EP3267453A1 - Safety system - Google Patents

Abstract

The invention relates to a security system (1), in particular for escape route security, with at least one triggering element (10), in particular an emergency button (10), wherein the trigger element (10) can be converted into a deactivated state, wherein in the deactivated state as a result of actuation of the trigger element (10), a control of a locking mechanism (205) for unlocking is omitted, and the trigger element (10) can be converted into an activated state , wherein in the activated state as a result of an actuation of the trigger element (10) takes place an activation of the locking mechanism (205) for unlocking. According to the invention, the safety system (1) comprises a central escape route control (300) and the triggering element (10) can be converted into the activated state and / or into the deactivated state by the central escape route controller (300).

Description

The invention relates to a security system, in particular for escape route security, with at least one triggering element, in particular an emergency button, wherein the triggering element can be converted into a deactivated state, wherein in the deactivated state as a result of actuation of the triggering element actuation of a locking mechanism for unlocking is omitted, and Triggering element can be converted into an activated state, wherein in the activated state as a result of actuation of the triggering element takes place a control of the locking mechanism for unlocking. Furthermore, the invention relates to a use of the security system according to the invention. The invention also relates to a method according to independent claim 16.

Security systems for escape route security are known. The safety systems include at least one emergency button and a door lock with a locking mechanism. If the actuating element of the emergency button is actuated, the door lock is unlocked and the escape route is released. As a concept, it is known to deactivate the emergency button, so that an actuation of the emergency button does not cause unlocking. This is z. B. at night in a department store conceivable. On the other hand, it is still unknown how to design the deactivation.

It is the object of the invention to specify a security system and a method which in particular enables deactivation particularly in a simple manner and / or in a particularly user-friendly manner.

This object is achieved by a security system according to independent claim 1. Advantageous developments of the safety system are given in the dependent device claims, the description and in the figures. Furthermore, a use of the security system according to the invention is set forth in claim 15 under protection.

The previously derived and indicated object is achieved on the basis of the security system described above in that the security system comprises a central escape route control and the triggering element can be transferred by the central escape route control in the activated state and / or in the deactivated state. The central escape route control is intended to be located remotely from the trigger element and / or the door latch. In particular, the central escape route backup is intended to be arranged in a guard room. In the guard room, a watch device, for. B, a monitor or a staff Computer for monitoring are located. By virtue of the fact that the central escape route control transfers the triggering element into the activated and / or deactivated state, the deactivation and / or activation can be particularly simple for an operator.

Here, a distinction is made between a user and an operator. A user can be any person using the security system. A user can, for. B. be a guest who wants to escape through the door secured by the security system. An operator serves to operate the security system. The operator has access to the security system security device and / or can authenticate to the security system, particularly to service the security system.

The security system may include the locking mechanism.

The locking mechanism may, for. B. electromechanical or purely electromagnetic. The locking mechanism includes z. B. at least one coil. A control of the locking mechanism for locking or unlocking can be realized in particular in a switching off or on an electrical power supply. The electrical power supply can be used to supply the coil with electric current.

An electromagnetic locking mechanism is exemplary in the DE100 50 111 C1 described. In the unlocked state z. B. no magnetic forces on the door. In the locked state z. B. magnetic forces on a door.

An electromechanical locking mechanism has a mechanical connection to the door in the locked state. In the unlocked state, the mechanical connection can be canceled or canceled.

Thus, the electromechanical locking mechanism z. B. a locking element, d. H. a latch or a door latch, which is in the unlocked state of the door latch in a retracted position. In the retracted position, the locking element is disengaged from the door. In the locked state, the locking element is engaged with the door. In a further alternative of an electromechanical locking mechanism, the locking mechanism is constructed in the manner of a door opener. Ie. the locking mechanism comprises a latch element. In the locked state of the door lock is a door latch of the door engaged with the locking mechanism. In the unlocked state, the latch element releases the door latch so that the door latch, in particular by pressure on the door, can disengage from the locking mechanism.

Switching off the electrical power supply preferably leads to an unlocked state of the door lock. Thus, the control of the locking mechanism realized for unlocking the door lock by switching off the electrical power supply. Preferably, switching on the electrical power supply leads to a locked state of the door lock. Thus, the driving of the locking mechanism for locking is realized by turning on the electric power supply.

The security system may alternatively be configured without the locking mechanism. In this case, the security system merely actuates the locking mechanism. For example, the security system turns on or off the electrical power to the locking mechanism, or causes the electrical power to be turned on or off.

A "locking or unlocking control" is also present when the security system receives feedback about the state of the locking mechanism. A "lock or unlock control" is also present when, as detected by the feedback, the lock mechanism does not conform to the desired condition and therefore an alarm is issued and / or a retry attempt is made to reach the desired condition ,

The security system may include a door lock control. If a door lock control is provided, the door lock control preferably controls the lock mechanism. For this purpose, the door lock control can switch the electrical power supply for the locking mechanism on and off.

The security system may include the door lock control but not the lock mechanism. The Türverrieglungssteuerung is formed in this case as a door lock adapter. The door locking adapter serves to use the security system according to the invention already mounted locking mechanisms.

The door lock comprises the locking mechanism and, if present, the door lock control. Particularly preferably, the security system comprises the door lock.

The security system is used in particular for escape route security. The security system thus serves to release the escape route. Ie. the actuation of the trigger element leads to an unlocking without an authentication of the user. The unlocking can be immediate or delayed.

The trigger element may comprise a manually operable actuator. By actuating the actuating element, at least one actuating signal can be generated be. As a result of the generation of the actuating signal, the locking mechanism is activated for unlocking. Thus, the escape route can be released.

The triggering element is preferably designed as a emergency button. In this case, the actuating element corresponds to the actuating element of the emergency button. Alternatively, the triggering element may be formed as a panic bar assembly. The actuator is formed in this case as a panic bar. The triggering element can be designed as a fitting assembly. In this case, the actuator z. B. formed as a door handle.

Preferably, the door lock control and the trigger element are connected to a first bus system. A connection to a bus system is understood below to mean an immediate connection, so that a component connected to the bus system is to be regarded as a subscriber of the bus system with its own bus address. The door lock control and the trigger element are connected to each other via the first bus system.

The trigger element can directly control the locking mechanism for unlocking. Alternatively and particularly preferably, the triggering element causes a triggering of the locking mechanism for unlocking. In particular, when initiating a control, the sending of a message, e.g. B. via the first bus system understood, containing an information and / or a command that causes the immediate or indirect recipient of the message to make the drive. The sender of the message initiates the activation. Thus, by initiating a drive, an indirect drive is understood. So z. B. the trigger element send a message via the first bus system to the door lock control, whereupon the door lock control drives the locking mechanism for unlocking. In particular, the triggering element can initiate the unlocking of the locking mechanism in a time-delayed manner.

The central escape route control may comprise a first operating element. The first control element is used to deactivate the trigger element. The triggering element can be brought into the deactivated state by an actuation of the first operating element, provided that the triggering element is in the activated state. An actuation of the first control element may comprise an authentication, in particular an input of a code, a wireless or wired transmission of a code, a recognition of a key by rotation, a recognition of personal characteristics, such as fingerprint or iris. The first control element can be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader.

The central escape route control may include a second control element. The triggering element can be transferred by an actuation of the second operating element in the activated state, provided that the triggering element is in the deactivated state. To operate the second control, it may not be necessary for authentication to occur. Thus, the second control z. B. be designed as a button.

The central escape route safety device can also include a central emergency button. If the central emergency button is pressed, the locking mechanism is activated for unlocking. To operate the central emergency button an emergency button actuator is provided. The process that is actuated as a result of the operation of the central emergency button, the locking mechanism for unlocking, one-fault-safe and is thus suitable for hazardous situations. Thus, the central escape route control has several functions.

The central escape route controller may include an identification device. The identification device may serve to cause activation of the locking mechanism for locking after the operation of the central emergency button. If the central emergency button has been actuated, it is, in particular by the door lock control, electronically prevented until the presence of a Aufhebebonditionung that the locking mechanism of the door lock can be controlled to lock. The cancellation condition can be achieved by an operation of the identification device. The operation of the identification device may include input of a code, wireless or wired transmission of a code, recognition of a key by rotation, recognition of personal features such as fingerprint or iris. For example, the central escape route controller may include a keypad, a key switch, a fingerprint sensor, or a reader as an identification device.

The central escape route control can be modular. The central escape route control may include an emergency module. The emergency module may include the identification device in addition to the central emergency button. The central escape route controller may include a deactivation module. The deactivation module may comprise the first control element and the second control element.

The emergency module and the deactivation module can be arranged in a common escape route control housing and in particular fixed. The emergency module may include a first mounting plate that secures the emergency module to the escape route control housing. The deactivation module may comprise a second mounting plate with which the deactivation module on the Escape route control housing is attached. In particular, the central emergency push-button and the identification device are mechanically fastened to one another via the first fastening plate. In particular, the first and the second operating element are mechanically fastened to one another via the second fastening plate. The emergency module and / or the deactivation module may be securable at various locations in the escape route control housing. Thus, it may be that the emergency module is arrangeable both on the left and on the right of the deactivation module in the Fluchttwegsteuerungsgehäuse.

At the central escape route control, a deactivation action for deactivating the trigger element can be carried out. The deactivation action may correspond to the actuation of the first operating element. But it is also conceivable that the deactivation act comprises the actuation of the first operating element, wherein in particular at the same time another action, for. B. the operation of the second control element, must be made to disable the trigger element. The latter option can z. B. be provided when the first control element fulfills several functions. For example, an independent identification device may be missing. Instead, the cancellation condition by an actuation of the first control element and a particularly simultaneous further action, for. As the operation of the central emergency button, done. At the central escape route control, an activation action for activating the trigger element can be carried out. The activation act may in particular correspond to the actuation of the second operating element.

It is conceivable that the central escape route control is designed such that in the deactivation act, in particular upon actuation of the first operating element, a first deactivation circuit and a second deactivation circuit are opened or closed. This achieves a one-fault safety in the generation of a deactivation signal which leads to the deactivation of the triggering element.

Additionally or alternatively, upon actuation of the second operating element, a first activation circuit and a second activation circuit can be opened or closed.

The central escape route control and the triggering element can be connected to one another via at least one bus system, in particular via at least one second bus system. The central escape route control may be connected to the second bus system. The triggering element may be connected to the second bus system. Alternatively, the triggering element may be connected to the first bus system, but not to the second bus system. The connection between the central escape route control and the Triggering element may thus comprise the second bus system or the first and the second bus system.

If the triggering element is not connected to the second bus system, then particularly preferably a control device can be connected both to the first bus system and to the second bus system. The control device may forward messages from the central escape route controller to the trigger element. The control device can be designed to cause a non-safety-relevant activation of the locking mechanism for unlocking or locking.

It may be that the first and / or the second control element are electrically connected via the emergency module, in particular via the central emergency button, with the trigger element. In particular, it may be that the emergency module, in particular the central emergency button, is connected to the second bus system. Thus, the central emergency button and the trigger element can communicate with each other via the second bus system or via the first and the second bus system. In the latter case, the control device can preferably be provided to forward a message from the central emergency button to the triggering element. Additionally or alternatively, the control device may preferably be provided to forward a message from a bus user of the first bus system to the central emergency button.

Preferably, the first and / or the second control element are not connected to the second bus system. Ie. the first and / or the second operating element are not subscribers of the second bus system. A message about the actuation of the first and / or second control element is sent from the emergency module and / or from the central emergency button to the trigger element. Particularly preferably, a signal via the actuation of the first and / or second operating element from the emergency module and / or from the central emergency button, detected or processed. For this purpose, the emergency module and / or the central emergency button, a digital Notfalltasterelektronikeinheit include.

The digital emergency button electronic unit may include a first digital emergency processing unit and a second digital emergency processing unit. The first and second emergency processing units may each include a processor. The first and / or the second emergency processing unit may each be designed as a microprocessor or microcontroller. The first and second emergency processing units may each comprise a nonvolatile memory. Additionally, the emergency button electronics unit may include a third digital emergency button processing unit. The third emergency processing unit may include a processor. The third emergency processing unit may be designed as a microprocessor or microcontroller.

The third emergency processing unit may comprise a non-volatile memory and / or have access to a non-volatile memory.

Each of the first and second emergency processing units may independently detect a signal via an operation of an emergency button operation member. Here, the first emergency processing unit detects a first signal via the operation of the emergency button operation member, and the second emergency processing unit detects a second signal via the operation of the emergency button operation member. The first and second emergency processing units may then each independently cause the door lock mechanism to be unlocked. For this purpose, in particular at least one message in which the first and / or the second emergency processing unit informs about the presence of the first or second signal via the actuation of the emergency button actuating element is sent to the door lock control.

It may be that a deactivation signal of the first deactivation circuit from the first emergency digital processing unit of the central emergency button and a deactivation signal of the second deactivation circuit are detected by the second digital emergency processing unit of the central emergency button. In this case, in particular, at least one message in which the first and / or the second emergency processing unit informs about the presence of the first or second deactivation signal is sent to the triggering element. Particularly preferably, the triggering element is transferred to the deactivated state only when the triggering element has been informed of both the presence of the first deactivation signal and the presence of the second deactivation signal.

In addition, a signal of the first activation circuit may be detected by the first emergency digital processing unit of the central emergency button and a signal of the second activation circuit by the second digital emergency processing unit of the central emergency button. In this case, in particular, at least one message in which the first and / or the second emergency processing unit informs about the presence of the signal of the first and the second activation circuit is sent to the triggering element. Particularly preferably, the trigger element is then brought into the activated state, when the trigger element has been informed of either the presence of the signal of the first activation circuit or the presence of the signal of the second activation circuit.

Alternatively, a signal may be detected or processed by the third emergency processing unit via the operation of the second operating element. After the detection or processing of the signal via an actuation of the second operating element, a Activation message sent to the trigger element. The central emergency button and the second control element are preferably connected via a bus, in particular an I ² C bus.

Preferably, the deactivation module, in particular the first and / or the second control element is formed processor-free. Characterized in that the signals on the operation of the first and / or second control element are detected or processed by the Notfalltasterelektronikeinheit, it is not necessary that the deactivation module has its own intelligence, eg. B. in the form of at least one processor.

Preferably, the trigger element and the door lock remain connected in the deactivated state of the trigger element.

Particularly preferably, the triggering element itself can be converted into the activated state.

The triggering element, in particular the emergency button, may comprise an electronic unit. The electronics unit serves as a trigger element control. The electronic unit may comprise a first and a second digital trigger element processing unit, in particular a first and a second emergency button processing unit. The first and / or the second trigger element processing unit, in particular the first and / or the second emergency button processing unit, may each comprise a processor. The first and / or the second trigger element processing unit, in particular the first and / or the second emergency button processing unit, can be designed as a microprocessor or microcontroller. The first and second trigger element processing units may each comprise a non-volatile memory. In addition, the electronics unit may include a third digital trigger element processing unit.

It may be that the activated state and the deactivated state of the trigger element is stored in the trigger element electronically. For this purpose, z. For example, a variable may be stored in the electronics unit. Preferably, the variable is stored in the first trigger element processing unit and redundantly in the second trigger element processing unit. The variable may each be stored in the non-volatile memory of the first and second trigger element processing units. The variable can be binary. If the trigger element is in the deactivated state, then the variable is set to a deactivation value. If the trigger element is in the activated state, then the variable is set to an activation value. If the trigger element itself changes to the activated state, the trigger element can set the variable to the activation value.

It is preferably provided that in the deactivated state of the trigger element is omitted, that the trigger element causes due to an actuation of the trigger element that the door lock control drives the locking mechanism for unlocking. It is preferable in the deactivated state that the trigger element sends a message about generating the actuation signal to the door lock control via the first bus system. Preferably, the trigger element always checked electronically as a result of actuation of the trigger element, whether the trigger element is in the deactivated state, before the trigger element causes the door lock control drives the locking mechanism for unlocking. Only when the trigger element is in the activated state causes the trigger element that the door lock control drives the locking mechanism for unlocking. In particular, the triggering element sends a message about the generation of the actuation signal to the door lock control only in the activated state.

A first deactivation program code may be stored in the electronics unit. By the first deactivation program code is electronically prevented that in the deactivated state of the trigger element, the door lock mechanism is activated for unlocking. In particular, the first deactivation program prevents code from causing the door lock control to actuate the door lock mechanism for unlocking as a result of the actuation of the trigger element. For this purpose, the deactivation program code can first check whether the triggering element is in the deactivated state. For this purpose, the first deactivation program code can capture the value of the variable.

The first deactivation program code is preferably stored in the first triggering element processing unit. A second deactivation program code can be stored redundantly in the second triggering element processing unit. By the second deactivation program code is electronically prevented that is activated in the deactivated state of the trigger element, the door lock mechanism for unlocking.

If it is determined by only one of the deactivation program codes that the trigger element is in the activated state, the trigger element causes z. B. that the door lock control drives the locking mechanism for unlocking.

Due to the fact that the activated state and the deactivated state are stored in the triggering element, the deactivation action does not have to persist, in particular the first operating element does not have to remain actuated in order that the triggering element in the triggering element must remain actuated deactivated state remains. Rather, a single deactivation action, in particular a one-time actuation of the first operating element, is sufficient to ensure that the triggering element is transferred to the deactivated state and remains there until the activating action, in particular for actuating the second operating element.

The central escape route control and / or the connection of the central escape route control with the triggering element can be monitored for errors especially in the deactivated state of the triggering element. If an error is detected during monitoring, the triggering element is transferred to the activated state. The error may in particular be a fault or failure of the central emergency button and / or a fault or interruption of the connection, in particular of the bus system. As a result, the security can be increased on site, if via the central escape route control or the guard no activation or unlocking can be made more.

To monitor for errors, a life sign signal of the central emergency button, in particular a sign of life signal of the first emergency processing unit and the second emergency processing unit, can be sent repeatedly via the connection to the trigger element. The trigger element can check the reception of the sign of life signal. In the event of a single or multiple failure of at least the sign of life signal of the first emergency processing unit or of the second emergency processing unit, the triggering element itself transfers into the activated state.

Likewise, the triggering element transfers itself into the activated state if it knows about a fire alarm signal. The trigger element can itself receive the fire alarm signal. Additionally or alternatively, the triggering element can be notified by the central escape route control and / or the control device via the receipt of a fire alarm signal.

It is preferably provided that in the activated state of the triggering element, a previously performed actuation of the triggering element in the deactivated state has no effect on the activation of the locking mechanism. Thus, it is prevented that the door lock is unlocked immediately upon or after the transfer to the activated state, although the trigger element was actuated hours or days before, when the trigger element was in the deactivated state.

For this purpose, it may be that in the deactivated state of the trigger element is omitted that the trigger element stores electronically as a result of actuation of the trigger element, that the trigger element has been actuated.

In the security system, in particular in the trigger element, can be deposited electronically, whether a deactivation is approved for the trigger element. If the deactivation is not permitted for the triggering element, an action by the operator to deactivate the triggering element does not result in the triggering element being transferred to the deactivated state. On the other hand, if deactivation is permitted, the deactivation action, in particular the actuation of the first operating element, results in the triggering element being transferred to the deactivated state.

It is preferably provided that an action for activating the triggering element, in particular the actuation of the second operating element, always results in that the triggering element is transferred to the activated state if the triggering element is in the deactivated state.

The safety system may include multiple tripping elements. By deactivating action, in particular the operation of the first operating element, the triggering elements can be brought into the deactivated state. By activating action, in particular the operation of the second operating element, the triggering elements can be brought into the activated state. Thus, in particular by a deactivation or activation action, in particular by the actuation of only a single operating element, the deactivation and / or the activation of a plurality of triggering elements can take place.

If the security system comprises a plurality of triggering elements, it may be selectively selectable in the security system which of the triggering elements can be transferred to the activated state and / or the deactivated state. As a result, it is possible to individually address different areas of the building. The selection can be made by the operator.

Thus, in the security system individually for at least a single trigger element or for at least one group of trigger elements be deposited electronically, whether a deactivation by the central escape route control, in particular by actuation of the first control element, allowed for the respective trigger element or for the respective group of triggering elements is. In the group of triggering elements may, for. B. to trigger elements associated with a door lock or a door or which are intended to be arranged in the same room or in the same floor or station, act. Particularly preferably, for each trigger element and / or for all groups of trigger elements of the security system individually electronically deposited, whether a deactivation by the central escape route control, in particular by an actuation of the first control element for the respective triggering element or is authorized for the respective group of triggering elements.

If for at least one triggering element of the security system a deactivation deposited as approved and deposited for at least another triggering element deactivation as not allowed, so in the deactivation act, in particular on actuation of the first control element, only the at least one triggering element is deactivated and the at least further triggering element remains in the activated state.

The filing of the authorization for deactivation can be carried out with the help of a communication device, eg. As a personal computer or a portable computer, executable parameterization program. Thus, an operator for the triggering element, in particular for at least a single triggering element or for at least one group of triggering elements, set whether the deactivation is permitted or not. In particular, such a deposit is possible for each triggering element. It is conceivable that the part of the parameterization program in which a deactivability of the trigger element is adjustable by an authentication, for. As a password is protected. This makes it possible for multiple operators to allow only a selection of operators to set the deactivability of the trigger element.

In particular, the approval of the deactivation is stored in the trigger element. Receives z. B. the triggering element a message that the deactivation act has taken place, in particular that the first operating element has been actuated, the triggering element checks on the basis of the deposit whether the deactivation is permissible. Only if the deactivation is defined as permissible does the trigger element change to the deactivated state. For this purpose, the triggering element z. B. u. a. set the variable to the deactivation value.

If the security system comprises a plurality of triggering elements, in the event that the central escape route control communicates with the triggering elements for the transfer to the activated state, then all preferably previously deactivated triggering elements are brought into the activated state. For example, as a result of the activation action, in particular the actuation of the second operating element, previously deactivated triggering elements are transferred to the activated state.

The security system may include several central escape route controllers. In this case, it can be deposited electronically in the security system, in particular in the trigger element, by which central escape route control the deactivation is permitted. This can be deposited in particular electronically, for which central escape route control at a deactivation act, in particular during an operation of the first control that is allowed to deactivate. So z. B. in a deactivation act on a first central escape route control, in particular on actuation of the first control element of the first central escape route control, the deactivation and / or at a deactivation act on a second central escape route control, in particular upon actuation of the first control element of the second central escape route control that deactivation should not be allowed. If a plurality of triggering elements are present, it can be stored individually for each triggering element or for groups of triggering elements for which central escape route control in a deactivation act, in particular upon actuation of the first operating element, the deactivation is permitted.

The central escape route control may comprise display elements, by means of which it is possible to indicate which triggering elements or which groups of triggering elements are deactivated.

The security system may include a multi-door display device. The multi-door display device can be configured to individually indicate for each, in particular for each triggering element of the safety system, whether the respective triggering element is in the deactivated state. For example, the display can be made optically. For this purpose, the multi-door indicator may include lights. Additionally or alternatively, on a screen, in particular the monitor or the personal computer, for each, in particular for each trigger element of the security system, are each displayed individually, whether the respective trigger element is in the deactivated state. For this a software program can serve. The software program can correspond to the parameterization program. The multi-door indicator may be connected to the central escape route controller via a third bus system.

The safety system is preferably configured to indicate actuation of the actuation element in the deactivated state of the actuation element on the central escape route control, the monitoring device and / or a multi-door display device. This allows an operator to identify a hazard to the user and act accordingly. The operator can transfer the trigger element in the activated state or the door lock, z. B. with the help of the central emergency button, unlock.

The security system may include a video and / or audio module for monitoring the environment of the trigger element. A transfer into the deactivated state can preferably only take place if the video element and / or audio module assigned to the triggering element can be unlocked, in particular unlocked. As a result, a danger can always be perceived on the spot for the operator. If the audio and / or video module is part of the security system according to the invention, then a deactivation can be omitted if the audio and video module z. B. is not functional and / or the Connection to the audio and video module is disturbed. This does not apply if the security system does not comprise an audio and video module, but a monitoring system separate from the security system is provided in the building.

The security system according to the invention is particularly suitable for use in a building in which people live with an impaired state of mind, in particular a psychiatry, a dementia ward or the like. In particular, by the possibility of deactivation, monitoring and possibly activation, thereby the safety of the occupants may be increased.

The object of the invention is also achieved by a method for transferring a triggering element, in particular a emergency button, from an activated state in a deactivated state, wherein in the deactivated state as a result of actuation of the triggering element actuation of a locking mechanism of a door lock for unlocking is omitted, whereas in the activated state, as a result of an actuation of the triggering element, an activation of the locking mechanism takes place for unlocking. Features and details described in connection with the security system according to the invention also apply in connection with the method according to the invention and vice versa. The features mentioned in the description and in the claims may each be essential to the invention individually or in combination. In particular, a method that can be carried out with a security system according to one of claims 1 to 14, and / or a security system, with which a method according to claim 16 is feasible, under protection.

The method according to the invention provides that the triggering element is transferred into the activated state by an actuation at a central escape route control, in particular by an actuation on a first operating element of the central escape route control.

Fig. 1

eine Draufsicht auf einen Ausschnitt eines erfindungsgemäßen Sicherheitssystems mit einem Nottaster als Auslöseelement in einem betriebsfertigen Zustand an einer Tür gemäß einem ersten Ausführungsbeispiel,

Fig. 2

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 1,

Fig. 3

ein zu Fig. 2 modifiziertes Funktionsschema eines Ausschnitts eines erfindungsgemäßen Sicherheitssystems gemäß einem zweiten Ausführungsbeispiel,

Fig. 4

eine Draufsicht auf einen Ausschnitt auf ein erfindungsgemäßes Sicherheitssystem mit mehreren Nottastern in einem betriebsfertigen Zustand an einer Tür gemäß einem dritten Ausführungsbeispiel,

Fig. 5

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 4,

Fig. 6

ein zu Fig. 5 modifiziertes Funktionsschema eines Ausschnitts aus einem erfindungsgemäßen Sicherheitssystem gemäß einem vierten Ausführungsbeispiel,

Fig. 7

eine Draufsicht auf ein erfindungsgemäßes Sicherheitssystem in einem betriebsfertigen Zustand gemäß einem fünften Ausführungsbeispiel,

Fig. 8

ein Funktionsschema einer zentralen Fluchtwegsteuerung des Sicherheitssystems aus Figur 7,

Fig. 9

ein Funktionsschema des Sicherheitssystems aus Figur 7,

Fig. 10

ein Funktionsschema eines erfindungsgemäßen Sicherheitssystems gemäß einem sechsten Ausführungsbeispiel,

Fig. 11

ein Ausführungsbeispiel für einen erfindungsgemäßen Nottaster in einer Seitenansicht,

Fig. 12

der Nottaster aus Figur 11 in einem Längsschnitt,

Fig. 13

der Nottaster aus Figur 11 in einer Explosionsdarstellung,

Fig. 14

ein Betätigungselement des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 15

eine weitere perspektivische Ansicht des Betätigungselements aus Figur 14,

Fig. 16

ein Lichtleiter des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 17

eine weitere perspektivische Ansicht des Lichtleiters aus Figur 16 und

Fig. 18a-d

eine schematische Darstellung eines Ablaufs einer Funktionsfreigabe in einem erfindungsgemäßen Sicherheitssystem.

The invention will be explained in more detail with reference to embodiments. Technical features with the same function are provided in the figures with identical reference numerals. Show it:

Fig. 1

a plan view of a detail of a security system according to the invention with an emergency button as a triggering element in a ready state to a door according to a first embodiment,

Fig. 2

a functional diagram of the security system according to the invention FIG. 1 .

Fig. 3

one too Fig. 2 Modified functional diagram of a section of a security system according to the invention according to a second embodiment,

Fig. 4

a top view of a detail of an inventive safety system with multiple emergency buttons in a ready state on a door according to a third embodiment,

Fig. 5

a functional diagram of the security system according to the invention FIG. 4 .

Fig. 6

one too Fig. 5 Modified functional diagram of a section of a security system according to the invention according to a fourth embodiment,

Fig. 7

a top view of a security system according to the invention in a ready state according to a fifth embodiment,

Fig. 8

a functional scheme of a central escape route control of the security system FIG. 7 .

Fig. 9

a functional diagram of the security system FIG. 7 .

Fig. 10

a functional diagram of a security system according to the invention according to a sixth embodiment,

Fig. 11

An embodiment of an emergency button according to the invention in a side view,

Fig. 12

the emergency button off FIG. 11 in a longitudinal section,

Fig. 13

the emergency button off FIG. 11 in an exploded view,

Fig. 14

an actuator of the emergency button FIG. 11 in a perspective view,

Fig. 15

another perspective view of the actuating element FIG. 14 .

Fig. 16

a light guide from the emergency button FIG. 11 in a perspective view,

Fig. 17

another perspective view of the light guide FIG. 16 and

Fig. 18a-d

a schematic representation of a sequence of a function release in a security system according to the invention.

In the following, a distinction is made between a user and an operator. A user can be any person who uses the security system 1. A user can, for. B. be a guest who wants to escape through the secured by the security system 1 door. An operator serves to operate the safety system. B. authenticate to the security system. The operator can z. B. be a member of a security guard. Particularly preferably, the operator can set the security system 1.

In the following, the term "actuation of the emergency button" is understood to mean "actuation of the actuating element of the emergency button".

A connection to a bus system is understood below to mean an immediate connection, so that a component connected to the bus system is to be regarded as a subscriber of the bus system with its own bus address.

By initiating a control is meant, in particular, the transmission of a message via a first and / or second bus system which contains information and / or a command which causes the direct or indirect receiver of the message to carry out the activation. The sender of the message initiates the activation. Thus, by initiating a drive, an indirect drive is understood. The message can in particular correspond to a bus telegram.

As a result of an operation means that an actuation is the cause, regardless of whether the operation continues or not.

In the FIGS. 1 to 6 sections of safety systems 1 according to the invention are shown. The cutouts of security systems 1, which in the FIGS. 1 to 6 are also connected to a central escape route control 300. An example of such an escape route controller 300 is shown in FIGS FIGS. 7 and 8th shown.

In the FIGS. 1 and 2 a detail of a first embodiment of a security system 1 according to the invention for a door 2 is shown. The door 2 is not part of the security system 1 according to the invention. The security system 1 according to the invention comprises a door lock 200 and an emergency button 10. The emergency button 10 comprises a control device 100. The emergency button 10 is assigned a key switch 500. The security system 1 may include the key switch 500. Alternatively, the security system 1, in particular the emergency button 10, have a key-operated door, via which a connection with the key switch 500 can be produced.

As in FIG. 2 illustrated, the emergency button 10 and the door latch 200 via a first bus system 400 are interconnected. The key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402. The connection 402 is shown as a dashed arrow to indicate that signals are applied via a position of a key inserted into the key switch 500 to an electronic unit 24 of the emergency button 10. As an alternative to the connection 402, the key switch 500 may also be connected to the first bus system 400 (not shown). This alternative applies to all embodiments.

The emergency button 10 is configured to send a message to the door lock 200 as a result of an operation of the emergency button 10 via the first bus system 400 and thereby to cause a release of the door lock. The message as a result of pressing the emergency button 10 can be delayed.

Likewise, the security system 1 according to the invention, in particular the emergency button 10, can be connectable to a fire detector (not shown). In the presence of a fire alarm signal, the security system 1 also causes an unlocking of the door lock 200.

The control device 100 does not perform safety-relevant functions: Thus, the control device 100 can cause an unlocking of the door lock 200 for authorized persons. For this purpose, the control device 100 can be connectable to an access control system, not shown. The access control system can in particular be connected or connectable to the first bus system 400. The control device 100 receives from the access control system, in particular via the bus system 400, a positive authentication signal via the authentication that has taken place. Thereafter, the control device 100 causes a release of the door lock 200. The access control system can, for. Example, a reader, a key switch, a keyboard for entering a code or a lock cylinder of a mechanical lock, in particular a self-locking panic lock, include or be designed.

Also, the control device 100 may automatically cause a release of the door lock 200 at a predetermined time or after a predetermined period of time, z. B. if in a time window per day the door should be unlocked.

If there is no danger, ie. if neither the emergency button 10 has been actuated nor is there a fire alarm signal, then the control device 100 can automatically initiate re-locking after a predetermined period of time has elapsed. In this case, in addition to the positive authentication signal, the control device 100 can also receive an access signal of the access control system and / or measure the length of the positive authentication signal. By the access signal or the length of the authentication signal, the control device 100 can adjust the length of the predetermined time period. So a person z. For example, hold an ID card long in front of the reader or turn the key for a long time. This signals that the predetermined period of time should correspond to a long time previously stored in the control device 100. If the person holds the ID card shortly in front of the reader or if the user turns the key briefly, it is signaled that the predetermined period of time should correspond to a short time previously stored in the control device 100.

A first door condition monitor 204 and a second door condition monitor 206 detect whether the door 2 is open or closed. The control device 100 at least indirectly receives a signal from the door condition monitoring devices 204, 206. If the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 can immediately and automatically re-lock the door lock 200 as soon as the control device 100 uses the door condition monitoring devices 204, 206 is the information that the door is initially opened and now closed again.

The emergency button 10 comprises an acoustic alarm transmitter 23 and lighting means 41 (see also FIG FIG. 13 ). The lighting means 41 serve to represent the locking or unlocking state of the door lock 200 and thus serve as a display device. The lighting means 41 are used for optical representation of a time-delayed unlocking of the door lock 200 as a result of actuation of the emergency button 10 and thus serve as a display device. The bulbs 41 are used for optical representation of an alarm condition after receiving the fire alarm or as a result of an operation of the emergency button 10 and thus serve as a display. The bulbs 41 are used for visual display when a previously described re-locking fails.

The control device 100 controls the audible alarm 23 to issue an audible alarm when a hazard is present, i. H. if a fire alarm signal was received or the emergency button 10 was pressed. The controller 100 controls the audible alarm 23 to issue an audible alarm when a re-lock fails.

The controller 100 controls the bulbs 41 to indicate the latch state of the door latch 200 to optically display a time-delayed release and / or to issue an optical alarm when a fire alarm signal is received or the emergency button 10 is actuated or when re-interlocked fails.

The control device 100, in the unlocked state of the door latch 200, can monitor the opening of the door by means of the door state monitors 204, 206. The controller 100 may, if desired, issue an audible alarm if the door 2 has been opened during the unlocked state of the door lock 200, at least if there is no positive authentication signal. This can be monitored when someone opens the door, even if the door is unlocked.

Emergency button 10 may include at least one additional output. The control device 100 can control via the output other components that are connectable to the security system 1 according to the invention, for. B. a room lamp.

In the control device 100, the parameters for executing said functions of the control device 100 are stored. So z. The predetermined time (s), the predetermined time period (s), parameters for the audible alarms, e.g. B. in which volume with which frequency an acoustic alarm is to be output, and stored parameters for the various controls of the lighting means 41 for visual representation of the various states of the safety system 1 mentioned above in the control device 100. The parameters for the lighting means may include flashing frequencies, colors to be emitted, color intensities and / or light patterns. For parameterization, the control device 100 can communicate via a radio module 64 with a mobile communication device. Alternatively, the parameterization with the aid of a watch device 301 via a second bus system 401 take place (s. FIGS. 9 and 10 ). For the parameterization, a parameterization program is provided which can be used on a communication device, eg. As a personal computer, a mobile phone and / or a tablet, is executable. The operator can set the parameters using the parameterization program.

In FIG. 2 the structure of the door lock 200 and the emergency button 10 is shown in more detail.

The emergency button 10 has a first emergency button processing unit 20, a second emergency button processing unit 21, and a third emergency button processing unit 22. The first, second and third emergency button processing units 20, 21, 22 are each designed as microprocessors or microcontrollers. The first and second emergency button processing units 20, 21 comprise nonvolatile memory. The third emergency button processing unit 22 includes a non-volatile memory and / or has access to a non-volatile memory. The first, second and third emergency button processing units 20, 21, 22 are collectively referred to as the electronic unit 24 of the emergency button 10.

The first emergency button processing unit 20 serves as the first processing unit 103 of the control device 100. The second emergency button processing unit 21 serves as the second processing unit 104 of the control device 100. The third emergency button processing unit 22 serves as the third processing unit 105 of the control device 100.

The first and second emergency button processing units 20, 21 serve to execute the safety-related functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 is used to execute the non-safety-relevant functions. The safety-relevant functions include the cause of unlocking in case of danger. Non-safety-related functions include the remaining functions listed above.

Upon actuation of the emergency button 10, an actuating element 11 is moved from an initial position 11.I to an actuation position 11.II, as a result of which a switch 63 is actuated (see also FIG Figures 12 . 13 ). As a result, a first and a second actuation signal are generated. Thereby, a first and a second circuit (not shown) are opened. A signal about the opening of the first circuit is detected by the first emergency button processing unit 20. A signal on the opening of the second circuit is detected by the second emergency button processing unit 21. The actuating signal is understood to be the signal generated by the user by the actuation of the actuating element in order to unlock the door lock and to enable the escape route. The expression "as a result of an actuation of the emergency button 10" is used in particular in the sense of "after generation of the actuation signal", ie regardless of whether the actuation element 11 is still in the actuation position 11.II or has already returned to the starting position 11.I. is.

The first emergency button processing unit 20 and the second emergency button processing unit 21 each independently trigger unlocking of the door latch 200 after detecting the operation signal via the first bus system 400. The second emergency button processing unit 21 thus acts redundantly to the first emergency button processing unit 20.

The door lock 200 includes a door lock controller 201. The door lock controller 201 includes a first processing means 202 and a second processing means 203. The first and second processing means 202, 203 are collectively referred to as an electronic device 207. The first and the second processing means 202, 203 are each designed as a microprocessor or microcontroller. The first and the second processing means 202, 203 may each control a locking mechanism 205 of the door lock 200 for unlocking. In the case of danger, ie as a result of the operation of the emergency button 10 or after receiving a fire alarm signal, control both the first processing means 202 and the second processing means 203, the locking mechanism 205 for unlocking. The second processing means 203 is thus redundant to the first processing means 202. By this construction, one-error security is achieved.

The locking mechanism 205 is electromechanically formed. The locking mechanism 205 includes z. B. an electromechanically actuated latch member (not shown) which locks a door latch of the door 2 in the locked state of the door lock 200 and releases in the unlocked state of the door lock 200. Upon activation of the interlock locking mechanism 205, the first and second processing means 202, 203 turn on an electric current to the interlock mechanism 205. When the locking mechanism 205 is activated for unlocking, the first and the second processing means 202, 203 switch off an electric current for the locking mechanism 205. In each case a processing means 202, 203 for this purpose a separate switch is assigned. Opening only one of the switches will turn off the power to the latching mechanism 205.

The door lock controller 201 receives feedback about the state of the lock mechanism 205 via a lock mechanism state monitor, not shown. Specifically, a position of an armature of a spool of the lock mechanism 205 is monitored. If the state of the door lock 205 does not correspond to the desired state, an alarm is output. Additionally or alternatively, this case can be made a renewed attempt to reach the target state.

As a result of an operation of the emergency button 10, the first and second emergency button processing units 20, 21 communicate with the first and second processing means 202, 203 via the first bus system 400 by means of a message. The message may include the message about being actuated or a control command for unlocking. Here, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 of the second processing means 203. By the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 to set the lock mechanism 205 to unlock, so turn off the electrical power.

The presence of a fire alarm signal is detected by the first and second emergency button processing units 20, 21. Hereupon, the first and second emergency button processing units 20, 21 cause the locking mechanism 205 to be triggered by the door lock controller 201 by a message to the first and second processing means 202, 203. Here, the first emergency button processing unit 20 notifies the first processing means 202 and the second emergency button processing unit 21 of the second processing means 203. By the message cause the first and the second emergency button processing unit 20, 21, that both the first and the second processing means 202, 203, the locking mechanism 205 to control the unlocking, so turn off the electric power.

The actuation of the emergency button 10 or the presence of a fire alarm signal can be sent in a message from one of the two emergency button processing units 20, 21, the first emergency button processing unit 20 writing a first part of the message and the second emergency button processing unit 21 writing a second part of the message. The first and second processing means 202, 203 are responsible for at least a part of the message. The emergency button processing units 20, 21, 22 and the first and second processing means 202, 203 may receive messages via the first bus system 400, respectively. Here, the electronic unit 24 and the door lock controller 201 may each be assigned a bus address.

The first and second emergency button processing units 20, 21 monitor each other. If an error is detected, the electronic unit 24, in particular the intact emergency button processing unit 20, 21, causes the first and the second processing means 202, 203 to actuate the door locking mechanism 205 for unlocking. The first and second processing means 202, 203 monitor each other. If an error is detected, at least the intact processing means 202, 203 actuates the locking mechanism 205 for unlocking. Also, in case of a failure of the bus system 400, the locking mechanism 205 is driven to release from the door lock controller 201. For this purpose, and for checking the first and second emergency button processing units 20, 21, a sign-of-life signal of the first and second emergency button processing units 20, 21 is regularly sent to the door lock controller 201. If the sign of life signal remains off, then the locking mechanism 205 is activated for unlocking by the first and the second processing means 202, 203. The first and second processing means 202, 203 communicate with each other when the door lock controller 201 has received a message about the operation of the emergency button 10 and / or the presence of a fire alarm signal. If only the first processing means 202 or the second processing means 203 determines that the emergency button 10 has been actuated or a fire alarm signal is present, the determining processing means 202, 203 actuates the door lock mechanism 205 for unlocking and initiates that the other processing means 202, 203 also control the Door lock mechanism 205 activates for unlocking. An error and a fault always include a failure of the respective component. In the event of a power failure, the locking mechanism 205 automatically transitions to the unlocked state. The operations described in this section also give the Security system 1, in particular by means of the control device 100, an audible and / or visual alarm.

When the actuation signal has been generated, it is electronically prevented that the door lock 200 is transferred into the locked state without the presence of a cancellation condition. This prevents the door from being locked while a hazardous condition persists. For this purpose, an electronic detection is integrated in the electronic device 207. The electronic detection is converted into an operating state as a result of the actuation of the actuating element 11, which serves to release the escape route. In the operating state, the control of the door lock 200 is prevented for locking.

The electronic determination comprises a first program code. The first program code includes a first variable or has access to a first variable. In an initial state of the electronic determination, the first variable is set to an initial value. In the actuated state, the first variable is set to an actuation value, by which the actuation of the door lock 200 is prevented for locking. The first variable can be binary. When the cancellation condition is reached, the electronic determination is returned to an initial state. For this purpose, the value of the first variable is set to the initial value. In the initial state of the electronic detection, a control of the door lock 200 is allowed for locking. The first program code detects the first value of the first variable and allows latching of the door latch 200 when the value of the first variable is equal to the output value and prevents latching of the door latch 200 when the value of the first variable corresponds to the actuation value.

The electronic determination is stored both in the first processing means 202 and redundantly in the second processing means 203. For this purpose, the first program code is stored in the first processing means 202. The first variable is stored in the nonvolatile memory of the first processing means 202. A second program code with the same functionality as the first program code is stored in the second processing means 203. The first variable is redundantly stored in the nonvolatile memory of the second processing means 203.

The first variable is additionally stored in the first emergency button processing unit 20 and the second emergency button processing unit 21, respectively, in the non-volatile memories. As a result of the operation of the emergency button 10, the first variable in the first and second emergency button processing units 20, 21 is transferred from the initial value to the operation value. The changed value of the first variable becomes the Electronic device 207 transmitted via the bus system 400. Until the presence of a cancellation condition, the emergency button 10 repeatedly sends the actuation value of the first variable to the electronic device 207. The transmission can take place at regular time intervals, in particular together with the sign of life signal.

At least if at least one of the door condition monitoring devices 204, 206 has detected that the door 2 has been opened after operating the emergency button 10, a cancellation action at the emergency button 10 is necessary to achieve the cancellation condition.

The actuating element 11 is designed non-latching. The actuating element 11 is transferred in the actuation of the starting position 11.I in the operating position 11.II (s. FIG. 11 ). Immediately after the operation, the actuator 11 moves back to the starting position 11.I by the force of a return spring 12 formed as a spring back (s. FIG. 12 . 13 ). The actuation of the actuating element 11 is translational.

The cancellation action at the emergency button 10 is performed by operating the operation member 11. As a result, a cancellation signal is generated, which corresponds to the actuation signal. In order for the control device 100 to be able to recognize whether an actuation of the emergency button 10 serves for unlocking the door lock 200 or if there is a cancellation action, a further signal must be generated at the same time to achieve the cancellation condition. An operator authenticates for this purpose. The authentication is done by inserting and turning a key in the key switch 500. The operation of the actuator 11 and the authentication must overlap in time. Ie. the operator must hold the key in the rotated state while the actuator 11 is in the operating position 11.II. The actuator 11 must return to the home position 11.I while the key is in the rotated state. The course of action is sufficient to achieve the cancellation condition.

If the door condition monitoring devices 204, 206 have detected that the door 2 has remained permanently closed due to the operation of the emergency button 10, the cancellation condition can be achieved in at least one further manner, namely by elapse of a predetermined time interval. So z. B. after 60 seconds after the last generation of the actuation signal, the cancellation condition be achieved, if the door 2 has remained closed. An authentication on the key switch 500 and a cancellation action on the emergency button 10 are not necessary in this case.

The first and second door condition monitoring devices 204, 206 are provided to detect, with one-shot security, that the door 2 is in response to actuation of the door Nottasters 10 has always been closed. For this purpose, the door condition monitoring devices 204, 206 are preferably designed differently. The first door condition monitor 204 may be e.g. B. be designed as a door contact. The second door condition monitor 206 may be e.g. B. be designed as a case contact. Alternatively, z. B. at least one of the door condition monitoring magnetically, z. B. as a reed switch, monitor the state of the door 2. The door lock controller 201 receives a signal from each of the first and second door condition monitors 204, 206 as to whether the door 2 is open or closed. Only if during the predetermined time interval, neither of the first door condition monitor 204 nor the second door condition monitor 206 has sent a signal on the opening of the door, the cancellation condition can be achieved by elapse of the predetermined time interval.

The door lock controller 201 includes a timer to measure the predetermined time interval. The door lock controller 201 starts the timer in response to the operation of the emergency button 10. If the door lock controller 201 receives a signal from the first or second door condition monitor 204, 206 that the door has been opened during the predetermined time interval, a cancellation action must be performed on the emergency button 10. In this case, the elapse of the predetermined time interval is insufficient. The length of the predetermined time interval is stored in the door lock controller 201.

The door lock controller 201 checks whether reaching the cancellation condition by lapse of the predetermined time interval is allowed before the door lock controller 201 drives the lock mechanism 205 to lock. Thus, an operator during commissioning of the security system 1, d. H. before starting the operation of the security system 1, deposit whether an elapse of the predetermined time interval without opening the door 2 is permissible as a cancellation condition and thus leads to a re-locking of the door 2. The deposit can be made in the emergency button 10. A check of the permissibility, a lapse of the predetermined time interval, and a lack of a signal from the first and second door state monitors 204, 206 about opening the door 2 is sufficient to achieve the cancellation condition.

The door lock controller 201 communicates the open or closed state of the door via the bus 400 to the emergency button 10 and / or to the control device 100.

The electronics unit 24 includes a timer. In the electronics unit 24, a first delay period can be stored. If an unlocking of the door lock 200th delayed, the electronic unit 24 waits for the first delay period after the generation of the actuation signal, before the first and second emergency button processing units 20, 21 communicate with the door lock controller 201 via the first bus system 400 to initiate unlocking.

The third processing unit 105 causes the FIG. 1 and 2 described non-safety unlocking and locking the door lock 200, z. B. unlocking after receiving the authentication signal, at a predetermined time or after a predetermined period of time or a lock after a predetermined period of time or immediately after closing the door 2. For this purpose communicates the third processing unit 105 via the first bus system 400 with the door lock control 201. The communication may, for. B. information or a control command that causes the door lock control 201 to control the locking mechanism for unlocking or locking. If the control device 100 is connected to the second bus system (see FIG. Fig. 7 ), the third processing unit 105 serves to forward messages from and / or to a central escape route controller 300.

The third emergency button processing unit 22 controls the audible alarm generator 23 and the lighting means 41.

If at least one of the processing means 202, 203 provides that the locking mechanism 205 has assumed the unlocked state, the processing means 202, 203 sends a corresponding signal via the bus 400 to the electronic unit 24. The electronic device 207 is connected to the door condition monitoring device 204, 206 or connectable and receive signals about an open or closed state of the door from the door condition monitors 204, 206.

The mentioned functions which the control device 100, the door lock control 2021 and / or the emergency button 10 execute are executable with the aid of software modules. In the electronic device 207 and / or the electronics unit 24 program codes are stored, by means of which the functions are executable.

FIG. 3 represents a variant of the in the FIGS. 1 and 2 Here, the control device 100 is formed separately from the emergency button 10 and the door lock 200. The control device 100 may, for. B. in a hat rail housing (not shown) may be arranged. The control device 100 is not integrated in an emergency button 10 or in a door lock 200. For example, the control device 100 may be arranged in a technical room be provided. The first bus system 400 connects the control device 100, the door lock 200 and the emergency button 10 with each other. As in the first embodiment, the key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402.

Unless otherwise described, the structure and the function correspond to the first embodiment, wherein the functions associated with the FIGS. 1 and 2 are described with the aid of the control device 100 or the processing units 103, 104, 105, of the control device 100 of the FIG. 3 be executed and the functions that to the FIGS. 1 and 2 are executed by the emergency button 10. Specifically, the first and second emergency button processing units 20, 21 detect the operation signal, communicate with the first and second buttons as a result of an operation of the emergency button 10 second processing means 202, 203 via the first bus system 400, thus causing the interlocking mechanism 205 to be driven by the door interlock controller 201. The actions for achieving on-fail safety are performed by the first and second emergency button processing units 20, 21. The first variable is stored in the first and second emergency button processing units 20, 21 and is transmitted from there to the door lock controller 201. The emergency button 10 includes the timer for determining the first delay time period. The control device 100 is connected or connectable to the second bus system 401. The third processing unit 105 causes the FIG. 1 and 2 described non-safety unlocking and locking the door lock 200, z. B. unlocking after receiving the authentication signal, at a predetermined time or after a predetermined period of time or an automatic re-locking after a predetermined period of time or immediately after closing the door. 2

The first, second and third processing units 103, 104, 105 are each designed as a microprocessor or microcontroller. The first, second, and third processing units 103, 104, 105 together constitute processing electronics 101. The first and second processing units 103, 104 comprise nonvolatile memory. The third processing unit 105 comprises a non-volatile memory and / or has access to a non-volatile memory.

A fire alarm signal can be received by both the control device 100 and the emergency button 10. The presence of a fire alarm signal is thereby by the first and second emergency button processing unit 20, 21 for the emergency button 10 or by the first and the second processing unit 103, 104 for the control device 100th detected. Accordingly, both the control device 100 with the aid of the first and the second processing unit 103, 104 and the emergency button 10 with the aid of the first and the second emergency button processing unit 20, 21 can cause an unlocking of the door lock 200. For this purpose, communication takes place via the first bus system 400 with the door lock control 201.

The control device 100 is informed via the first bus system 400 when the emergency button 10 causes an unlocking of the door lock 200, that is, as a result of an actuation of the emergency button 10 or after receiving a fire alarm signal. The control device 100 is also informed about a time-delayed unlocking of the door lock 200 as a result of the operation of the emergency button 10. The control device 100 is informed of the locking and unlocking state of the door latch 200. The control device 100 is informed of the open or closed state of the door 2.

The control device 100 causes a triggering of the alarm transmitter 23 and the lighting means 41 for the to FIGS. 1 and 2 described acoustic alarms and visual representations. For this purpose, the control device 100 can communicate with the electronic unit 24, in particular with the third emergency button processing unit 22, via the first bus system 400. The third emergency button processing unit 22 then controls the alarm transmitter 23 or the lighting means 41. For this purpose, the parameters for the alarm transmitter 23 and the lighting means 41 are stored in the control device 100.

In the embodiments of the FIGS. 1 to 3 Door lock 200 includes door status monitors 204, 206. Alternatively, and not shown, door status monitors 204, 206 may be connected to first bus system 400 or directly to emergency button 10 and / or controller 100.

In the embodiments of the FIGS. 1 to 3 For example, at least one further emergency button, not shown, may be connected to the first bus system 400, which is designed without the control device 100. The other emergency button is like the emergency button 10 in FIG. 3 trained and can cause the unlocking of the door lock 200 when actuated. The further emergency button corresponds in structure and functionality to the emergency button 10 of the FIG. 3 ,

In the embodiments of the FIGS. 1 to 3 At least one further door lock, not shown, may be connected to the first bus system 400. The further door lock is like the door lock 200 in FIG. 2 or 3 trained and can at an actuation of the emergency button 10 are also unlocked. The further door lock corresponds in structure and in the functionality of the door locks 200 of FIGS. 1 to 3 ,

In FIG. 4 a detail of a third embodiment of a security system 1 according to the invention with several emergency buttons 10, 1010, 2010, 3010 is shown. The security system 1 comprises a plurality of door locks 200, 1200, 2200, 3200. Each emergency button 10, 1010, 2010, 3010 is assigned a key switch 500, 1500, 2500, 3500. The safety system 1 serves to arrange the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 on different doors 2, 2002, 3002. The doors 2, 2002, 3002 are not part of the security system 1 according to the invention Emergency buttons 10, 1010, 2010, 3010 are connected to the first bus system 400 and thus correspond to a number of emergency buttons 10, 1010, 2010, 3010. The door locks 200, 1200, 2200, 3200 are connected to the first bus system 400 and correspond to one Number of door locks 200, 1200, 2200, 3200.

In the example of FIG. 4 the emergency buttons 10, 1010 are associated with the door locks 200, 1200. The emergency button 2010 is assigned to the door lock 2200. Emergency button 3010 is associated with door lock 3200. Thus, as a result of actuation of one of the emergency buttons 10, 1010, the two door locks 200, 1200 are unlocked, but not the door locks 2200, 3200. If the emergency button 2010 is actuated, only the door lock 2200 is unlocked. Accordingly, when the emergency button 3010 is operated, only the door latch 3200 is unlocked. Thus, in this embodiment, the door locks 200, 1200, 2200, 3200 are selectively unlocked.

For example, the emergency buttons 10, 1010 may be provided for placement on a two-leaf door 2. In each case a door lock 200, 1200 is to be arranged in each case on a door leaf 3, 4 of the door 2. The emergency button 2010 and the door lock 2200 are provided to be arranged on another door 2002. The emergency button 3020 and the door latch 3200 are to be arranged on a door 3002 as in FIG FIG. 4 shown.

The security system 1 off FIG. 4 can also for from FIG. 4 deviating selective unlocking be adjustable. At one too FIG. 4 deviating example setting is only one associated door lock 200, 1200, 2200, 3200 unlocked upon actuation of one of the emergency button 10,1010, 2010, 3010 respectively. Thus, in each case one emergency button 10, 1010, 2010, 3010 is assigned in each case only one door lock 200, 1200, 2200, 3200. In particular, such a set security system 1 for four single-leaf doors, each with a door lock 200, 1200, 2200, 3200 suitable.

In another example, not shown setting the security system 1 when pressing one of the emergency button 10,1010 only the two door locks 200, 1200 and when pressing one of the emergency button 2010, 3010 only the two other door lock 2200, 3200 unlocked. Thus, the emergency button 10, 1010 the door locks 200, 1200 and the emergency button 2010, 3010 associated with the door locks 2200, 3200. In particular, the security system 1 thus set is suitable for two double-leaf doors, each with a door lock 200, 1200, 2200, 3200 per door leaf.

Also, the security system 1 can be set so that upon actuation of an emergency button 10, 1010, 2010, 3010 all door locks 200, 1200, 2200, 3200 are unlocked.

Notwithstanding the security system 1, the in FIG. 4 1, a security system 1 according to the invention may comprise a number of emergency buttons 10, 1010, 2010, 3010, which does not coincide with the number of door locks 200, 1200, 2200, 3200. For example, in FIG. 4 the door 2 is designed to be single-winged and one of the emergency buttons 10, 1010 or one of the door locks 200, 1200 is missing.

In FIG. 5 It is shown that the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 are connected to each other via the first bus system 400. Each emergency button 10, 1010, 2010, 3010 is electrically connected or connectable to a key switch 500, 1500, 2500, 3500 assigned to the respective emergency button 10, 1010, 2010, 3010 via a connection 402, 1402, 2402 or 3402. Alternatively, the key switches 500, 1500, 2500, 3500 are connected to the first bus system 400 (not shown). In the embodiment of FIGS. 4 and 5 is the control device 100 in one of the emergency button 10, 1010, 2010, 3010, z. As the emergency button 10, integrated. The first bus system 400 is connected to only a single controller 100. Unless otherwise described below, the structure and functions of the door locks 200, 1200, 2200, 3200 correspond to the structure and functions of the door lock 200 of Figures 2 and 3 , the structure and functions of the emergency button 10 the construction and functions of the emergency button 10 of FIG. 2 and the structure and functions of the emergency button 1010, 2010, 3010 the structure and functions of the emergency button 10 of FIG. 3 , The reference numerals from the Figures 2 and 3 are used. It is understood that each of the door locks 200, 1200, 2200, 3200 include its own door locking mechanism, own processing means, etc. and the emergency buttons 10, 1010, 2010, 3010 each own emergency button processing units, alarm, bulbs, switches and actuators.

Thus, the assignment of emergency buttons 10, 1010, 2010, 3010 can be done to the door locks 200, 1200, 2200, 3200, when commissioning the security system 1, ie before the start of operation of the security system 1, an assignment of the emergency button 10, 1010, 2010, 3010 to the door locks 200, 1200, 2200, 3200 made. For this purpose, one of the door locks 200, 1200, 2200, 3200 is in each case transferred to an assignment mode. Thereafter, a deliberate action is taken at the emergency buttons 10, 1010, 2010, 3010. The conscious action may be carried out as an actuation of the actuating element 11 of the respective emergency button 10, 1010, 2010, 3010. After all the emergency buttons 10, 1010, 2010, 3010 associated with those door interlocks 200, 1200, 2200, 3200 in the assignment mode have been operated, the interlocking mode of the door interlock 200, 1200, 2200, 3200 is ended. In the embodiment of FIG. 4 is z. B. first transferred the door lock 200 in the assignment mode and then the emergency button 10, 1010 operated, whereby the assignment of the emergency button 10, 1010 to the door lock 200 is carried out. Then, the assignment mode of the door lock 200 is ended. Subsequently, z. B. the door lock 1200 transferred to the assignment mode and then the emergency button 10, 1010 operated, whereby the assignment of the emergency button 10, 1010 to the door lock 1200 is carried out. Then, the assignment mode of the door lock 1200 is ended. Now the door lock 2200 is transferred to the assignment mode and then the emergency button 2010 is actuated, whereby the assignment of the emergency button 2010 to the door lock 2200 takes place. The assignment mode of the door lock 2200 is ended. Accordingly, it can then be moved with the door lock 3200 and the emergency button 3010.

By the assignment is deposited in the respective door locks 200, 1200, 2200, 3200, in particular in the respective door lock controls 201, which emergency button 10, 1010, 2010, 3010 of the respective door lock 200, 1200, 2200, 3200 is assigned. As a result of the assignment, in the control device 100 for all emergency buttons 10, 1010, 2010, 3010 and all door interlocks 200, 1200, 2200, 3200 of the first bus system 400, the assignment of the emergency buttons 10, 1010, 2010, 3010 to the door interlocks 200, 1200, 2200, 3200 deposited. For the assignment, in each case a bus address, in particular an unchangeable bus address, the respective emergency button 10, 1010, 2010, 3010 deposited.

The assignment of the assignment in the respective door interlocks 200, 1200, 2200, 3200 takes place respectively in the first digital processing means 202 and redundantly in the second digital processing means 203, in particular in the non-volatile memories of the processing means 202, 203.

If z. B. the emergency button 10 is actuated, the emergency button 10 communicates with all door locks 200, 1200, 2200, 3200 of the first bus system 400. The door locks 200, 1200, 2200, 3200 check each based on the deposit, whether the respective door lock 200, 1200, 2200, 3200 associated with the pressed emergency button 10 has been. Only in the case of the assignment then control the associated door locks 200, 1200 to the respective door lock mechanism 205.

In a fire alarm signal, the door locks 200, 1200, 2200, 3200, which are assigned to the fire alarm signal receiving emergency button 10, 1010, 2010, 3010, unlocked.

If a door lock 200, 1200, 2200, 3200 is to be unlocked with a time delay as a result of the actuation of an associated emergency button 10, 1010, 2010, 3010, a first delay time period is stored in that emergency button 10, 1010, 2010, 3010. The deposit takes place when the safety system 1 is commissioned by the parameterization program. For each emergency button 10, 1010, 2010, 3010, a different first delay time period can be stored by the operator. For example, the emergency button 10 stores a first delay time period, which differs from the first delay time duration, which is stored in the emergency button 2010. The emergency buttons 1010, 3010 are to initiate a release of the associated door locks 2200 and 3200 without delay, so that in the emergency buttons 1010, 3010 no first delay period or a first delay period of 0 s is stored. Alternatively, the security system 1 may be designed such that in the emergency buttons 10, 1010, 2010, 3010, the same door lock 200, 1200, 2200, 3200 are assigned, always the same first delay time period is stored. For this purpose, the parameterization program allows the operator only a common setting.

The control device 100 takes over the non-safety-relevant functions for unlocking and locking all door locks 200, 1200, 2200, 3200, as previously FIG. 1 and 2 described. For this purpose, the control device 100 with the door locks 200, 1200, 2200, 3200 selectively communicate. Thus, in the control device 100 is deposited, which access control system which door lock 200, 1200, 2200, 3200 is assigned, so that when a positive authentication signal of an access control system only the associated (s) door lock (s) 200, 1200, 2200, 3200 are unlocked. It is also stored in the control device 100, if and when yes, which door lock 200, 1200, 2200, 3200 is to be unlocked at what predetermined time. It can also be stored in the control device 100, after which predetermined time period or which predetermined time intervals which door lock 200, 1200, 2200, 3200 is to be locked again. It is also stored in the control device 100, if and, if so, which door locks 200, 1200, 2200, 3200 immediately after closing the door 2, 2002, 3002 are to be locked again. In the control device 100 can be deposited, if, and if so, for which door lock 200, 1200, 2200, 3200 on acoustic alarm is to be initiated when the unlocked door 2, 2002, 3002 is opened without a positive authentication signal is present. In the control device 100 may be deposited, whether an audible alarm is to be initiated if the door 2, 2002, 2003 is not closed again. The deposits may be made differently for each door latch 200, 1200, 2200, 3200 or for the groups of door locks 200, 1200, 2200, 3200 to be arranged on a door 2, 2002, 3002. The deposit is made with the aid of the parameterization program by the operator during commissioning.

The control device 100 causes an acoustic and visual alarm as a result of the operation of a emergency button 10, 1010, 2010, 3010 is also output in the at least one further emergency button 10, 1010, 2010, 3010, the same door lock 200, 1200, 2200, 3200 as the actuated emergency button 10, 1010, 2010, 3010 is assigned. Is in the embodiment of FIGS. 4 and 5 z. B. the emergency button 10 is actuated, the control device 100 causes by communication with the electronics unit 24 of the emergency button 1010 that the acoustic alarm generator 23 and the bulbs 41 of the emergency button 1010 issue an audible or visual alarm.

If, after an emergency button 10, 1010, 2010, 3010 has been actuated, a release is triggered with a time delay, the control device 100 causes the first delay period with which the unlocking is initiated to occur in the at least one further emergency button 10, 1010, 2010, 3010 which is associated with the same door lock 200, 1200, 2200, 3200 as the operated emergency button 10, 1010, 2010, 3010. For this purpose, the control device 100 communicates with the electronics unit 24 of the at least one further emergency button 1010, 2010, 3010 or controls the lighting means 41 of the emergency button 10, in which the control device 100 is integrated.

The control device 100 may be the non-safety-related assignment for selective communication, for. B. the assignment of an access control system to a door lock 200, 1200, 2200, 3200 make a bus address. In this case, the subscribers of the first bus system 400 each have an adjustment device for the manual setting of a bus address. The adjustment device may include DIP switches. At least the users of the first bus system 400 who have the same setting on the setting device are automatically assigned to each other. In order to be able to assign different bus addresses to subscribers with the same setting, subscribers of the first bus system 400 have different key figures from which different bus addresses are configured with the aid of the setting made. The bus address determined by means of the setting is for the emergency buttons 10, 1010, 2010, 3010 and for the door interlocks 200, 1200, 2200, 3200, only one further bus address, which is the emergency button 10, 1010, 2010, 3010 and the door interlocks 200, 1200, 2200, 3200 next to the bus address used in security-related communication.

If a door lock 200, 1200, 2200, 3200 has already been unlocked, then the control device 100 can prevent an unlocking of a further door lock 200, 1200, 2200, 3200 until a condition is present, provided that no danger exists. If the condition is met, the control device 100 causes the unlocking of the further door lock 200, 1200, 2200, 3200. In this way, the control device 100 with a plurality of door locks 200, 1200, 2200, 3200 communicate so that a lock is formed. For example, the door 2002 may be located at an entrance to a room and the door 3002 may be located at an exit of the same room. The controller 100 may cause the door latch 2200 to unlock upon the presence of a positive door latch 2200 authentication signal. Even if there is a positive authentication signal for the door lock 3200 of the control device 100, the control device 100 can prevent the unlocking of the door lock 3200 until a condition exists. If the condition is present, then the control device 100 causes an unlocking of the door lock 3200. The condition may be, for. B. to a lock-time interval or the achievement of a measured variable, such as room temperature, humidity, air purity or number of people in the room act. For this purpose, the control device 100 can be connected to a measuring device or connectable. The condition may include closing the first opened door 2002, which is measurable by the door condition monitors 204, 206. The condition and the door locks 2200, 3200 involved in the lock can be stored in the control device 100. The deposit can be made by the operator using the parameterization program.

In FIG. 6 is a variant of the in the FIGS. 4 and 5 illustrated section of the security system 1 shown. Here, the control device 100 is formed separately from the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200. The first bus system 400 connects the control device 100 to the door locks 200, 1200, 2200, 3200 and the emergency buttons 10, 1010, 2010, 3010. The control device 100 of FIG FIG. 6 corresponds in structure to the control device 100 of FIG. 3 , The emergency button 10 of the FIG. 6 corresponds in construction to the emergency button 10 of the FIG. 3 , Incidentally, the structure and the functionalities previously agreed FIG. 5 are described, the structure and the functionalities of the security system 1 of FIG. 6 ,

Characterized in that in the embodiments of FIGS. 4 to 6 the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010, 2010, 3010 and possibly the control device 100 act as subscribers of a single first bus system 400, only the cables of the bus system 400 are necessary so that the participants can communicate with each other. Thus, the security system 1 has only a few cables.

The bus system 400 may include at least two cables for communication and at least two cables for power. In particular, the bus system 400 has exactly two cables for communication and two cables for the power supply. In each of the embodiments of the security system 1 according to the invention, a power supply can be integrated as a connection to a power grid at any point of the bus system 400. Thus, the power supply can be provided as an independent component of the security system 1 outside the emergency button 10 or the emergency button 10, 1010, 2010, 3010 and the door lock 200 and the door locks 200, 1200, 2200, 3200. As a result, the security system 1 in the physical structure is flexible.

If, as in the third and fourth embodiments, multiple emergency buttons 10, 1010, 2010, 3010 are present and one of the emergency buttons 10, 1010, 2010, 3010 has been actuated, the electronic button only prevents the electronic button 10 from being actuated. 1010, 2010, 3010 associated door locks 200, 1200, 2200, 3200 are locked. Achieving the cancellation condition allows the locking of the door lock (s) 200, 1200, 2200, 3200 associated with the actuated emergency button 10, 1010, 2010, 3010. To achieve the cancellation condition, the time-overlapping actuation of the actuation element 11 of that emergency button 10, 1010, 2010, 3010, which was previously operated, and the authentication to the key button 500, 1500, 2500, 3500 associated with the actuated emergency button 10, 1010, 2010, 3010 are necessary. At least this action sequence is necessary for the door lock 200, 1200, 2200, 3200 associated with the actuated emergency button 10, 1010, 2010, 3010, in which at least one of the door condition monitoring devices 204, 206 has detected that the door 2 or one of the door leaves 3, 4 was opened after pressing the emergency button 10.

If the door condition monitoring devices 204, 206 of the door locks 200, 1200, 2200, 3200 assigned to the actuated emergency button 10, 1010, 2010, 3010 have detected that the door 2 has remained permanently closed after the emergency button 10, 1010, 2010, 3010 has been actuated, then For example, the cancellation condition can be achieved by the lapse of the predetermined time interval. Thus, the cancellation condition z. B. be reached after 60 seconds after the last operation of the emergency button 10. The admissibility of whether a lock should be made after the lapse of the predetermined time interval with door 2, 2002, 3002 remained closed, for each door lock 200, 1200, 2200, 3200 or groups of door locks 200, 1200, 2200, 3200, in particular for door locks , which are intended to be arranged on the same door, individually adjustable and be storable. The deposit can z. B. in the emergency windows 10, 1010, 2010, 3010 done. Likewise, for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, in particular for door locks, which are intended to be arranged on the same door, the length of the predetermined time interval can be individually adjustable. This can be a minimum length, z. B. 60 s, be predetermined for the predetermined time interval. The deposit is made by the parameterization program.

In FIG. 7 a fifth embodiment of the security system 1 according to the invention is shown. The fifth embodiment includes the security system 1 according to the first embodiment of the FIGS. 1 and 2 , That is, the emergency button 10 including the control device 100 is connected to the door latch 200 via the bus system 400. The key switch 500 is connected via a connection 402 with the emergency button 10 or connectable. In the fifth exemplary embodiment, further components 301, 510 are provided in comparison to the first exemplary embodiment. The central escape route control 300, already part of the embodiments of the FIGS. 1 and 2 is, is shown explicitly.

The security system 1 includes the central escape route controller 300. The central escape route controller 300 is provided to be located remotely from the door 2. Thus, the central escape route control 300 z. B. together with a watch device 301, which may be designed as a monitor or personal computer, and / or a multi-door display device 350 (s. Fig. 10 ) to be arranged in a guardroom. The watch device 301 is optionally part of the security system 1 according to the invention. Alternatively, the watch device 301 can be connectable to the security system 1 according to the invention.

The central escape route control 300 has a modular structure. An emergency module 310 includes a first attachment plate 311. The first attachment plate 311 receives a central emergency button 302 and an identification device 312 exemplified as a key switch. By means of the first fastening plate 311, the central emergency pushbutton 302 and the identification device 312 are mechanically rigidly connected to one another. The central emergency button 302 serves to unlock the door lock 200 as a result of actuation of the central emergency button 302. Thus, by the central emergency button 302 away from the door 2, the door latch 200 can be unlocked. The unlocking as a result of the operation of the central emergency button 302 is done with a one-fault security. The operation of the central emergency button 302 is thus suitable for the danger.

A deactivation module 320 comprises a first control element 322 embodied as a key pushbutton and a second control element 323 configured as a pushbutton. The first control element 322 serves to deactivate the emergency pushbutton 10. Thus, by pressing the first control element 322, the emergency pushbutton 10 is deactivated Condition convicted. If the emergency button 10 is in a deactivated state, an unlocking of the door lock 200 is omitted as a result of an actuation of the emergency button 10. The second operating element 323 serves to activate the emergency button 10. The emergency button 10 is in the deactivated state and becomes the second operating element Pressed 323, the emergency button 10 is transferred to an activated state. In the activated state of the emergency button 10, the emergency button 10 causes an unlocking of the door lock 200 when the emergency button 10 has been actuated. The deactivation module comprises a second mounting plate 321. The second mounting plate 321 serves to receive the first and the second operating element 322, 323. The second mounting plate 321 connects the first and the second operating element 322, 323 mechanically rigidly together.

A retardation module 330 includes a third attachment plate 331. The third attachment plate 331 receives a retardation element 332. The delay element 332 is exemplified as a key switch. The delay element 332 serves to further delay the unlocking of the door lock 200 within the first delay duration. The delay module 330 includes a termination element 333, which is designed as a button. The termination member 333 is attached to the third attachment plate 331. The termination element 333 is mechanically rigidly connected to the delay element 332 by means of the third attachment plate 331. By actuating the termination element 333, the delay of the unlocking of the door lock 200 can be terminated.

The central escape route controller 300 includes a one-way open escape route control housing 340 in which the emergency module 310, the deactivation module 320, and the delay module 330 are disposed. The deactivation module 320 and the delay module 330 are optional components of the central escape route safety device 300. In the escape route control housing 340, if present, the multi-door display device 350 can also be arranged.

The escape route control enclosure 340 may mechanically secure the emergency module 310, the deactivation module 320, and the delay module 330. The emergency module 310, the deactivation module 320 and the delay module 330 are each individually secured to the escape route control housing 340, in particular screwed. For attachment to the escape route control housing 340 serve the first mounting plate 311 for the emergency module 310, the second mounting plate 321 for the deactivation module 320 and / or the third mounting plate 331 for the delay module 330. The escape route control housing 340 and the modules 310, 320, 330 are designed so that various sequences in which the modules 310, 320, 330 are juxtaposed, are possible. So z. B. in a central emergency exit device 300, not shown, for. For example, the emergency module 310 may be located between the deactivation module 320 and the delay module 330. In another, not shown, exemplary central escape route control 300, a free space, delay module 330 in the middle and emergency module 310 on the right can be arranged on the left. The clearance is due to the absence of the deactivation module 320 and is hidden by a plate. The escape route control housing 340 may include rails for inserting the modules 310, 320, 330. The escape route control housing 340 may have attachment options, e.g. As perforated strips or slots, for variable attachment of the module 310, 320, 330 have.

On the first mounting plate 311, on the second mounting plate 321 and on the third mounting plate 331, a purely schematically illustrated display area 314, 324 and 334 is provided. There are symbols on the display area explaining the function of the modules 310, 320, 330. In addition, optical lights for indicating states of the security system 1 in the display areas 314, 324, 334 may be provided.

In the embodiment of FIG. 7 The security system 1 further includes an audio and video module 510. The audio and video module 510 is provided for placement near the door 2 that can be latched by the door latch 200. If the audio and video module 510 is unlocked, an operator in the guardroom can speak with the user in front of the door 2 and view the room near the door 2.

As in FIG. 8 illustrated, the central emergency button 302 similar to the emergency button 10 is constructed. Thus, the central emergency button 302 includes an emergency button electronics unit 308. The emergency button electronics unit 308 includes a first emergency processing unit 303, a second emergency processing unit 304 and a third emergency processing unit 305. The first, second and third emergency processing units 303, 304, 305 are each configured as a microprocessor or microcontroller. The first and second emergency processing units 303, 304 comprise nonvolatile memory. The third emergency processing unit 305 has a non-volatile memory and / or has access to a non-volatile memory. The central emergency button 302 is actuated by actuating an emergency button actuator 306. As a result, a Notfalltasterschalter 307 is actuated. As a result, a first and a second signal are generated. For this purpose, a first and a second circuit (not shown) are opened. A signal about opening the first circuit is detected by the first emergency processing unit 303. A signal on the opening of the second circuit is detected by the second emergency processing unit 304.

The central emergency button 302 is connected to a second bus system 401. As in FIG. 9 As shown, the control device 100 is also connected to the second bus system 401. The second bus system 401 is a different type of bus system than the first bus system 400. For example, the second bus system 401 may be configured as a LON or LAN bus and the first bus system 400 as a CAN or DCW bus.

In FIG. 9 the emergency button 10 comprises the control device 100. The emergency button 10 and the door latch 200, which in FIG. 9 are mapped correspond to the emergency button 10 and the door lock 200 of FIG. 2 ,

In an alternative, not shown, the control device 100, the emergency button 10 and the door lock 200 according to the FIG. 3 educated. In this alternative, not shown, the control device 100, the emergency button 10 and the door lock 200 are connected to each other via the first bus system 400, wherein the control device 100 is connected to the second bus system 401.

The control device 100 receives messages from the central escape route safety device 300 via the second bus system 401. The control device 100 forwards the messages to other subscribers of the first bus system 400 via the first bus system. The message may in particular include information relating to actuation of the central emergency button 302, the key switch 312, the first operating element 322, the second operating element 323, the delay element 332 and / or the termination element 333 or a control command as a result of actuation of one of the aforementioned elements 302 , 312, 322, 323, 332, 333. If the control device 100 is integrated in the emergency button 10, a forwarding to the emergency button 10, in which the control device 100 is integrated, is dispensed with. For example, conducts according to the FIG. 9 the controller 100 forwards the message to the door latch 200. If the control device 100 and the emergency button 10 are connected via the first bus system 400, then the control device 100 forwards the message to the emergency button 10 and / or the door lock 200. The controller 100 adapts the message to the format of the first bus system 400. Security-relevant messages are otherwise left untouched.

When the central emergency button 302 has been operated, the first emergency processing unit 303 and redundantly the second emergency processing unit 304 cause the door latch 200 to unlock. Here, the central emergency button communicates 302 via the control device 100 with the door lock control 201, in particular the first and the second processing means 202, 203. The first and the second processing means 202, 203 then control the locking mechanism 205. Previously, the first and second processing units 103, 104 forwarded the message. Here, the control device 100 has left the content of the message untouched.

The central emergency button 302 has an input for receiving a fire alarm signal. When the fire alarm signal is received, the central emergency push button 302 causes the door lock 200 to be unlocked. For this purpose, the first and second emergency processing units 303, 304 communicate with the door lock control 201 via the control device 100, namely via the first and second processing units 103, 104. Like previously described.

A signal via an actuation of the key switch 312 of the first module 310 is received by the emergency button electronics unit 308, in particular the third emergency processing unit 305. The emergency button electronics unit 308 sends a message regarding the operation of the key switch 312 via the second bus system 401 to the control device 100. The control device 100 forwards the message to the first bus system 400.

The emergency button actuator 306 is non-latching. The emergency button actuating element 306 is identical to the actuating element 11 of the emergency button 10 (see FIG. FIGS. 13 to 15 ). Thus, the emergency operating member 306 is transferred in the actuation from an initial position to an actuated position (analog FIG. 11 ). Immediately after the operation, the emergency operating member 306 moves back to the initial position by the force of a return means formed as a spring (analog FIG. 11 ). The actuation of the emergency operating element 306 is translational. If, as a result of actuation of the central emergency button 302, the door lock 200 is transferred into the unlocked state, the electronic device 207 prevents the door lock 200 from being returned to the locked state without the existence of a cancellation condition. The cancellation condition after actuation of the central emergency button 302 can be achieved by operating the key switch 312. In particular, an actuation of the key switch 312 is sufficient to achieve the cancellation condition.

If the security system 1 comprises the central escape route controller 300, then as a result of an actuation of the emergency button 10, the cancellation condition can be reached in a further manner: have the door state monitoring devices 204, 206 detected, that the door 2 has remained constantly closed after the operation of the emergency button 10, the cancellation condition can be achieved by elapse of a predetermined time interval and a cancellation treatment at the central escape route controller 300 after the predetermined time interval. The cancellation treatment may correspond to an authentication at the central escape route controller 300, in particular an actuation of the key switch 312. By the Aufhebehandlung, z. As the operation of the key switch 312, a Aufhebesignal is generated. The cancel signal is forwarded to the door lock controller 201 via the control device 100. An authentication on the key switch 500 and a cancellation action on the emergency button 10 are not necessary in this case.

The door lock controller 201 checks whether reaching the canceling condition by passing the predetermined time interval and authenticating to the central escape route controller 300 with the door 2 kept closed is allowed before the door lock controller 201 drives the lock mechanism 205 to lock. Thus, an operator during the commissioning of the security system 1 deposit whether a lapse of the predetermined time interval without opening the door 2 and the additional operation of the key switch 312 is permitted as a cancellation condition and thus leads to a re-locking of the door 2. A check of admissibility, a lapse of the predetermined time interval, an operation of the key switch 312 after the predetermined time interval, and the fact that during the predetermined time interval, neither of the first door state monitor 204 nor the second door state monitor 206 has sent a door opening signal , are sufficient to achieve the cancellation condition.

This is a variant for achieving a cancellation condition, which belongs to the FIGS. 1 and 2 has been described. This variant can z. B. be selected by the operator, if only the lapse of the predetermined time interval remains closed with the door 2 the operator not sure enough. The operator can select and save this variant by means of the parameterization program.

Specifically, if the operator has selected this option, the elapse of the predetermined time interval with the door 2 closed is visually displayed on the central escape route controller 300. In particular, the lighting means 313 are for indicating that the predetermined time interval has elapsed without receiving a signal on the opening of the door 2 within the predetermined time interval. The visual display tells the operator that the door 2 can be locked by authentication to the central escape route controller 300.

If the door condition monitoring devices 204, 206 have not sent a door opening signal during the presence of a fire alarm signal, then after the fire alarm signal has ended, the door lock 200 can also be locked by the same operation of the key switch 312. Also, the possibility to achieve locking of the door lock 200 by actuating the key switch 312 after termination of the fire alarm signal is optically indicated by the lighting means 313.

The control device 100 forwards messages from the emergency button 10 and / or the door lock 200 via the second bus system 401. Here, the control device 100 adjusts the message to the format of the second bus system 401. The control device 100 sends information about the state of the emergency button 10 and / or the door lock 200 via the second bus system 401.

For example, the central escape route controller 300 and the multi-door display device 350 may be connected to a third bus system 403 (see FIG. Fig. 10 ). Preferably, the central emergency button 302, particularly preferably the emergency button electronics unit 308, be connected to the third bus system 403 (s. Fig. 8 ). The multi-door indicator 350 can visually indicate the locking and unlocking state of the door lock 200. In addition, with the aid of the multi-door indicator 350, one of the door locks 200, 200 ', 1200', 2200 'of the security system 1 (see FIG. Figure 10 ) are unlocked. Unlocking with the help of the multi-door indicator 350 is not one-error-safe. The third bus system 403 may be the same type of bus system as the first bus system 400, e.g. B. to a CAN or DCW bus.

The control device 100 forwards via the second bus system 401 to the central escape route controller 300 when the emergency button 10 waits a first delay period before the emergency button 10 causes the door lock controller 201 to actuate the lock mechanism 205 for unlocking.

The first delay time period is visually displayed at the central escape route controller 300. For this purpose, the central emergency button 302 is constructed according to the emergency button 10, as it is the Figures 13 . 16, 17 is described. For the optical representation of the first delay time period, the lighting means 313 of the central emergency button 302 are actuated by the emergency button electronic unit 308. With the progress of the first delay period, less bulbs 313 in the same color light up. For example, fewer bulbs 313 in a first color and increasingly many bulbs 313 in a second color may shine. The lighting means 41 of the emergency button 10 are driven in an identical manner to optically represent the first delay time period.

During the first delay period, z. B. 8 s, the operator can actuate the delay element 332. For this purpose, the operator turns a key in the key switch, which serves as a delay element 332. An actuation of the delay element 332 is detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. A corresponding message is sent via the second bus system 401 and possibly the first bus system 400. The emergency button 10 receives the message. As a result of the operation of the delay element 332, the emergency button 10 terminates the first delay time period and starts with a second delay time period. The second delay period, e.g. B. 180 s, is longer than the first delay period. At the end of the second delay time period, the emergency button 10 initiates the unlocking of the door lock 200. The second delay time period is determined in the emergency button 10 by means of the same timer used to determine the first delay time period. During the second delay period, the key of the delay element 322 need not remain rotated. Rather, a single turn of the key is sufficient to start the second delay period.

The second delay time period is visualized at the central escape route controller 300 and at the emergency button 10. The visual representation at the central escape route control 300 is similar to the visual display at the emergency button 10. As the second delay time lapse, fewer bulbs 41, 313 are illuminated in the same color. For example, fewer bulbs 41, 313 in a first color and increasingly many bulbs 41, 313 may shine in a second color. To illustrate that the second delay period lasts long, a time lapse pattern may be repetitively added within the second delay time period, e.g. B. a circumferential color point or a circumferential color window (see description to FIG. 16, 17 ) are visually displayed.

If the termination element 333 is actuated during the first or the second delay time period, the emergency electronics unit 308, in particular the third emergency processing unit 305, detects the actuation of the termination element 333 and sends a message regarding the actuation of the termination element 333 via the second bus system 401. This causes the emergency electronics unit to initiate 308 the emergency button 10 not to delay the unlocking, but to cause immediate unlocking the Türverrieglung 200. The termination element 333 is non-latching. A single actuation of the termination element 333 is sufficient to complete the delay of the initiation of the unlocking.

The emergency button 10 can be transferred by an operation of the first control element 322 in the deactivated state. For this, the operator turns a key in the Key switch, which serves as a first operating element 322. Actuation of the first operating element 322 is detected by the emergency button electronics unit 308. Upon actuation of the first operating element 322, a first and a second deactivation circuit are opened or closed. The opening or closing of the first deactivation circuit is detected by the first emergency processing unit 303. The opening or closing of the second deactivation circuit is detected by the second emergency processing unit 304. The first and the second emergency processing units 303, 304 communicate with the emergency button 10 via the second bus system 401. If the first bus system 400 is located between the emergency button 10 and the central emergency button 302, the control device 100 sends the message to the first and the second emergency processing unit 303 , 304 continue. When forwarding, the format is changed, but the content remains unchanged.

In the deactivated state of the emergency button 10, the operation of the emergency button 10 is ineffective on the door lock 200th

The activated state and the deactivated state are stored electronically in the emergency button 10. With the enabled state and the disabled state stored in the emergency button 10, the key in the first control 322 need not remain rotated during the disabled state. Rather, a single turn of the key is sufficient to disable the emergency button 10.

The deactivation remains until the second operating element 323 is actuated. The actuation of the second operating element 323 can be detected by the emergency button electronic unit 308, in particular the third emergency processing unit 305. The emergency electronics unit 308 sends a message regarding the actuation of the second operating element 323 via the second bus system 401 and optionally via the first bus system 400 to the emergency button 10, whereupon the emergency button 10 is transferred to the activated state. The second control 323 is not latching. Characterized in that the activated and the deactivated state is stored in the emergency button 10, a single actuation of the second operating element 323 is sufficient to bring the emergency button 10 in the activated state.

The central escape route control 300 comprises a bus 341, via which the emergency electronics unit 308, in particular the third emergency processing unit 305, can detect signals of the second operating element 323, the delay element 332 and the termination element 333. The emergency electronic unit 308 serves as the intelligence of the entire central escape route controller 300. Only the emergency electronic unit 308 includes microprocessors. The deactivation module 320 and / or the Delay module 322 may be processor-free. The bus 341 may be configured as an I ² C bus.

In order to deposit the activated and deactivated states, a second variable can be stored in the first emergency button processing unit 20 and redundantly in the second emergency button processing unit 21, in particular in the non-volatile memories. The second variable can be binary. If the emergency button 10 is in the deactivated state, then the second variable is set to a deactivation value. If the emergency button 10 is in the activated state, the second variable is set to an activation value. As a result of an actuation of the first operating element 322, the second variable is set to the deactivation value. As a result of an actuation of the second operating element 323, the second variable is set to the activation value. Before the emergency button 10 causes the unlocking of the door lock 200, the emergency button 10 checks the value of the second variable. If the emergency button detects that the emergency button 10 is deactivated, a communication of the emergency button 10 with the door lock control 201 is prevented in order to cause an unlocking 200.

The first emergency processing unit 303 and the second emergency processing unit 304 mutually monitor for errors. If an error is detected, a message is sent via the second bus system 401. The emergency button 10 receives the message and then transfers itself to the activated state if the emergency button 10 is in the deactivated state. For this purpose, the emergency button 10 changes the value of the second variable to the activation value.

The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly, in particular at regular intervals, send a sign of life signal via the second bus system 401. The emergency button 10 receives the sign of life signals. Leaves a sign of life signal once or several times, then the emergency button 10 is transferred to the activated state, if the emergency button 10 is in the deactivated state.

If the security system 1 receives a fire alarm signal, then the emergency button 10 transfers to the activated state if the emergency button 10 is in the deactivated state.

The operation of the emergency button 10 in the deactivated state is displayed on the central escape route controller 300, on the watch device 301 and / or on the multi-door display device 350. If a danger situation actually exists, then the emergency button 10 can be converted by the operator into the activated state by the operator actuating the second operating element 323, or the door lock can be directly actuated by the operator for unlocking. For this purpose, the operator can actuate the central emergency button 302. Whether a hazard exists, the operator z. B. via the audio and video module 510. As a result, increased security is achieved.

The deactivation can z. B. be made at night in a department store. Furthermore, it is conceivable to use the deactivatable emergency button 10 in a building in which people with an impaired state of mind live. Emergency buttons 10 can also be used on doors accessible to people with impaired mental state, eg. On a psychiatry or dementia ward.

If the emergency button 10 is actuated in the deactivated state and then the emergency button 10 is transferred to the activated state, the emergency button 10 which has been actuated in the deactivated state does not lead to unlocking of the door lock 200 even after the transfer to the activated state deactivated state, operation of the emergency button 10 remains ineffective. This is due, on the one hand, to the fact that the actuating element 11 and the switch 63 are non-latching. On the other hand, the operation of the emergency button 10 was not stored in the disabled state 10 in the disabled state. The door lock controller 201 receives no message regarding the operation of the emergency button 10 in the deactivated state. The electronic detection was therefore not transferred to the operating state. This ensures that not directly with the activation of the emergency button 10, the door lock 100 is unlocked, z. B. because long before the emergency button 10 was pressed. As a result, an increased building security is achieved.

In order to achieve a particularly high level of security, provision may be made for the audio and video module 510 to be switched on during the first and / or the second delay time period. In this case, the emergency button 10 releases the audio and video module 510 at the beginning of the first and / or second delay period. Also, the audio and video module 510 is enabled by the emergency button 10 when the emergency button 10 is operated in the disabled state. For this purpose, the emergency button 10 communicates via the second bus system 401 and optionally via the first bus system 400 with the audio and video module 510.

It may be that the emergency button 10 is only deactivated when the audio and video module 510 is unlockable. If the audio and video module 510 part of the security system 1 according to the invention, then a deactivation can be omitted if the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module 510 is disturbed. This does not apply if the security system 1 does not comprise an audio and video module 510, but a monitoring system separate from the security system 1 is provided in the building.

It may be that the emergency button 10 delays the cause of the unlocking only by the first and / or second delay time period when the audio and video module 510 is unlockable. If the audio and video module 510 part of the security system 1 according to the invention, then a delay can be omitted if the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module is disturbed. This does not apply if the security system 1 does not comprise an audio and video module 510, but a monitoring system separate from the security system 1 is provided in the building.

In FIG. 10 a further embodiment of a security system 1 according to the invention is shown. As in the embodiment of FIGS. 7 to 9 For example, the security system 1 comprises a central escape route controller 300, which operates according to the FIGS. 7 and 8th is constructed. Key buttons 500, 500 ', 1500, 1500', 2500 associated with the respective emergency buttons 10, 10 ', 1010, 1010', 2010 are not shown for the sake of clarity. The central escape route controller 300 is connected to the second bus system 401. To the second bus system 401, a first subsystem 5 and a second subsystem 6 are connected. The two subsystems 5, 6 each comprise a first bus system 400, 400 '. Emergency buttons 10, 1010 and 10 ', 1010', 2010 'and door locks 200 and 200', 1200 ', 2200' are respectively connected to the respective first bus system 400, 400 '. The first bus systems 400, 400 'are the same bus system type, eg. B. a CAN or a DCW bus. The second bus system 401 is another type of bus system, e.g. B. a LON or LAN bus.

The security system 1 comprises the multi-door display device 350. The multi-door display device 350 may e.g. B. visually indicate which door lock 200 or 200 ', 1200', 2200 'is in the unlocked state and which door lock is in the unlocked state. With the aid of the multi-door display device 350, an operator can perform a non-safety-relevant locking and unlocking of individual door locks 200 or 200 ', 1200', 2200 'of the security system 1.

Each subsystem 5, 6 comprises only one control device 100, 100 '. In each case, the control device 100, 100 'of the respective subsystem 5, 6 is connected to the second bus system 401. The control device 100 of the first subsystem 5 is connected to the emergency buttons 10, 1010 and the door lock 200 of the first subsystem 5 via the first bus system 400. On the other hand, the control device 100 'of the second subsystem 6 is integrated in an emergency button 10' of the second subsystem 6 and connected to the remaining emergency buttons 1010 ', 2010' and the door locks 200 ', 1200', 2200 'of the further first bus system 400'.

In the subsystem 5, a first emergency button 10 and a second emergency button 1010 are provided. If one of the emergency buttons 10, 1010 is actuated, then the actuated emergency button 10, 1010 respectively causes an unlocking of the door lock 200.

In the subsystem 6, a first emergency button 10 ', a second emergency button 1010' and a third emergency button 2010 'are provided. The emergency buttons 10 ', 1010', 2010 'selectively cause an unlocking of the door locks 200', 1200 ', 2200' of the second subsystem 6. For example, upon actuation of the first emergency button 10 'only a release of the first door lock 200' causes. Accordingly, upon actuation of the second emergency button 1010 'only one unlocking of the second door lock 1200' and upon actuation of the third emergency button 2010 'only one unlocking of the third door lock 2200' causes.

Various deviations are conceivable. Thus, an inventive security system 1 z. B. without the first or the second subsystem 5, 6 be configured. As the only or additional subsystem z. B. one of the in the FIGS. 1 to 6 be provided described safety systems 1 according to the invention. The design and functions of the emergency buttons 10, 10 ', 1010, 1010', 2010 'and the door locks 200, 200', 1200 ', 2200' are formed according to the preceding embodiments, as far as not described below in addition or deviating.

In each of the door locks 200, 200 ', 1200', 2200 'of the security system 1 is deposited, whether an actuation of the central emergency button 302 unlocking the respective door lock 200, 200'1200', 2200 'takes place. So z. B. the door locks 200, 200 ', 2200' allow unlocking as a result of actuation of the central emergency button 302, the door lock 1200 ', however, not. When the central emergency button 302 is operated, the door lock controls 201 of the door locks 200, 200 ', 2200' control the respective lock mechanism 205 for unlocking. On the other hand, such a control is omitted in the door lock 1200 '.

If the central emergency button 302 is actuated, the control devices 100, 100 'receive a corresponding message from the central emergency button 302 via the second bus system 401 and forward the message to all door locks 200 or 200', 1200 ', 2200' of the respective first bus system 400 '400' on. The door locks 200, 200 ', 1200', 2200 'decide whether the respective door lock control 201 of the door locks 200, 200', 1200 ', 2200' is based on the deposit, which includes the admission of a release due to the operation of the central emergency button 302 respective locking mechanism 205 for unlocking drives or not.

The deposit as to whether the door lock 200, 200'1200 ', 2200' is unlocked as a result of actuation of the central emergency button 302 takes place when the safety system 1 is put into operation by the operator. The deposit is made by the parameterization program.

In each of the emergency buttons 10, 1010, 10 '. 1010 ', 2010' is deposited, whether upon actuation of the first operating element 322 a transfer to the deactivated state for the respective emergency button 10, 1010, 10 '. 1010 ', 2010' is allowed or not. This results in a selective deactivation by the operation of the single first operating element 322 of the security system 1. So z. B. the emergency button 10, 10 ', 2010' be transferred in response to an actuation of the first control element 322 in the deactivated state, the emergency button 1010, 1010 ', however, not.

When the first operating element 322 is actuated, the control devices 100, 100 'receive a corresponding message via the second bus system 401 and forward the message to all emergency buttons 10, 1010, 1010', 2010 'of the respective first bus system 400, 400', which do not the control device 100, further. The emergency buttons 10, 1010, 10 '. 1010 ', 2010' of the security system 1 decide based on the deposit on the authorization for deactivation, whether the respective emergency button 10, 1010, 10 ', 1010', 2010 'transferred itself as a result of the operation of the first control element 322 in the deactivated state or Not.

When depositing whether deactivation of emergency buttons 10, 1010, 10 ', 1010', 2010 'is to be permitted, this may be a third variable. The third variable may be binary. The third variable is stored in the non-volatile memory of the respective first and second emergency button processing units 20, 21 of each emergency button 10, 1010, 10 ', 1010', 2010 '. If deactivation is permitted for the respective emergency button 10, 1010, 10 ', 1010', 2010 ', the third variable assumes a first value. If deactivation is prohibited for the respective emergency button 10, 1010, 10 ', 1010', 2010 ', the third variable assumes a second value. The emergency button 10, 1010, 10 ', 1010', 2010 'checks the value of the third variable before the emergency button 10, 1010, 10', 1010 ', 2010' deactivates and deactivates only if the third variable is the first value Has.

The deposit, whether the emergency button 10, 1010, 10 ', 1010', 2010 'should be deactivated, takes place at startup of the security system 1 by the operator. This is stored with the aid of a parameterization program.

In each of the emergency buttons 10, 1010, 10 '. 1010 ', 2010' is deposited, whether on actuation of the delay element 332 of the respective emergency button 10, 1010, 10 '. 1010 ', 2010' the release of the emergency button 10, 1010, 10 '. 1010 ', 2010' associated door locks 200, 200 ', 1200', 2200 'delayed by a second delay period or not. The second delay time is for the respective emergency buttons 10, 1010, 10 '. 1010 ', 2010' different lengths adjustable and in the security system 1, in particular in the emergency buttons 10, 1010, 10 ', 1010', 2010 ', deposited. Alternatively, the admission of the delay by the second delay time period and, if necessary, the length of the second delay time duration can only be used for groups of emergency buttons 10, 1010, 10 '. 1010 ', 2010', which are associated with a door lock 200, 200 ', 1200', 2200 'or a door 2, 2002, 3002, be individually adjustable. The setting and the deposit are made by the operator using the parameterization program.

So z. As the emergency button 10, 2010 'in response to an actuation of the delay element 332, the release of the door locks 200 and 2200' further delay, the emergency button 1010, 10 ', 1010', however, not. The length of the second delay time period for the emergency button 10 is different from the length of the second delay time period for the emergency button 2010 'selected. If the emergency button 10 is actuated and the delay element 332 is actuated within the first delay time period, which is stored for the emergency button 10, then the emergency button 10 delays from the actuation of the delay element 332 the release by that second delay time period, which is stored in the emergency button 10 , If the emergency button 2010 is' actuated and the delay element 332 is actuated within the first delay period, which is stored for the emergency button 2010 ', then the emergency button 2010' delayed from the actuation of the delay element 332 the release by the second delay time in the emergency button 2010 'and which differs from the second delay time for emergency button 10. When the emergency button 1010 is actuated, the emergency button 1010 delays the release by the first delay time period stored for the emergency button 1010. If the delay element 332 is actuated during the first delay time period of the emergency button 1010, then the unlocking is not delayed by a second delay time since this delay is not permitted for the emergency button 1010, but the emergency button 1010 immediately becomes unlocked after the first delay time 200 cause. The emergency buttons 10 ', 1010' delay the unlocking of the associated door lock 200 'or 1200' not at all. For emergency buttons 10 ', 1010', neither a first delay time nor a second delay time is allowed. Instead of a non-admission of a delay by the first and / or the second delay time period, a time duration of 0 s can also be stored. An actuation of the termination element 333 stops any delay of the unlocking.

When the delay element 332 is actuated, the control devices 100, 100 'receive a corresponding message via the second bus system 401 and forward the message each to the emergency button 10, 1010, 1010 ', 2010' of the respective first bus system 400, 400 ', which do not include the control device 100 on. The emergency buttons 10, 1010, 10 '. 1010 ', 2010' of the security system 1 decide on the basis of the deposit as to how to proceed.

The deposit as to whether the emergency button 10, 1010, 10 ', 1010', 2010 'allows for the delay by the second delay time period and, if so, the deposit of the length of the second delay time period, takes place at startup of the security system 1 Operator defined using the parameterization program. The first and / or the second delay time period can only be selected up to a maximum, permanently predetermined time duration.

Likewise, with the aid of the parameterization program, the operator can selectively store for which emergency button 10, 1010, 1010 ', 2010' which release condition is permitted. The cancellation condition for the on-site termination is always allowed. However, for each emergency button 10, 1010, 1010 ', 2010', reaching the cancellation condition selectively by lapse of the predetermined time interval or reaching the cancellation condition by lapse of the predetermined time interval and subsequent operation of the identification device 312 with the door 2 closed may be selectively allowed or not.

The deposit as to whether the emergency button 10 can be deactivated upon actuation of the first control element 322 determines whether the emergency button 10 should delay the release by a second delay period when the delay element 332 is actuated, the length of the first and second delay periods, the deposit of the cancellation condition, and / or the deposit, whether the door lock 200 is to be unlocked upon actuation of the central emergency button 302, can also for the security system 1 according to the embodiment of FIGS. 7 to 9 be made.

Notwithstanding and not shown by the FIGS. 7 to 10 For example, several central escape route controllers 300, 300 'can also be connected to the second bus system 401. For example, in a psychiatry, a central escape route control 300 may be provided for placement in a guardroom, and another central escape route control 300 'may be provided for placement in a nursing room.

In the respective door locks 200, 200 ', 1200', 2200 'can be deposited in each case with the help of the parameterization program, as a result of an operation of which the central Nottastern 302, 302' is to be unlocked. For this purpose, a list is stored in the door locks. In the respective emergency buttons 10, 10 ', 1010, 1010', 2010 'can each be deposited with the help of the parameterization program, as a result of an operation which of the first control elements 322, 322' a deactivation is allowed. Deviating from the third variable, a list is respectively stored in the emergency buttons 10, 10 ', 1010, 1010', 2010 '.

The first to fourth embodiments of the security system 1 according to the invention also have a second bus system 401 and a central escape route control 300, even if the second bus system 401 and the central escape route control are not shown. Here, the control device 100 and the central escape route controller 300 are each connected to the second bus system 401. The central escape route control can, as in the FIGS. 7 and 8th be formed represented. In addition, embodiments of the security system 1 according to the invention are conceivable in which the first to fourth exemplary embodiments additionally comprise the missing components 301, 510 at least partially. If the security system 1 is designed for a plurality of doors, each door can be assigned an audio and video module 510. The emergency buttons 1010, 2010, 3010, which do not include the control device 100, and the door locks 200, 1200, 2200, 3200 are not connected to the second bus system 401.

In the FIGS. 1 to 10 are the door locks 200, 200 ', 1200, 1200', 2200, 2200 ', 3200 part of the security system according to the invention 1. However, it is conceivable that only the door lock controls 201 are part of the security system 1 according to the invention. In this case, the door lock controls 201 are respectively connectable to the lock mechanism 205 and possibly to the door condition monitors 204, 206. Unlocking the door latch 200 in this case does not take place in the security system 1, but part of the security system 1 is that the door lock controller 201 controls the lock mechanism 205, ie, the door lock controller 201 turns on or off the electric power to the lock mechanism 205. In this case, instead of the terms "lock or unlock the door lock" each "activation of the locking mechanism for locking or unlocking" are used.

In the FIGS. 11 to 13 an emergency button 10 is shown. The in FIG. 11 Emergency button 10 shown is as emergency button 10, 10 ', 1010, 1010', 2010, 3010 in one of the security systems 1 of the invention FIGS. 1 to 10 can be used or used.

The emergency button 10 comprises the actuating element 11. The actuating element 11 can move from the starting position 11 FIG. 11 is moved to the operating position 11.II, which in FIG. 11 is indicated. In FIG. 12 the actuator 11 is also in the starting position 11.I.

In the operating position 11.II, the switch 63 is actuated. The switch 63 likewise changes from a first 63.I to a second position 63.II, as in FIG FIG. 12 indicated.

After actuation, the actuator 11 returns immediately and without manual intervention in the starting position 11.I back. For this purpose, a return means 12 designed as a spring is provided in the emergency button 10. Also, the switch 63 returns after the operation immediately and without manual intervention in the first position 63.I back.

The emergency button 10 comprises at least a first circuit board 60. This makes it possible to design the emergency button 10 in a compact and reliable manner.

The emergency button 10 has from a top 32 of a front surface 19 of the actuating element 11 in the installation direction a mounting height AH of less than 48 mm, preferably less than 45 mm, more preferably less than 43 mm.

The switch 63 is mounted on the first board 60. The first and second circuits are interrupted on the first board 60 by the operation of the switch 63.

The emergency button 10 also includes a second board 61. On the second board 61, the first, the second and the third emergency button processing unit 20, 21, 22 are arranged. The arrangement of the first, second and third emergency button processing units 20, 21, 22 is independent of whether the first, second and third emergency button processing units 20, 21, 22 serve as the processing unit 103, 104, 105 of the control apparatus 100.

The opening of the first and second electric circuit can be detected by the first and second emergency button processing units 20, 21, respectively. For this purpose, the first and second circuit boards 60, 61 are connected to one another via plugs 68.

The first and second boards 60, 61 are arranged at a fixed distance from each other. For this purpose, bolts 69 are provided, which fastened by means of screws 70, the first and the second board 60, 61 with each other at a fixed distance from each other (s. FIG. 13 ). The first and second boards 60, 61 are arranged parallel to each other.

The emergency button 10 includes a mounting plate 62. The mounting plate 62 is also disposed at a fixed distance from the first and second circuit boards 60, 61. For this purpose, bolts 71 are provided which connect the mounting plate 62 to the first circuit board 61 via screws 72.

The mounting plate 62 is used for attachment to a flush-mounted box. The flush-mounted box can have a diameter of 60 mm and a depth of 41 mm. The part of the emergency button 10 extending from the mounting plate 62 in the installation direction is referred to as the mounting part 73. The built-in part 73 has a diameter of less than 60 mm and a Depth of less than 33 mm, preferably less than 31 mm, more preferably less than 29 mm. This provides enough space for cables in the flush-mounted box. The distance MP from a lower side of the mounting plate 62 to an upper side of the second board 62 is less than 22 mm, preferably less than 20 mm, particularly preferably less than 17 mm. The mounting plate 62 can also be used for attachment to a cover element of a surface-mounted housing (not shown). The abovementioned distances apply in particular to an emergency button, in which the Bluetooth module 64, unlike the representation in the figures, is fastened on an underside of the second circuit board 61.

As described above, the canceling action performed immediately at the emergency button 10 is performed without rotational movement of the operating member 11 and the switch 63. This makes it possible to use a switch 63 with a small height. Thus, the switch 63 is formed such that the switch 63 is free of rotation. The switch 63 has a height SH of less than 20 mm, preferably less than 17 mm, particularly preferably less than 15 mm.

The manner of canceling action and the small height of the switch 63 contributes to the low construction height AH of the emergency button 10.

Also contributes to the low height AH of emergency button 10 in that the switch 63 is arranged centrally under the actuator 11 and the actuator 11 is guided eccentrically in the emergency button 10.

As in the FIGS. 14 and 15 illustrated, the actuating element 11 has rod-shaped guide means 35. The guide means 35 are guided in guide sleeves 65. The guide sleeves 65 are connected to the mounting plate 62. To achieve good guidance, one of the guide sleeves 65 extends through the first board 60.

The guide means 35 are arranged parallel to the switch 63. The guide means 35 prevent a rotational movement of the actuating element 11 about an imaginary axis 701, which extends in the actuating direction 700.

By guided in the guide sleeves 65 guide means 35, the actuating element 11 is only translationally movable.

The actuating element 11 has an actuating means 36. As in the Figures 12 and 15 illustrated, the actuating means 36 is in the form of a circular cylinder. This ensures that always the actuating means 36 actuates the switch 63. In particular, a first and a second switching element 74, 75 of the switch are always actuated simultaneously (s. FIG. 13 ). By the first switching element 74 of the first circuit and the second switching element 75, the second circuit is opened.

The actuating means 36 is formed with a hollow interior 38. In the switch 63, a light source (not shown) is arranged. The light emitted by the light source is directed through the hollow interior 38 to the top 32 of the front surface 19 of the actuator 11 where the light passes through the actuator 11. The dome 32 thus serves as Illuminierbereich 32 of the actuating element eleventh

The actuating element 11 may comprise an opaque base body 33. The main body 33 may be provided with an opening deviating from the illustration in the figures. In the opening, an unillustrated translucent, in particular translucent insert can be arranged. The insert can be fixed in the opening, in particular pressed. As a result, the actuating element 11 can be produced particularly easily.

The front surface 19 is partially conical. The Illuminierbereich 32 forms the top of the truncated cone. The Illuminierbereich 32 projects against the actuating direction 700 from a cover 14 of the emergency button 10 out. As a result, the light leaving the illuminating area 32 is clearly visible laterally from the emergency button 10.

The return means 12 has a cavity 37. In the cavity 37, the actuating means 36 of the actuating element 11 and the switch 36 protrude with the first and the second switching element 74, 75. This results in a space-saving arrangement.

The Bluetooth module 64 is disposed between the first and second boards 60, 61. The Bluetooth module 64 is used for parameterization. Alternatively and not shown and space-saving, the Bluetooth module 64 is attached to a side facing away from the actuating element 11 of the second board 61. As a result, the distance of the first and the second circuit board 60, 61 can be further reduced.

A sabotage switch 66 is disposed on the first board 60. Due to the low construction height, an actuating extension 67 of the sabotage switch 66 is passed through the mounting plate 62. The actuating extension 67 rests directly against the cover 14 of the emergency button 10.

If the control device 100 is integrated in the emergency button 10, the emergency button 10 can, despite the low construction height AH, comprise the functions described above and thus be designed intelligently. The above-described functions are executed by means of a program code stored in at least one of the processing units 103, 104, 105.

The emergency button 10 has a covering means 13. The cover 13 is transparent and covers the front surface 19 of the actuator 11 from. hereby prevents the cover 13, the direct contact of the actuator 11 by a user. The cover 13 serves as a mental obstacle for the user.

The cover 13 remains nondestructive in an operation of the emergency button 10. The cover 13 moves at an operation of the emergency button 10 from a starting position 13.I in an operating position 13.II. By the cover 13, the actuator 11 is actuated only indirectly via the cover 13 by the user.

The covering means 13 is arranged undetachably in the emergency button 10. This ensures that a user can not abusive remove the cover 13.

The covering means 13 is firmly connected to the actuating element 11. For this purpose, the covering means 13 extensions 27, which in FIG. 13 are shown. As in the Figures 13 . 14 and 15 illustrated, the actuating element 11 has holes 28 through which the extensions 27 are guided and materially connected to the actuating element 11.

The actuating element 11 has a flange-like section 31, on which the covering means 13 is fastened. The flange-like portion 31 has the holes 28.

The flange-like portion 31 serves as a stop of the actuating element 11 in the actuating direction 700. The actuating element 11 reaches the actuating position 11.II, when the flange-like portion 31 abuts against the mounting plate 62 or on the guide sleeves 65.

The flange-like portion 31 serves as a stop of the actuating element 11 against the actuating direction 700. The actuating element 11 reaches the starting position 11.I, when the flange-like portion 31 rests against a light guide 40. The light guide 40 holds the actuator 11 against the force of the return means 12. For this purpose, the light guide 40 has a contact surface 51.

The light guide 40 is fixed to the mounting plate 62. As a result, the actuator 11 is held against the force of the return means 12 even when the lid 14 is removed. The light guide 40 has a flange 52, with which the light guide 40 is fixed to the mounting plate 62 (s. Fig. 17 ). The light guide 40 is fixed to the mounting plate 62 by the same screws 72, by which the mounting plate 62 is fixed to the first board 60.

Alternatively and not shown, the covering means 13 may be formed as an elastic film which spans the actuating element 11.

Due to the fixed connection, the distance between the actuation position 11.II and the starting position 11.I and the distance between the actuation position 13.II and the starting position 13.I correspond to each other. Immediately after the end of the operation and without manual Action, the cover 13 is moved back to the starting position 13.I. The return means 12 transfers the covering means 13 indirectly via the actuating element 11 into the starting position 13.I.

The covering means 13 and the actuating element 11 each have a circular cross-section. The lid 14 has a circular recess 15. The covering means 13 protrudes counter to the actuating direction 700 through the recess 15. Likewise, the actuating element 11 protrudes through the recess 15th

The recess 15, the actuating element 11 and the covering means 13 have a common imaginary axis 701. The recess 15, the actuator 11 and the cover 13 are arranged concentrically.

The covering means 13 has an actuating surface 17, which is spaced from the front surface 19 of the actuating element 11. Also, the covering means 13 has a side surface 16 which is formed spaced from the side surface 18 of the actuating element 11.

By the spacing of the front surface 19 and the actuating surface 17, the transparent cover 13 can protrude far from the lid 14, while the partially opaque actuator 11 protrudes from the lid 14 only to a small extent. As a result, the light guide 40, which terminates substantially flush with the lid 14, even for obliquely standing in front of the emergency button 10 user remains clearly visible. The light guide deviates a maximum of ± 3 mm, preferably a maximum of ± 2 mm, more preferably ± 1 mm from a plan conclusion with the lid 14 from.

Characterized in that the cover 13 projects far out of the lid 14, the emergency button 10 is operable for the user with the flat hand. For this purpose, the cover 13 in the operating position 13.II plan with the cover 14 or the cover 13 is in the operating position 13.II against the operating direction 700 of the cover 14 out. In other words, the distance ABS corresponds to the starting position 13.1 and the operating position 13.II at most the distance DF of a projection 30 of the actuating surface 17 to the cover 14. Similarly, the amount of the distance AB of the operating position 11.II and the starting position 11.I corresponds at most to Distance DF. In FIG. 11 The distance ABS and the amount of the distance AB correspond to the distance DF.

The emergency button 10 comprises lighting means 41. The lighting means 41 serve to indicate the unlocked and locked state of the door lock 200. For multiple emergency buttons 10, 1010, 2010, 3010, the bulbs 41 indicate the unlocked and locked state of the associated door latch or door locks 200, 1200, 2200, 3200. The lighting means 41 are arranged concentrically around the actuating element 11.

For example, the unlocked state is indicated by the green light and the locked state by the red light. In particular, all bulbs 41 emit the same light to indicate the locked and unlocked states, at least if there is no danger.

The lighting means 41 can be controlled in at least two groups. Due to the different control z. Example, possible by the user more states of the security system 1 are displayed. Due to the additional display options, the user and / or the operator in a compact and simple way without additional display means a variety of states can be displayed. As a result, the security of the security system 1 is increased.

In FIG. 13 are shown by the exemplary existing eight individual light sources 41 six individual light sources, of which three bulbs are provided with the reference numerals 41 a, 41 b, 41 c. The individual lamps are referred to below as 41 a, 41 b, 41 c, etc.

Each of the individually controllable groups of lighting means 41 may comprise only a single lighting means 41 a, 41 b, 41 c, and so on. In the embodiment of FIGS. 11 to 17 each lamp 41 a, 41 b, 41 c, etc. individually controllable. Each lamp 41 a, 41 b, 41 c, etc. is each formed as an RGB LED. The lighting means 41 a, 41 b, 41 c, etc. are so controlled that each lamp 41 a, 41 b, 41 c, etc. can emit at least four different, preferably at least five different colors. This may be z. B. to red, blue, yellow, green and pink light act.

The lighting means 41 are driven by the third emergency button processing unit 22. For this purpose, the emergency button processing unit 22 and the lighting means 41 are connected to a ring bus (not shown).

The lighting means 41 are arranged on the first circuit board 60. Likewise, the acoustic alarm transmitter 23 is arranged on the first circuit board 60. The acoustic alarm generator 23 is controlled by the third emergency button processing unit 22.

Are several door locks 200, 1200 associated with the emergency button 10, such. In FIG. 4 represented, at least two options are conceivable. First, the emergency button 10 can not indicate the unlocked state until all the emergency button 10 associated door locks 200, 1200 are in the unlocked state. Here, the unlocked state is displayed only when the entire escape door width of the two leaves 3, 4 is available for escape. Alternatively, the emergency button 10 indicates the unlocked state already when one of the door locks 200, 1200 or all door locks of a door leaf 3, 4 are in the unlocked state. This will be the Escape possibility indicated as early as possible when one of the door leaves 3, 4 is unlocked. The options can be selected by the operator. For this purpose, z. B. a switch (not shown) may be provided in the security system 1.

Another state of the security system 1, which is indicated by the controllable in groups bulbs 41, is the danger. In this case, the lighting means 41 can indicate whether a fire alarm signal is present or whether an actuation signal has been generated.

The lighting means 41 can be controlled in such a way that the progression of the time delay of the unlocking is indicated by the lighting means 41 after the generation of the actuating signal. This emit z. B. increasingly less bulbs 41 light a color, especially red light.

As a further state of the security system 1, which can be represented by the lighting means 41, an error can be represented by the lighting means 41. The thus representable error may be an error of the security system 1. For example, it may be indicated that the control device 100, the door lock control 200 or the first or the second emergency button processing unit 20, 21 of the security system 1 has been inoperable, defective, failed, deliberately switched off or removed. The fault may be an error of the alarm system connected to the safety system 1 which is not ready, defective, failed, deliberately switched off or removed.

The optical fiber 40 includes a plurality of optical fiber portions 44 (see FIGS FIGS. 16 and 17 ). Each of the lighting means 41 a, 41 b, 41 c, etc. is assigned in each case an optical fiber region 44. The light guide 40 can be thoughtfully divided into the light guide regions 44. Recesses 46 are provided between the light guide regions 44. Through the recesses 46, the light essentially remains in the light guide regions 44.

Each optical waveguide region 44 has a forwarding section 48. The forwarding section 48 is arranged in the transmission direction 702 above the lighting means 41. The transmission direction 702 takes place counter to the actuation direction 700. The forwarding section 48 serves for light conduction up to an expanding section 45 of the light guide region 44. The expanding section 45 spreads in the transmission direction 702.

The expanding section 45 adjoins the forwarding section 48 in the transmission direction 702. The expanding portion 45 serves to broaden the light beam of the emitted light. The relaying section 48 widens less than the spreading section 45.

The light guide 40 is integrally formed. The light guide 40 is of the same material, in particular monolithic, formed. The light guide 40 is formed of translucent material.

The light guide regions 44 have a connection section 49. The connecting section 49 adjoins the expanding section 45 in the transmission direction 702. The connecting sections 49 of the optical waveguide regions 44 are integrally connected to one another in such a way that the one-piece and material-uniform optical waveguide 40 results.

The connecting portions may have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the light of one of the lighting means 41a, 41b, 41c, etc. is almost limited to a luminous area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h on the user-facing surface 47 of the light guide 40. In this case, each optical waveguide region 44 comprises a luminous region 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h.

The surface 47 of the light guide 40 corresponds to a circular ring. The luminous areas 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are configured as sectors of the circular ring. By emitting the light of a luminous means 41 a, 41 b, 41 c, etc., the associated luminous area 50 a, 50 b, 50 c, 50 d, 50 e, 50 f, 50 g, 50 h is illuminated. The circular ring encloses the actuating element 11.

The lighting means 41 can be controlled in such a way that at least one lighting means 41a, 41b, 41c, etc., the light of one color and at least one further lighting means 41a, 41b, 41c, etc. simultaneously emits the light of a different color. For example, in this way the luminous regions 50a, 50b, 50e, 50f can indicate light of one color and the luminous regions 50c, 50d, 50g and 50h indicate light of a further color. While the luminous areas 50a, 50b, 50e, 50f z. B. are continuously lit, the luminous areas 50c, 50d, 50g and 50h of bulbs 41 that emit flashing light, be illuminated.

Are z. For example, first the luminous areas 50a, 50b, 50e, 50f are illuminated by the light of a first color and the luminous areas 50c, 50d, 50g and 50h are illuminated by the light of a second color; then illuminating the luminous regions 50a, 50h, 50d, 50e from the light of the first color and the luminous regions 50b, 50c, 50f and 50g from the light of the second color; Subsequently, the luminous areas 50h, 50g, 50d, 50c illuminated by the light of the first color and the luminous areas 50a, 50b, 50e and 50f from the light of the second color, the impression of a circumferential color window arises.

The opposing luminous regions 50, ie the luminous regions 50, which lie on a straight line passing through the imaginary axis 701, in FIG FIG. 14 namely 50a and 50e or 50b and 50f and 50c and 50g and 50d and 50h are preferably illuminated in the same way ie in the same color and the same blinking frequency. Thus, the pattern is also for diagonally before the emergency button 10 standing user to imagine, even if obscured by the actuator 11, at least one of the opposing light emitting areas 50.

So that the light guide 40 is as little as possible obscured, the illumination area 32 protrudes at most 10 mm, preferably at most 7 mm, particularly preferably at most 5 mm above the light guide 40.

The emergency button 10 may include a brightness sensor (not shown). The brightness sensor measures the ambient brightness of the emergency button 10. If the ambient brightness decreases, the light intensity of the light emitted by the lighting means 41 is also reduced.

Via the Bluetooth module 64 parameters can be set via a mobile communication device, for. B. in which way the bulbs are to be controlled in which state of the security system 1. The parameters include the flashing frequencies of the lighting means 41, whether a continuous or a flashing light is to be emitted, which state is to be displayed by which color. The settings are stored after the parameterization in an electronic memory of the security system 1, in particular the control device 100. Also, the display of certain states for security reasons can not be selected for the operator and constantly stored in the electronic memory. The operator may himself select conditions of the security system 1 that the operator wishes to display through the bulbs 41. For this purpose, colors and / or patterns can be emitted by the lighting means 41, which are not assigned to a predetermined state. For example, the operator may choose which condition the operator would like to see through blue light. In addition to the parameterization via the Bluetooth module 64, the parameterization via the monitoring device 301 is possible.

The change in the state of the door lock 200 is then displayed after the door lock controller 201 has communicated the state change to the control device 100. The control device 100 then controls the lighting means 41 or causes a control of the lighting means 41.

When the safety system 1 is put into operation, a plurality of initialization views are generated in succession at fixed time intervals by the lighting means 41. In one of the initialization views, possible enabled functions of the control device 100 are displayed. In a second initialization view, the in the safety system 1 lockable emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 are displayed indicating the status of error free / faulty / nonexistent. A third initialization view displays the status of inputs and outputs.

The central emergency button 302 is constructed almost identical to the emergency button 10. In particular, the actuating element 11 corresponds in function and structure to the emergency button actuating element 306. The switch 63 corresponds to the emergency button switch 307. The central emergency button 302 likewise comprises a return means corresponding to the return means 12. The central emergency button 302 comprises a first and a second board and / or a mounting plate, which are constructed according to the first board 60, the second board 61 and the mounting plate 62 and interconnected. On the first board of the central emergency button 302, the alarm device 309 and the lighting means 313 are arranged corresponding to the alarm transmitter 23 and the lighting means 41. On the second board of the central emergency button 302, the first to third emergency processing units 303, 304, 305 are arranged. The emergency button switch 307 terminates on the first board of the central emergency button 302. Upon actuation of the emergency button switch 307, a first and a second circuit are opened on the first board, which is wirelessly detectable by the first and the second emergency processing unit 303, 304. For this purpose, the first and the second board are connected via connectors. The light guide of the central emergency button 302 corresponds in structure and function to the light guide 40. The light source 313 can be controlled in accordance with the light source 41.

It is conceivable that in the case of the central emergency button 302, a covering means 13 corresponding to the covering means 13 is configured differently or is missing. The lighting means 313 are not used in particular for the optical representation of a locking state of a emergency button 10. The lighting means 313 are used for optical representation of the first and the second delay time period and / or for optical representation that a Aufhebehandlung is possible.

The safety system 1 according to the invention does not necessarily have to have all the functions described in the description of at least one of the FIGS. 1 to 10 is mentioned, can perform. Rather, although in the security system 1, the functions that in the description of at least one of FIGS. 1 to 10 are mentioned, deposited. However, to be able to perform the functions, the functions must be enabled. This is done by the control device 100 communicating with a communication module 801. The communication module 801 is implemented as a smart card. The communication module 801 comprises a memory in which at least one code for activating at least one function is stored. The communication module 801 includes a microprocessor that only used to encrypt the code. The communication module 801 is inserted into a receptacle 77 of the control device 100 (s. Fig. 18a ). By virtue of the arrangement in the receptacle 77, the communication module 801 is held mechanically and / or non-positively mechanically in the receptacle 77. At the same time, the communication module 801 is electrically contacted by the arrangement in the receptacle 77, so that the control device 100 can read the at least one code from the communication module 801. The control device 100 and the communication module 801 are in this case wired (not shown).

To read the code, the control device 100 first has to obtain access to the communication module 801 with the aid of a password. The controller 100 must decrypt the at least one code before the function can be enabled. By activating the function, the program code, with the aid of which the function is executable, is released.

To unlock the function, the program code, with the aid of which the function is executable, is released. If the program code is stored on the emergency button 10 and the control device 100 and the emergency button 10 are connected to each other by the first bus system 400, then the control device 100 initiates a release in the emergency button 10 via the first bus system 400 after reading the code of the communication module 801 the program code stored in the door lock control 201, the control device 100 causes after the reading of the code of the communication module 801 an activation in the door lock control 201 via the first bus system 801th

A code can unlock one function or several functions, in particular function blocks.

The parameterization program can only set parameters for the functions that were previously enabled. Only these parameters are displayed on the screen.

The function remains unlocked only when the code is read again from the communication module 801 repeatedly, in particular at regular time intervals. For this purpose, predetermined, non-adjustable time intervals can be stored in the control device 100. After expiration of the predetermined time interval, the control device 100 blocks the function if the associated code could not be read out of the communication module 801. When the function is performed by the emergency button 10 connected to the control device 100 via the first bus system 400, the control device 100 causes the first bus system 400 a blocking of the function. When the function is performed by the door lock controller 201 connected to the controller 100 via the first bus system 400, the controller 100 causes the function to be disabled via the first bus system 400.

On the communication module 801 several codes Code1, Code2 can be stored for different functions (s. Fig. 18a ).

If an additional function is to be released, it is conceivable to remove the communication module 801 from the receptacle 77 and to insert another communication module 802 into the receptacle 77 (see FIG. Fig. 18b ). The communication module 801 is referred to below as the mother module 801. The further communication module 802 is referred to below as an auxiliary module. The auxiliary module 802 is designed as a chip card. The auxiliary module 802 comprises a memory in which at least one code for activating the additional function is stored. The auxiliary module 802 includes a microprocessor that serves only to encrypt the code.

The code Code3, which is stored on the auxiliary module 802, is read out by the control device 100 (see FIG. Fig. 18b ). To read the code Code3, the control device 100 first has to obtain access to the auxiliary module 802 by means of a password. The controller 100 must decrypt the at least one code before the function can be enabled. The code Code3 of the auxiliary module 802 is stored in a memory 107 of the control device 100 (see FIG. Fig. 18c ). Thereafter, the code of the auxiliary module 802 is deleted on the auxiliary module 802 (s. Fig. 18c ). The auxiliary module 802 is removed from the receptacle 77. Thereafter, the mother module 801 is inserted into the receptacle 77 (s. Fig. 18d ). The code of the auxiliary module 802 is stored on the mother module 801 (see FIG. Fig. 18d ). The code is deleted from the memory of the controller 100 (see FIG. Fig. 18d ). The additional function will be unlocked.

On the other hand, in a mother module 801, the code is not stored in the control device 100 (see FIG. Fig. 18a, d ). In a mother module 801, the code is not deleted. Rather, the mother module 801 serves for permanent placement in the receptacle 77. The codes Code1, Code2, Code3 stored on the mother module 801 are read out repetitively. The control device 100 decides on the basis of an identifier K801, K802 of the communication module 801, 802, whether it is a mother module 801 or an auxiliary module 802. The identifier K801, K802 is electronically stored in particular on the mother module 801 and the auxiliary module 802. The identifier K801 of the mother module 801 differs from the identifier K802 of the auxiliary module 802.

The insertion and removal from the receptacle 77 takes place manually. The remaining processes are automatic.

The insertion and removal from the receptacle 77 may be reserved to an operator. For this purpose, the receptacle 77 is arranged inaccessible to an unauthorized user. In particular, the sabotage switch 66 is actuated in an unauthorized attempt to get to the recording. The recording can between the first board 60 and the second board 61, z. B. on an underside of the first board 60 may be arranged.

In order for the security system 1 to function, a mother module 801 must be arranged in a receptacle 77 of the security system 1. So that the security system 1 remains functional for longer than the predetermined time interval, the mother module 801 must remain in the receptacle 77.

Each emergency button 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 comprises a receptacle 77. Exactly one parent module 801 is necessary and provided for each first bus system 400, 400' of the security system 1. Only when the mother module 801 is inserted into the receptacle of a emergency button 10, 10 ', 1010, 1010', 2010, 2010 ', 3010, the emergency button 10, 10', 1010, 1010 ', 2010, 2010', 3010 simultaneously serves as control device 100 for the corresponding first bus system 400, 400 '. The other emergency buttons 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 of the security system 1, in whose reception there is no mother module 801, although the same program codes as in the control device 100 are deposited. Without mother module 801, however, the program codes are not enabled, so that the remaining emergency buttons 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 can not serve as a control device 100. Characterized in that the mother module 801 is in the receptacle 77, the emergency button 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 serves as a control device 100th

If the control device 100 is to be formed separately from the emergency buttons 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 and the door locks 200, 200', 1200, 1200 ', 2200, 2200', 3200, then a mother module is formed 801 inserted into a receptacle 77 of the processing electronics 101. By having the mother module 801 in the receptacle 77, the processing electronics 101 are able to perform the functions of the control device 100.

If the security system 1 comprises a plurality of subsystems 5, 6 and thus a plurality of first bus systems 400, 400 ', the security system 1 comprises exactly the same number of parent modules 801, 801' as there are subsystems 5, 6 (see FIG. FIG. 10 ). The emergency button 10 ', which communicates with the mother module 801', and the processing electronics 101 of Control device 100 from FIG. 10 that communicates with the mother module 801 are also provided to be connected to the second bus system 401.

The mother module 801, 801 'can contain different codes for each subsystem 5, 6 and thus enable different functions. So z. For example, the parent module 801 'of the second subsystem 6 may include a code for selectively associating the door locks 200', 1200 ', 2200' with the emergency buttons 10 ', 1010', 2010 '. On the other hand, the code for selective assignment of door locks to emergency buttons on the mother module 801 for the subsystem 5 is not necessary.

The communication module 801, 801 ', 802 may have a gap 803, through which a particular self-adhesive tape is guided. The self-adhesive tape is used for manually removing the communication module 801, 801 802 from the receptacle 77. The self-adhesive tape comprises information about the functions that can be unlocked by the codes stored on the respective communication module 801, 801 802. The information may be a color code, a QR code and / or a bar code.

Alternatively, the communication module 801, 801 ', 802 may be formed as a smart card with a flexible portion. Part of the exception 77 outstanding part of the chip card can with the information, i. H. the color code, the QR code and / or the bar code be provided.

Once inserted in a security system 1 mother module 801 can be used again in a receptacle 77 of another security system 1 according to the invention.

Claims (16)

Security system (1), in particular for escape route security, with at least one triggering element (10), in particular an emergency button (10),
wherein the trigger element (10) can be converted into a deactivated state, wherein in the deactivated state as a result of actuation of the trigger element (10), a control of a locking mechanism (205) for unlocking is omitted, and the trigger element (10) can be converted into an activated state in which, in the activated state, as a result of an actuation of the triggering element (10), an activation of the locking mechanism (205) takes place for unlocking, characterized
in that the security system (1) comprises a central escape route control (300) and the triggering element (10) can be converted into the activated state and / or into the deactivated state by the central escape route controller (300). Safety system (1) according to claim 1, characterized in that the central escape route control (300) comprises a first operating element (322), in particular a key switch, wherein the trigger element (10) by an actuation of the operating element (322) in the deactivated state can be transferred is, provided that the trigger element (10) is in the activated state, and / or the trigger element (10) by an operation of a second operating element (323), in particular a button, in the activated state can be transferred, provided that the trigger element (10 ) is in the deactivated state. Security system (1) according to claim 1 or 2, characterized in that the central escape route control (300) comprises a central emergency button (302) and the first and / or second operating element (322, 323) via the central emergency button (302) with the trigger element (10) are electrically connected. Safety system (1) according to one of the preceding claims, characterized in that the central escape route control (300) is designed such that upon actuation of the first operating element (322) a first deactivation circuit and a deactivation second circuit are opened or closed, wherein a signal of the first deactivating circuit from a first digital emergency processing unit (303) of the central emergency button (302) and a signal of the second deactivating circuit from a second digital emergency processing unit (304) of the central emergency button (302) are detectable wherein in particular at least one message in which the first and / or the second emergency processing unit (302, 303) inform about the presence of the first and second deactivation signal, from the central emergency button (302) to the trigger element (10) is sendable. Security system (1) according to one of the preceding claims, characterized in that the central escape route control (300), in particular the central emergency button (302) and / or the first control element (322) and / or the second control element (323), and / or a connection (400, 401) of the central escape route control (300) with the trigger element (10) in the deactivated state of the trigger element (10) is monitored for errors and in the event of an error, the trigger element (10) is transferred to the activated state, wherein in particular Life sign signal of the first emergency processing unit (303) and the second emergency processing unit (304) is repeatedly sent via the connection (400, 401) to the trigger element (10) and if at least the sign of life signal from the first emergency button processing unit (303) or the second emergency button processing unit (304 ) the triggering element (10) converts itself into the activated state. Security system (1) according to any one of the preceding claims, characterized in that the activated state and / or the deactivated state of the trigger element (10) in the trigger element (10) is stored in particular electronically, wherein in particular the trigger element (10) with knowledge of a Fire alarm signal and / or a fault of the connection (400, 401) with the central escape route control (300) itself transferred to the activated state. Security system (1) according to one of the preceding claims, characterized in that the security system (1) comprises a door lock control (201), wherein the door lock control (201) activates the locking mechanism (205) for unlocking, wherein in the deactivated state of the trigger element (10 ) is omitted, that the trigger element (10) in response to an actuation of the trigger element (10) causes the door lock control (201) to control the locking mechanism for unlocking, wherein in particular the door lock control (201) and the trigger element (10) via a first bus system (400 ) are interconnected. Safety system (1) according to one of the preceding claims, characterized in that in the safety system (1), in particular in the Trigger element (10), is electronically deposited, whether a deactivation of the trigger element (10) is allowed, and only if the deactivation is allowed by the central escape route control (300), in particular as a result of the operation of the first operating element (322), the trigger element (10) can be converted into the deactivated state. Security system (1) according to one of the preceding claims, characterized in that the security system (1) comprises a plurality of triggering elements (10, 10 ', 1010, 1010', 2010, 2010 ', 3010), being selectively selectable in the security system (1) is, which of the triggering elements (10, 10 ', 1010, 1010', 2010, 2010 ', 3010) in the activated state and / or in the deactivated state (10.II) can be converted. Safety system (1) according to one of the preceding claims, characterized in that in the safety system (1), in particular in the triggering elements (10, 10 ', 1010, 1010', 2010, 2010 ', 3010), individually for at least one individual triggering element (10, 10 ', 1010, 1010', 2010, 2010 ', 3010) or for at least one group of triggering elements (10, 10', 1010, 1010 ', 2010, 2010', 3010) is electronically stored, whether a deactivation by the central escape route control (300), in particular by an actuation of the first operating element (322), for the respective triggering element (10, 10 ', 1010, 1010', 2010, 2010 ', 3010) or for the respective group of triggering elements (10 , 10 ', 1010, 1010', 2010, 2010 ', 3010). Security system (1) according to claim 8 or 10, characterized in that the deposit by means of a communication device, for. As a personal computer or a portable computer, executable parameterization program. Security system (1) according to one of the preceding claims, characterized in that the security system (1) comprises a plurality of central escape route controllers (300) and in the security system (1), in particular in the trigger element (10), stored electronically, by which central escape route control (300) the deactivation is allowed. Safety system (1) according to one of the preceding claims, characterized in that the safety system (1) is designed to actuate the triggering element (10) in the deactivated state (10.II) of the triggering element (10) at a central station (300, 301, 350), in particular at the central escape route control (300), a watch device (301) and / or a multi-door display device (350). Security system (1) according to one of the preceding claims, characterized in that the security system (1) comprises a video and / or audio module (510) for monitoring the environment of the triggering element (10), wherein a transfer to the deactivated state only takes place, if the video and / or audio module (510) assigned to the triggering element (10) can be unlocked, in particular unlocked, is. Use of a security system (1) according to any one of claims 1 to 14 in a building in which people are living with an impaired state of mind, in particular a psychiatric ward, a dementia ward or the like. Method for transferring a triggering element (10), in particular an emergency button (10), from an activated state in a deactivated state,
wherein in the deactivated state, as a result of an actuation of the trigger element (10) an activation of a locking mechanism (205) of a door lock (200) for unlocking is omitted, whereas in the activated state as a result of actuation of the trigger element (10) driving the locking mechanism (205 ) takes place for unlocking,
wherein by actuation at a central escape route control (300), in particular by an operation on a first operating element (322) of the central escape route control, (300) the triggering element (10) is transferred to the activated state.

Images