the control device 100 left the content of the message untouched.

The central emergency button 302 has an input for receiving a fire alarm signal. If the fire alarm signal is received, the central emergency button 302 causes the door lock 200 to be unlocked. For this purpose, the first and second communicate Emergency processing unit 303, 304 via the control device 100, namely via the first and second processing units 103, 104, with the door lock controller 201, as described above.

A signal about an actuation of the key switch 312 of the first module 310 is received by the emergency button electronics unit 308, in particular the third emergency processing unit 305. The emergency button electronic unit 308 sends a message regarding the actuation of the key button 312 to the control device 100 via the second bus system 401. The control device 100 forwards the message to the first bus system 400.

The emergency button actuation element 306 is designed to be non-latching. The emergency button actuation element 306 is identical to the actuation element 11 of the emergency button 10 (see. Figures 13 to 15 ). When actuated, the emergency actuating element 306 is transferred from a starting position to an actuating position (analog Figure 11 ). Immediately after actuation, the emergency actuation element 306 moves back into the starting position by the force of a restoring means designed as a spring (analog Figure 11 ). The emergency actuation element 306 is actuated translationally. If the door lock 200 is transferred to the unlocked state as a result of the actuation of the central emergency button 302, the electronic device 207 prevents the door lock 200 from being transferred back to the locked state without the existence of a cancellation condition. The cancellation condition after pressing the central emergency button 302 can be achieved by pressing the key button 312. In particular, one actuation of the key switch 312 is sufficient to achieve the cancellation condition.

If the security system 1 includes the central escape route control 300, the cancellation condition can be achieved in a further way as a result of an actuation of the emergency button 10: If the door status monitoring devices 204, 206 have detected that the door 2 has remained permanently closed after the emergency button 10 has been actuated is, the cancellation condition can be achieved by expiry of a predetermined time interval and a cancellation treatment at the central escape route control 300 after the predetermined time interval. The cancellation treatment can correspond to an authentication at the central escape route control 300, in particular an actuation of the key switch 312. Through the lifting treatment, e.g. B. the actuation of the key switch 312, a cancellation signal can be generated. The cancellation signal is forwarded to the door lock control 201 via the control device 100. An authentication on Key button 500 and a cancellation action on emergency button 10 are not necessary in this case.

The door locking control 201 checks whether it is permissible to reach the cancellation condition by expiry of the predetermined time interval and the authentication at the central escape route control 300 with the door 2 remaining closed before the door locking control 201 controls the locking mechanism 205 for locking. When putting the security system 1 into operation, an operator can specify whether an elapse of the predetermined time interval without opening the door 2 and the additional actuation of the key switch 312 is permissible as a cancellation condition and thus leads to the door 2 being relocked. A check of admissibility, an elapse of the predetermined time interval, an actuation of the key switch 312 after the predetermined time interval and the fact that neither the first door condition monitoring device 204 nor the second door condition monitoring device 206 sent a signal about the door being opened during the predetermined time interval , are sufficient to achieve the cancellation condition.

This is a variant of achieving a cancellation condition that is one of the Figures 1 and 2 was described. This variant can e.g. B. can be selected by the operator if only the elapse of the predetermined time interval with the door 2 remaining closed does not seem safe enough to the operator. The operator can select and store this variant using the parameterization program.

In particular, if the operator has selected this option, the elapse of the predetermined time interval with the door 2 remaining closed is visually displayed on the central escape route control 300. In particular, the lighting means 313 serve to indicate that the predetermined time interval has elapsed without a signal about the opening of the door 2 being received within the predetermined time interval. The visual display tells the operator that the door 2 can be locked through authentication at the central escape route control 300.

If the door condition monitoring devices 204, 206 have not sent a signal that the door is being opened while a fire alarm signal is present, then after the fire alarm signal has ended, the door lock 200 can also be locked by the same actuation of the key switch 312. The possibility of locking the door lock 200 by operating the key switch 312 after the fire alarm signal has ended is also visually indicated by the lamps 313.

The control device 100 forwards messages from the emergency button 10 and/or the door lock 200 via the second bus system 401. Here, the control device 100 adapts the message to the format of the second bus system 401. The control device 100 sends information about the status of the emergency button 10 and/or the door lock 200 via the second bus system 401.

For example, the central escape route control 300 and the multi-door display device 350 can be connected to a third bus system 403 (see Fig. Fig. 10 ). The central emergency button 302, particularly preferably the emergency button electronic unit 308, can preferably be connected to the third bus system 403 (see Fig. Fig. 8 ). The multi-door display device 350 can visually display the locking and unlocking status of the door lock 200. In addition, with the help of the multi-door display device 350, one of the door locks 200, 200 ', 1200', 2200' of the security system 1 (see. Fig. 10 ) can be unlocked. Unlocking with the help of the multi-door display device 350 is not one-fault safe. The third bus system 403 may be the same type of bus system as the first bus system 400, e.g. B. a CAN or DCW bus.

The control device 100 forwards to the central escape route control 300 via the second bus system 401 when the emergency button 10 waits for a first delay period before the emergency button 10 causes the door locking control 201 to activate the locking mechanism 205 for unlocking.

The first delay period is displayed visually on the central escape route control 300. For this purpose, the central emergency button 302 is constructed in accordance with the emergency button 10, as is the case Figures 13 , 16, 17 is described. To visually display the first delay period, the lamps 313 of the central emergency button 302 are controlled by the emergency button electronics unit 308. As the first delay period progresses, fewer lamps 313 light up in the same color. For example, fewer lamps 313 can light up in a first color and an increasing number of lamps 313 can light up in a second color. The lamps 41 of the emergency button 10 are controlled in an identical manner in order to visually display the first delay period.

During the first delay period, e.g. B. 8 s, the operator can actuate the delay element 332. To do this, the operator turns a key in the key switch, which serves as a delay element 332. An actuation of the delay element 332 is detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. A corresponding message is sent via the second bus system 401 and possibly the first bus system 400. The emergency button 10 receives the message. Terminated as a result of the actuation of the delay element 332 the emergency button 10 the first delay period and begins with a second delay period. The second delay period, e.g. B. 180 s is longer than the first delay period. At the end of the second delay period, the emergency button 10 causes the door lock 200 to be unlocked. The second delay period is determined in the emergency button 10 using the same timer that is used to determine the first delay period. During the second delay period, the key of the delay element 322 need not remain turned. Rather, turning the key once is sufficient to start the second delay period.

The second delay period is displayed visually on the central escape route control 300 and on the emergency button 10. The visual representation on the central escape route control 300 is similar to the visual representation on the emergency button 10. As the second delay period progresses, fewer lamps 41, 313 light up in the same color. For example, fewer lamps 41, 313 can light up in a first color and an increasing number of lamps 41, 313 can light up in a second color. In order to show that the second delay period lasts a long time, a pattern associating the passage of time can be repeated within the second delay period, e.g. B. a surrounding color dot or a surrounding color window (see description for Figure 16, 17 ) are displayed visually.

If the termination element 333 is actuated during the first or the second delay period, the emergency electronics unit 308, in particular the third emergency processing unit 305, detects the actuation of the termination element 333 and sends a message regarding the actuation of the termination element 333 via the second bus system 401. This causes the emergency electronics unit 308 the emergency button 10 does not delay the unlocking any further, but rather immediately causes the door lock 200 to be unlocked. The termination element 333 is designed to be non-latching. A single actuation of the termination element 333 is sufficient to end the delay in initiating the unlocking.

The emergency button 10 can be switched to the deactivated state by actuating the first control element 322. To do this, the operator turns a key in the key switch, which serves as the first control element 322. An actuation of the first control element 322 is detected by the emergency button electronics unit 308. When the first control element 322 is actuated, a first and a second deactivation circuit are opened or closed. The opening or closing of the first deactivation circuit is detected by the first emergency processing unit 303. The opening or closing of the second deactivation circuit is detected by the second emergency processing unit 304. The first and the second Emergency processing units 303, 304 communicate with the emergency button 10 via the second bus system 401. If the first bus system 400 is located between the emergency button 10 and the central emergency button 302, the control device 100 forwards the message from the first and second emergency processing units 303, 304. When redirected, the format is changed but the content remains unchanged.

In the deactivated state of the emergency button 10, the actuation of the emergency button 10 has no effect on the door lock 200.

The activated state and the deactivated state are stored electronically in the emergency button 10. Because the activated state and the deactivated state are stored in the emergency button 10, the key in the first control element 322 does not have to remain turned during the deactivated state. Rather, turning the key once is enough to deactivate the emergency button 10.

The deactivation remains until the second control element 323 is actuated. The actuation of the second control element 323 can be detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. The emergency electronics unit 308 sends a message regarding the actuation of the second control element 323 via the second bus system 401 and possibly via the first bus system 400 to the emergency button 10, whereupon the emergency button 10 is transferred to the activated state. The second control element 323 is not latching. Because the activated and deactivated states are stored in the emergency button 10, a single actuation of the second control element 323 is sufficient to transfer the emergency button 10 to the activated state.

The central escape route control 300 includes a bus 341, via which the emergency electronics unit 308, in particular the third emergency processing unit 305, can detect signals from the second control element 323, the delay element 332 and the termination element 333. The emergency electronics unit 308 serves as the intelligence of the entire central escape route control 300. Only the emergency electronics unit 308 includes microprocessors. The deactivation module 320 and/or the delay module 322 can be designed to be processor-free. The bus 341 can be designed as an I ² C bus.

To store the activated and deactivated state, a second variable can be stored in the first emergency button processing unit 20 and redundantly in the second emergency button processing unit 21, in particular in the non-volatile memories. The second variable can be binary. If the emergency button 10 is in the deactivated state, the second variable is set to a deactivation value. Is it located? Emergency button 10 is in the activated state, the second variable is set to an activation value. As a result of an actuation of the first control element 322, the second variable is set to the deactivation value. As a result of an actuation of the second control element 323, the second variable is set to the activation value. Before the emergency button 10 causes the door lock 200 to be unlocked, the emergency button 10 checks the value of the second variable. If the emergency button determines that the emergency button 10 is deactivated, the emergency button 10 does not communicate with the door locking control 201 in order to trigger an unlocking 200.

The first emergency processing unit 303 and the second emergency processing unit 304 monitor each other for errors. If an error is detected, a message is sent via the second bus system 401. The emergency button 10 receives the message and then transfers itself to the activated state if the emergency button 10 is in the deactivated state. To do this, the emergency button 10 changes the value of the second variable to the activation value.

The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly, in particular at regular intervals, send a sign-of-life signal via the second bus system 401. The emergency button 10 receives the sign-of-life signals. If a sign of life signal is missing once or several times, the emergency button 10 switches to the activated state if the emergency button 10 is in the deactivated state.

If the security system 1 receives a fire alarm signal, the emergency button 10 changes to the activated state if the emergency button 10 is in the deactivated state.

The actuation of the emergency button 10 in the deactivated state is displayed on the central escape route control 300, on the guard device 301 and/or on the multi-door display device 350. If there is actually a danger, the emergency button 10 can be switched to the activated state by the operator by actuating the second control element 323, or the door lock can be activated directly by the operator to unlock it. To do this, the operator can press the central emergency button 302. The operator can, for example, determine whether a dangerous situation exists. B. via the audio and video module 510. This achieves increased security.

The deactivation can e.g. B. can be done at night in a department store. Furthermore, it is conceivable to use the deactivatable emergency button 10 in a building in which people with an impaired mental state live. Emergency buttons 10 can also be used on doors to which people with impaired mental health have access, e.g. B. in a psychiatric or dementia ward.

If the emergency button 10 is actuated in the deactivated state and the emergency button 10 is then transferred to the activated state, the actuation of the emergency button 10 in the deactivated state does not lead to an unlocking of the door lock 200 even after the transfer to the activated state Pressing the emergency button 10 in the deactivated state remains ineffective. On the one hand, this is due to the fact that the actuating element 11 and the switch 63 are designed to be non-latching. On the other hand, the actuation of the emergency button 10 in the deactivated state was not saved in the emergency button 10. The door lock control 201 does not receive any message regarding the operation of the emergency button 10 in the deactivated state. The electronic detection was therefore not transferred to the actuation state. This ensures that the door lock 100 is not unlocked immediately when the emergency button 10 is activated, e.g. B. because the emergency button 10 was pressed long before. This achieves increased building security.

In order to achieve a particularly high level of security, it can be provided that the audio and video module 510 is switched on during the first and/or the second delay period. Here, the emergency button 10 activates the audio and video module 510 at the beginning of the first and/or second delay period. The audio and video module 510 is also activated by the emergency button 10 when the emergency button 10 is pressed in the deactivated state. For this purpose, the emergency button 10 communicates with the audio and video module 510 via the second bus system 401 and possibly via the first bus system 400.

It may be that the emergency button 10 can only be deactivated if the audio and video module 510 can be activated. If the audio and video module 510 is part of the security system 1 according to the invention, deactivation can be omitted if the audio and video module 510 is z. B. is not functional and/or the connection to the audio and video module 510 is disturbed. This does not apply if the security system 1 does not include an audio and video module 510, but rather a monitoring system separate from the security system 1 is provided in the building.

It may be that the emergency button 10 only delays the unlocking by the first and/or second delay time if the audio and video module 510 can be unlocked. If the audio and video module 510 is part of the security system 1 according to the invention, a delay can be omitted if the audio and video module 510 z. B. is not functional and/or the connection to the audio and video module is disturbed. This does not apply if the security system 1 does not include an audio and video module 510, but rather a monitoring system separate from the security system 1 is provided in the building.

In Figure 10 a further exemplary embodiment of a security system 1 according to the invention is shown. As in the exemplary embodiment Figures 7 to 9 The security system 1 includes a central escape route control 300, which corresponds to the Figures 7 and 8th is constructed. Key buttons 500, 500', 1500, 1500', 2500 associated with the respective emergency buttons 10, 10', 1010, 1010', 2010 are not shown for the sake of clarity. The central escape route control 300 is connected to the second bus system 401. A first subsystem 5 and a second subsystem 6 are connected to the second bus system 401. The two subsystems 5, 6 each include a first bus system 400, 400'. Emergency buttons 10, 1010 or 10', 1010', 2010' and door locks 200 or 200', 1200', 2200' are connected to the respective first bus system 400, 400'. The first bus systems 400, 400' are the same type of bus system, e.g. B. a CAN or a DCW bus. The second bus system 401 is a different type of bus system, e.g. B. a LON or LAN bus.

The security system 1 includes the multi-door display device 350. The multi-door display device 350 can, for. B. visually indicate which door lock 200 or 200 ', 1200', 2200' is in the unlocked state and which door lock is in the unlocked state. With the help of the multi-door display device 350, an operator can carry out a non-security-relevant locking and unlocking of individual door locks 200 or 200 ', 1200', 2200' of the security system 1.

Each subsystem 5, 6 includes only one control device 100, 100'. The control device 100, 100 'of the respective subsystem 5, 6 is connected to the second bus system 401. The control device 100 of the first subsystem 5 is connected to the emergency buttons 10, 1010 and the door lock 200 of the first subsystem 5 via the first bus system 400. The control device 100' of the second subsystem 6, on the other hand, is integrated in an emergency button 10' of the second subsystem 6 and is connected to the remaining emergency buttons 1010', 2010' and the door locks 200', 1200', 2200' of the further first bus system 400'.

A first emergency button 10 and a second emergency button 1010 are provided in the subsystem 5. If one of the emergency buttons 10, 1010 is pressed, the activated emergency button 10, 1010 causes the door lock 200 to be unlocked.

A first emergency button 10', a second emergency button 1010' and a third emergency button 2010' are provided in the subsystem 6. The emergency buttons 10', 1010', 2010' selectively cause the door locks 200', 1200', 2200' of the second subsystem 6 to be unlocked. For example, when the first emergency button 10' is actuated, only the first door lock 200' is triggered to unlock. Accordingly, when the second emergency button 1010' is pressed, only the second door lock 1200' is unlocked and when one Pressing the third emergency button 2010' only causes the third door lock 2200' to be unlocked.

A variety of deviations are conceivable. A security system 1 according to the invention can, for example, B. be designed without the first or the second subsystem 5, 6. As a sole or additional subsystem, e.g. B. one of the in the Figures 1 to 6 Security systems 1 according to the invention described can be provided. The design and functions of the emergency buttons 10, 10', 1010, 1010', 2010' and the door locks 200, 200', 1200', 2200' are designed in accordance with the previous exemplary embodiments, unless additionally or differently described below.

In each of the door locks 200, 200', 1200', 2200' of the security system 1 it is stored whether the respective door lock 200, 200'1200', 2200' is unlocked when the central emergency button 302 is pressed. For example, B. the door locks 200, 200 ', 2200' allow unlocking as a result of an actuation of the central emergency button 302, but the door lock 1200' does not. If the central emergency button 302 is pressed, the door lock controls 201 of the door locks 200, 200 ', 2200' activate the respective locking mechanism 205 for unlocking. However, there is no such control in the door lock 1200'.

If the central emergency button 302 is pressed, the control devices 100, 100' receive a corresponding message from the central emergency button 302 via the second bus system 401 and forward the message to all door locks 200 or 200', 1200', 2200' of the respective first bus system 400 , 400' further. The door locks 200, 200', 1200', 2200' decide on the basis of the deposit, which includes the approval of an unlocking as a result of the actuation of the central emergency button 302, whether the respective door lock control 201 of the door locks 200, 200', 1200', 2200' controls the respective locking mechanism 205 for unlocking or not.

The determination of whether the door lock 200, 200'1200', 2200' is unlocked as a result of an actuation of the central emergency button 302 is made when the operator puts the security system 1 into operation. The storage is done by the parameterization program.

In each of the emergency buttons 10, 1010, 10'. 1010', 2010' it is stored whether, when the first operating element 322 is actuated, the respective emergency button 10, 1010, 10' is transferred to the deactivated state. 1010', 2010' is approved or not. This results in a selective deactivation by actuating the only first control element 322 of the security system 1. For example, B. the emergency buttons 10, 10 ', 2010' as a result of an operation of the first control element 322 can be transferred to the deactivated state, but the emergency buttons 1010, 1010 'are not.

If the first control element 322 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to all emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400', which are not the control device 100 include, further. The emergency buttons 10, 1010, 10'. 1010', 2010' of the security system 1 decide based on the deposit about approval for deactivation whether the respective emergency button 10, 1010, 10', 1010', 2010' transfers itself into the deactivated state as a result of the actuation of the first control element 322 or not.

A third variable can be used to determine whether deactivation of the emergency buttons 10, 1010, 10', 1010', 2010' should be permitted. The third variable can be binary. The third variable is stored in the non-volatile memory of the respective first and second emergency button processing units 20, 21 of each emergency button 10, 1010, 10', 1010', 2010'. If deactivation is permitted for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable takes on a first value. If deactivation is prohibited for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable takes on a second value. The emergency button 10, 1010, 10', 1010', 2010' checks the value of the third variable before the emergency button 10, 1010, 10', 1010', 2010' deactivates itself and only deactivates itself when the third variable has the first value has.

The operator determines whether the emergency button 10, 1010, 10', 1010', 2010' should be deactivable when the safety system 1 is put into operation. This is stored using a parameterization program.

In each of the emergency buttons 10, 1010, 10'. 1010', 2010' it is stored whether the respective emergency button 10, 1010, 10' is activated when the delay element 332 is actuated. 1010', 2010' the unlocking of the emergency button 10, 1010, 10'. 1010', 2010' associated door locks 200, 200', 1200', 2200' are delayed or not by a second delay period. The second delay period is for the respective emergency buttons 10, 1010, 10'. 1010', 2010' can be set to different lengths and is stored in the security system 1, in particular in the emergency buttons 10, 1010, 10', 1010', 2010'. Alternatively, the delay can be permitted by the second delay period and, if necessary, the length of the second delay period only for groups of emergency buttons 10, 1010, 10 '. 1010', 2010', which are assigned to a door lock 200, 200', 1200', 2200' or a door 2, 2002, 3002, can be individually adjustable. The setting and storage is carried out by the operator using the parameterization program.

For example, B. the emergency buttons 10, 2010' further delay the unlocking of the door locks 200 or 2200' as a result of an actuation of the delay element 332, but the emergency buttons 1010, 10', 1010' do not. The length of the second delay period for the emergency button 10 is selected to be different from the length of the second delay period for the emergency button 2010'. If the emergency button 10 is actuated and the delay element 332 is actuated within the first delay period that is stored for the emergency button 10, the emergency button 10 delays the unlocking from the actuation of the delay element 332 by the second delay period that is stored in the emergency button 10 . If the emergency button 2010 'is actuated and the delay element 332 is actuated within the first delay time that is stored for the emergency button 2010', the emergency button 2010' delays the unlocking from the actuation of the delay element 332 by the second delay time that is in the emergency button 2010' is stored and which differs from the second delay time for the emergency button 10. If the emergency button 1010 is pressed, the emergency button 1010 delays unlocking by the first delay time that is stored for the emergency button 1010. If the delay element 332 is actuated during the first delay period of the emergency button 1010, the unlocking is not delayed by a second delay period, since this delay is not permitted for the emergency button 1010, but rather the emergency button 1010 unlocks the door lock immediately after the first delay period 200 cause. The emergency buttons 10', 1010' do not delay the unlocking of the assigned door lock 200' or 1200' at all. For the emergency buttons 10', 1010', neither a first delay period nor a second delay period is permitted. Instead of not allowing a delay by the first and/or the second delay period, a period of 0 s can also be stored. Actuation of the termination element 333 terminates any delay in unlocking.

If the delay element 332 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to the emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400', which are not the Control device 100 include, further. The emergency buttons 10, 1010, 10'. 1010', 2010' of the security system 1 decide how to proceed based on the deposit.

The deposit as to whether the emergency button 10, 1010, 10', 1010', 2010' allows the delay by the second delay period and, if so, the deposit of the length of the second delay period occurs when the security system 1 is put into operation. The deposits are made by the Operator using the parameterization program set. The first and/or the second delay period can only be selected up to a maximum, predetermined period of time.

The operator can also use the parameterization program to selectively store which cancellation condition is permitted for which emergency button 10, 1010, 1010', 2010'. The cancellation condition for the cancellation action on site is always permitted. For each emergency button 10, 1010, 1010', 2010', however, the achievement of the cancellation condition by elapse of the predetermined time interval or the achievement of the cancellation condition by the elapse of the predetermined time interval and subsequent actuation of the identification device 312 with the door 2 remaining closed can be selectively permitted or not.

The storage of whether the emergency button 10 can be deactivated when the first control element 322 is actuated, whether the emergency button 10 should delay the unlocking by a second delay period when the delay element 332 is actuated, the length of the first and the second delay period, the storage of the cancellation condition and / or the deposit as to whether the door lock 200 should be unlocked when the central emergency button 302 is pressed can also be used for the security system 1 according to the exemplary embodiment Figures 7 to 9 be made.

Different and not shown from the Figures 7 to 10 Several central escape route controls 300, 300 'can also be connected to the second bus system 401. For example, in a psychiatric hospital, a central escape route control 300 can be provided for arrangement in a guard room and a further central escape route control 300' can be provided for arrangement in a nurse's room.

In the respective door locks 200, 200', 1200', 2200' it can be stored with the help of the parameterization program as a result of an actuation of which of the central emergency buttons 302, 302' an unlocking should take place. A list is stored in the door locks for this purpose. In the respective emergency buttons 10, 10', 1010, 1010', 2010' it can be stored with the help of the parameterization program as a result of an actuation which of the first control elements 322, 322' is permitted to be deactivated. In contrast to the third variable, a list is stored in the emergency buttons 10, 10', 1010, 1010', 2010'.

The first to fourth exemplary embodiments of the security system 1 according to the invention have no second bus system 401, no central escape route control 300, no security device 301 and no audio and video module 510. However, exemplary embodiments of the security system 1 according to the invention are conceivable in which First to fourth exemplary embodiments additionally at least partially include the missing components 401, 301, 300 and 510. If the security system 1 is designed for several doors, an audio and video module 510 can be assigned to each door. The emergency buttons 1010, 2010, 3010, which do not include the control device 100, and the door locks 200, 1200, 2200, 3200 are not connected to the second bus system 401.

In the Figures 1 to 10 the door locks 200, 200', 1200, 1200', 2200, 2200', 3200 are part of the security system 1 according to the invention. However, it is conceivable that only the door lock controls 201 are part of the security system 1 according to the invention. In this case, the door locking controls 201 can each be connected to the locking mechanism 205 and possibly the door condition monitoring devices 204, 206. In this case, the door lock 200 is not unlocked in the security system 1, but part of the security system 1 is that the door lock control 201 controls the locking mechanism 205, that is, the door lock control 201 switches the electrical power for the locking mechanism 205 on or off. In this case, instead of the terms “unlocking or locking the door lock” “control of the locking mechanism for unlocking or locking” can be used.

In the Figures 11 to 13 an emergency button 10 is shown. The in Figure 11 Emergency button 10 shown is as an emergency button 10, 10 ', 1010, 1010', 2010, 3010 in one of the security systems 1 according to the invention Figures 1 to 10 can be used or used.

The emergency button 10 includes the actuating element 11. The actuating element 11 can move from the starting position 11.I, which is in the Figure 11 is shown, move into the operating position 11.11, which is in Figure 11 is indicated. In Figure 12 the actuating element 11 is also in the starting position 11.I.

The switch 63 is actuated in the actuation position 11.II. The switch 63 also changes from a first 63.1 to a second position 63.11, as in Figure 12 indicated.

After actuation, the actuating element 11 returns to the starting position 11.I immediately and without manual intervention. For this purpose, a restoring means 12 designed as a spring is provided in the emergency button 10. After actuation, the switch 63 also returns to the first position 63.I immediately and without manual intervention.

The emergency button 10 comprises at least a first circuit board 60. This makes it possible to design the emergency button 10 in a compact manner and with secure functionality.

The emergency button 10 has a construction height AH of less than 48 mm, preferably less than 45 mm, particularly preferably less than 43 mm, from a crest 32 of a front surface 19 of the actuating element 11 in the installation direction.

The switch 63 is attached to the first circuit board 60. The first and second circuits are interrupted on the first circuit board 60 by operating the switch 63.

The emergency button 10 also includes a second circuit board 61. The first, the second and the third emergency button processing units 20, 21, 22 are arranged on the second circuit board 61. The arrangement of the first, second and third emergency button processing units 20, 21, 22 is independent of whether the first, second and third emergency button processing units 20, 21, 22 serve as processing units 103, 104, 105 of the control device 100.

The opening of the first and second circuit can be detected wirelessly by the first and second emergency button processing units 20, 21, respectively. For this purpose, the first and second circuit boards 60, 61 are connected to one another via plugs 68.

The first and second boards 60, 61 are arranged at a fixed distance from each other. For this purpose, bolts 69 are provided, which fasten the first and second boards 60, 61 to one another at a fixed distance from one another via screws 70 (see Fig. Figure 13 ). The first and second boards 60, 61 are arranged parallel to one another.

The emergency button 10 includes a mounting plate 62. The mounting plate 62 is also arranged at a fixed distance from the first and second circuit boards 60, 61. For this purpose, bolts 71 are provided which connect the mounting plate 62 to the first circuit board 61 via screws 72.

The mounting plate 62 is used to attach to a flush-mounted box. The flush-mounted box can have a diameter of 60 mm and a depth of 41 mm. The part of the emergency button 10 that extends from the mounting plate 62 in the installation direction is referred to as the installation part 73. The built-in part 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm, particularly preferably less than 29 mm. This means there is enough space for cables in the flush-mounted box. The distance MP from a bottom side of the mounting plate 62 to a top side of the second circuit board 62 is less than 22 mm, preferably less than 20 mm, particularly preferably less than 17 mm. The mounting plate 62 can also be used for attachment to a cover element of a surface-mounted housing (not shown). The distances mentioned apply in particular to an emergency button in which the Bluetooth module 64 is attached to an underside of the second circuit board 61, unlike the illustration in the figures.

As described above, the cancellation operation performed directly on the emergency button 10 is performed without rotating the operating member 11 and the switch 63 executed. This makes it possible to use a switch 63 with a low height. The switch 63 is designed such that the switch 63 is rotation-free. The switch 63 has a height SH of less than 20 mm, preferably less than 17 mm, particularly preferably less than 15 mm.

The manner of the cancellation action and the low height of the switch 63 contributes to the low installation height AH of the emergency button 10.

The fact that the switch 63 is arranged centrally under the actuating element 11 and the actuating element 11 is guided eccentrically in the emergency button 10 also contributes to the low installation height AH of the emergency button 10.

Like in the Figures 14 and 15 shown, the actuating element 11 has rod-shaped guide means 35. The guide means 35 are guided in guide sleeves 65. The guide sleeves 65 are connected to the mounting plate 62. In order to achieve good guidance, one of the guide sleeves 65 extends through the first board 60.

The guide means 35 are arranged parallel to the switch 63. The guide means 35 prevent a rotational movement of the actuating element 11 about an imaginary axis 701, which runs in the actuating direction 700.

Due to the guide means 35 guided in the guide sleeves 65, the actuating element 11 can only be moved in translation.

The actuating element 11 has an actuating means 36. Like in the Figures 12 and 15 shown, the actuating means 36 is designed in the form of a circular cylinder. This ensures that the actuating means 36 always operates the switch 63. In particular, a first and a second switching element 74, 75 of the switch are always actuated simultaneously (see Fig. Figure 13 ). The first circuit is opened by the first switching element 74 and the second circuit is opened by the second switching element 75.

The actuating means 36 is formed with a hollow interior 38. A light source (not shown) is arranged in the switch 63. The light emitted from the light source is guided through the hollow interior 38 to the crest 32 of the front surface 19 of the actuator 11, where the light passes through the actuator 11. The tip 32 thus serves as an illuminating area 32 of the actuating element 11.

The actuating element 11 can include an opaque base body 33. The base body 33 can be provided with an opening, which differs from the representation in the figures. A translucent, in particular translucent, insert (not shown) can be arranged in the opening. The insert can be fixed in the opening, in particular pressed in. As a result, the actuating element 11 can be manufactured particularly easily.

The front surface 19 is partially conical. The illumination area 32 forms the tip of the truncated cone. The illumination area 32 protrudes from a cover 14 of the emergency button 10 against the actuation direction 700. As a result, the light that leaves the illumination area 32 is clearly visible to the side of the emergency button 10.

The restoring means 12 has a cavity 37. The actuating means 36 of the actuating element 11 and the switch 36 with the first and second switching elements 74, 75 protrude in the cavity 37. This results in a space-saving arrangement.

The Bluetooth module 64 is arranged between the first and second circuit boards 60, 61. The Bluetooth module 64 is used for parameterization. Alternatively and not shown and in a more space-saving manner, the Bluetooth module 64 is attached to a side of the second circuit board 61 facing away from the actuating element 11. As a result, the distance between the first and second boards 60, 61 can be further reduced.

A tamper switch 66 is arranged on the first circuit board 60. Due to the low installation height, an actuation extension 67 of the tamper switch 66 is guided through the mounting plate 62. The actuation extension 67 rests directly on the cover 14 of the emergency button 10.

If the control device 100 is integrated in the emergency button 10, the emergency button 10 can include the functions described above despite the low installation height AH and can therefore be designed intelligently. The functions described above are carried out with the help of a program code that is stored in at least one of the processing units 103, 104, 105.

The emergency button 10 has a covering means 13. The covering means 13 is designed to be transparent and covers the front surface 19 of the actuating element 11. As a result, the covering means 13 prevents a user from directly touching the actuating element 11. The covering means 13 serves as a mental obstacle for the user.

The covering means 13 remains non-destructive when the emergency button 10 is pressed. When the emergency button 10 is actuated, the covering means 13 moves from an initial position 13.I into an actuation position 13.11. Through the covering means 13, the actuating element 11 is only actuated indirectly by the user via the covering means 13.

The covering means 13 is arranged irremovably in the emergency button 10. This ensures that a user cannot remove the covering means 13 improperly.

The covering means 13 is firmly connected to the actuating element 11. For this purpose, the covering means 13 has extensions 27, which are in Figure 13 are shown. Like in the Figures 13 , 14 and 15 shown, the actuating element 11 has holes 28 through which the extensions 27 are guided and materially connected to the actuating element 11.

The actuating element 11 has a flange-like section 31 to which the covering means 13 is attached. The flange-like section 31 has the holes 28.

The flange-like section 31 serves as a stop of the actuating element 11 in the actuating direction 700. The actuating element 11 reaches the actuating position 11.II when the flange-like section 31 rests on the mounting plate 62 or on the guide sleeves 65.

The flange-like section 31 serves as a stop of the actuating element 11 against the actuating direction 700. The actuating element 11 reaches the starting position 11.1 when the flange-like section 31 rests on a light guide 40. The light guide 40 holds the actuating element 11 against the force of the restoring means 12. For this purpose, the light guide 40 has a contact surface 51.

The light guide 40 is attached to the mounting plate 62. As a result, the actuating element 11 remains held against the force of the restoring means 12 even when the cover 14 is removed. The light guide 40 has a flange 52 with which the light guide 40 is fastened to the mounting plate 62 (see Fig. Fig. 17 ). The light guide 40 is attached to the mounting plate 62 by the same screws 72 through which the mounting plate 62 is attached to the first circuit board 60.

Alternatively and not shown, the covering means 13 can be designed as an elastic film which spans the actuating element 11.

Due to the fixed connection, the distance between the operating position 11.II and the starting position 11.I and the distance between the operating position 13.11 and the starting position 13.I correspond to one another. Immediately after the end of the operation and without manual intervention, the covering means 13 is moved back into the starting position 13.I. The restoring means 12 is used for this purpose. The restoring means 12 transfers the covering means 13 indirectly via the actuating element 11 into the starting position 13.1.

The covering means 13 and the actuating element 11 each have a circular cross section. The cover 14 has a circular recess 15. The covering means 13 projects through the recess 15 counter to the actuation direction 700. The actuation element 11 also projects through the recess 15.

The recess 15, the actuating element 11 and the covering means 13 have a common imaginary axis 701. The recess 15, the actuating element 11 and the covering means 13 are arranged concentrically.

The covering means 13 has an actuation surface 17 which is spaced apart from the front surface 19 of the actuation element 11. The covering means 13 also has a side surface 16 which is designed at a distance from the side surface 18 of the actuating element 11.

Due to the spacing of the front surface 19 and the actuation surface 17, the transparent covering means 13 can protrude far out of the lid 14, while the partially opaque actuation element 11 protrudes only to a small extent from the lid 14. As a result, the light guide 40, which is essentially flush with the cover 14, remains clearly visible even to users standing at an angle in front of the emergency button 10. The light guide deviates a maximum of ±3 mm, preferably a maximum of ±2 mm, particularly preferably ±1 mm from a flat end with the cover 14.

Because the covering means 13 protrudes far from the cover 14, the emergency button 10 can be operated by the user with the flat of his hand. For this purpose, the covering means 13 is flat with the cover 14 in the operating position 13.II or the covering means 13 protrudes from the cover 14 in the operating position 13.II against the operating direction 700. In other words, the distance ABS from the starting position 13.I and the operating position 13.II corresponds at most to the distance DF of an elevation 30 of the operating surface 17 to the cover 14. Likewise, the amount of the distance AB corresponds to the operating position 11.II and the starting position 11.I at most the distance DF. In Figure 11 the distance ABS and the amount of the distance AB correspond to the distance DF.

The emergency button 10 includes lamps 41. The lamps 41 serve to display the unlocked and locked state of the door lock 200. If there are several emergency buttons 10, 1010, 2010, 3010, the lamps 41 show the unlocked and locked status of the assigned door lock or door locks 200, 1200, 2200, 3200. The lighting means 41 are arranged concentrically around the actuating element 11. For example, the unlocked state is indicated by green light and the locked state is indicated by red light. In particular, all lamps 41 emit the same light to indicate the locked and unlocked states, at least as long as there is no danger.

The lamps 41 can be controlled in at least two groups. Due to the different control, e.g. B. Patterns are possible through which further states of the security system 1 are displayed to the user. Thanks to the additional display options A variety of states can be displayed to the user and/or the operator in a compact and simple manner without additional display means. This increases the security of the security system 1.

In Figure 13 Of the eight individual lamps 41 present as an example, six individual lamps are shown, three of which are provided with the reference numbers 41a, 41b, 41c. The individual lamps are referred to below as 41a, 41b, 41c etc.

Each of the individually controllable groups of lamps 41 can only include a single lamp 41a, 41b, 41c, etc. In the exemplary embodiment Figures 11 to 17 Each light source 41a, 41b, 41c, etc. can be controlled individually. Each light source 41a, 41b, 41c, etc. is designed as an RGB LED. The lamps 41a, 41b, 41c, etc. can be controlled in such a way that each lamp 41a, 41b, 41c, etc. can emit at least four different, preferably at least five different colors. This can be e.g. B. be red, blue, yellow, green and pink light.

The lamps 41 are controlled by the third emergency button processing unit 22. For this purpose, the emergency button processing unit 22 and the lamps 41 are connected to a ring bus (not shown).

The lamps 41 are arranged on the first circuit board 60. The acoustic alarm generator 23 is also arranged on the first circuit board 60. The acoustic alarm generator 23 is controlled by the third emergency button processing unit 22.

Are several door locks 200, 1200 assigned to the emergency button 10, such as. Am Figure 4 shown, at least two options are conceivable. On the one hand, the emergency button 10 can only display the unlocked state when all door locks 200, 1200 assigned to the emergency button 10 are in the unlocked state. The unlocked state is only displayed when the entire escape door width of the two door leaves 3, 4 is available for escape. Alternatively, the emergency button 10 indicates the unlocked state when one of the door locks 200, 1200 or all door locks of a door leaf 3, 4 are in the unlocked state. This means that the possibility of escape is indicated as early as possible when one of the door leaves 3, 4 is already unlocked. The options can be selected by the operator. For this purpose, e.g. B. a switch (not shown) may be provided in the security system 1.

Another state of the security system 1, which is indicated by the lighting means 41 that can be controlled in groups, is the danger situation. The lamps 41 can indicate whether a fire alarm signal is present or whether an actuation signal has been generated.

The lamps 41 can be controlled in such a way that the progress of the time delay of unlocking after the activation signal has been generated by the lamps 41 is displayed. Here, for example, emit B. increasingly fewer lamps 41 light of one color, especially red light.

As a further state of the security system 1, which can be represented by the lamps 41, an error can be represented by the lamps 41. The error that can be represented in this way can be an error in the security system 1. For example, it can be indicated that the control device 100, the door lock control 200 or the first or second emergency button processing unit 20, 21 of the security system 1 is not operational, defective, failed, deliberately switched off or removed. The error can be an error in the alarm system connected to the security system 1, which is not operational, defective, failed, deliberately switched off or removed.

The light guide 40 includes several light guide areas 44 (see the Figures 16 and 17 ). Each of the lamps 41a, 41b, 41c, etc. is assigned a light guide area 44. The light guide 40 can be mentally divided into the light guide areas 44. Recesses 46 are provided between the light guide areas 44. Through the recesses 46, the light essentially remains in the light guide areas 44.

Each light guide area 44 has a forwarding section 48. The forwarding section 48 is arranged above the lamps 41 in the transmission direction 702. The transmission direction 702 takes place opposite the actuation direction 700. The forwarding section 48 serves to guide light up to a spreading section 45 of the light guide region 44. The spreading section 45 spreads out in the transmission direction 702.

The spreading section 45 adjoins the forwarding section 48 in the transmission direction 702. The spreading section 45 serves to widen the light beam of the emitted light. The forwarding section 48 widens less than the spreading section 45.

The light guide 40 is formed in one piece. The light guide 40 is made of the same material, in particular monolithic. The light guide 40 is made of translucent material.

The light guide areas 44 have a connecting section 49. The connecting section 49 adjoins the spreading section 45 in the transmission direction 702. The connecting sections 49 of the light guide regions 44 are connected to one another in one piece in such a way that the one-piece light guide 40 of uniform material results.

The connecting sections can have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the light from one of the lamps 41a, 41b, 41c, etc. is almost limited to a lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h on the surface 47 of the light guide 40 facing the user. Each light guide area 44 includes a lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h.

The surface 47 of the light guide 40 corresponds to a circular ring. The lighting areas 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are designed as sectors of the circular ring. By emitting the light from a lamp 41a, 41b, 41c, etc., the associated lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h is illuminated. The circular ring encloses the actuating element 11.

The lamps 41 can be controlled in such a way that at least one lamp 41a, 41b, 41c, etc. emits the light of one color and at least one further lamp 41a, 41b, 41c, etc. emits the light of a different color at the same time. For example, in this way the luminous areas 50a, 50b, 50e, 50f can display light of one color and the luminous areas 50c, 50d, 50g and 50h can display light of another color. While the lighting areas 50a, 50b, 50e, 50f z. B. are continuously illuminated, the lighting areas 50c, 50d, 50g and 50h can be illuminated by lamps 41 that emit flashing light.

Are e.g. B. initially the lighting areas 50a, 50b, 50e, 50f are illuminated by the light of a first color and the lighting areas 50c, 50d, 50g and 50h are illuminated by the light of a second color; then the luminous areas 50a, 50h, 50d, 50e are illuminated by the light of the first color and the luminous areas 50b, 50c, 50f and 50g are illuminated by the light of the second color; Then the lighting areas 50h, 50g, 50d, 50c are illuminated by the light of the first color and the lighting areas 50a, 50b, 50e and 50f are illuminated by the light of the second color, the impression of a surrounding color window is created.

The opposite lighting areas 50, ie the lighting areas 50 that lie on a straight line leading through the imaginary axis 701, in Figure 14 namely 50a and 50e or 50b and 50f or 50c and 50g or 50d and 50h, are preferably illuminated in the same way, ie in the same color and the same flashing frequency. The pattern can therefore also be seen by users standing diagonally in front of the emergency button 10, even if at least one of the opposite lighting areas 50 is covered by the actuating element 11.

So that the light guide 40 is covered as little as possible, the illuminating region 32 protrudes above the light guide 40 by a maximum of 10 mm, preferably a maximum of 7 mm, particularly preferably a maximum of 5 mm.

The emergency button 10 can include a brightness sensor (not shown). The brightness sensor measures the ambient brightness of the emergency button 10. If the ambient brightness decreases, the light intensity of the light emitted by the lamps 41 is also reduced.

Parameters can be set via a mobile communication device via the Bluetooth module 64, e.g. B. in which way the lamps are to be controlled and in what state of the security system 1. The parameters include the flashing frequencies of the lamps 41, whether a continuous or flashing light should be emitted, which state should be indicated by which color. After parameterization, the settings are stored in an electronic memory of the security system 1, in particular the control device 100. The display of certain states may also not be selectable for the operator for safety reasons and may be permanently stored in the electronic memory. The operator can select states of the security system 1 himself, which the operator would like to display through the lamps 41. For this purpose, colors and/or patterns can be emitted by the lighting means 41, which are not assigned to any predetermined state. For example, the operator can choose which status the operator would like to have blue light indicate. In addition to parameterization via the Bluetooth module 64, parameterization via the monitoring device 301 is possible.

The change in the state of the door lock 200 is then displayed after the door lock controller 201 has communicated the change in state to the control device 100. The control device 100 then controls the lamps 41 or causes the lamps 41 to be activated.

When the security system 1 is started up, several initialization views are generated one after the other by the lamps 41 at fixed time intervals. Possible enabled functions of the control device 100 are displayed in one of the initialization views. In a second initialization view, the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 that can be integrated into the security system 1 are displayed, with the status error-free/faulty/not present being displayed. The status of inputs and outputs is displayed in a third initialization view.

The central emergency button 302 is constructed almost identically to the emergency button 10. In particular, the actuation element 11 corresponds in function and structure to the emergency button actuation element 306. The switch 63 corresponds to the emergency button switch 307. The central emergency button 302 also includes a reset means corresponding to the reset means 12. The central emergency button 302 includes a first and a second circuit board and/or a mounting plate, which are constructed and connected to one another in accordance with the first circuit board 60, the second circuit board 61 and the mounting plate 62, respectively. On the first circuit board of the central emergency button 302, the alarm transmitter 309 and the lamps 313 are arranged corresponding to the alarm transmitter 23 and the lamps 41. The first to third emergency processing units 303, 304, 305 are arranged on the second circuit board of the central emergency button 302. The emergency button switch 307 ends on the first circuit board of the central emergency button 302. When the emergency button switch 307 is actuated, a first and a second circuit on the first circuit board is opened, which can be detected wirelessly by the first and second emergency processing units 303, 304. For this purpose, the first and second boards are connected via connectors. The light guide of the central emergency button 302 corresponds in structure and function to the light guide 40. The lamps 313 can be controlled in accordance with the lamps 41.

It is conceivable that in the central emergency button 302 a covering means 13 corresponding to the covering means 13 is designed differently or is missing. In particular, the lamps 313 do not serve to visually represent a locking state of an emergency button 10. The lamps 313 serve to visually represent the first and second delay periods and/or to visually represent that a lifting treatment is possible.

The security system 1 according to the invention does not necessarily have to have all the functions that are in the description of at least one of the Figures 1 to 10 is mentioned, can carry out. Rather, in the security system 1 the functions that are in the description of at least one of the Figures 1 to 10 are mentioned, deposited. However, in order to be able to carry out the functions, the functions must be activated. This is done by the control device 100 communicating with a communication module 801. The communication module 801 is designed as a chip card. The communication module 801 includes a memory in which at least one code for activating at least one function is stored. The communication module 801 includes a microprocessor that is only used to encrypt the code. The communication module 801 is inserted into a receptacle 77 of the control device 100 (see Fig. Fig. 18a ). Due to the arrangement in the receptacle 77, the communication module 801 is held mechanically in the receptacle 77 in a positive and/or non-positive manner. At the same time, the communication module 801 is electrically contacted by the arrangement in the receptacle 77, so that the control device 100 can read out the at least one code from the communication module 801. The control device 100 and the communication module 801 are wired (not shown).

To read the code, the control device 100 must first gain access to the communication module 801 using a password. The control device 100 must decrypt the at least one code before the function can be activated. By activating the function, the program code with which the function can be executed is activated.

To activate the function, the program code with which the function can be executed is activated. If the program code is stored on the emergency button 10 and the control device 100 and the emergency button 10 are connected to one another by the first bus system 400, the control device 100 initiates an activation in the emergency button 10 via the first bus system 400 after reading out the code of the communication module 801. Is If the program code is stored in the door locking control 201, the control device 100 initiates an activation in the door locking control 201 via the first bus system 801 after reading out the code of the communication module 801.

A code can unlock one function or several functions, especially function blocks.

In the parameterization program, only parameters for the functions that were previously released can be set. Only these parameters are displayed on the screen.

The function only remains activated if the code is repeatedly read out of the communication module 801, especially at regular intervals. For this purpose, predetermined, non-adjustable time intervals can be stored in the control device 100. After the specified time interval has elapsed, the control device 100 blocks the function if the associated code could not be read from the communication module 801. If the function is carried out by the emergency button 10, which is connected to the control device 100 via the first bus system 400, the control device 100 causes the function to be blocked via the first bus system 400. If the function is carried out by the door lock control 201, which is connected to the control device 100 via the first bus system 400, the control device 100 causes the function to be blocked via the first bus system 400.

Several codes Code1, Code2 for different functions can be stored on the communication module 801 (see Fig. Fig. 18a ).

If an additional function is to be enabled, it is conceivable to remove the communication module 801 from the receptacle 77 and another one Insert the communication module 802 into the receptacle 77 (see Fig. 18b ). The communication module 801 is referred to below as the mother module 801. The further communication module 802 is referred to below as an auxiliary module. The auxiliary module 802 is designed as a chip card. The auxiliary module 802 includes a memory in which at least one code for activating the additional function is stored. The auxiliary module 802 includes a microprocessor that is only used to encrypt the code. The code Code3, which is stored on the auxiliary module 802, is read by the control device 100 (see Fig. Fig. 18b ). To read the code Code3, the control device 100 must first gain access to the auxiliary module 802 using a password. The control device 100 must decrypt the at least one code before the function can be activated. The code Code3 of the auxiliary module 802 is stored in a memory 107 of the control device 100 (see Fig. Fig. 18c ). The code of the auxiliary module 802 is then deleted on the auxiliary module 802 (see. Fig. 18c ). The auxiliary module 802 is removed from the receptacle 77. The mother module 801 is then inserted into the receptacle 77 (see Fig. Fig. 18d ). The code of the auxiliary module 802 is stored on the mother module 801 (see. Fig. 18d ). The code is deleted from the memory of the control device 100 (see Fig. Fig. 18d ). The additional function is activated.

In the case of a mother module 801, however, the code is not stored in the control device 100 (see Fig. Fig. 18a, d ). With a mother module 801, the code is not deleted. Rather, the mother module 801 serves for a permanent arrangement in the receptacle 77. The codes Code1, Code2, Code3 stored on the mother module 801 are repeatedly read out. The control device 100 decides based on an identifier K801, K802 of the communication module 801, 802 whether it is a mother module 801 or an auxiliary module 802. The identifier K801, K802 is stored electronically in particular on the mother module 801 and the auxiliary module 802. The identifier K801 of the mother module 801 differs from the identifier K802 of the auxiliary module 802.

The insertion and removal from the receptacle 77 is done manually. The remaining processes take place automatically.

Insertion and removal from the receptacle 77 can be reserved for an operator. For this purpose, the receptacle 77 is arranged so that it is inaccessible to an unauthorized user. In particular, the tamper switch 66 is activated in the event of an unauthorized attempt to access the recording. The recording can be between the first board 60 and the second board 61, e.g. B. be arranged on an underside of the first circuit board 60.

In order for the security system 1 to become functional, a mother module 801 must be arranged in a receptacle 77 of the security system 1. So that the security system 1 remains functional longer than the specified time interval, the mother module 801 must remain in the receptacle 77.

Each emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 includes a receptacle 77. Exactly one mother module 801 is necessary and provided for each first bus system 400, 400' of the security system 1. Only if the mother module 801 is inserted into the receptacle of an emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 does the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 serve at the same time as a control device 100 for the corresponding first bus system 400, 400 '. In the case of the remaining emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 of the security system 1, which do not contain a mother module 801, the same program codes are stored as in the control device 100. However, without the mother module 801, the program codes are not activated, so that the remaining emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 cannot serve as control device 100. Because the mother module 801 is located in the receptacle 77, the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 serves as a control device 100.

If the control device 100 is to be designed separately from the emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 and the door locks 200, 200', 1200, 1200', 2200, 2200', 3200, then a mother module becomes 801 is inserted into a receptacle 77 of the processing electronics 101. Because the mother module 801 is located in the receptacle 77, the processing electronics 101 is able to carry out the functions of the control device 100.

If the security system 1 comprises several subsystems 5, 6 and thus several first bus systems 400, 400', the security system 1 comprises exactly the same number of mother modules 801, 801' as there are subsystems 5, 6 (see. Figure 10 ). The emergency button 10 ', which communicates with the mother module 801', and the processing electronics 101 of the control device 100 Figure 10 , which communicates with the mother module 801, are also intended to be connected to the second bus system 401.

The mother module 801, 801' can contain 5.6 different codes for each subsystem and thus enable different functions. So can e.g. B. the mother module 801 'of the second subsystem 6 includes a code for the selective assignment of the door locks 200', 1200', 2200' to the emergency buttons 10', 1010', 2010'. However, the code for a selective assignment of door locks to emergency buttons on the mother module 801 is not necessary for subsystem 5.

The communication module 801, 801', 802 can have a gap 803 through which a particularly self-adhesive tape is guided. The self-adhesive tape is used for manually removing the communication module 801, 801', 802 from the receptacle 77. The self-adhesive tape contains information about the functions that can be unlocked by the codes stored on the respective communication module 801, 801', 802. The information can be a color identifier, a QR code and/or a bar code.

Alternatively, the communication module 801, 801', 802 can be designed as a chip card with a flexible section. Part of the chip card that protrudes from exception 77 can contain the information, i.e. H. the color identification, the QR code and/or the bar code.

A mother module 801 once used in a security system 1 can be used again in a functional manner in a receptacle 77 of another security system 1 according to the invention.

Claims (15)

1. A safety system (1) for controlling and/or monitoring at least one door lock (200) for escape route security,

   having at least one release element (10), which is designed as an emergency button (10), and having a door lock control (201) for controlling a locking mechanism (205),

   wherein the release element (10) and the door lock control (201) are connected to one another via a first bus system (400),

   wherein the safety system (1) comprises a control device (100), wherein the control device (100) is connected to the release element (10) and/or the door lock control (201) via the first bus system (400),

   wherein the control device (100) is connected to a hub (300, 301) via a second bus system (401),

   characterized in that

   the control device (100) is designed to perform at least one of the following functions:

   Causing the locking mechanism (205) to be triggered or actuated to automatically relock after a predetermined period of time has elapsed, function k.,

   wherein the control device (100) transmits at least one message from the hub (300, 301) to at least one door lock control (201), which is connected to the first bus system (400), and/or a release element (10), which is connected to the first bus system (400).
2. The safety system (1) according to claim 1, characterized in that the control device (100) is designed to perform at least one of the following functions, preferably several of the following functions, in particular preferably all of the following functions:

   h. Causing the door locking mechanism (205) to be triggered or actuated to unlock after receiving a positive authentication signal, wherein the positive authentication signal can be received in particular via a bus input;

   i. Causing the door locking mechanism (205) to be triggered or actuated to unlock at a predetermined time;

   j. Preventing actuation of a further door locking mechanism (205) after actuation of a first door locking mechanism (205) until a condition such that a lock is formed;

   I. Causing the locking mechanism (205) to be triggered or actuated to automatic relock after receiving a signal about a closed state of the door, in particular after performing functions h and/or j, wherein the closed state of the door can preferably be detected by at least one door state monitoring device (204, 206);

   m. Causing an audible alarm transmitter (23) to be triggered or actuated to emit an alarm depending on a signal from the door status monitoring device (204, 206) about the opening of the door, in particular if there is no authorization to enter the door;

   n. Communication via a radio module (64) preferably for parameterization of the security system (100), wherein the parameterization can preferably be performed via a mobile communication device;

   o. Causing an audible alarm transmitter (23) to be triggered or actuated to emit an audible alarm as a result of actuation of the release element (10) or after receiving a fire alarm signal;

   p. Causing a display unit (41) to be triggered or actuated to optically display a locking state of the door lock (200);

   q. Causing a display device (41) to be triggered or actuated to optically display the time-delayed control of the door locking mechanism (205), in particular for unlocking and in particular after actuation of the release element (10);

   r. Causing a display (41) to be triggered or actuated to visually represent an alarm state in particular as a result of actuation of the release element (10) or after receiving a fire alarm signal;

   s. Causing an audible and/or visual alarm to be emitted if relocking fails, in particular if the door remains open, which can be detected via the door status monitoring device;

   t. Establishing and/or maintaining a communication link (401, 403) between the control device (100) and a central escape door control (300), a guard device (301) and/or a multiple door display device (350);

   u. Storing parameters and/or connections for performing at least one of the functions h.) to t.) and/or v.);

   v. Integrating at least one additional input and/or output of the control device (100) and/or a component, in particular a release element (10).
3. The safety system (1) according to claim 1 or 2, characterized in that the control device (100) is integrated into the release element (10) or the door lock control (201), or the control device (100) is connected to the release element (10) and the door lock control (201) through the first bus system (400).
4. The safety system (1) according to any one of the preceding claims, characterized in that the control device (100) has knowledge of the state of the door lock (200) and/or the state of the release element (10) and/or a communication between the door lock control (201) and the release element (10).
5. The safety system (1) according to any one of the preceding claims, characterized in that exactly one control device (100) is provided for the first bus system (400), wherein in particular a plurality of release elements (10, 1010, 2010, 3010) and/or a plurality of door lock controls (200, 1200, 2200, 3200) is connected to the first bus system (400).
6. The safety system (1) according to any one of the preceding claims, characterized in that the safety system (1) comprises a plurality of bus systems (400, 400'), which are each connected to at least one release element (10, 10', 1010, 1010', 2010) and at least one door lock control (201), wherein for each of the plurality of bus systems (400, 400') a control device (100), in particular exactly one control device (100) is provided.
7. The safety system (1) according to any one of the preceding claims, characterized in that the control device (100) comprises at least one digital processing unit (103, 104, 105), wherein at least one of the functions h.) to v.), preferably several of the functions h.) to v.), in particular preferably all of the functions h.) to v.) can be performed by at least one processing unit (103, 104, 105).
8. The safety system (1) according to any one of the preceding claims, characterized in that the control device (100) is connected to the hub, in particular a central escape route control (300) and/or a guard device (301) via the second bus system (401), wherein a message relating to at least one state of the door lock (200) or the release element (10) can be sent from the control device (100) to the hub (300, 301) and/or the control device (100) transmits messages from the release element (10) and/or the door lock control (201) to the hub (300, 301).
9. The safety system (1) according to claim 8, characterized in that the control device (100) transmits a safety-relevant message from the central escape route control (300) to all bus users of the first bus system (400).
10. The safety system (1) according to any one of the preceding claims, characterized in that as a consequence of an actuation of a central emergency button (302), the control device (100) transmits a message about the actuation of the central emergency button (302) to the door lock control (201).
11. The safety system (1) according to claim 8, characterized in that the release element (10) can be transferred to a deactivated state by the central escape route control (300), wherein in the deactivated state, actuation of a locking mechanism (205) for unlocking is omitted as a result of actuation of the release element (10), and the release element (10) can be transferred into an activated state by the central escape route control (300), wherein in the activated state, an actuation of the locking mechanism (205) for unlocking takes place as a result of an actuation of the release element (10), wherein as a result of an actuation of the central escape route control (300) for activating or deactivating the release element (10), the control device (100) transmits a message from the central escape route control (300) to the release element (10).
12. The safety system (1) according to any one of the preceding claims 2 to 11, characterized in that a plurality of door lock controls (201) and/or a plurality of release elements (10, 1010, 2010, 3010) are connected to the first bus system (400), and the door lock controls (201) connected to the first bus system (400) and/or the release elements (10, 1010, 2010, 3010) connected to the first bus system (400) can be selectively notified by the control device (100) to perform at least one of the functions h.), i.), k.), l.), m.), o.) to s.), v.) and/or, in order to perform at least one of the functions h.), i.), k.), l.), m.), o.) to s.), v.), the control device selectively actuates or causes a locking mechanism (205), a display unit (41), a display device (41), a device that can be connected to the additional output, illuminating means (41) and/or an audible alarm transmitter (23) to be selectively actuated.
13. The safety system (1) according to any one of the preceding claims 2 to 12, characterized in that parameters and/or assignments for selective performance of the functions are stored in the control device (100), wherein the parameters include or indicate, for example, at which authentication signal which locking mechanism (205) is to be actuated according to function h.), which locking mechanism (205) is to be actuated at which time according to function i.), which locking mechanisms (205) are part of a lock according to function j.), which locking mechanism (205) is to be actuated after which time period according to function k), which locking mechanism (205) is allowed to be controlled according to function l.), for which door (2, 3, 4) monitoring is performed according to function m.) and/or which audible alarm transmitters (23), indicators (41) and/or display devices (41) are to be actuated when which release element (10) is actuated.
14. The safety system (1) according to any one of the preceding claims, characterized in that all bus users (10, 1010, 2010, 3010, 200, 1200, 2200, 3200) of the first bus system (400) each have a bus address, wherein the bus address can be set manually, e.g., on switches, wherein in particular bus users (10, 1010, 2010, 3010, 200, 1200, 2200, 3200) with the same manual setting are assigned to one another.
15. The safety system (1) according to any one of the preceding claims, characterized in that the release element (10) and/or a processing electronics (101) comprises a receptacle (77) and by inserting a communication module (801, 801') into the receptacle (77), the release element (10) and/or the processing electronics (101) function as a control device (100) and/or after removing the communication module (801, 801'), the release element (10) or the processing electronics (101) lose the function of the control device (100) immediately or at the latest after a predetermined period of time.

Images