EP3267455A1 - Safety system - Google Patents

Abstract

The invention relates to a safety system (1) for unlocking at least one door lock (200), in particular for escape route protection, with at least one triggering element (10), in particular an emergency button (10), wherein the triggering element (10) comprises a manually operable actuating element (11), wherein the actuating element (11) for unlocking at least one locking mechanism (205) of a door lock (200) operable is with a central escape route control (300), the central escape route controller (300) comprising a central emergency button (302), the central emergency button (302) comprising an emergency button actuator (306), the emergency button actuator (306) being operable to unlatch the at least one latch mechanism (205). According to the invention, the central emergency button (302) comprises a first digital emergency processing unit (303) and a second digital emergency processing unit (304).

Description

The invention relates to a security system for unlocking at least one door lock, in particular for escape route security, wherein the security system comprises a triggering element, in particular an emergency button. The triggering element comprises a manually operable actuating element, wherein the actuating element for unlocking at least one locking mechanism of a door lock is actuated. The security system includes a central escape route control. The central escape route control includes a central emergency button. The central emergency button comprises an emergency button actuating element, wherein the emergency button actuating element for releasing the at least one locking mechanism can be actuated.

Security systems for escape route security are known. The safety systems include at least one emergency button and a door lock. A central emergency button can be provided in the security system with which multiple door locks can be unlocked. The central emergency buttons used in practice are not one-fault-safe.

It is the object of the invention to provide a security system in which a central emergency button is one-fault-safe.

This object is achieved by a security system according to independent claim 1. Advantageous developments of the safety system are given in the dependent device claims, the description and in the figures. The features mentioned in the description and in the claims may each be essential to the invention individually or in combination

The previously derived and indicated object is achieved on the basis of the security system described above in that the central emergency button comprises a first digital emergency processing unit and a second digital emergency processing unit. The first and second emergency processing units may each include a processor. The first and / or the second emergency processing unit may each be designed as a microprocessor or microcontroller. The first and second emergency processing units may each comprise a nonvolatile memory. An emergency button electronic unit of the central emergency button may include the first and second emergency processing units. By providing first and second emergency processing units, the second emergency processing unit may operate redundantly with the first emergency processing unit to achieve one-shot security.

Additionally, the emergency button electronics unit may include a third digital emergency button processing unit. The third emergency processing unit may include a processor. The third emergency processing unit may be designed as a microprocessor or microcontroller. The third emergency processing unit may comprise a non-volatile memory and / or have access to a non-volatile memory.

As a lock, the transfer of the door lock is understood in the locked state. As unlocking the transfer of the Türverrieglung is understood in the unlocked state.

The security system may include the locking mechanism.

The locking mechanism may, for. B. electromechanical or purely electromagnetic. The locking mechanism includes z. B. at least one coil. A control of the locking mechanism for locking or unlocking can be realized in particular in a switching off or on an electrical power supply. The electrical power supply can be used to supply the coil with electric current.

An electromagnetic locking mechanism is exemplary in the DE100 50 111 C1 described. In the unlocked state z. B. no magnetic forces on the door. In the locked state z. B. magnetic forces on a door.

An electromechanical locking mechanism has a mechanical connection to the door in the locked state. In the unlocked state, the mechanical connection can be canceled or canceled.

Thus, the electromechanical locking mechanism z. B. a locking element, d. H. a latch or a door latch, which is in the unlocked state of the door latch in a retracted position. In the retracted position, the locking element is disengaged from the door. In the locked state, the locking element is engaged with the door. In a further alternative of an electromechanical locking mechanism, the locking mechanism is constructed in the manner of a door opener. Ie. the locking mechanism comprises a latch element. In the locked state of the door lock is a door latch of the door engaged with the locking mechanism. In the unlocked state, the latch element releases the door latch so that the door latch, in particular by pressure on the door, can disengage from the locking mechanism.

Switching off the electrical power supply preferably leads to an unlocked state of the door lock. Thus, the control of the locking mechanism realized for unlocking the door lock by switching off the electrical power supply. Preferably, switching on the electrical power supply leads to a locked state of the door lock. Thus, the driving of the locking mechanism for locking is realized by turning on the electric power supply.

The security system may alternatively be configured without the locking mechanism. In this case, the security system merely actuates the locking mechanism. For example, the security system turns on or off the electrical power to the locking mechanism, or causes the electrical power to be turned on or off.

A "locking or unlocking control" is also present when the security system receives feedback about the state of the locking mechanism. A "lock or unlock control" is also present when, as detected by the feedback, the lock mechanism does not conform to the desired condition and therefore an alarm is issued and / or a retry attempt is made to reach the desired condition ,

The security system may include a door lock control. If a door lock control is provided, the door lock control preferably controls the lock mechanism. For this purpose, the door lock control can switch the electrical power supply for the locking mechanism on and off.

The security system may include the door lock control but not the lock mechanism. The Türverrieglungssteuerung is formed in this case as a door lock adapter. The door locking adapter serves to use the security system according to the invention already mounted locking mechanisms.

The door lock comprises the locking mechanism and, if present, the door lock control. Particularly preferably, the security system comprises the door lock.

The door lock or the locking mechanism may be integrated in a mechanical lock.

In the following, a distinction is made between a user and an operator. A user can be any person using the security system. A user can, for. B. be a guest who wants to escape through the door secured by the security system. An operator serves to operate the security system. The operator has access to a security system of the security system and / or may be opposite to the security device Authenticate security system, in particular to operate the security system. The watch device may be configured as a PC or a monitor. By the operator z. B. the cancellation condition can be achieved. In the following, the actuation signal is understood to be the signal which is generated by the user by the actuation of the actuation element in order to unlock the door lock and to clear the escape route.

The security system is used in particular for escape route security. The security system thus serves to release the escape route. Ie. the actuation of the actuator leads to an unlocking without an authentication of the user. The unlocking can be immediate or delayed.

The triggering element is preferably designed as a emergency button. In this case, the actuating element corresponds to the actuating element of the emergency button. Alternatively, the triggering element may be formed as a panic bar assembly. The actuator is formed in this case as a panic bar. The triggering element can be designed as a fitting assembly. In this case, the actuator z. B. formed as a door handle.

Preferably, the door lock control and the trigger element are connected to a first bus system. A connection to a bus system is understood below to mean an immediate connection, so that a component connected to the bus system is to be regarded as a subscriber of the bus system with its own bus address. The door lock control and the trigger element are connected to each other via the first bus system.

The trigger element can directly control the locking mechanism for unlocking. Alternatively and particularly preferably, the triggering element causes a triggering of the locking mechanism for unlocking. By initiating a control is meant, in particular, the transmission of a message via the first or a second bus system which contains information and / or a command which causes the direct or indirect receiver of the message to carry out the activation. The sender of the message initiates the activation. Thus, by initiating a drive, an indirect drive is understood. So z. B. the trigger element send a message via the first bus system to the door lock control, whereupon the door lock control drives the locking mechanism for unlocking. In particular, the triggering element can initiate the unlocking of the locking mechanism in a time-delayed manner.

The door lock controller may include a first processing means and a second processing means. The first and / or the second processing means may each comprise a processor. The first and / or the second processing means may, for. B. each be designed as microprocessors - or microcontroller. The first and / or the second processing means may each comprise a non-volatile memory.

By the first processing means, a first door lock switch is actuated. By the second processing means, a second door lock switch is actuated. The actuation, in particular the opening, of the first door lock switch is sufficient to switch off the electrical power supply for the locking mechanism. The actuation, in particular the opening, of the second door lock switch is sufficient to switch off the electrical power supply for the locking mechanism. Thus, a redundancy is given.

Preferably, after the generation of the actuation signal and / or in the presence of a fire alarm signal, both the first and the second processing means actuate the locking mechanism for unlocking. In this case, both the first and the second door lock switch are preferably actuated.

Each of the first and second emergency processing units may independently detect a signal via an operation of an emergency button operation member. Here, the first emergency processing unit detects a first signal via the operation of the emergency button operation member, and the second emergency processing unit detects a second signal via the operation of the emergency button operation member. The first and second emergency processing units may then each independently cause the door lock mechanism to be unlocked. For this purpose, in particular, at least one message in which the first and / or the second emergency processing unit informs about the presence of the first or second signal via the operation of the emergency button actuating element, is sent.

Preferably, the first emergency processing unit informs the first processing means and the second emergency processing unit informs the second processing means. As a result, in particular, both the first and the second processing means control the locking mechanism for unlocking, so turn off the electrical power supply.

It may be that the first emergency processing unit always sends the message about the presence of a signal via the actuation of the emergency operating element. The Message may include the information of the first and the second emergency processing unit.

The central escape route control, in particular the central emergency button, can be connected to the second bus system.

The connection between the central escape route control and the door lock control may be at least one bus system, in particular at least the second bus system. The door lock control is preferably connected to the first bus system. The door lock control may preferably not be connected to the second bus system. The connection between the central escape route control and the door lock control may include the first and second bus systems.

If the door lock control is not connected to the second bus system, then particularly preferably a control device can be connected both to the first bus system and to the second bus system. The controller may forward messages from the central escape route controller to the door lock controller. The control device can adapt the format of the message to the first bus system, but leave the message untouched.

The control device may be designed to cause a non-safety-relevant activation of the locking mechanism for unlocking or locking.

Thus, the control device may control the door lock mechanism for unlocking upon receipt of a positive authentication signal or cause such a drive. For this purpose, the control device can be connected or connectable to an access control system. The access control system may be connected or connectable to the first bus system. The access control system can, for. Example, a reader, a key switch, a keyboard for entering a code or a lock cylinder of a mechanical lock, in particular a self-locking panic lock, include or be designed.

The control device may, for. B. trigger the door lock mechanism for unlocking at a predetermined time or cause such control. The unlocking at a predetermined time can be provided if z. B. in a time window per day the door should be unlocked.

If there is no danger, ie neither the trigger element has been actuated nor is there a fire alarm signal, then the control device can lock the door to automatically re-lock after expiration to trigger a predetermined period or cause such a drive. This can be z. For example, if the door lock was previously unlocked due to a positive authentication signal. The predetermined period of time may be stored in the security system. The predetermined period of time may be selectable by an operator. The predetermined period of time may in particular some, z. B. ten, seconds, some, z. B. five, minutes or even some, z. B. eight hours correspond. The operator can deposit the predetermined period of time through a parameterization program.

Additionally or alternatively it can be provided that the control device directly activates the locking mechanism for automatic re-locking after receiving a signal about a closed state of the door or causes such a control. The closed state of the door may be detectable by at least one door condition monitoring device.

The central escape route controller may include an identification device. The identification device may serve to cause activation of the locking mechanism for locking after the operation of the central emergency button. If the central emergency button has been actuated and then the locking mechanism was activated for unlocking, it is electronically prevented, in particular by the door lock control, to the presence of a Aufhebebonditionung that the locking mechanism of the door lock can be controlled to lock. The cancellation condition can be achieved by an operation of the identification device. The operation of the identification device may include input of a code, wireless or wired transmission of code, recognition of a key by rotation, recognition of personal features such as fingerprint or iris. For example, the central escape route controller may include a keypad, a key switch, a fingerprint sensor, or a reader as an identification device. It may be that authentication at the identification device is sufficient to achieve the cancellation condition. It may be contemplated that the actuation of the emergency button actuation element is operable to move the emergency button actuation element from an initial position to an actuation position. Thus, the Notfalltasterbetätigungselement is mechanically movable. Preferably, in the actuation position, the signal is generated via the actuation of the emergency button actuation element. This allows the emergency button actuator to give the user in a simple way a feedback on the operation.

Further, it is conceivable that the emergency button actuating element after actuation always without manual action, preferably by a return means, is movable from the actuation position to the starting position. The Notfalltasterbetätigungselement can by the restoring means z. B. be moved to a triggering of the return means or immediately after the end of the manual operation in the starting position. The return means may be a spring. Additionally or alternatively, an actuation of the emergency button actuation element always takes place without mechanical detents. In this case, when actuated, the emergency button actuating element can remain in the starting position or be moved to the starting position immediately after the end of the manual actuation. This ensures that the emergency button actuating element can be actuated again even without manual return of the emergency button actuating element. The re-actuation of the emergency button actuator element can only cause an unlocking of the door lock, unless the door lock is already in the unlocked state. If the door lock is already in the unlocked state and if the emergency button actuating element is actuated, in particular the locking mechanism is not actuated. The door lock remains in the unlocked state.

It may be that the security system comprises a plurality of locking mechanisms or is connectable to a plurality of locking mechanisms. It may be that as a result of the operation of the central emergency button all locking mechanisms are controlled for unlocking. It may be that the security system includes multiple door lock controls. It may be that as a result of the operation of the central emergency button all door lock controls to control the respective locking mechanism for unlocking.

Alternatively, it can be provided that, as a result of the actuation of the central emergency button, at least for one locking mechanism, a control for unlocking is omitted.

Thus, it is conceivable that as a result of actuation of the central emergency button only a portion of the locking mechanisms are controlled for unlocking, in particular that only a part of the door lock controls the respective locking mechanism to unlock unlock. The remaining door interlock controls may refrain from such control. Thus, a selectivity of the unlocking is given as a result of the operation of the central emergency button.

For this purpose, can be stored in the security system, preferably in the door lock controls the security system, whether unlocking as a result of actuation of the central emergency button is allowed. In particular, an operator can make the deposit. For this purpose, the operator z. B. set a parameterization program, which door lock is to be unlocked as a result of pressing the central emergency button.

If the door lock controller receives a message regarding the actuation of the central emergency button, the door lock controller may first check whether unlocking is permitted following actuation of the central emergency button. Only when the unlocking is permitted as a result of actuation of the central emergency button, does the door lock control actuate the locking mechanism for unlocking. If, on the other hand, unlocking is not permitted as a result of actuation of the central emergency button, activation of the locking mechanism for unlocking is omitted. This procedure is particularly useful if all door locking controls of the security system are notified by pressing the central emergency button.

In particular, as a result of the actuation of the central emergency button on at least one door lock control of the security system, preferably several door lock controls the security system, particularly preferably all door lock control of the security system, sent a message regarding the operation of the central emergency button. Hereupon, at least a part of the notified door lock controls may actuate the respective lock mechanism for unlocking.

It is conceivable that the security system comprises several central escape route controllers. For example, one of the central escape route controllers may be provided for placement in the guardroom. Another central escape route control may be provided for placement in a nurse's room. Thus, the security system may include multiple central emergency buttons.

Preferably, a selectivity with respect to a release of the door locks as a result of the operation of the different emergency button is given. Thus, it may be that in the security system, in particular in the door lock controls can be stored, as a result of the operation of which central emergency button a control for unlocking the locking mechanism takes place. Thus, it may be that a certain door lock control in response to the actuation of a first emergency button controls the locking mechanism and as a result of the operation of a second emergency button, the door lock fails to control the locking mechanism for unlocking. For this purpose, z. B. in the door lock control a list with the central emergency buttons can be stored, as a result, the locking mechanism is to be controlled for unlocking. The list is z. B. created by an operator in the parameterization program sets the selectivity of the central emergency button to the door locks. This procedure is particularly useful if all door locking controls of the security system are notified by pressing the central emergency button of the security system.

The identification device may serve, alternatively or additionally, to achieve a cancellation condition: As a result of the actuation of the trip element in situ, it may be prevented electronically due to the actuation signal generated by the actuation of the trip element a cancellation condition, a locking mechanism of the door lock for locking is controlled.

1. a.) seit dem Erzeugen des Betätigungssignals kein Signal der Türzustandsüberwachungsvorrichtung über das Öffnen des Türblatts innerhalb des vorbestimmten Zeitintervalls in dem Sicherheitssystem, insbesondere von der Elektronikvorrichtung, empfangen worden ist,
2. b.) das vorbestimmte Zeitintervall verstrichen ist und
3. c.) ein Aufhebesignal durch eine Authentifizierung an der Identifizierungsvorrichtung an erzeugt ist.

In particular, when the door, in particular the door leaf, remains closed after the generation of the actuation signal, the cancellation condition can be achieved by the following conditions, when

1. a.) since the generation of the actuation signal, no signal of the door condition monitoring device has been received via the opening of the door leaf within the predetermined time interval in the safety system, in particular by the electronic device,
2. b.) the predetermined time interval has elapsed and
3. c.) a Aufhebesignal by authentication to the identification device is generated on.

1. a.) weder ein Signal von der ersten Türzustandsüberwachungsvorrichtung noch von der zweiten Türzustandsüberwachungsvorrichtung, die für ein Türblatt und/oder eine Türverriegelung vorgesehen sind, über das Öffnen des Türblatts seit dem Erzeugen des Betätigungssignals innerhalb des vorbestimmten Zeitintervalls in dem Sicherheitssystem, insbesondere von der Elektronikvorrichtung, empfangen worden ist.

If a first and a second door condition monitoring device are provided, the condition a.) May be different

1. a.) neither a signal from the first door condition monitoring device nor the second door condition monitoring device, which are provided for a door leaf and / or a door lock, on the opening of the door leaf since generating the actuation signal within the predetermined time interval in the safety system, in particular from the electronic device , has been received.

Conditions a.) To c.) May be sufficient to achieve the cancellation condition.

Preferably, it is conceivable that an allowable cancellation signal, which contributes to the achievement of the cancellation condition, can be generated only after the lapse of the predetermined time interval. On the other hand, authentication to the identification device within the predetermined time interval does not result in an allowable cancellation signal contributes to the achievement of the cancellation condition. It may be that a lapse of the predetermined time interval at the central escape route control, in particular at the central emergency button, can be displayed optically. For this purpose, the central escape route control, in particular the central emergency button, include lighting means.

It is conceivable that can be displayed in different ways on the bulbs of the central escape route control, whether an activation of the locking mechanism for locking by a cancellation condition or a cancellation condition can be achieved. In order for the illuminants to represent different information, the illuminants may be controllable in at least two groups. The lighting means can be designed as multi-color lighting means, so that the different information can be displayed as different light patterns.

In particular, a delay of the unlocking in consequence of the actuation of the triggering element can be represented with the lighting means.

It may be that the conditions a.) To c.) Are not sufficient to reach the cancellation condition and thus to allow the locking mechanism to lock. Rather, it may be that the cancellation condition is only reached if, in addition, it is deposited electronically in the security system, in particular, that the existence of conditions a.) To c.) To achieve the cancellation condition is permissible. The deposit of the admissibility of can be made to an operator. The filing of the admissibility can be done with the aid of a parameterization program. In the parameterization program, the operator can manually set whether the conditions a.) To c.) For reaching the cancellation condition are allowable. In particular, for each door lock control, it may be individually definable whether the conditions a.) To c.) For reaching the cancellation condition are permissible.

If several central escape route controllers are provided, then it can be stored in which identification device an authentication for fulfilling the condition c.) Is permissible. The deposit can be made individually for each door lock control in particular.

The triggering element on site may include lighting. By the bulbs can be displayed in different ways, whether a control of the locking mechanism for unlocking by an operation of the central emergency button or by an actuation of the trigger element was done. Thus, an on-site operator can immediately perceive whether the cancellation condition or a cancellation condition needs to be achieved. So that the illuminants can represent different information, the illuminants can be divided into at least two groups be controllable. The lighting means can be designed as multi-color lighting means, so that the different information can be displayed as different light patterns.

The central escape route control may comprise a first operating element. The first control element is used to deactivate the trigger element. The triggering element can be brought into the deactivated state by an actuation of the first operating element, provided that the triggering element is in the activated state. In the deactivated state is omitted as a result of actuation of the actuating element, a control of the locking mechanism for unlocking the door lock. In the activated state, the locking mechanism is actuated to unlock the door lock as a result of actuation of the actuating element. An actuation of the first control element may comprise an authentication, in particular an input of a code, a wireless or wired transmission of a code, a recognition of a key by rotation, a recognition of personal characteristics, such as fingerprint or iris. The first control element can be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader.

The central escape route control may include a second control element. The triggering element can be transferred by an actuation of the second operating element in the activated state, provided that the triggering element is in the deactivated state. To operate the second control, it may not be necessary for authentication to occur. Thus, the second control z. B. be designed as a button.

The central escape route control and the triggering element can be connected to one another via at least one bus system, in particular via at least one second bus system. The central escape route control may be connected to the second bus system. The triggering element may be connected to the second bus system. Alternatively, the triggering element may be connected to the first bus system, but not to the second bus system. The connection between the central escape route control and the triggering element can thus comprise the second bus system or the first and the second bus system.

The second bus system may in particular be a LON or LAN bus. The first bus system may in particular be a CAN or DCW bus.

If the triggering element is not connected to the second bus system, the control device can be particularly preferably connected both to the first bus system and to the second bus system. The control device can receive messages from the forward central escape route control to the trigger element. The control device can adapt the format of the message to the first bus system, but leave the message untouched.

The central escape route control and / or the connection of the central escape route control with the triggering element can be monitored for errors especially in the deactivated state of the triggering element. If an error is detected during monitoring, the triggering element is transferred to the activated state. The error may in particular be a fault or failure of the central emergency button and / or a fault or interruption of the connection, in particular of the bus system. As a result, the security can be increased on site, if via the central escape route control or the guard no activation or unlocking can be made more.

A life sign signal of the first emergency processing unit and the second emergency processing unit may be repetitively sent via the connection to the trigger element. The trigger element can check the reception of the sign of life signals. In the event of a single or multiple failure of at least the sign of life signal of the first emergency processing unit or of the second emergency processing unit, the triggering element itself transfers into the activated state.

It may be that the activated state and / or the deactivated state of the trigger element is stored in the trigger element electronically. Thus, the trigger element can be converted into the activated state, in that the trigger element changes the state from "deactivated" to "activated". For this purpose, the trigger element can store and change a variable which can assume a deactivation value and an activation value.

In the deactivated state, the triggering element is preferably always supplied with electrical current. An electronics unit of the triggering element is in the deactivated state in particular able to receive signals and / or send messages.

It may be that the first and / or the second control element are electrically connected via the central emergency button with the trigger element. Preferably, the first and / or the second control element are not connected to the second bus system. Particularly preferably, a signal via the actuation of the first and / or second operating element from the emergency module, in particular from the central emergency button, detected or processed.

Upon actuation of the first operating element, a first deactivating circuit and a second deactivating circuit can be opened or closed. It may be that a deactivation signal of a first deactivating circuit from the first emergency digital processing unit of the central emergency button and a deactivation signal of a second deactivating circuit from the second digital emergency processing unit of the central emergency button are detected. In this case, in particular, at least one message in which the first and / or the second emergency processing unit informs about the presence of the first or second deactivation signal is sent to the triggering element. Particularly preferably, the triggering element is transferred to the deactivated state only when the triggering element has been informed of both the presence of the first deactivation signal and the presence of the second deactivation signal.

A signal on the actuation of the second operating element can be detected or processed by the third emergency processing unit. After detecting or processing the signal via an actuation of the second operating element, a message for activation can be sent to the triggering element. The central emergency button and the second control element are preferably connected via a bus, in particular an I ² C bus.

Preferably, the first and / or the second control element are formed processor-free. Characterized in that the signals on the operation of the first and / or second control element are detected or processed by the Notfalltasterelektronikeinheit, it is not necessary that the deactivation module has its own intelligence, eg. B. in the form of at least one processor.

The central escape route control may include a delay element. As a result of an actuation of the triggering element, the activation of the locking mechanism for unlocking can be delayed by a first delay time duration. An operation of the delay element within the first delay period causes an extension of the delay of a drive of the locking mechanism. An operation of the delay element may comprise an authentication, in particular an input of a code, a wireless or wired transmission of a code, a recognition of a key by rotation, a recognition of personal characteristics, such as fingerprint or iris. A manual operation can therefore be done by a physical contact or contactless. The delay element may be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader.

Preferably, the central escape route control comprises a termination element for terminating the delay. If the termination element is operated, the delay is terminated and the locking mechanism is activated directly for unlocking. To operate the termination element, it may not be necessary to authenticate. So the termination element z. B. be designed as a button.

It may be that the delay element and / or the termination element are electrically connected via the central emergency button with the trigger element. Preferably, the delay element and / or the termination element are not connected to the second bus system. Particularly preferably, a signal via the actuation of the delay element and / or the termination element is detected or processed by the central emergency button. For this purpose, the central emergency button can include the digital emergency button electronics unit.

A signal about the actuation of the delay element and / or the termination element can be detected or processed in particular by the third emergency processing unit. After detecting or processing the signal via actuation of the delay element, a delay extension message may be sent to the trigger element. After detecting or processing the signal via an actuation of the termination element, a delay completion message may be sent to the trigger element. The central emergency button and the delay element and / or the termination element are preferably connected via a bus, in particular an I ² C bus.

Preferably, the delay element and / or the termination element are formed processor-free. Characterized in that the signals on the operation of the delay element and / or the termination element are detected or processed by the Notfalltasterelektronikeinheit, it is not necessary that the delay module has its own intelligence, eg. B. in the form of at least one processor.

A multi-door display device and the central escape route control, in particular the central emergency button, can be connected to one another via a third bus system. The third bus system may be configured as a CAN bus or a DCW bus. Thus, the central escape route control, in particular the central emergency button, and the multi-door display device can be connected to the third bus system. The central emergency button may forward messages of the control device, the trigger element and / or the door lock control to the multi-door display device. Here, the central emergency button can change the format of the message. It is also conceivable to connect several multi-door display devices to the third bus system.

The central escape route control can be modular. The central escape route control may include an emergency module. The emergency module may include the identification device in addition to the central emergency button.

The central escape route controller may include a deactivation module. The deactivation module may comprise the first control element and the second control element.

The central escape route control may include a delay module. The delay module may comprise the delay element and the termination element.

The deactivation module and / or the delay module can be arranged in a common escape route control housing together with the emergency module and in particular fixed. The emergency module may include a first mounting plate that secures the emergency module to the escape route control housing. The deactivation module may include a second mounting plate that secures the deactivation module to the escape route control housing. The deceleration module may include a third mounting plate that secures the deceleration module to the escape route control housing.

In particular, the central emergency push-button and the identification device are mechanically fastened to one another via the first fastening plate. In particular, the first and the second operating element are mechanically fastened to one another via the second fastening plate. In particular, the delay element and the termination element are fastened to one another by means of the third attachment plate.

The emergency module and / or the deactivation module may be securable at various locations in the escape route control housing. Preferably, the arrangement of the modules in the escape route control housing is variable. Thus, the modules can be arranged side by side in different orders. In particular, each module can be arranged on the right, left or in the middle. Thus, it may be that the emergency module is arrangeable both on the left and on the right of the deactivation module in the Fluchttwegsteuerungsgehäuse. Preferably, it is conceivable that, in addition to the central escape route control, the multi-door display device can be arranged in the escape route control housing.

The escape route control housing may include attachment options for variably securing the modules and / or the multi-door display device. The mounting options can be designed as a perforated strip or as a slot.

The emergency module, the deactivation module and / or the delay module may have a display area. Preferably, the display area is provided on the first, second and / or third mounting plate. The display area can be used to display symbols that explain the function of the modules. In addition, at least one optical light can be provided for displaying states of the security system. The optical light can be provided in at least one of the display areas and / or be provided behind at least one of the display areas such that the light emitted by the optical lights is visible on the display area. For this purpose, the emergency module, the deactivation module and / or the delay module may comprise at least one optical light.

Under an authentication means is hereinafter a mechanical key, an electro-mechanical key, a mobile code storage device, for. As a code card, a code, a biometric feature or the like understood. The security system according to the invention may comprise the authentication means.

It is conceivable that the suitable authentication means differ from one another at the delay element and at the first operating element. The appropriate authentication means on the delay element and on the identification device may differ from each other. Additionally or alternatively, the suitable authentication means on the first operating element and on the identification device may differ from one another. Particularly preferably, the suitable authentication means differ from one another at the delay element, the first operating element and at the identification device. For example, a different key or code is required in each case. Particularly preferably, the authentication means are designed in the manner of a master key system. Thus, with a first authentication means, authentications may be possible on a first number of elements selected from the delay element, first control element and / or the identification device, while with a second authentication means authentifications may be made on a second number of elements selected from the delay element, first control element and / or the identification device are possible, wherein the second number is less than the first number. The second number can also be one. For example, with a first authentication means both the identification device, the first control element and the delay element can be operated. However, with a second authentication means, only the delay element and / or the identification device can be operated, while with the second authentication means not the first control can be operated. So z. B. all operators operate the delay element, but only a few or only one operator may operate the first control element and disable the tripping elements on site. If only two of the elements selected from the delay element, the first control element and the identification device are present in the central escape route control, authentication may be possible with the first authentication means on both elements, while authentication with only one of the two elements is possible with the second authentication means may be possible. Preferably, the central emergency button is used to control the optical light. In particular, the central emergency button serves to control an optical light of the deactivation module and / or the delay module. In this case, the central emergency button can be connected to the optical lamp of the deactivation module and / or the delay module via a bus. Particularly preferably, the central emergency button is connected to the optical lamp of the deactivation module and / or the delay module via the bus, through which the emergency button is connected to the second control element, the delay element and / or the termination element.

The central escape route control may comprise lighting means for optically displaying the first delay time period. The visualization of the first delay time period allows the operator to easily recognize whether and how long the operator remains to extend the delay, in particular by operating the delay element.

For example, the illumination means for optically displaying the first delay time period can be controlled in such a way that as the first delay time progresses, more or fewer bulbs light up and / or that as the first delay time progresses, more or fewer bulbs illuminate in one color.

The central escape route controller may comprise light sources for optically displaying the second delay time period. The lighting means can be controlled in such a way that with a progression of the second delay time period, increasing or decreasing number of lighting means illuminate and / or that with a progression of the second delay time duration, increasing or decreasing number of lighting means illuminate in one color.

Preferably, the same bulbs that optically represent the first delay time period can optically represent the second delay time period. In this case, the representation of the first and the second delay time period may differ from one another. This gives the operator a feedback about which delay period expires.

The second delay time period can be represented in such a way that the visual representation of the time sequence is interrupted by a pattern which symbolizes a time sequence.

In particular, the emergency module may include the lighting means. Particularly preferably, the central emergency button comprises lighting means for optically displaying the first and / or second delay time duration.

The lighting means, which serve for optical representation of the first and / or the second delay time period, can serve to visually represent that the suspend condition can be reached by an operation of the identification device. The lighting means, which serve to visualize the first and / or the second delay time period, can represent whether the operation of the identification device, the cancellation condition is achievable.

The lighting means can preferably be controlled individually at least in two groups, particularly preferably individually.

It is preferably provided that the lighting means are designed as multiple color lamps. This means that the bulbs can emit light of different colors. The lighting means can be designed in particular as a multi-color LED. In this case, each lamp has a plurality of individual LEDs. Particularly preferably, the lighting means are designed as RGB LEDs. The different colors are partly generated by the simultaneous light emission of the individual LED of the multi-color LED. In this case, different colors can be generated by different light components of the individual LEDs.

It is conceivable that the lighting means can be controlled in such a way that light can be emitted by the lighting means in at least two, preferably in at least three, more preferably in at least four different colors. For example, the bulbs can emit red, green, yellow and blue light. Due to the different colors, different states of the security system can be displayed particularly well.

The lighting means can be connected to a bus, in particular a ring bus. By means of the bus, in particular of the ring bus, the central escape route control, in particular a digital emergency processing unit of the central emergency button, can control the lighting means. Particularly preferably, the third digital emergency processing unit controls the lighting means.

Preferably, the central emergency button comprises a light guide. The light guide can serve to direct the light emitted by the bulbs light in the direction of the operator visible surface of the central emergency button. The light guide is preferred formed such that the different control of the at least two groups of lighting means is visible to the operator. In particular for this purpose, the optical waveguide can have optical waveguide regions which are assigned to each group of illuminants. If light sources can be controlled individually, then each light source which can be controlled individually can be assigned an optical waveguide region. Particularly preferably, each lighting means can be controlled individually and each lighting means is associated with an optical waveguide area.

It can be provided that light rays which are emitted by one of the lighting means are conducted essentially only in the light guide region associated with the respective lighting means. The visible to the operator surface of the light guide can be perceived at least divided into luminous areas. Each light guide area may comprise a light area. Preferably, emitting light of a luminous means substantially only illuminates the associated luminous area. The bulbs are located in the direction of the surface of the trigger element centrally under the light areas.

Additionally or alternatively, the visible to the operator surface of the light guide may be configured, for example, as a circular ring. The luminous regions may in particular correspond in each case to a sector of the circular ring.

The bulbs can be arranged in a ring. The light guide may annularly surround the emergency button actuator.

It is conceivable that recesses are provided between the light guide regions. The recesses in the light guide are provided so that the light sources, which can be controlled differently, can not be conducted from one to the other light guide area. The recesses are located between the groups of bulbs, in particular the individual bulbs. The light guide areas are located in the direction of the surface of the trigger element on the bulbs.

The light guide regions preferably each comprise an expanding section. The expanding portion may serve to propagate the light emitted from the associated illuminant. As a result, the emitted light can be distributed over the associated luminous area. The spreading section can be in a projection z. B. in the form of a trapezoid, in particular in the form of an isosceles trapezoid.

The area of the spread-out end of the expanding section corresponds in particular in size and / or shape to the illuminated area. As a result, the emitted light can be distributed particularly well over the associated luminous area.

The expanding section is preferably arranged in the direction of the surface of the triggering element over the lighting means. As a result, the light emitted by the light sources reaches the light guide particularly well.

It is preferably provided that the optical waveguide region has a forwarding section to the light pipe, wherein the light of the lighting means can be conducted through the forwarding section to the spreading section. The forwarding section is thus arranged between the spreading section and the associated lighting means. The relaying section serves to forward the light emitted by the lighting device to the expanding section. The forwarding portion may spread at least less than the spreading portion. Thus, the forwarding section may have mutually parallel edges in the direction of the light pipe. The forwarding portion may be provided when the optical fiber is a plate, for. B. the mounting plate or a board, penetrates. Since the spreading section starts near the luminous area through the relaying section, the optical waveguide can have a small footprint at the height of the plate to be penetrated. Thus, a stability of the plate can be ensured.

The light guide is preferably formed in one piece. The light guide can also be formed of the same material. Particularly preferably, the light guide is monolithic. The light guide is formed in particular of translucent material.

The optical waveguide region may have a connecting section. The connection section can serve to connect the light guide regions to each other. In particular, the connecting regions of the optical waveguide regions merge integrally, particularly preferably monolithically, into one another. The light of the lighting means can preferably be conducted through the spreading section to the connection section. Thus, the connecting portion can connect in the direction of the light pipe to the expanding portion. The connecting portion may have the luminous area. The connection areas together may include the user-facing surface.

The connecting portion may have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the recesses are particularly deeply formed, so that the light guide regions are particularly largely separated. Thus, essentially only the luminous areas is illuminated by the associated luminous means. The depth of the connecting portion still allows a mechanically stable one-piece optical fiber.

It is conceivable that the light guide surrounds the emergency button actuator. For example, the light guide and the emergency button actuator can be concentric be arranged to each other. The light guide can the emergency button actuator z. B. surrounded annularly.

It is preferably provided that the light guide has a contact surface for the emergency button actuating element. The contact surface can hold the emergency button actuating element in particular positively against an actuating direction. It may be that the return means presses the emergency button actuator against the abutment surface. The return means may serve to return the emergency button actuator after actuation to the home position. Particularly preferably, the return means moves the emergency button actuator back to the starting position without manual intervention. Thus, the emergency button actuator can return to the home position immediately after the operation.

The central emergency button can comprise at least one board, preferably at least two boards.

It can be provided that the central emergency button comprises an emergency button switch. The emergency button switch may be actuatable by the emergency button actuator. The emergency button switch can in particular serve to generate at least one signal via the actuation of the emergency button actuating element.

The emergency switch can be integrated on the board or on one of the boards in a circuit. The emergency button switch can end in particular on one of the boards. In particular, it is provided that the emergency button switch is used on actuation of the actuating element for generating at least two signals via the actuation of the emergency button actuating element. The signals can be generated by interrupting at least a first and a second circuit. The emergency button can be arranged on a first board. Preferably, the first emergency processing unit and / or the second emergency processing unit are arranged on a second board. Here, both an arrangement on an upper side or on an underside of the second circuit board is conceivable.

In particular, in order to ensure a secure signal transmission, it is conceivable that the signals via the operation of the emergency button actuator element are detectable by the first emergency processing unit and / or the second emergency processing unit wirelessly. Thus, the first emergency processing unit and / or the second emergency processing unit may be electrically connected to the emergency button switch without any wires. For example, the first and second emergency processing units and the emergency push button switch are electrically connected to each other by plugs. Conductor tracks go from the plug the emergency button switch on the first board and / or from the plug lead tracks go to the emergency processing units on the second board.

It may be that the first and the second circuit board are connected to one another such that the first and the second circuit board are arranged at a fixed distance mechanically immovable to each other. For connecting the first and the second board with each other at least two fastening means may be provided. For example, the boards may be interconnected by bolts. The bolts can be detachable, z. B. by one or more screws, be arranged in the central emergency button.

It is conceivable that the third emergency processing unit is arranged on the second board.

Also, the emergency button after the operation of the actuator without manual action of an operating position to return to a starting position and / or be restless actuated. For this purpose, the emergency button switch a reset device, for. B. a spring element having.

On the first board, the bulbs may possibly be arranged. Additionally or alternatively, at least one acoustic alarm device can be arranged on the circuit board, in particular on the first circuit board.

Preferably, the central emergency button from a front surface, in particular from a dome of the front surface of the actuating element from a construction height AH of less than 48 mm, preferably less than 46 mm, more preferably less than 44 mm. The construction height means the construction height which extends from the dome in the direction of installation. A lower limit may be limited by the technically feasible. For example, the assembly height AH may comprise at least 29 mm, preferably at least 27 mm, particularly preferably at least 25 mm.

It is conceivable that the central emergency button comprises a mounting plate for attachment. Through the mounting plate, the central emergency button z. B. be fastened to the mounting plate.

The central emergency button can be constructed such that a built-in part of the emergency button or central emergency button extends from the mounting plate in the direction of actuation, the mounting part in a flush box with a diameter of 60 mm and a depth of 41 mm can be arranged.

Preferably, it may be that the first board and the second board are arranged one behind the other. One behind the other means in this case in installation direction. Thus, it may be that the first board is disposed between the front of the Notfalltasterbetätigungselements and the second board. Particularly preferred is the emergency button on the first circuit board integrated into a circuit. Additionally or alternatively, the emergency button switch on the first board may end.

In particular, in order to save space, a Notfalltasterschalter can be used, which extends from the underside of the mounting plate is less than 15 mm, preferably less than 12 mm, more preferably less than 10 mm from the bottom of the mounting plate in the installation direction. A lower limit for the distance may be due to the technical feasibility. The extension can be as low as possible, for. B. at least 9 mm, preferably at least 7 mm, more preferably at least 5 mm. The emergency button switch can extend from an upper side of the mounting plate against the installation direction between 1 mm and 5 mm, preferably between 2 mm and 4 mm.

Preferably, a distance MP from a bottom of the mounting plate to a top of the board, with multiple boards a distance from a bottom of the mounting plate to a top of the board, which is farthest from the mounting plate, less than 22 mm, preferably less than 20 mm, more preferably less than 17 mm. A lower limit for the distance may be due to the technical feasibility. The distance MP can be as low as possible, for. B. at least 17 mm, preferably at least 15 mm, more preferably at least 10 mm.

Preferably, the Notfalltasterbetätigungselement and / or the Notfalltasterschalter are designed such that an operator can operate the Notfalltasterbetätigungselement and / or the Notfalltasterschalter only without rotation about an axis. More preferably, the operator can operate the emergency button actuator and / or the emergency button only without rotation. Thus, the emergency button actuator and / or the emergency button switch z. B. only translationally movable.

It may be that the emergency button actuation element has at least one guide means. The guide means serves to guide the emergency button actuator element during actuation of the emergency button actuating element. Preferably, the guide means only allows a translational movement of the emergency button actuating element.

The emergency button actuator may include an actuator. The actuating means is used to actuate the emergency button switch. Thus, the emergency button switch can rest against the actuating means during actuation.

The guide means may be arranged parallel to an actuating means of the emergency button actuating element. Additionally or alternatively, the guide means may be arranged parallel to the emergency switch.

For example, the emergency button switch can be arranged eccentrically to an imaginary axis, in particular to a symmetry and / or center axis, the emergency button actuator. It is possible to provide the guide means centrally in the emergency button actuator in this case.

Alternatively and particularly preferably, the guide means is arranged eccentrically to an imaginary axis, in particular to a symmetry and / or center axis, the emergency button actuator. It is possible that the emergency button switch is arranged in this case on the imaginary axis. The actuating means may also be provided centrally in the emergency button actuator.

It is conceivable that the emergency button actuating element comprises a plurality of guide means, preferably at least three guide means. By the plurality of guide means, a rotational movement of the emergency button actuating element can be prevented. The plurality of guide means may be arranged parallel to each other. The guide means may in particular be arranged around the emergency button switch.

The emergency button actuator may include a bottom. The at least one guide means may extend rod-shaped from the underside.

The at least guide means can be received and guided in a guide sleeve. The guide sleeve may in particular be connected to the mounting plate. In the case of a plurality of guide means, each guide means may be guided in a guide sleeve.

It is possible that the plurality of guide means and / or the plurality of guide sleeves may be formed differently. Thus, a guide means and / or a guide sleeve may be formed longer than another guide means or guide sleeve. Here, the particularly well-guided guide means may serve the actual guidance of the emergency button actuating element, while the at least one other guide means essentially prevents only one rotation of the emergency button actuating element. In particular, in order to achieve good guidance, at least one guide sleeve can extend at least to the first circuit board, preferably through the first circuit board.

It is preferably provided that the return means has a cavity. In the cavity, the actuating means and / or the emergency button can be arranged at least partially.

The actuating means may be formed protruding. In particular, the actuating means protrudes from the underside of the actuating element. The actuating means may be circular-cylindrical.

The actuating means may be formed with a hollow interior. In the emergency button switch, a light source may be provided. Light rays that are emitted from the light source can propagate through the hollow interior. The light rays may be visible to a user through an illumination area of the emergency button actuator. The Illuminierbereich the Notfalltasterbetätigungselements this is translucent, in particular translucent, formed.

The emergency button actuator may comprise a base of opaque material. The main body may be formed of plastic. The main body may comprise an opening. This allows the Illuminierbereich be enabled. The main body may be formed homogeneously. In the opening, a translucent, in particular translucent insert can be arranged. The insert can be fixed in the opening, in particular pressed. The light from the light source can be directed through the insert.

Fig. 1

eine Draufsicht auf einen Ausschnitt eines erfindungsgemäßen Sicherheitssystems mit einem Nottaster als Auslöseelement in einem betriebsfertigen Zustand an einer Tür gemäß einem ersten Ausführungsbeispiel,

Fig. 2

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 1,

Fig. 3

ein zu Fig. 2 modifiziertes Funktionsschema eines Ausschnitts eines erfindungsgemäßen Sicherheitssystems gemäß einem zweiten Ausführungsbeispiel,

Fig. 4

eine Draufsicht auf einen Ausschnitt auf ein erfindungsgemäßes Sicherheitssystem mit mehreren Nottastern in einem betriebsfertigen Zustand an einer Tür gemäß einem dritten Ausführungsbeispiel,

Fig. 5

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 4,

Fig. 6

ein zu Fig. 5 modifiziertes Funktionsschema eines Ausschnitts aus einem erfindungsgemäßen Sicherheitssystem gemäß einem vierten Ausführungsbeispiel,

Fig. 7

eine Draufsicht auf ein erfindungsgemäßes Sicherheitssystem in einem betriebsfertigen Zustand gemäß einem fünften Ausführungsbeispiel,

Fig. 8

ein Funktionsschema einer zentralen Fluchtwegsteuerung des Sicherheitssystems aus Figur 7,

Fig. 9

ein Funktionsschema des Sicherheitssystems aus Figur 7,

Fig. 10

ein Funktionsschema eines erfindungsgemäßen Sicherheitssystems gemäß einem sechsten Ausführungsbeispiel,

Fig. 11

ein Ausführungsbeispiel für einen erfindungsgemäßen Nottaster in einer Seitenansicht,

Fig. 12

der Nottaster aus Figur 11 in einem Längsschnitt,

Fig. 13

der Nottaster aus Figur 11 in einer Explosionsdarstellung,

Fig. 14

ein Betätigungselement des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 15

eine weitere perspektivische Ansicht des Betätigungselements aus Figur 14,

Fig. 16

ein Lichtleiter des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 17

eine weitere perspektivische Ansicht des Lichtleiters aus Figur 16 und

Fig. 18a-d

eine schematische Darstellung eines Ablaufs einer Funktionsfreigabe in einem erfindungsgemäßen Sicherheitssystem.

The invention will be explained in more detail with reference to embodiments. Technical features with the same function are provided in the figures with identical reference numerals. Show it:

Fig. 1

a plan view of a detail of a security system according to the invention with an emergency button as a triggering element in a ready state to a door according to a first embodiment,

Fig. 2

a functional diagram of the security system according to the invention FIG. 1 .

Fig. 3

one too Fig. 2 Modified functional diagram of a section of a security system according to the invention according to a second embodiment,

Fig. 4

a top view of a detail of an inventive safety system with multiple emergency buttons in a ready state on a door according to a third embodiment,

Fig. 5

a functional diagram of the security system according to the invention FIG. 4 .

Fig. 6

one too Fig. 5 Modified functional diagram of a section of a security system according to the invention according to a fourth embodiment,

Fig. 7

a top view of a security system according to the invention in a ready state according to a fifth embodiment,

Fig. 8

a functional scheme of a central escape route control of the security system FIG. 7 .

Fig. 9

a functional diagram of the security system FIG. 7 .

Fig. 10

a functional diagram of a security system according to the invention according to a sixth embodiment,

Fig. 11

An embodiment of an emergency button according to the invention in a side view,

Fig. 12

the emergency button off FIG. 11 in a longitudinal section,

Fig. 13

the emergency button off FIG. 11 in an exploded view,

Fig. 14

an actuator of the emergency button FIG. 11 in a perspective view,

Fig. 15

another perspective view of the actuating element FIG. 14 .

Fig. 16

a light guide from the emergency button FIG. 11 in a perspective view,

Fig. 17

another perspective view of the light guide FIG. 16 and

Fig. 18a-d

a schematic representation of a sequence of a function release in a security system according to the invention.

In the following, a distinction is made between a user and an operator. A user can be any person who uses the security system 1. A user can, for. B. be a guest who wants to escape through the secured by the security system 1 door. An operator serves to operate the safety system. B. authenticate to the security system. The operator can z. B. be a member of a security guard. Particularly preferably, the operator can set the security system 1.

In the following, the term "actuation of the emergency button" is understood to mean "actuation of the actuating element of the emergency button".

A connection to a bus system is understood below to mean an immediate connection, so that a component connected to the bus system is to be regarded as a subscriber of the bus system with its own bus address.

By initiating a control is meant, in particular, the transmission of a message via a first and / or second bus system which contains information and / or a command which causes the direct or indirect receiver of the message to carry out the activation. The sender of the message initiates the activation. Thus, by initiating a drive, an indirect drive is understood. The message can in particular correspond to a bus telegram.

As a result of an operation means that an actuation is the cause, regardless of whether the operation continues or not.

In the FIGS. 1 to 6 sections of safety systems 1 according to the invention are shown. The cutouts of security systems 1, which in the FIGS. 1 to 6 are also connected to a central escape route control 300. An example of such an escape route controller 300 is shown in FIGS FIGS. 7 and 8th shown.

In the FIGS. 1 and 2 a detail of a first embodiment of a security system 1 according to the invention for a door 2 is shown. The door 2 is not part of the security system 1 according to the invention. The security system 1 according to the invention comprises a door lock 200 and an emergency button 10. The emergency button 10 comprises a control device 100. The emergency button 10 is assigned a key switch 500. The security system 1 may include the key switch 500. Alternatively, the security system 1, in particular the emergency button 10, have a key-operated door, via which a connection with the key switch 500 can be produced.

As in FIG. 2 illustrated, the emergency button 10 and the door latch 200 via a first bus system 400 are interconnected. The key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402. The connection 402 is shown as a dashed arrow to indicate that signals are applied via a position of a key inserted into the key switch 500 to an electronic unit 24 of the emergency button 10. As an alternative to the connection 402, the key switch 500 may also be connected to the first bus system 400 (not shown). This alternative applies to all embodiments.

The emergency button 10 is adapted to send to the door lock 200 as a result of an operation of the emergency button 10, a message on the first bus system 400 and thereby cause an unlocking of the door lock. The message as a result of pressing the emergency button 10 can be delayed.

Likewise, the security system 1 according to the invention, in particular the emergency button 10, can be connectable to a fire detector (not shown). In the presence of a fire alarm signal, the security system 1 also causes an unlocking of the door lock 200.

The control device 100 does not perform safety-relevant functions: Thus, the control device 100 can cause an unlocking of the door lock 200 for authorized persons. For this purpose, the control device 100 can be connectable to an access control system, not shown. The access control system can in particular be connected or connectable to the first bus system 400. The control device 100 receives from the access control system, in particular via the bus system 400, a positive authentication signal via the authentication that has taken place. After that causes the Control device 100 unlocking the door lock 200. The access control system can, for. Example, a reader, a key switch, a keyboard for entering a code or a lock cylinder of a mechanical lock, in particular a self-locking panic lock, include or be designed.

Also, the control device 100 may automatically cause a release of the door lock 200 at a predetermined time or after a predetermined period of time, z. B. if in a time window per day the door should be unlocked.

If there is no danger, ie. if neither the emergency button 10 has been actuated nor is there a fire alarm signal, then the control device 100 can automatically initiate re-locking after a predetermined period of time has elapsed. In this case, in addition to the positive authentication signal, the control device 100 can also receive an access signal of the access control system and / or measure the length of the positive authentication signal. By the access signal or the length of the authentication signal, the control device 100 can adjust the length of the predetermined time period. So a person z. For example, hold an ID card long in front of the reader or turn the key for a long time. This signals that the predetermined period of time should correspond to a long time previously stored in the control device 100. If the person holds the ID card shortly in front of the reader or if the user turns the key briefly, it is signaled that the predetermined period of time should correspond to a short time previously stored in the control device 100.

A first door condition monitor 204 and a second door condition monitor 206 detect whether the door 2 is open or closed. The control device 100 at least indirectly receives a signal from the door condition monitoring devices 204, 206. If the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 can immediately and automatically re-lock the door lock 200 as soon as the control device 100 uses the door condition monitoring devices 204, 206 is the information that the door is initially opened and now closed again.

The emergency button 10 comprises an acoustic alarm transmitter 23 and lighting means 41 (see also FIG FIG. 13 ). The lighting means 41 serve to represent the locking or unlocking state of the door lock 200 and thus serve as a display device. The lighting means 41 are used for optical representation of a time-delayed unlocking of the door lock 200 as a result of actuation of the emergency button 10 and thus serve as a display device. The bulbs 41 are used for optical representation of a Alarm state after receiving the fire alarm or as a result of pressing the emergency button 10 and thus serve as a display. The bulbs 41 are used for visual display when a previously described re-locking fails.

The control device 100 controls the audible alarm 23 to issue an audible alarm when a hazard is present, i. H. if a fire alarm signal was received or the emergency button 10 was pressed. The controller 100 controls the audible alarm 23 to issue an audible alarm when a re-lock fails.

The controller 100 controls the bulbs 41 to indicate the latch state of the door latch 200 to optically display a time-delayed release and / or to issue an optical alarm when a fire alarm signal is received or the emergency button 10 is actuated or when re-locked fails.

The control device 100, in the unlocked state of the door latch 200, can monitor the opening of the door by means of the door state monitors 204, 206. The controller 100 may, if desired, issue an audible alarm if the door 2 has been opened during the unlocked state of the door lock 200, at least if there is no positive authentication signal. This can be monitored when someone opens the door, even if the door is unlocked.

Emergency button 10 may include at least one additional output. The control device 100 can control via the output other components that are connectable to the security system 1 according to the invention, for. B. a room lamp.

In the control device 100, the parameters for executing said functions of the control device 100 are stored. So z. The predetermined time (s), the predetermined time period (s), parameters for the audible alarms, e.g. B. in which volume with which frequency an acoustic alarm is to be output, and stored parameters for the various controls of the lighting means 41 for visual representation of the various states of the safety system 1 mentioned above in the control device 100. The parameters for the lighting means may include flashing frequencies, colors to be emitted, color intensities and / or light patterns. For parameterization, the control device 100 can communicate via a radio module 64 with a mobile communication device. Alternatively, the parameterization with the aid of a watch device 301 via a second bus system 401 take place (s. FIGS. 9 and 10 ). For the parameterization, a parameterization program is to be provided which is based on a Communication device, z. As a personal computer, a mobile phone and / or a tablet, is executable. The operator can set the parameters using the parameterization program.

In FIG. 2 the structure of the door lock 200 and the emergency button 10 is shown in more detail.

The emergency button 10 has a first emergency button processing unit 20, a second emergency button processing unit 21, and a third emergency button processing unit 22. The first, second and third emergency button processing units 20, 21, 22 are each designed as microprocessors or microcontrollers. The first and second emergency button processing units 20, 21 comprise nonvolatile memory. The third emergency button processing unit 22 includes a non-volatile memory and / or has access to a non-volatile memory. The first, second and third emergency button processing units 20, 21, 22 are collectively referred to as the electronic unit 24 of the emergency button 10.

The first emergency button processing unit 20 serves as the first processing unit 103 of the control device 100. The second emergency button processing unit 21 serves as the second processing unit 104 of the control device 100. The third emergency button processing unit 22 serves as the third processing unit 105 of the control device 100.

The first and second emergency button processing units 20, 21 serve to execute the safety-related functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 is used to execute the non-safety-relevant functions. The safety-relevant functions include the cause of unlocking in case of danger. Non-safety-related functions include the remaining functions listed above.

Upon actuation of the emergency button 10, an actuating element 11 is moved from an initial position 11.I to an actuation position 11.II, as a result of which a switch 63 is actuated (see also FIG Figures 12 . 13 ). As a result, a first and a second actuation signal are generated. Thereby, a first and a second circuit (not shown) are opened. A signal about the opening of the first circuit is detected by the first emergency button processing unit 20. A signal on the opening of the second circuit is detected by the second emergency button processing unit 21. The actuating signal is understood to be the signal generated by the user by the actuation of the actuating element in order to unlock the door lock and to enable the escape route. The term "as a result of an actuation of the emergency button 10" is used in particular in the sense of "after generation of the actuation signal", ie regardless of whether the Actuator 11 is still in the operating position 11.II or has already returned to the starting position 11.I.

The first emergency button processing unit 20 and the second emergency button processing unit 21 each independently initiate unlocking of the door latch 200 after detecting the operation signal via the first bus system 400. The second emergency button processing unit 21 thus acts redundantly with the first emergency button processing unit 20.

The door lock 200 includes a door lock controller 201. The door lock controller 201 includes a first processing means 202 and a second processing means 203. The first and second processing means 202, 203 are collectively referred to as an electronic device 207. The first and the second processing means 202, 203 are each designed as a microprocessor or microcontroller. The first and the second processing means 202, 203 may each control a locking mechanism 205 of the door lock 200 for unlocking. In case of danger, d. H. As a result of the operation of the emergency button 10 or upon receipt of a fire alarm signal, both the first processing means 202 and the second processing means 203 control the locking mechanism 205 for unlocking. The second processing means 203 is thus redundant to the first processing means 202. By this construction, one-error security is achieved.

The locking mechanism 205 is electromechanically formed. The locking mechanism 205 includes z. B. an electromechanically actuated latch member (not shown) which locks a door latch of the door 2 in the locked state of the door lock 200 and releases in the unlocked state of the door lock 200. Upon activation of the interlock locking mechanism 205, the first and second processing means 202, 203 turn on an electric current to the interlock mechanism 205. When the locking mechanism 205 is activated for unlocking, the first and the second processing means 202, 203 switch off an electric current for the locking mechanism 205. In each case a processing means 202, 203 for this purpose a separate switch is assigned. Opening only one of the switches will turn off the power to the latching mechanism 205.

The door lock controller 201 receives feedback about the state of the lock mechanism 205 via a lock mechanism state monitor, not shown. Specifically, a position of an armature of a spool of the lock mechanism 205 is monitored. If the state of the door lock 205 does not correspond to the desired state, an alarm is output. Additionally or Alternatively, this case, a renewed attempt to achieve the target state.

As a result of an operation of the emergency button 10, the first and second emergency button processing units 20, 21 communicate with the first and second processing means 202, 203 via the first bus system 400 by means of a message. The message may include the message about being actuated or a control command for unlocking. Here, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 of the second processing means 203. By the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 to set the lock mechanism 205 to unlock, so turn off the electrical power.

The presence of a fire alarm signal is detected by the first and second emergency button processing units 20, 21. Hereupon, the first and second emergency button processing units 20, 21 cause the locking mechanism 205 to be triggered by the door lock controller 201 by a message to the first and second processing means 202, 203. Here, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 of the second processing means 203. By the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 to set the lock mechanism 205 to unlock, so turn off the electrical power.

The actuation of the emergency button 10 or the presence of a fire alarm signal can be sent in a message from one of the two emergency button processing units 20, 21, the first emergency button processing unit 20 writing a first part of the message and the second emergency button processing unit 21 writing a second part of the message. The first and second processing means 202, 203 are responsible for at least a part of the message. The emergency button processing units 20, 21, 22 and the first and second processing means 202, 203 may receive messages via the first bus system 400, respectively. Here, the electronic unit 24 and the door lock controller 201 may each be assigned a bus address.

The first and second emergency button processing units 20, 21 monitor each other. If an error is detected, the electronic unit 24, in particular the intact emergency button processing unit 20, 21, causes the first and the second processing means 202, 203 to actuate the door locking mechanism 205 for unlocking. The first and second processing means 202, 203 monitor themselves each other. If an error is detected, at least the intact processing means 202, 203 actuates the locking mechanism 205 for unlocking. Also, in case of a failure of the bus system 400, the locking mechanism 205 is driven to release from the door lock controller 201. For this purpose, and for checking the first and second emergency button processing units 20, 21, a sign-of-life signal of the first and second emergency button processing units 20, 21 is regularly sent to the door lock controller 201. If the sign of life signal remains off, then the locking mechanism 205 is activated for unlocking by the first and the second processing means 202, 203. The first and second processing means 202, 203 communicate with each other when the door lock controller 201 has received a message about the operation of the emergency button 10 and / or the presence of a fire alarm signal. If only the first processing means 202 or the second processing means 203 determines that the emergency button 10 has been actuated or a fire alarm signal is present, the determining processing means 202, 203 actuates the door lock mechanism 205 for unlocking and initiates that the other processing means 202, 203 also control the Door lock mechanism 205 activates for unlocking. An error and a fault always include a failure of the respective component. In the event of a power failure, the locking mechanism 205 automatically transitions to the unlocked state. In addition, in the case of the operations described in this section, the security system 1 emits an audible and / or visual alarm, in particular by means of the control device 100.

When the actuation signal has been generated, it is electronically prevented that the door lock 200 is transferred into the locked state without the presence of a cancellation condition. This prevents the door from being locked while a hazardous condition persists. For this purpose, an electronic detection is integrated in the electronic device 207. The electronic detection is converted into an operating state as a result of the actuation of the actuating element 11, which serves to release the escape route. In the operating state, the control of the door lock 200 is prevented for locking.

The electronic determination comprises a first program code. The first program code includes a first variable or has access to a first variable. In an initial state of the electronic determination, the first variable is set to an initial value. In the actuated state, the first variable is set to an actuation value, by which the actuation of the door lock 200 is prevented for locking. The first variable can be binary. When the cancellation condition is reached, the electronic determination becomes one Initial state transferred back. For this purpose, the value of the first variable is set to the initial value. In the initial state of the electronic detection, a control of the door lock 200 is allowed for locking. The first program code detects the first value of the first variable and allows latching of the door latch 200 when the value of the first variable is equal to the output value and prevents latching of the door latch 200 when the value of the first variable corresponds to the actuation value.

The electronic determination is stored both in the first processing means 202 and redundantly in the second processing means 203. For this purpose, the first program code is stored in the first processing means 202. The first variable is stored in the nonvolatile memory of the first processing means 202. A second program code with the same functionality as the first program code is stored in the second processing means 203. The first variable is redundantly stored in the nonvolatile memory of the second processing means 203.

The first variable is additionally stored in the first emergency button processing unit 20 and the second emergency button processing unit 21, respectively, in the non-volatile memories. As a result of the operation of the emergency button 10, the first variable in the first and second emergency button processing units 20, 21 is transferred from the initial value to the operation value. The changed value of the first variable is transmitted to the electronic device 207 via the bus system 400. Until the presence of a cancellation condition, the emergency button 10 repeatedly sends the actuation value of the first variable to the electronic device 207. The transmission can take place at regular time intervals, in particular together with the sign of life signal.

At least if at least one of the door condition monitoring devices 204, 206 has detected that the door 2 has been opened after operating the emergency button 10, a cancellation action at the emergency button 10 is necessary to achieve the cancellation condition.

The actuating element 11 is designed non-latching. The actuating element 11 is transferred in the actuation of the starting position 11.I in the operating position 11.II (s. FIG. 11 ). Immediately after the operation, the actuator 11 moves back to the starting position 11.I by the force of a return spring 12 formed as a spring back (s. FIG. 12 . 13 ). The actuation of the actuating element 11 is translational.

The cancellation action at the emergency button 10 is performed by operating the operation member 11. As a result, a cancellation signal is generated, which corresponds to the actuation signal. Thus, the control device 100 can recognize whether an actuation of the Emergency button 10 is used to unlock the door lock 200 or a cancellation action is present, a further signal must be generated to achieve the cancellation condition at the same time. An operator authenticates for this purpose. The authentication is done by inserting and turning a key in the key switch 500. The operation of the actuator 11 and the authentication must overlap in time. Ie. the operator must hold the key in the rotated state while the actuator 11 is in the operating position 11.II. The actuator 11 must return to the home position 11.I while the key is in the rotated state. The course of action is sufficient to achieve the cancellation condition.

If the door condition monitoring devices 204, 206 have detected that the door 2 has remained permanently closed due to the operation of the emergency button 10, the cancellation condition can be achieved in at least one further manner, namely by elapse of a predetermined time interval. So z. B. after 60 seconds after the last generation of the actuation signal, the cancellation condition be achieved, if the door 2 has remained closed. An authentication on the key switch 500 and a cancellation action on the emergency button 10 are not necessary in this case.

The first and second door condition monitoring devices 204, 206 are provided to detect, with one-shot security, that the door 2 has remained permanently closed due to the operation of the emergency button 10. For this purpose, the door condition monitoring devices 204, 206 are preferably designed differently. The first door condition monitor 204 may be e.g. B. be designed as a door contact. The second door condition monitor 206 may be e.g. B. be designed as a case contact. Alternatively, z. B. at least one of the door condition monitoring magnetically, z. B. as a reed switch, monitor the state of the door 2. The door lock controller 201 receives a signal from each of the first and second door condition monitors 204, 206 as to whether the door 2 is open or closed. Only if during the predetermined time interval, neither of the first door condition monitor 204 nor the second door condition monitor 206 has sent a signal on the opening of the door, the cancellation condition can be achieved by elapse of the predetermined time interval.

The door lock controller 201 includes a timer to measure the predetermined time interval. The door lock controller 201 starts the timer in response to the operation of the emergency button 10. If the door lock controller 201 receives a signal of the first or second door state monitor 204, 206 that the door has been opened during the predetermined time interval, a cancel action must be taken at the emergency button 10 done. In this case, the elapse of the predetermined time interval is insufficient. The length of the predetermined time interval is stored in the door lock controller 201.

The door lock controller 201 checks whether reaching the cancellation condition by lapse of the predetermined time interval is allowed before the door lock controller 201 drives the lock mechanism 205 to lock. Thus, an operator during commissioning of the security system 1, d. H. before starting the operation of the security system 1, deposit whether an elapse of the predetermined time interval without opening the door 2 is permissible as a cancellation condition and thus leads to a re-locking of the door 2. The deposit can be made in the emergency button 10. A check of the permissibility, a lapse of the predetermined time interval, and a lack of a signal from the first and second door state monitors 204, 206 about opening the door 2 is sufficient to achieve the cancellation condition.

The door lock controller 201 communicates the open or closed state of the door via the bus 400 to the emergency button 10 and / or to the control device 100.

The electronics unit 24 includes a timer. In the electronics unit 24, a first delay period can be stored. If the door lock 200 is to be unlocked in a time-delayed manner, the electronic unit 24 waits for the first delay time after the generation of the actuation signal before the first and second emergency button processing units 20, 21 communicate with the door lock control 201 via the first bus system 400 to initiate unlocking ,

The third processing unit 105 causes the FIG. 1 and 2 described non-safety unlocking and locking the door lock 200, z. B. unlocking after receiving the authentication signal, at a predetermined time or after a predetermined period of time or a lock after a predetermined period of time or immediately after closing the door 2. For this purpose communicates the third processing unit 105 via the first bus system 400 with the door lock control 201. The communication may, for. B. information or a control command that causes the door lock control 201 to control the locking mechanism for unlocking or locking. If the control device 100 is connected to the second bus system (see FIG. Fig. 7 ), the third processing unit 105 serves to forward messages from and / or to a central escape route controller 300.

The third emergency button processing unit 22 controls the audible alarm generator 23 and the lighting means 41.

If at least one of the processing means 202, 203 provides that the locking mechanism 205 has assumed the unlocked state, the processing means 202, 203 sends a corresponding signal via the bus 400 to the electronic unit 24. The electronic device 207 is connected to the door condition monitoring device 204, 206 or connectable and receive signals about an open or closed state of the door from the door condition monitors 204, 206.

The mentioned functions which the control device 100, the door lock control 2021 and / or the emergency button 10 execute are executable with the aid of software modules. In the electronic device 207 and / or the electronics unit 24 program codes are stored, by means of which the functions are executable.

FIG. 3 represents a variant of the in the FIGS. 1 and 2 Here, the control device 100 is formed separately from the emergency button 10 and the door lock 200. The control device 100 may, for. B. in a hat rail housing (not shown) may be arranged. The control device 100 is not integrated in an emergency button 10 or in a door lock 200. For example, the control device 100 may be provided for placement in a technical room. The first bus system 400 connects the control device 100, the door lock 200 and the emergency button 10 with each other. As in the first embodiment, the key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402.

Unless otherwise described, the structure and the function correspond to the first embodiment, wherein the functions associated with the FIGS. 1 and 2 are described with the aid of the control device 100 or the processing units 103, 104, 105, of the control device 100 of the FIG. 3 be executed and the functions that to the FIGS. 1 and 2 are executed by the emergency button 10. Specifically, the first and second emergency button processing units 20, 21 detect the operation signal, communicate with the first and second buttons as a result of an operation of the emergency button 10 second processing means 202, 203 via the first bus system 400, thus causing the interlocking mechanism 205 to be driven by the door interlock controller 201. The actions for achieving on-fail safety are performed by the first and second emergency button processing units 20, 21. The first variable is in the stored first and second emergency button processing unit 20, 21 and is transmitted from there to the door lock control 201. The emergency button 10 includes the timer for determining the first delay time period. The control device 100 is connected or connectable to the second bus system 401. The third processing unit 105 causes the FIG. 1 and 2 described non-safety unlocking and locking the door lock 200, z. B. unlocking after receiving the authentication signal, at a predetermined time or after a predetermined period of time or an automatic re-locking after a predetermined period of time or immediately after closing the door. 2

The first, second and third processing units 103, 104, 105 are each designed as a microprocessor or microcontroller. The first, second, and third processing units 103, 104, 105 together constitute processing electronics 101. The first and second processing units 103, 104 comprise nonvolatile memory. The third processing unit 105 comprises a non-volatile memory and / or has access to a non-volatile memory.

A fire alarm signal can be received by both the control device 100 and the emergency button 10. The presence of a fire alarm signal is detected by the first and the second emergency button processing unit 20, 21 for the emergency button 10 or by the first and the second processing unit 103, 104 for the control device 100. Accordingly, both the control device 100 with the aid of the first and the second processing unit 103, 104 and the emergency button 10 with the aid of the first and the second emergency button processing unit 20, 21 can cause an unlocking of the door lock 200. For this purpose, communication takes place via the first bus system 400 with the door lock control 201.

The control device 100 is informed via the first bus system 400 when the emergency button 10 causes an unlocking of the door lock 200, that is, as a result of an actuation of the emergency button 10 or after receiving a fire alarm signal. The control device 100 is also informed about a time-delayed unlocking of the door lock 200 as a result of the operation of the emergency button 10. The control device 100 is informed of the locking and unlocking state of the door latch 200. The control device 100 is informed of the open or closed state of the door 2.

The control device 100 causes a triggering of the alarm transmitter 23 and the lighting means 41 for the to FIGS. 1 and 2 described acoustic alarms and visual representations. For this purpose, the control device 100 with the electronic unit 24, in particular with the third emergency button processing unit 22, via the first bus system 400 communicate. The third emergency button processing unit 22 then controls the alarm transmitter 23 or the lighting means 41. For this purpose, the parameters for the alarm transmitter 23 and the lighting means 41 are stored in the control device 100.

In the embodiments of the FIGS. 1 to 3 Door lock 200 includes door status monitors 204, 206. Alternatively, and not shown, door status monitors 204, 206 may be connected to first bus system 400 or directly to emergency button 10 and / or controller 100.

In the embodiments of the FIGS. 1 to 3 For example, at least one further emergency button, not shown, may be connected to the first bus system 400, which is designed without the control device 100. The other emergency button is like the emergency button 10 in FIG. 3 trained and can cause the unlocking of the door lock 200 when actuated. The further emergency button corresponds in structure and functionality to the emergency button 10 of the FIG. 3 ,

In the embodiments of the FIGS. 1 to 3 At least one further door lock, not shown, may be connected to the first bus system 400. The further door lock is like the door lock 200 in FIG. 2 or 3 trained and can also be unlocked upon actuation of the emergency button 10. The further door lock corresponds in structure and in the functionality of the door locks 200 of FIGS. 1 to 3 ,

In FIG. 4 a detail of a third embodiment of a security system 1 according to the invention with several emergency buttons 10, 1010, 2010, 3010 is shown. The security system 1 comprises a plurality of door locks 200, 1200, 2200, 3200. Each emergency button 10, 1010, 2010, 3010 is assigned a key switch 500, 1500, 2500, 3500. The safety system 1 serves to arrange the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 on different doors 2, 2002, 3002. The doors 2, 2002, 3002 are not part of the security system 1 according to the invention Emergency buttons 10, 1010, 2010, 3010 are connected to the first bus system 400 and thus correspond to a number of emergency buttons 10, 1010, 2010, 3010. The door locks 200, 1200, 2200, 3200 are connected to the first bus system 400 and correspond to one Number of door locks 200, 1200, 2200, 3200.

In the example of FIG. 4 the emergency buttons 10, 1010 are associated with the door locks 200, 1200. The emergency button 2010 is assigned to the door lock 2200. Emergency button 3010 is associated with door lock 3200. Thus, as a result of an operation of one of the emergency button 10, 1010, the two door locks 200, 1200 unlocked, but not the door locks 2200, 3200. If the emergency button is pressed in 2010, then only the Door lock 2200 unlocked. Accordingly, when the emergency button 3010 is operated, only the door latch 3200 is unlocked. Thus, in this embodiment, the door locks 200, 1200, 2200, 3200 are selectively unlocked.

For example, the emergency buttons 10, 1010 may be provided for placement on a two-leaf door 2. In each case a door lock 200, 1200 is to be arranged in each case on a door leaf 3, 4 of the door 2. The emergency button 2010 and the door lock 2200 are provided to be arranged on another door 2002. The emergency button 3020 and the door latch 3200 are to be arranged on a door 3002 as in FIG FIG. 4 shown.

The security system 1 off FIG. 4 can also for from FIG. 4 deviating selective unlocking be adjustable. At one too FIG. 4 deviating example setting is only one associated door lock 200, 1200, 2200, 3200 unlocked upon actuation of one of the emergency button 10,1010, 2010, 3010 respectively. Thus, in each case one emergency button 10, 1010, 2010, 3010 is assigned in each case only one door lock 200, 1200, 2200, 3200. In particular, such a set security system 1 for four single-leaf doors, each with a door lock 200, 1200, 2200, 3200 suitable.

In another example, not shown setting the security system 1, only the two other door locks 200, 1200 and when pressing one of the emergency button 2010, 3010 only the two other door lock 2200, 3200 are unlocked upon actuation of the emergency button 10,1010. Thus, the emergency button 10, 1010 the door locks 200, 1200 and the emergency button 2010, 3010 associated with the door locks 2200, 3200. In particular, the security system 1 thus set is suitable for two double-leaf doors, each with a door lock 200, 1200, 2200, 3200 per door leaf.

Also, the security system 1 can be set so that upon actuation of an emergency button 10, 1010, 2010, 3010 all door locks 200, 1200, 2200, 3200 are unlocked.

Notwithstanding the security system 1, the in FIG. 4 1, a security system 1 according to the invention may comprise a number of emergency buttons 10, 1010, 2010, 3010, which does not coincide with the number of door locks 200, 1200, 2200, 3200. For example, in FIG. 4 the door 2 is designed to be single-winged and one of the emergency buttons 10, 1010 or one of the door locks 200, 1200 is missing.

In FIG. 5 It is shown that the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 are connected to each other via the first bus system 400. Each emergency button 10, 1010, 2010, 3010 is connected to a respective emergency button 10, 1010, 2010, 3010 associated key switch 500, 1500, 2500, 3500 via a connection 402, 1402, 2402 or 3402 electrically connected or connectable. Alternatively, the key switches 500, 1500, 2500, 3500 are connected to the first bus system 400 (not shown). In the embodiment of FIGS. 4 and 5 is the control device 100 in one of the emergency button 10, 1010, 2010, 3010, z. As the emergency button 10, integrated. The first bus system 400 is connected to only a single controller 100. Unless otherwise described below, the structure and functions of the door locks 200, 1200, 2200, 3200 correspond to the structure and functions of the door lock 200 of Figures 2 and 3 , the structure and functions of the emergency button 10 the construction and functions of the emergency button 10 of FIG. 2 and the structure and functions of the emergency button 1010, 2010, 3010 the structure and functions of the emergency button 10 of FIG. 3 , The reference numerals from the Figures 2 and 3 are used. It is understood that each of the door locks 200, 1200, 2200, 3200 include its own door locking mechanism, own processing means, etc. and the emergency buttons 10, 1010, 2010, 3010 each own emergency button processing units, alarm, bulbs, switches and actuators.

Thus, the assignment of emergency buttons 10, 1010, 2010, 3010 can be done to the door locks 200, 1200, 2200, 3200, when commissioning the security system 1, ie before the start of operation of the security system 1, an assignment of emergency buttons 10, 1010 , 2010, 3010 made to the door locks 200, 1200, 2200, 3200. For this purpose, one of the door locks 200, 1200, 2200, 3200 is in each case transferred to an assignment mode. Thereafter, a deliberate action is taken at the emergency buttons 10, 1010, 2010, 3010. The conscious action may be carried out as an actuation of the actuating element 11 of the respective emergency button 10, 1010, 2010, 3010. After all the emergency buttons 10, 1010, 2010, 3010 associated with those door interlocks 200, 1200, 2200, 3200 in the assignment mode have been operated, the interlocking mode of the door interlock 200, 1200, 2200, 3200 is ended. In the embodiment of FIG. 4 is z. B. first transferred the door lock 200 in the assignment mode and then the emergency button 10, 1010 operated, whereby the assignment of the emergency button 10, 1010 to the door lock 200 is carried out. Then, the assignment mode of the door lock 200 is ended. Subsequently, z. B. the door lock 1200 transferred to the assignment mode and then the emergency button 10, 1010 operated, whereby the assignment of the emergency button 10, 1010 to the door lock 1200 is carried out. Then, the assignment mode of the door lock 1200 is ended. Now the door lock 2200 is transferred to the assignment mode and then the emergency button 2010 is actuated, whereby the assignment of the emergency button 2010 to the door lock 2200 takes place. The assignment mode of the door lock 2200 is ended. Accordingly, it can then be moved with the door lock 3200 and the emergency button 3010.

By the assignment is deposited in the respective door locks 200, 1200, 2200, 3200, in particular in the respective door lock controls 201, which emergency button 10, 1010, 2010, 3010 of the respective door lock 200, 1200, 2200, 3200 is assigned. As a result of the assignment, in the control device 100 for all emergency buttons 10, 1010, 2010, 3010 and all door interlocks 200, 1200, 2200, 3200 of the first bus system 400, the assignment of the emergency buttons 10, 1010, 2010, 3010 to the door interlocks 200, 1200, 2200, 3200 deposited. For the assignment, in each case a bus address, in particular an unchangeable bus address, the respective emergency button 10, 1010, 2010, 3010 deposited.

The assignment of the assignment in the respective door interlocks 200, 1200, 2200, 3200 takes place respectively in the first digital processing means 202 and redundantly in the second digital processing means 203, in particular in the non-volatile memories of the processing means 202, 203.

If z. B. the emergency button 10 is actuated, the emergency button 10 communicates with all door locks 200, 1200, 2200, 3200 of the first bus system 400. The door locks 200, 1200, 2200, 3200 check each based on the deposit, whether the respective door lock 200, 1200, 2200, 3200 has been assigned to the actuated emergency button 10. Only in the case of the assignment then control the associated door locks 200, 1200 to the respective door lock mechanism 205.

In a fire alarm signal, the door locks 200, 1200, 2200, 3200, which are assigned to the fire alarm signal receiving emergency button 10, 1010, 2010, 3010, unlocked.

If a door lock 200, 1200, 2200, 3200 is to be unlocked with a time delay as a result of the actuation of an associated emergency button 10, 1010, 2010, 3010, a first delay time period is stored in that emergency button 10, 1010, 2010, 3010. The deposit takes place when the safety system 1 is commissioned by the parameterization program. For each emergency button 10, 1010, 2010, 3010, a different first delay time period can be stored by the operator. For example, the emergency button 10 stores a first delay time period, which differs from the first delay time duration, which is stored in the emergency button 2010. The emergency buttons 1010, 3010 are to initiate a release of the associated door locks 2200 and 3200 without delay, so that in the emergency buttons 1010, 3010 no first delay period or a first delay period of 0 s is stored. Alternatively, the security system 1 may be configured such that in the emergency windows 10, 1010, 2010, 3010, the same door lock 200, 1200, 2200, 3200 are assigned, always the same first delay time period is stored. For this purpose, the parameterization program allows the operator only a common setting.

The control device 100 takes over the non-safety-relevant functions for unlocking and locking all door locks 200, 1200, 2200, 3200, as previously FIG. 1 and 2 described. For this purpose, the control device 100 with the door locks 200, 1200, 2200, 3200 selectively communicate. Thus, in the control device 100 is deposited, which access control system which door lock 200, 1200, 2200, 3200 is assigned, so that when a positive authentication signal of an access control system only the associated (s) door lock (s) 200, 1200, 2200, 3200 are unlocked. It is also stored in the control device 100, if and when yes, which door lock 200, 1200, 2200, 3200 is to be unlocked at what predetermined time. It can also be stored in the control device 100, after which predetermined time period or which predetermined time intervals which door lock 200, 1200, 2200, 3200 is to be locked again. It is also stored in the control device 100, if and, if so, which door locks 200, 1200, 2200, 3200 immediately after closing the door 2, 2002, 3002 are to be locked again. It may be stored in the control device 100 whether, and if so, for which door lock 200, 1200, 2200, 3200 an audible alarm is to be triggered when the unlocked door 2, 2002, 3002 is opened without a positive authentication signal being present. In the control device 100 may be deposited, whether an audible alarm is to be initiated if the door 2, 2002, 2003 is not closed again. The deposits may be made differently for each door latch 200, 1200, 2200, 3200 or for the groups of door locks 200, 1200, 2200, 3200 to be arranged on a door 2, 2002, 3002. The deposit is made with the aid of the parameterization program by the operator during commissioning.

The control device 100 causes an acoustic and visual alarm as a result of the operation of a emergency button 10, 1010, 2010, 3010 is also output in the at least one further emergency button 10, 1010, 2010, 3010, the same door lock 200, 1200, 2200, 3200 as the actuated emergency button 10, 1010, 2010, 3010 is assigned. Is in the embodiment of FIGS. 4 and 5 z. B. the emergency button 10 is actuated, the control device 100 causes by communication with the electronics unit 24 of the emergency button 1010 that the acoustic alarm generator 23 and the bulbs 41 of the emergency button 1010 issue an audible or visual alarm.

If, after an emergency button 10, 1010, 2010, 3010 is actuated, a release is triggered in a time-delayed manner, then the control device 100 causes the first Delay period, with which the unlocking is caused, is also shown in the at least one further emergency button 10, 1010, 2010, 3010, the same door lock 200, 1200, 2200, 3200 as the operated emergency button 10, 1010, 2010, 3010 assigned. For this purpose, the control device 100 communicates with the electronics unit 24 of the at least one further emergency button 1010, 2010, 3010 or controls the lighting means 41 of the emergency button 10, in which the control device 100 is integrated.

The control device 100 may be the non-safety-related assignment for selective communication, for. B. the assignment of an access control system to a door lock 200, 1200, 2200, 3200 make a bus address. In this case, the subscribers of the first bus system 400 each have an adjustment device for the manual setting of a bus address. The adjustment device may include DIP switches. At least the users of the first bus system 400 who have the same setting on the setting device are automatically assigned to each other. In order to be able to assign different bus addresses to subscribers with the same setting, subscribers of the first bus system 400 have different key figures from which different bus addresses are configured with the aid of the setting made. The bus address detected by means of the setting is for the emergency buttons 10, 1010, 2010, 3010 and for the door locks 200, 1200, 2200, 3200, only one more bus address which the emergency buttons 10, 1010, 2010, 3010 and Use the door interlocks 200, 1200, 2200, 3200 next to the bus address used in safety-related communication.

If a door lock 200, 1200, 2200, 3200 has already been unlocked, then the control device 100 can prevent an unlocking of a further door lock 200, 1200, 2200, 3200 until a condition is present, provided that no danger exists. If the condition is met, the control device 100 causes the unlocking of the further door lock 200, 1200, 2200, 3200. In this way, the control device 100 with a plurality of door locks 200, 1200, 2200, 3200 communicate so that a lock is formed. For example, the door 2002 may be located at an entrance to a room and the door 3002 may be located at an exit of the same room. The controller 100 may cause the door latch 2200 to unlock upon the presence of a positive door latch 2200 authentication signal. Even if there is a positive authentication signal for the door lock 3200 of the control device 100, the control device 100 can prevent the unlocking of the door lock 3200 until a condition exists. If the condition is present, then the control device 100 causes an unlocking of the door lock 3200. The condition may be, for. B. to a lock-time interval or the achievement of a measured variable, such as room temperature, humidity, air purity or number of people in the room act. The control device 100 can this purpose with a Meter connected or connectable. The condition may include closing the first opened door 2002, which is measurable by the door condition monitors 204, 206. The condition and the door locks 2200, 3200 involved in the lock can be stored in the control device 100. The deposit can be made by the operator using the parameterization program.

In FIG. 6 is a variant of the in the FIGS. 4 and 5 illustrated section of the security system 1 shown. Here, the control device 100 is formed separately from the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200. The first bus system 400 connects the control device 100 to the door locks 200, 1200, 2200, 3200 and the emergency buttons 10, 1010, 2010, 3010. The control device 100 of FIG FIG. 6 corresponds in structure to the control device 100 of FIG. 3 , The emergency button 10 of the FIG. 6 corresponds in construction to the emergency button 10 of the FIG. 3 , Incidentally, the structure and the functionalities previously agreed FIG. 5 are described, the structure and the functionalities of the security system 1 of FIG. 6 ,

Characterized in that in the embodiments of FIGS. 4 to 6 the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010, 2010, 3010 and possibly the control device 100 act as subscribers of a single first bus system 400, only the cables of the bus system 400 are necessary so that the participants can communicate with each other. Thus, the security system 1 has only a few cables.

The bus system 400 may include at least two cables for communication and at least two cables for power. In particular, the bus system 400 has exactly two cables for communication and two cables for the power supply. In each of the embodiments of the security system 1 according to the invention, a power supply can be integrated as a connection to a power grid at any point of the bus system 400. Thus, the power supply can be provided as an independent component of the security system 1 outside the emergency button 10 or the emergency button 10, 1010, 2010, 3010 and the door lock 200 and the door locks 200, 1200, 2200, 3200. As a result, the security system 1 in the physical structure is flexible.

If, as in the third and fourth embodiments, multiple emergency buttons 10, 1010, 2010, 3010 are present and one of the emergency buttons 10, 1010, 2010, 3010 has been actuated, the electronic button only prevents the electronic button 10 from being actuated. 1010, 2010, 3010 associated door locks 200, 1200, 2200, 3200 are locked. Achieving the cancellation condition allows the locking of the door lock (s) 200, 1200, 2200, 3200 associated with the actuated emergency button 10, 1010, 2010, 3010. To achieve the cancellation condition, the time overlapping condition is Actuation of the actuating element 11 of that emergency button 10, 1010, 2010, 3010, which was previously operated, and the authentication of the emergency button 10, 1010, 2010, 3010 associated key button 500, 1500, 2500, 3500 necessary. At least this action sequence is necessary for the door lock 200, 1200, 2200, 3200 associated with the actuated emergency button 10, 1010, 2010, 3010, in which at least one of the door condition monitoring devices 204, 206 has detected that the door 2 or one of the door leaves 3, 4 was opened after pressing the emergency button 10.

If the door condition monitoring devices 204, 206 of the door locks 200, 1200, 2200, 3200 assigned to the actuated emergency button 10, 1010, 2010, 3010 have detected that the door 2 has remained permanently closed after the emergency button 10, 1010, 2010, 3010 has been actuated, then For example, the cancellation condition can be achieved by the lapse of the predetermined time interval. Thus, the cancellation condition z. B. be reached after 60 seconds after the last operation of the emergency button 10. The admissibility of whether a lock should be made after the lapse of the predetermined time interval with door 2, 2002, 3002 remained closed, for each door lock 200, 1200, 2200, 3200 or groups of door locks 200, 1200, 2200, 3200, in particular for door locks , which are intended to be arranged on the same door, be individually adjustable and storable. The deposit can z. B. in the emergency windows 10, 1010, 2010, 3010 done. Likewise, for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, in particular for door locks, which are intended to be arranged on the same door, the length of the predetermined time interval can be individually adjustable. This can be a minimum length, z. B. 60 s, be predetermined for the predetermined time interval. The deposit is made by the parameterization program.

In FIG. 7 a fifth embodiment of the security system 1 according to the invention is shown. The fifth embodiment includes the security system 1 according to the first embodiment of the FIGS. 1 and 2 , That is, the emergency button 10 including the control device 100 is connected to the door latch 200 via the bus system 400. The key switch 500 is connected via a connection 402 with the emergency button 10 or connectable. In the fifth exemplary embodiment, further components 301, 510 are provided in comparison to the first exemplary embodiment. The central escape route control 300, already part of the embodiments of the FIGS. 1 and 2 is, is shown explicitly.

The security system 1 includes the central escape route controller 300. The central escape route controller 300 is provided to be located remotely from the door 2. Thus, the central escape route control 300 z. B. together with a watch 301, which may be formed as a monitor or personal computer, and / or a multi-door display device 350 (s. Fig. 10 ) to be arranged in a guardroom. The watch device 301 is optionally part of the security system 1 according to the invention. Alternatively, the watch device 301 can be connectable to the security system 1 according to the invention.

The central escape route control 300 has a modular structure. An emergency module 310 includes a first attachment plate 311. The first attachment plate 311 receives a central emergency button 302 and an identification device 312 exemplified as a key switch. By means of the first fastening plate 311, the central emergency pushbutton 302 and the identification device 312 are mechanically rigidly connected to one another. The central emergency button 302 serves to unlock the door lock 200 as a result of actuation of the central emergency button 302. Thus, by the central emergency button 302 away from the door 2, the door latch 200 can be unlocked. The unlocking as a result of the operation of the central emergency button 302 is done with a one-fault security. The operation of the central emergency button 302 is thus suitable for the danger.

A deactivation module 320 comprises a first control element 322 embodied as a key pushbutton and a second control element 323 configured as a pushbutton. The first control element 322 serves to deactivate the emergency pushbutton 10. Thus, by pressing the first control element 322, the emergency pushbutton 10 is deactivated Condition convicted. If the emergency button 10 is in a deactivated state, an unlocking of the door lock 200 is omitted as a result of an actuation of the emergency button 10. The second operating element 323 serves to activate the emergency button 10. The emergency button 10 is in the deactivated state and becomes the second operating element Pressed 323, the emergency button 10 is transferred to an activated state. In the activated state of the emergency button 10, the emergency button 10 causes an unlocking of the door lock 200 when the emergency button 10 has been actuated. The deactivation module comprises a second mounting plate 321. The second mounting plate 321 serves to receive the first and the second operating element 322, 323. The second mounting plate 321 connects the first and the second operating element 322, 323 mechanically rigidly together.

A retardation module 330 includes a third attachment plate 331. The third attachment plate 331 receives a retardation element 332. The delay element 332 is exemplified as a key switch. The delay element 332 serves to further delay the unlocking of the door lock 200 within the first delay duration. The delay module 330 includes a termination element 333, which is designed as a button. The termination element 333 is at the third Attached mounting plate 331. The termination element 333 is mechanically rigidly connected to the delay element 332 by means of the third attachment plate 331. By actuating the termination element 333, the delay of the unlocking of the door lock 200 can be terminated.

The central escape route controller 300 includes a one-way open escape route control housing 340 in which the emergency module 310, the deactivation module 320, and the delay module 330 are disposed. The deactivation module 320 and the delay module 330 are optional components of the central escape route safety device 300. In the escape route control housing 340, if present, the multi-door display device 350 can also be arranged.

The escape route control enclosure 340 may mechanically secure the emergency module 310, the deactivation module 320, and the delay module 330. The emergency module 310, the deactivation module 320 and the delay module 330 are each individually secured to the escape route control housing 340, in particular screwed. For attachment to the escape route control housing 340 serve the first mounting plate 311 for the emergency module 310, the second mounting plate 321 for the deactivation module 320 and / or the third mounting plate 331 for the delay module 330. The escape route control housing 340 and the modules 310, 320, 330 are configured such that various sequences in which the modules 310, 320, 330 can be arranged next to one another are possible. So z. B. in a central emergency exit device 300, not shown, for. For example, the emergency module 310 may be located between the deactivation module 320 and the delay module 330. In another, not shown, exemplary central escape route control 300, a free space, delay module 330 in the middle and emergency module 310 on the right can be arranged on the left. The clearance is due to the absence of the deactivation module 320 and is hidden by a plate. The escape route control housing 340 may include rails for inserting the modules 310, 320, 330. The escape route control housing 340 may have attachment options, e.g. As perforated strips or slots, for variable attachment of the module 310, 320, 330 have.

On the first mounting plate 311, on the second mounting plate 321 and on the third mounting plate 331, a purely schematically illustrated display area 314, 324 and 334 is provided. There are symbols on the display area explaining the function of the modules 310, 320, 330. In addition, optical lights for indicating states of the security system 1 in the display areas 314, 324, 334 may be provided.

In the embodiment of FIG. 7 The security system 1 further includes an audio and video module 510. The audio and video module 510 is provided for placement near the door 2 that can be latched by the door latch 200. If the audio and video module 510 is unlocked, an operator in the guardroom can speak with the user in front of the door 2 and view the room near the door 2.

As in FIG. 8 illustrated, the central emergency button 302 similar to the emergency button 10 is constructed. Thus, the central emergency button 302 includes an emergency button electronics unit 308. The emergency button electronics unit 308 includes a first emergency processing unit 303, a second emergency processing unit 304 and a third emergency processing unit 305. The first, second and third emergency processing units 303, 304, 305 are each configured as a microprocessor or microcontroller. The first and second emergency processing units 303, 304 comprise nonvolatile memory. The third emergency processing unit 305 has a non-volatile memory and / or has access to a non-volatile memory. The central emergency button 302 is actuated by actuating an emergency button actuator 306. As a result, a Notfalltasterschalter 307 is actuated. As a result, a first and a second signal are generated. For this purpose, a first and a second circuit (not shown) are opened. A signal on the opening of the first circuit is detected by the first emergency processing unit 303. A signal on the opening of the second circuit is detected by the second emergency processing unit 304.

The central emergency button 302 is connected to a second bus system 401. As in FIG. 9 As shown, the control device 100 is also connected to the second bus system 401. The second bus system 401 is a different type of bus system than the first bus system 400. For example, the second bus system 401 may be configured as a LON or LAN bus and the first bus system 400 as a CAN or DCW bus.

In FIG. 9 the emergency button 10 comprises the control device 100. The emergency button 10 and the door latch 200, which in FIG. 9 are mapped correspond to the emergency button 10 and the door lock 200 of FIG. 2 ,

In an alternative, not shown, the control device 100, the emergency button 10 and the door lock 200 according to the FIG. 3 educated. In this alternative, not shown, the control device 100, the emergency button 10 and the door lock 200 are connected to each other via the first bus system 400, wherein the control device 100 is connected to the second bus system 401.

The control device 100 receives messages from the central escape route safety device 300 via the second bus system 401. The control device 100 forwards the messages the first bus system to other participants of the first bus system 400 on. The message may in particular include information relating to actuation of the central emergency button 302, the key switch 312, the first operating element 322, the second operating element 323, the delay element 332 and / or the termination element 333 or a control command as a result of actuation of one of the aforementioned elements 302 , 312, 322, 323, 332, 333. If the control device 100 is integrated in the emergency button 10, a forwarding to the emergency button 10 in which the control device 100 is integrated is dispensed with. For example, conducts according to the FIG. 9 the controller 100 forwards the message to the door latch 200. If the control device 100 and the emergency button 10 are connected via the first bus system 400, then the control device 100 forwards the message to the emergency button 10 and / or the door lock 200. The controller 100 adapts the message to the format of the first bus system 400. Security-relevant messages are otherwise left untouched.

If the central emergency button 302 has been actuated, then the first emergency processing unit 303 and redundantly the second emergency processing unit 304 unlock the door lock 200. In this case, the central emergency button 302 communicates with the door lock control 201, in particular the first and the second processing means 202, via the control device 100. 203. The first and second processing means 202, 203 then control the locking mechanism 205. Previously, the first and second processing units 103, 104 forwarded the message. Here, the control device 100 has left the content of the message untouched.

The central emergency button 302 has an input for receiving a fire alarm signal. When the fire alarm signal is received, the central emergency push button 302 causes the door lock 200 to be unlocked. For this purpose, the first and second emergency processing units 303, 304 communicate with the door lock control 201 via the control device 100, namely via the first and second processing units 103, 104. Like previously described.

A signal via an actuation of the key switch 312 of the first module 310 is received by the emergency button electronics unit 308, in particular the third emergency processing unit 305. The emergency button electronics unit 308 sends a message regarding the operation of the key switch 312 via the second bus system 401 to the control device 100. The control device 100 forwards the message to the first bus system 400.

The emergency button actuator 306 is non-latching. The emergency button actuating element 306 is identical to the actuating element 11 of the emergency button 10 (see FIG. FIGS. 13 to 15 ). Thus, the emergency operating member 306 is transferred in the actuation from an initial position to an actuated position (analog FIG. 11 ). Immediately after the operation, the emergency operating member 306 moves back to the initial position by the force of a return means formed as a spring (analog FIG. 11 ). The actuation of the emergency operating element 306 is translational. If, as a result of actuation of the central emergency button 302, the door lock 200 is transferred into the unlocked state, the electronic device 207 prevents the door lock 200 from being returned to the locked state without the existence of a cancellation condition. The cancellation condition after actuation of the central emergency button 302 can be achieved by operating the key switch 312. In particular, an actuation of the key switch 312 is sufficient to achieve the cancellation condition.

If the security system 1 comprises the central escape route control 300, the cancellation condition can be reached in a further manner as a result of an actuation of the emergency button 10. If the door state monitoring devices 204, 206 have detected that the door 2 has remained permanently closed after the emergency button 10 has been actuated is, the cancellation condition can be achieved by elapse of a predetermined time interval and a cancellation treatment at the central escape route controller 300 after the predetermined time interval. The cancellation treatment may correspond to an authentication at the central escape route controller 300, in particular an actuation of the key switch 312. By the Aufhebehandlung, z. As the operation of the key switch 312, a Aufhebesignal is generated. The cancel signal is forwarded to the door lock controller 201 via the control device 100. An authentication on the key switch 500 and a cancellation action on the emergency button 10 are not necessary in this case.

The door lock controller 201 checks whether reaching the canceling condition by passing the predetermined time interval and authenticating to the central escape route controller 300 with the door 2 kept closed is allowed before the door lock controller 201 drives the lock mechanism 205 to lock. Thus, an operator during the commissioning of the security system 1 deposit whether a lapse of the predetermined time interval without opening the door 2 and the additional operation of the key switch 312 is permitted as a cancellation condition and thus leads to a re-locking of the door 2. A check of the permissibility, an elapse of the predetermined time interval, an actuation of the key switch 312 after the predetermined time interval and the fact that during the predetermined time interval, neither of the first door condition monitor 204 nor the second door condition monitor 206, a door opening signal has been sent is sufficient to achieve the cancellation condition.

This is a variant for achieving a cancellation condition, which belongs to the FIGS. 1 and 2 has been described. This variant can z. B. be selected by the operator, if only the lapse of the predetermined time interval remains closed with the door 2 the operator not sure enough. The operator can select and save this variant by means of the parameterization program.

Specifically, if the operator has selected this option, the elapse of the predetermined time interval with the door 2 closed is visually displayed on the central escape route controller 300. In particular, the lighting means 313 are for indicating that the predetermined time interval has elapsed without receiving a signal on the opening of the door 2 within the predetermined time interval. The visual display tells the operator that the door 2 can be locked by authentication to the central escape route controller 300.

If the door condition monitoring devices 204, 206 have not sent a door opening signal during the presence of a fire alarm signal, then after the fire alarm signal has ended, the door lock 200 can also be locked by the same operation of the key switch 312. Also, the possibility to achieve locking of the door lock 200 by actuating the key switch 312 after termination of the fire alarm signal is optically indicated by the lighting means 313.

The control device 100 forwards messages from the emergency button 10 and / or the door lock 200 via the second bus system 401. Here, the control device 100 adjusts the message to the format of the second bus system 401. The control device 100 sends information about the state of the emergency button 10 and / or the door lock 200 via the second bus system 401.

For example, the central escape route controller 300 and the multi-door display device 350 may be connected to a third bus system 403 (see FIG. Fig. 10 ). Preferably, the central emergency button 302, particularly preferably the emergency button electronics unit 308, be connected to the third bus system 403 (s. Fig. 8 ). The multi-door indicator 350 can visually indicate the locking and unlocking state of the door lock 200. In addition, with the aid of the multi-door indicator 350, one of the door locks 200, 200 ', 1200', 2200 'of the security system 1 (see FIG. Figure 10 ) are unlocked. The unlocking with the help of Multi-door indicator 350 is not one-error-safe. The third bus system 403 may be the same type of bus system as the first bus system 400, e.g. B. to a CAN or DCW bus.

The control device 100 forwards via the second bus system 401 to the central escape route controller 300 when the emergency button 10 waits a first delay period before the emergency button 10 causes the door lock controller 201 to actuate the lock mechanism 205 for unlocking.

The first delay time period is visually displayed at the central escape route controller 300. For this purpose, the central emergency button 302 is constructed according to the emergency button 10, as it is the Figures 13 . 16, 17 is described. For the optical representation of the first delay time period, the lighting means 313 of the central emergency button 302 are actuated by the emergency button electronic unit 308. With the progress of the first delay period, less bulbs 313 in the same color light up. For example, fewer bulbs 313 in a first color and increasingly many bulbs 313 in a second color may shine. The lighting means 41 of the emergency button 10 are driven in an identical manner to optically represent the first delay time period.

During the first delay period, z. B. 8 s, the operator can actuate the delay element 332. For this purpose, the operator turns a key in the key switch, which serves as a delay element 332. An actuation of the delay element 332 is detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. A corresponding message is sent via the second bus system 401 and possibly the first bus system 400. The emergency button 10 receives the message. As a result of the operation of the delay element 332, the emergency button 10 terminates the first delay time period and starts with a second delay time period. The second delay period, e.g. B. 180 s, is longer than the first delay period. At the end of the second delay time period, the emergency button 10 initiates the unlocking of the door lock 200. The second delay time period is determined in the emergency button 10 by means of the same timer used to determine the first delay time period. During the second delay period, the key of the delay element 322 need not remain rotated. Rather, a single turn of the key is sufficient to start the second delay period.

The second delay time period is visualized at the central escape route controller 300 and at the emergency button 10. The visual representation at the central escape route control 300 is similar to the visual display at the emergency button 10. As the second delay period progresses, fewer bulbs 41, 313 shine in the same color. For example, fewer bulbs 41, 313 in a first color and increasingly many bulbs 41, 313 may shine in a second color. To illustrate that the second delay period lasts long, a time lapse pattern may be repetitively added within the second delay time period, e.g. B. a circumferential color point or a circumferential color window (see description to FIG. 16, 17 ) are visually displayed.

If the termination element 333 is actuated during the first or the second delay time period, the emergency electronics unit 308, in particular the third emergency processing unit 305, detects the actuation of the termination element 333 and sends a message regarding the actuation of the termination element 333 via the second bus system 401. This causes the emergency electronics unit to initiate 308 the emergency button 10 not to delay the unlocking, but to cause immediate unlocking the Türverrieglung 200. The termination element 333 is non-latching. A single actuation of the termination element 333 is sufficient to complete the delay of the initiation of the unlocking.

The emergency button 10 can be transferred by an operation of the first control element 322 in the deactivated state. For this purpose, the operator turns a key in the key switch, which serves as a first operating element 322. Actuation of the first operating element 322 is detected by the emergency button electronics unit 308. Upon actuation of the first operating element 322, a first and a second deactivation circuit are opened or closed. The opening or closing of the first deactivation circuit is detected by the first emergency processing unit 303. The opening or closing of the second deactivation circuit is detected by the second emergency processing unit 304. The first and the second emergency processing units 303, 304 communicate with the emergency button 10 via the second bus system 401. If the first bus system 400 is located between the emergency button 10 and the central emergency button 302, the control device 100 sends the message to the first and the second emergency processing unit 303 , 304 continue. When forwarding, the format is changed, but the content remains unchanged.

In the deactivated state of the emergency button 10, the operation of the emergency button 10 is ineffective on the door lock 200th

The activated state and the deactivated state are stored electronically in the emergency button 10. With the enabled state and the disabled state stored in the emergency button 10, the key in the first control 322 need not remain rotated during the disabled state. Rather, a single turn of the key is sufficient to disable the emergency button 10.

The deactivation remains until the second operating element 323 is actuated. The actuation of the second operating element 323 can be detected by the emergency button electronic unit 308, in particular the third emergency processing unit 305. The emergency electronics unit 308 sends a message regarding the actuation of the second operating element 323 via the second bus system 401 and optionally via the first bus system 400 to the emergency button 10, whereupon the emergency button 10 is transferred to the activated state. The second control 323 is not latching. Characterized in that the activated and the deactivated state is stored in the emergency button 10, a single actuation of the second operating element 323 is sufficient to bring the emergency button 10 in the activated state.

The central escape route control 300 comprises a bus 341, via which the emergency electronics unit 308, in particular the third emergency processing unit 305, can detect signals of the second operating element 323, the delay element 332 and the termination element 333. The emergency electronic unit 308 serves as the intelligence of the entire central escape route controller 300. Only the emergency electronic unit 308 includes microprocessors. The deactivation module 320 and / or the delay module 322 may be configured processor-free. The bus 341 may be configured as an I ² C bus.

In order to deposit the activated and deactivated states, a second variable can be stored in the first emergency button processing unit 20 and redundantly in the second emergency button processing unit 21, in particular in the non-volatile memories. The second variable can be binary. If the emergency button 10 is in the deactivated state, then the second variable is set to a deactivation value. If the emergency button 10 is in the activated state, the second variable is set to an activation value. As a result of an actuation of the first operating element 322, the second variable is set to the deactivation value. As a result of an actuation of the second operating element 323, the second variable is set to the activation value. Before the emergency button 10 causes the unlocking of the door lock 200, the emergency button 10 checks the value of the second variable. If the emergency button detects that the emergency button 10 is deactivated, a communication of the emergency button 10 with the door lock control 201 is prevented in order to cause an unlocking 200.

The first emergency processing unit 303 and the second emergency processing unit 304 mutually monitor for errors. If an error is detected, a message is sent via the second bus system 401. The emergency button 10 receives the message and then transfers itself to the activated state if the emergency button 10 is in the disabled state is located. For this purpose, the emergency button 10 changes the value of the second variable to the activation value.

The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly, in particular at regular intervals, send a sign of life signal via the second bus system 401. The emergency button 10 receives the sign of life signals. Leaves a sign of life signal once or several times, then the emergency button 10 is transferred to the activated state, if the emergency button 10 is in the deactivated state.

If the security system 1 receives a fire alarm signal, then the emergency button 10 transfers to the activated state if the emergency button 10 is in the deactivated state.

The operation of the emergency button 10 in the deactivated state is displayed on the central escape route controller 300, on the watch device 301 and / or on the multi-door display device 350. If a danger situation actually exists, then the emergency button 10 can be converted by the operator into the activated state by the operator actuating the second operating element 323, or the door lock can be directly actuated by the operator for unlocking. For this purpose, the operator can actuate the central emergency button 302. Whether a hazard exists, the operator z. B. perceive via the audio and video module 510. As a result, increased security is achieved.

The deactivation can z. B. be made at night in a department store. Furthermore, it is conceivable to use the deactivatable emergency button 10 in a building in which people with an impaired state of mind live. Emergency buttons 10 can also be used on doors accessible to people with impaired mental state, eg. On a psychiatry or dementia ward.

If the emergency button 10 is actuated in the deactivated state and then the emergency button 10 is transferred to the activated state, the emergency button 10 which has been actuated in the deactivated state does not lead to unlocking of the door lock 200 even after the transfer to the activated state deactivated state, operation of the emergency button 10 remains ineffective. This is due, on the one hand, to the fact that the actuating element 11 and the switch 63 are non-latching. On the other hand, the operation of the emergency button 10 was not stored in the disabled state 10 in the disabled state. The door lock controller 201 receives no message regarding the operation of the emergency button 10 in the deactivated state. The electronic detection was therefore not transferred to the operating state. This ensures that not directly with the activation of the emergency button 10, the door lock 100 is unlocked, z. B. because long before the emergency button 10 was pressed. As a result, an increased building security is achieved.

In order to achieve a particularly high level of security, provision may be made for the audio and video module 510 to be switched on during the first and / or the second delay time period. In this case, the emergency button 10 releases the audio and video module 510 at the beginning of the first and / or second delay period. Also, the audio and video module 510 is enabled by the emergency button 10 when the emergency button 10 is operated in the disabled state. For this purpose, the emergency button 10 communicates via the second bus system 401 and optionally via the first bus system 400 with the audio and video module 510.

It may be that the emergency button 10 is only deactivated when the audio and video module 510 is unlockable. If the audio and video module 510 part of the security system 1 according to the invention, then a deactivation can be omitted if the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module 510 is disturbed. This does not apply if the security system 1 does not comprise an audio and video module 510, but a monitoring system separate from the security system 1 is provided in the building.

It may be that the emergency button 10 delays the cause of the unlocking only by the first and / or second delay time period when the audio and video module 510 is unlockable. If the audio and video module 510 part of the security system 1 according to the invention, then a delay can be omitted if the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module is disturbed. This does not apply if the security system 1 does not comprise an audio and video module 510, but a monitoring system separate from the security system 1 is provided in the building.

In FIG. 10 a further embodiment of a security system 1 according to the invention is shown. As in the embodiment of FIGS. 7 to 9 For example, the security system 1 comprises a central escape route controller 300, which operates according to the FIGS. 7 and 8th is constructed. Key buttons 500, 500 ', 1500, 1500', 2500 associated with the respective emergency buttons 10, 10 ', 1010, 1010', 2010 are not shown for the sake of clarity. The central escape route controller 300 is connected to the second bus system 401. To the second bus system 401, a first subsystem 5 and a second subsystem 6 are connected. The two subsystems 5, 6 each comprise a first bus system 400, 400 '. Emergency buttons 10, 1010 and 10 ', 1010', 2010 'and door locks 200 and 200', 1200 ', 2200' are respectively connected to the respective first bus system 400, 400 '. The first bus systems 400, 400 'are the same bus system type, eg. B. order a CAN or a DCW bus. The second bus system 401 is another type of bus system, e.g. B. a LON or LAN bus.

The security system 1 comprises the multi-door display device 350. The multi-door display device 350 may e.g. B. visually indicate which door lock 200 or 200 ', 1200', 2200 'is in the unlocked state and which door lock is in the unlocked state. With the aid of the multi-door display device 350, an operator can perform a non-safety-relevant locking and unlocking of individual door locks 200 or 200 ', 1200', 2200 'of the security system 1.

Each subsystem 5, 6 comprises only one control device 100, 100 '. In each case, the control device 100, 100 'of the respective subsystem 5, 6 is connected to the second bus system 401. The control device 100 of the first subsystem 5 is connected to the emergency buttons 10, 1010 and the door lock 200 of the first subsystem 5 via the first bus system 400. On the other hand, the control device 100 'of the second subsystem 6 is integrated in an emergency button 10' of the second subsystem 6 and connected to the remaining emergency buttons 1010 ', 2010' and the door locks 200 ', 1200', 2200 'of the further first bus system 400'.

In the subsystem 5, a first emergency button 10 and a second emergency button 1010 are provided. If one of the emergency buttons 10, 1010 is actuated, then the actuated emergency button 10, 1010 respectively causes an unlocking of the door lock 200.

In the subsystem 6, a first emergency button 10 ', a second emergency button 1010' and a third emergency button 2010 'are provided. The emergency buttons 10 ', 1010', 2010 'selectively cause the door locks 200', 1200 ', 2200' of the second subsystem 6 to be unlocked. For example, when the first emergency button 10 'is actuated, only one unlocking of the first door lock 200' is initiated. Accordingly, upon actuation of the second emergency button 1010 'only one unlocking of the second door lock 1200' and upon actuation of the third emergency button 2010 'only one unlocking of the third door lock 2200' causes.

Various deviations are conceivable. Thus, an inventive security system 1 z. B. without the first or the second subsystem 5, 6 be configured. As the only or additional subsystem z. B. one of the in the FIGS. 1 to 6 be provided described safety systems 1 according to the invention. The design and functions of the emergency buttons 10, 10 ', 1010, 1010', 2010 'and the door locks 200, 200', 1200 ', 2200' are formed according to the preceding embodiments, as far as not described below in addition or deviating.

In each of the door locks 200, 200 ', 1200', 2200 'of the security system 1 is deposited, whether an actuation of the central emergency button 302 unlocking the respective door lock 200, 200'1200', 2200 'takes place. So z. B. the door locks 200, 200 ', 2200' allow unlocking as a result of actuation of the central emergency button 302, the door lock 1200 ', however, not. When the central emergency button 302 is operated, the door lock controls 201 of the door locks 200, 200 ', 2200' control the respective lock mechanism 205 for unlocking. On the other hand, such a control is omitted in the door lock 1200 '.

If the central emergency button 302 is actuated, the control devices 100, 100 'receive a corresponding message from the central emergency button 302 via the second bus system 401 and forward the message to all door locks 200 or 200', 1200 ', 2200' of the respective first bus system 400 '400' on. The door locks 200, 200 ', 1200', 2200 'decide whether the respective door lock control 201 of the door locks 200, 200', 1200 ', 2200' is based on the deposit, which includes the admission of a release due to the operation of the central emergency button 302 respective locking mechanism 205 for unlocking drives or not.

The deposit as to whether the door lock 200, 200'1200 ', 2200' is unlocked as a result of actuation of the central emergency button 302 takes place when the safety system 1 is put into operation by the operator. The deposit is made by the parameterization program.

In each of the emergency buttons 10, 1010, 10 '. 1010 ', 2010' is deposited, whether upon actuation of the first operating element 322 a transfer to the deactivated state for the respective emergency button 10, 1010, 10 '. 1010 ', 2010' is allowed or not. This results in a selective deactivation by the operation of the single first operating element 322 of the security system 1. So z. B. the emergency button 10, 10 ', 2010' be transferred in response to an actuation of the first control element 322 in the deactivated state, the emergency button 1010, 1010 ', however, not.

When the first operating element 322 is actuated, the control devices 100, 100 'receive a corresponding message via the second bus system 401 and forward the message to all emergency buttons 10, 1010, 1010', 2010 'of the respective first bus system 400, 400', which do not the control device 100, further. The emergency buttons 10, 1010, 10 '. 1010 ', 2010' of the security system 1 decide based on the deposit on the authorization for deactivation, whether the respective emergency button 10, 1010, 10 ', 1010', 2010 'transferred itself as a result of the operation of the first control element 322 in the deactivated state or Not.

When depositing whether deactivation of emergency buttons 10, 1010, 10 ', 1010', 2010 'is to be permitted, this may be a third variable. The third variable may be binary. The third variable is stored in the non-volatile memory of the respective first and second emergency button processing units 20, 21 of each emergency button 10, 1010, 10 ', 1010', 2010 '. If deactivation is permitted for the respective emergency button 10, 1010, 10 ', 1010', 2010 ', the third variable assumes a first value. If deactivation is prohibited for the respective emergency button 10, 1010, 10 ', 1010', 2010 ', the third variable assumes a second value. The emergency button 10, 1010, 10 ', 1010', 2010 'checks the value of the third variable before the emergency button 10, 1010, 10', 1010 ', 2010' deactivates and deactivates only if the third variable is the first value Has.

The deposit, whether the emergency button 10, 1010, 10 ', 1010', 2010 'should be deactivated, takes place at startup of the security system 1 by the operator. This is stored with the aid of a parameterization program.

In each of the emergency buttons 10, 1010, 10 '. 1010 ', 2010' is deposited, whether on actuation of the delay element 332 of the respective emergency button 10, 1010, 10 '. 1010 ', 2010' the release of the emergency button 10, 1010, 10 '. 1010 ', 2010' associated door locks 200, 200 ', 1200', 2200 'delayed by a second delay period or not. The second delay time is for the respective emergency buttons 10, 1010, 10 '. 1010 ', 2010' different lengths adjustable and in the security system 1, in particular in the emergency buttons 10, 1010, 10 ', 1010', 2010 ', deposited. Alternatively, the admission of the delay by the second delay time period and, if necessary, the length of the second delay time duration can only be used for groups of emergency buttons 10, 1010, 10 '. 1010 ', 2010', which are associated with a door lock 200, 200 ', 1200', 2200 'or a door 2, 2002, 3002, be individually adjustable. The setting and the deposit are made by the operator using the parameterization program.

So z. As the emergency button 10, 2010 'in response to an actuation of the delay element 332, the release of the door locks 200 and 2200' further delay, the emergency button 1010, 10 ', 1010', however, not. The length of the second delay time period for the emergency button 10 is different from the length of the second delay time period for the emergency button 2010 'selected. If the emergency button 10 is actuated and the delay element 332 is actuated within the first delay time period, which is stored for the emergency button 10, then the emergency button 10 delays from the actuation of the delay element 332 the release by that second delay time period, which is stored in the emergency button 10 , If the emergency button is' actuated in 2010 and the delay element 332 is actuated within the first delay period, which is stored for the emergency button 2010 ', then the emergency button 2010' delays from the actuation of the emergency button Delay element 332 the release by the second delay time, which is deposited in the emergency button 2010 'and which differs from the second delay time for the emergency button 10. When the emergency button 1010 is actuated, the emergency button 1010 delays the release by the first delay time period stored for the emergency button 1010. If the delay element 332 is actuated during the first delay time period of the emergency button 1010, then the unlocking is not delayed by a second delay time since this delay is not permitted for the emergency button 1010, but the emergency button 1010 immediately becomes unlocked after the first delay time 200 cause. The emergency buttons 10 ', 1010' delay the unlocking of the associated door lock 200 'or 1200' not at all. For emergency buttons 10 ', 1010', neither a first delay time nor a second delay time is allowed. Instead of a non-admission of a delay by the first and / or the second delay time period, a time duration of 0 s can also be stored. An actuation of the termination element 333 stops any delay of the unlocking.

When the delay element 332 is actuated, the control devices 100, 100 'receive a corresponding message via the second bus system 401 and forward the message respectively to the emergency buttons 10, 1010, 1010', 2010 'of the respective first bus system 400, 400' which are not Control device 100, further. The emergency buttons 10, 1010, 10 '. 1010 ', 2010' of the security system 1 decide on the basis of the deposit as to how to proceed.

The deposit as to whether the emergency button 10, 1010, 10 ', 1010', 2010 'allows for the delay by the second delay time period and, if so, the deposit of the length of the second delay time period, takes place at startup of the security system 1 Operator defined using the parameterization program. The first and / or the second delay time period can only be selected up to a maximum, permanently predetermined time duration.

Likewise, with the aid of the parameterization program, the operator can selectively store for which emergency button 10, 1010, 1010 ', 2010' which release condition is permitted. The cancellation condition for the on-site termination is always allowed. However, for each emergency button 10, 1010, 1010 ', 2010', reaching the cancellation condition selectively by lapse of the predetermined time interval or reaching the cancellation condition by lapse of the predetermined time interval and subsequent operation of the identification device 312 with the door 2 closed may be selectively allowed or not.

The deposit as to whether the emergency button 10 can be deactivated upon actuation of the first operating element 322 determines whether the emergency button 10 should delay the release by a second delay period when the delay element 332 is actuated, the length of the first and second delay periods, the deposit of the cancellation condition, and / or the deposit, whether the door lock 200 is to be unlocked upon actuation of the central emergency button 302, can also for the security system 1 according to the embodiment of FIGS. 7 to 9 be made.

Notwithstanding and not shown by the FIGS. 7 to 10 For example, several central escape route controllers 300, 300 'can also be connected to the second bus system 401. For example, in a psychiatry, a central escape route control 300 may be provided for placement in a guardroom, and another central escape route control 300 'may be provided for placement in a nursing room.

In the respective door locks 200, 200 ', 1200', 2200 'can be deposited in each case with the help of the parameterization program, as a result of an operation of which the central Nottastern 302, 302' is to be unlocked. For this purpose, a list is stored in the door locks. In the respective emergency buttons 10, 10 ', 1010, 1010', 2010 'can be stored in each case with the help of the parameterization program, as a result of an operation which of the first controls 322, 322' a deactivation is allowed. Deviating from the third variable, a list is respectively stored in the emergency buttons 10, 10 ', 1010, 1010', 2010 '.

The first to fourth embodiments of the security system 1 according to the invention also have a second bus system 401 and a central escape route control 300, even if the second bus system 401 and the central escape route control are not shown. Here, the control device 100 and the central escape route controller 300 are each connected to the second bus system 401. The central escape route control can, as in the FIGS. 7 and 8th be formed represented. In addition, embodiments of the security system 1 according to the invention are conceivable in which the first to fourth exemplary embodiments additionally comprise the missing components 301, 510 at least partially. If the security system 1 is designed for a plurality of doors, each door can be assigned an audio and video module 510. The emergency buttons 1010, 2010, 3010, which do not include the control device 100, and the door locks 200, 1200, 2200, 3200 are not connected to the second bus system 401.

In the FIGS. 1 to 10 are the door locks 200, 200 ', 1200, 1200', 2200, 2200 ', 3200 part of the security system according to the invention 1. However, it is conceivable that only the door lock controls 201 are part of the security system 1 according to the invention. In this case, the door lock controllers 201 are each connected to the Locking mechanism 205 and possibly the door condition monitoring devices 204, 206 connectable. Unlocking the door latch 200 in this case does not take place in the security system 1, but part of the security system 1 is that the door lock controller 201 controls the lock mechanism 205, ie, the door lock controller 201 turns on or off the electric power to the lock mechanism 205. In this case, instead of the terms "lock or unlock the door lock" each "activation of the locking mechanism for locking or unlocking" are used.

In the FIGS. 11 to 13 an emergency button 10 is shown. The in FIG. 11 Emergency button 10 shown is as emergency button 10, 10 ', 1010, 1010', 2010, 3010 in one of the security systems 1 of the invention FIGS. 1 to 10 can be used or used.

The emergency button 10 comprises the actuating element 11. The actuating element 11 can move from the starting position 11 FIG. 11 is moved to the operating position 11.II, which in FIG. 11 is indicated. In FIG. 12 the actuator 11 is also in the starting position 11.I.

In the operating position 11.II, the switch 63 is actuated. The switch 63 likewise changes from a first 63.I to a second position 63.II, as in FIG FIG. 12 indicated.

After actuation, the actuator 11 returns immediately and without manual intervention in the starting position 11.I back. For this purpose, a return means 12 designed as a spring is provided in the emergency button 10. Also, the switch 63 returns after the operation immediately and without manual intervention in the first position 63.I back.

The emergency button 10 comprises at least a first circuit board 60. This makes it possible to design the emergency button 10 in a compact and reliable manner.

The emergency button 10 has from a top 32 of a front surface 19 of the actuating element 11 in the installation direction a mounting height AH of less than 48 mm, preferably less than 45 mm, more preferably less than 43 mm.

The switch 63 is mounted on the first board 60. The first and second circuits are interrupted on the first board 60 by the operation of the switch 63.

The emergency button 10 also includes a second board 61. On the second board 61, the first, the second and the third emergency button processing unit 20, 21, 22 are arranged. The arrangement of the first, second and third emergency button processing units 20, 21, 22 is independent of whether the first, second and third emergency button processing units 20, 21, 22 serve as the processing unit 103, 104, 105 of the control apparatus 100.

The opening of the first and second electric circuit can be detected by the first and second emergency button processing units 20, 21, respectively. For this purpose, the first and second circuit boards 60, 61 are connected to one another via plugs 68.

The first and second boards 60, 61 are arranged at a fixed distance from each other. For this purpose, bolts 69 are provided, which fastened by means of screws 70, the first and the second board 60, 61 with each other at a fixed distance from each other (s. FIG. 13 ). The first and second boards 60, 61 are arranged parallel to each other.

The emergency button 10 includes a mounting plate 62. The mounting plate 62 is also disposed at a fixed distance from the first and second circuit boards 60, 61. For this purpose, bolts 71 are provided which connect the mounting plate 62 to the first circuit board 61 via screws 72.

The mounting plate 62 is used for attachment to a flush-mounted box. The flush-mounted box can have a diameter of 60 mm and a depth of 41 mm. The part of the emergency button 10 extending from the mounting plate 62 in the installation direction is referred to as the mounting part 73. The built-in part 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm, particularly preferably less than 29 mm. This provides enough space for cables in the flush-mounted box. The distance MP from a lower side of the mounting plate 62 to an upper side of the second board 62 is less than 22 mm, preferably less than 20 mm, particularly preferably less than 17 mm. The mounting plate 62 can also be used for attachment to a cover element of a surface-mounted housing (not shown). The abovementioned distances apply in particular to an emergency button, in which the Bluetooth module 64, unlike the representation in the figures, is fastened on an underside of the second circuit board 61.

As described above, the canceling action performed immediately at the emergency button 10 is performed without rotational movement of the operating member 11 and the switch 63. This makes it possible to use a switch 63 with a small height. Thus, the switch 63 is formed such that the switch 63 is free of rotation. The switch 63 has a height SH of less than 20 mm, preferably less than 17 mm, particularly preferably less than 15 mm.

The manner of canceling action and the small height of the switch 63 contributes to the low construction height AH of the emergency button 10.

Also contributes to the low height AH of emergency button 10 in that the switch 63 is arranged centrally under the actuator 11 and the actuator 11 is guided eccentrically in the emergency button 10.

As in the FIGS. 14 and 15 illustrated, the actuating element 11 has rod-shaped guide means 35. The guide means 35 are guided in guide sleeves 65. The guide sleeves 65 are connected to the mounting plate 62. To achieve good guidance, one of the guide sleeves 65 extends through the first board 60.

The guide means 35 are arranged parallel to the switch 63. The guide means 35 prevent a rotational movement of the actuating element 11 about an imaginary axis 701, which extends in the actuating direction 700.

By guided in the guide sleeves 65 guide means 35, the actuating element 11 is only translationally movable.

The actuating element 11 has an actuating means 36. As in the Figures 12 and 15 illustrated, the actuating means 36 is in the form of a circular cylinder. This ensures that always the actuating means 36 actuates the switch 63. In particular, a first and a second switching element 74, 75 of the switch are always actuated simultaneously (s. FIG. 13 ). By the first switching element 74 of the first circuit and the second switching element 75, the second circuit is opened.

The actuating means 36 is formed with a hollow interior 38. In the switch 63, a light source (not shown) is arranged. The light emitted by the light source is directed through the hollow interior 38 to the top 32 of the front surface 19 of the actuator 11 where the light passes through the actuator 11. The dome 32 thus serves as Illuminierbereich 32 of the actuating element eleventh

The actuating element 11 may comprise an opaque base body 33. The main body 33 may be provided with an opening deviating from the illustration in the figures. In the opening, an unillustrated translucent, in particular translucent insert can be arranged. The insert can be fixed in the opening, in particular pressed. As a result, the actuating element 11 can be produced particularly easily.

The front surface 19 is partially conical. The Illuminierbereich 32 forms the top of the truncated cone. The Illuminierbereich 32 projects against the actuating direction 700 from a cover 14 of the emergency button 10 out. As a result, the light leaving the illuminating area 32 is clearly visible laterally from the emergency button 10.

The return means 12 has a cavity 37. In the cavity 37, the actuating means 36 of the actuating element 11 and the switch 36 protrude with the first and the second switching element 74, 75. This results in a space-saving arrangement.

The Bluetooth module 64 is disposed between the first and second boards 60, 61. The Bluetooth module 64 is used for parameterization. Alternatively and not shown and space-saving, the Bluetooth module 64 is attached to a side facing away from the actuating element 11 of the second board 61. As a result, the distance of the first and the second circuit board 60, 61 can be further reduced.

A sabotage switch 66 is disposed on the first board 60. Due to the low construction height, an actuating extension 67 of the sabotage switch 66 is passed through the mounting plate 62. The actuating extension 67 rests directly against the cover 14 of the emergency button 10.

If the control device 100 is integrated in the emergency button 10, the emergency button 10 can, despite the low construction height AH, comprise the functions described above and thus be designed intelligently. The above-described functions are executed by means of a program code stored in at least one of the processing units 103, 104, 105.

The emergency button 10 has a covering means 13. The cover 13 is transparent and covers the front surface 19 of the actuator 11 from. As a result, the covering means 13 prevents the direct contact of the operating member 11 by a user. The cover 13 serves as a mental obstacle for the user.

The cover 13 remains nondestructive in an operation of the emergency button 10. The cover 13 moves at an operation of the emergency button 10 from a starting position 13.1 in an operating position 13.II. By the cover 13, the actuator 11 is actuated only indirectly via the cover 13 by the user.

The covering means 13 is arranged undetachably in the emergency button 10. This ensures that a user can not abusive remove the cover 13.

The covering means 13 is firmly connected to the actuating element 11. For this purpose, the covering means 13 extensions 27, which in FIG. 13 are shown. As in the Figures 13 . 14 and 15 illustrated, the actuating element 11 has holes 28 through which the extensions 27 are guided and materially connected to the actuating element 11.

The actuating element 11 has a flange-like section 31, on which the covering means 13 is fastened. The flange-like portion 31 has the holes 28.

The flange-like portion 31 serves as a stop of the actuating element 11 in the actuating direction 700. The actuating element 11 reaches the actuating position 11.II, when the flange-like portion 31 abuts against the mounting plate 62 or on the guide sleeves 65.

The flange-like portion 31 serves as a stop of the actuating element 11 against the actuating direction 700. The actuating element 11 reaches the starting position 11.I, when the flange-like portion 31 rests against a light guide 40. The light guide 40 holds the actuator 11 against the force of the return means 12. For this purpose, the light guide 40 has a contact surface 51.

The light guide 40 is fixed to the mounting plate 62. As a result, the actuator 11 is held against the force of the return means 12 even when the lid 14 is removed. The light guide 40 has a flange 52, with which the light guide 40 is fixed to the mounting plate 62 (s. Fig. 17 ). The light guide 40 is fixed to the mounting plate 62 by the same screws 72, by which the mounting plate 62 is fixed to the first board 60.

Alternatively and not shown, the covering means 13 may be formed as an elastic film which spans the actuating element 11.

Due to the fixed connection, the distance between the actuation position 11.II and the starting position 11.I and the distance between the actuation position 13.11 and the starting position 13.I correspond to each other. Immediately after the end of the operation and without manual action, the cover 13 is moved back to the starting position 13.I. The return means 12 transfers the covering means 13 indirectly via the actuating element 11 into the starting position 13.I.

The covering means 13 and the actuating element 11 each have a circular cross-section. The lid 14 has a circular recess 15. The covering means 13 protrudes counter to the actuating direction 700 through the recess 15. Likewise, the actuating element 11 protrudes through the recess 15th

The recess 15, the actuating element 11 and the covering means 13 have a common imaginary axis 701. The recess 15, the actuator 11 and the cover 13 are arranged concentrically.

The covering means 13 has an actuating surface 17, which is spaced from the front surface 19 of the actuating element 11. Also, the covering means 13 has a side surface 16 which is formed spaced from the side surface 18 of the actuating element 11.

By the spacing of the front surface 19 and the actuating surface 17, the transparent cover 13 can protrude far from the lid 14, while the partially opaque actuator 11 protrudes from the lid 14 only to a small extent. As a result, the light guide 40, which terminates substantially flush with the lid 14, even for obliquely standing in front of the emergency button 10 user remains clearly visible. Of the Optical fiber deviates a maximum of ± 3 mm, preferably a maximum of ± 2 mm, more preferably ± 1 mm from a plan conclusion with the lid 14 from.

Characterized in that the cover 13 projects far out of the lid 14, the emergency button 10 is operable for the user with the flat hand. For this purpose, the cover 13 in the operating position 13.II plan with the cover 14 or the cover 13 is in the operating position 13.II against the operating direction 700 of the cover 14 out. In other words, the distance ABS corresponds to the starting position 13.1 and the operating position 13.II at most the distance DF of a projection 30 of the actuating surface 17 to the cover 14. Similarly, the amount of the distance AB of the operating position 11.II and the starting position 11.I corresponds at most to Distance DF. In FIG. 11 The distance ABS and the amount of the distance AB correspond to the distance DF.

The emergency button 10 comprises lighting means 41. The lighting means 41 serve to indicate the unlocked and locked state of the door lock 200. For multiple emergency buttons 10, 1010, 2010, 3010, the bulbs 41 indicate the unlocked and locked state of the associated door latch or door locks 200, 1200, 2200, 3200. The lighting means 41 are arranged concentrically around the actuating element 11. For example, the unlocked state is indicated by the green light and the locked state by the red light. In particular, all bulbs 41 emit the same light to indicate the locked and unlocked states, at least if there is no danger.

The lighting means 41 can be controlled in at least two groups. Due to the different control z. Example, possible by the user more states of the security system 1 are displayed. Due to the additional display options, the user and / or the operator in a compact and simple way without additional display means a variety of states can be displayed. As a result, the security of the security system 1 is increased.

In FIG. 13 are shown by the exemplary existing eight individual light sources 41 six individual light sources, of which three bulbs are provided with the reference numerals 41 a, 41 b, 41 c. The individual lamps are referred to below as 41 a, 41 b, 41 c, etc.

Each of the individually controllable groups of lighting means 41 may comprise only a single lighting means 41 a, 41 b, 41 c, and so on. In the embodiment of FIGS. 11 to 17 each lamp 41 a, 41 b, 41 c, etc. individually controllable. Each lamp 41 a, 41 b, 41 c, etc. is each formed as an RGB LED. The bulbs 41 a, 41 b, 41 c, etc. are controlled so that each bulb 41 a, 41 b, 41 c, etc. at least four different, preferably at least five different colors can emit. This may be z. B. to red, blue, yellow, green and pink light act.

The lighting means 41 are driven by the third emergency button processing unit 22. For this purpose, the emergency button processing unit 22 and the lighting means 41 are connected to a ring bus (not shown).

The lighting means 41 are arranged on the first circuit board 60. Likewise, the acoustic alarm transmitter 23 is arranged on the first circuit board 60. The acoustic alarm generator 23 is controlled by the third emergency button processing unit 22.

Are several door locks 200, 1200 associated with the emergency button 10, such. In FIG. 4 represented, at least two options are conceivable. First, the emergency button 10 can not indicate the unlocked state until all the emergency button 10 associated door locks 200, 1200 are in the unlocked state. Here, the unlocked state is displayed only when the entire escape door width of the two leaves 3, 4 is available for escape. Alternatively, the emergency button 10 indicates the unlocked state already when one of the door locks 200, 1200 or all door locks of a door leaf 3, 4 are in the unlocked state. As a result, the possibility of escape is displayed as early as possible when one of the door leaves 3, 4 is unlocked. The options can be selected by the operator. For this purpose, z. B. a switch (not shown) may be provided in the security system 1.

Another state of the security system 1, which is indicated by the controllable in groups bulbs 41, is the danger. In this case, the lighting means 41 can indicate whether a fire alarm signal is present or whether an actuation signal has been generated.

The lighting means 41 can be controlled in such a way that the progression of the time delay of the unlocking is indicated by the lighting means 41 after the generation of the actuating signal. This emit z. B. increasingly less bulbs 41 light a color, especially red light.

As a further state of the security system 1, which can be represented by the lighting means 41, an error can be represented by the lighting means 41. The thus representable error may be an error of the security system 1. For example, it may be indicated that the control device 100, the door lock control 200 or the first or the second emergency button processing unit 20, 21 of the security system 1 has been inoperable, defective, failed, deliberately switched off or removed. The fault may be an error of the alarm system connected to the safety system 1 which is not ready, defective, failed, deliberately switched off or removed.

The optical fiber 40 includes a plurality of optical fiber portions 44 (see FIGS FIGS. 16 and 17 ). Each of the lighting means 41 a, 41 b, 41 c, etc. is assigned in each case an optical fiber region 44. The light guide 40 can be thoughtfully divided into the light guide regions 44. Recesses 46 are provided between the light guide regions 44. Through the recesses 46, the light essentially remains in the light guide regions 44.

Each optical waveguide region 44 has a forwarding section 48. The forwarding section 48 is arranged in the transmission direction 702 above the lighting means 41. The transmission direction 702 takes place counter to the actuation direction 700. The forwarding section 48 serves for light conduction up to an expanding section 45 of the light guide region 44. The expanding section 45 spreads in the transmission direction 702.

The expanding section 45 adjoins the forwarding section 48 in the transmission direction 702. The expanding portion 45 serves to broaden the light beam of the emitted light. The relaying section 48 widens less than the spreading section 45.

The light guide 40 is integrally formed. The light guide 40 is of the same material, in particular monolithic, formed. The light guide 40 is formed of translucent material.

The light guide regions 44 have a connection section 49. The connecting section 49 adjoins the expanding section 45 in the transmission direction 702. The connecting sections 49 of the optical waveguide regions 44 are integrally connected to one another in such a way that the one-piece and material-uniform optical waveguide 40 results.

The connecting portions may have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the light of one of the lighting means 41a, 41b, 41c, etc. is almost limited to a luminous area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h on the user-facing surface 47 of the light guide 40. In this case, each optical waveguide region 44 comprises a luminous region 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h.

The surface 47 of the light guide 40 corresponds to a circular ring. The luminous areas 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are configured as sectors of the circular ring. By emitting the light of a luminous means 41a, 41b, 41c, etc., the associated luminous area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h is illuminated. The circular ring encloses the actuating element 11.

The lighting means 41 can be controlled in such a way that at least one lighting means 41a, 41b, 41c, etc., the light of one color and at least one further lighting means 41a, 41b, 41c, etc. simultaneously emits the light of a different color. For example, in this way the luminous regions 50a, 50b, 50e, 50f can indicate light of one color and the luminous regions 50c, 50d, 50g and 50h indicate light of a further color. While the luminous areas 50a, 50b, 50e, 50f z. B. are continuously lit, the luminous areas 50c, 50d, 50g and 50h of bulbs 41 that emit flashing light, be illuminated.

Are z. For example, first the luminous areas 50a, 50b, 50e, 50f are illuminated by the light of a first color and the luminous areas 50c, 50d, 50g and 50h are illuminated by the light of a second color; then illuminating the luminous regions 50a, 50h, 50d, 50e from the light of the first color and the luminous regions 50b, 50c, 50f and 50g from the light of the second color; Subsequently, the luminous areas 50h, 50g, 50d, 50c illuminated by the light of the first color and the luminous areas 50a, 50b, 50e and 50f from the light of the second color, the impression of a circumferential color window arises.

The opposing luminous regions 50, ie the luminous regions 50, which lie on a straight line passing through the imaginary axis 701, in FIG FIG. 14 namely 50a and 50e or 50b and 50f or 50c and 50g or 50d and 50h, are preferably illuminated in the same way, ie in the same color and the same blinking frequency. Thus, the pattern is also for diagonally before the emergency button 10 standing user to imagine, even if obscured by the actuator 11, at least one of the opposing light emitting areas 50.

So that the light guide 40 is as little as possible obscured, the illumination area 32 protrudes at most 10 mm, preferably at most 7 mm, particularly preferably at most 5 mm above the light guide 40.

The emergency button 10 may include a brightness sensor (not shown). The brightness sensor measures the ambient brightness of the emergency button 10. If the ambient brightness decreases, the light intensity of the light emitted by the lighting means 41 is also reduced.

Via the Bluetooth module 64 parameters can be set via a mobile communication device, for. B. in which way the bulbs are to be controlled in which state of the security system 1. The parameters include the flashing frequencies of the lighting means 41, whether a continuous or a flashing light is to be emitted, which state is to be displayed by which color. The settings are stored after the parameterization in an electronic memory of the security system 1, in particular the control device 100. Also, displaying certain For safety reasons, states can not be selected by the operator and must always be stored in the electronic memory. The operator may himself select conditions of the security system 1 that the operator wishes to display through the bulbs 41. For this purpose, colors and / or patterns can be emitted by the lighting means 41, which are not assigned to a predetermined state. For example, the operator may choose which condition the operator would like to see through blue light. In addition to the parameterization via the Bluetooth module 64, the parameterization via the monitoring device 301 is possible.

The change in the state of the door lock 200 is then displayed after the door lock controller 201 has communicated the state change to the control device 100. The control device 100 then controls the lighting means 41 or causes a control of the lighting means 41.

When the safety system 1 is put into operation, a plurality of initialization views are generated in succession at fixed time intervals by the lighting means 41. In one of the initialization views, possible enabled functions of the control device 100 are displayed. In a second initialization view, the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 which can be integrated into the security system 1 are displayed, the status being displayed as faultless / faulty / non-existent. A third initialization view displays the status of inputs and outputs.

The central emergency button 302 is constructed almost identical to the emergency button 10. In particular, the actuating element 11 corresponds in function and structure to the emergency button actuating element 306. The switch 63 corresponds to the emergency button switch 307. The central emergency button 302 likewise comprises a return means corresponding to the return means 12. The central emergency button 302 comprises a first and a second board and / or a mounting plate, which are constructed according to the first board 60, the second board 61 and the mounting plate 62 and interconnected. On the first board of the central emergency button 302, the alarm device 309 and the lighting means 313 are arranged corresponding to the alarm transmitter 23 and the lighting means 41. On the second board of the central emergency button 302, the first to third emergency processing units 303, 304, 305 are arranged. The emergency button switch 307 terminates on the first board of the central emergency button 302. Upon actuation of the emergency button switch 307, a first and a second circuit are opened on the first board, which is wirelessly detectable by the first and the second emergency processing unit 303, 304. For this purpose, the first and the second board are connected via connectors. Of the The light guide of the central emergency button 302 corresponds in structure and function to the light guide 40. The light sources 313 can be controlled in accordance with the light sources 41.

It is conceivable that in the case of the central emergency button 302, a covering means 13 corresponding to the covering means 13 is configured differently or is missing. The lighting means 313 are not used in particular for the optical representation of a locking state of a emergency button 10. The lighting means 313 are used for optical representation of the first and the second delay time period and / or for optical representation that a Aufhebehandlung is possible.

The safety system 1 according to the invention does not necessarily have to have all the functions described in the description of at least one of the FIGS. 1 to 10 is mentioned, can perform. Rather, although in the security system 1, the functions that in the description of at least one of FIGS. 1 to 10 are mentioned, deposited. However, to be able to perform the functions, the functions must be enabled. This is done by the control device 100 communicating with a communication module 801. The communication module 801 is implemented as a smart card. The communication module 801 comprises a memory in which at least one code for activating at least one function is stored. The communication module 801 includes a microprocessor that serves only to encrypt the code. The communication module 801 is inserted into a receptacle 77 of the control device 100 (s. Fig. 18a ). By virtue of the arrangement in the receptacle 77, the communication module 801 is held mechanically and / or non-positively mechanically in the receptacle 77. At the same time, the communication module 801 is electrically contacted by the arrangement in the receptacle 77, so that the control device 100 can read the at least one code from the communication module 801. The control device 100 and the communication module 801 are in this case wired (not shown).

To read the code, the control device 100 first has to obtain access to the communication module 801 with the aid of a password. The controller 100 must decrypt the at least one code before the function can be enabled. By activating the function, the program code, with the aid of which the function is executable, is released.

To unlock the function, the program code, with the aid of which the function is executable, is released. If the program code is stored on the emergency button 10 and the control device 100 and the emergency button 10 are connected to each other by the first bus system 400, then the control device 100 initiates a release in the emergency button 10 via the first bus system 400 after reading the code of the communication module 801 the program code in the door lock controller 201 stored, the control device 100 causes after reading the code of the communication module 801 an activation in the door lock control 201 via the first bus system 801st

A code can unlock one function or several functions, in particular function blocks.

The parameterization program can only set parameters for the functions that were previously enabled. Only these parameters are displayed on the screen.

The function remains unlocked only when the code is read again from the communication module 801 repeatedly, in particular at regular time intervals. For this purpose, predetermined, non-adjustable time intervals can be stored in the control device 100. After expiration of the predetermined time interval, the control device 100 blocks the function if the associated code could not be read out of the communication module 801. If the function is performed by the emergency button 10, which is connected to the control device 100 via the first bus system 400, the control device 100 causes the function to be disabled via the first bus system 400. When the function is performed by the door lock controller 201 connected to the controller 100 via the first bus system 400, the controller 100 causes the function to be disabled via the first bus system 400.

On the communication module 801 several codes Code1, Code2 can be stored for different functions (s. Fig. 18a ).

If an additional function is to be released, it is conceivable to remove the communication module 801 from the receptacle 77 and to insert another communication module 802 into the receptacle 77 (see FIG. Fig. 18b ). The communication module 801 is referred to below as the mother module 801. The further communication module 802 is referred to below as an auxiliary module. The auxiliary module 802 is designed as a chip card. The auxiliary module 802 comprises a memory in which at least one code for activating the additional function is stored. The auxiliary module 802 includes a microprocessor that serves only to encrypt the code. The code Code3, which is stored on the auxiliary module 802, is read out by the control device 100 (see FIG. Fig. 18b ). To read the code Code3, the control device 100 first has to obtain access to the auxiliary module 802 by means of a password. The controller 100 must decrypt the at least one code before the function can be enabled. Code3 of the Auxiliary module 802 is stored in a memory 107 of the controller 100 (see FIG. Fig. 18c ). Thereafter, the code of the auxiliary module 802 is deleted on the auxiliary module 802 (s. Fig. 18c ). The auxiliary module 802 is removed from the receptacle 77. Thereafter, the mother module 801 is inserted into the receptacle 77 (s. Fig. 18d ). The code of the auxiliary module 802 is stored on the mother module 801 (see FIG. Fig. 18d ). The code is deleted from the memory of the controller 100 (see FIG. Fig. 18d ). The additional function will be unlocked.

On the other hand, in a mother module 801, the code is not stored in the control device 100 (see FIG. Fig. 18a, d ). In a mother module 801, the code is not deleted. Rather, the mother module 801 serves for permanent placement in the receptacle 77. The codes Code1, Code2, Code3 stored on the mother module 801 are read out repetitively. The control device 100 decides on the basis of an identifier K801, K802 of the communication module 801, 802, whether it is a mother module 801 or an auxiliary module 802. The identifier K801, K802 is electronically stored in particular on the mother module 801 and the auxiliary module 802. The identifier K801 of the mother module 801 differs from the identifier K802 of the auxiliary module 802.

The insertion and removal from the receptacle 77 takes place manually. The remaining processes are automatic.

The insertion and removal from the receptacle 77 may be reserved to an operator. For this purpose, the receptacle 77 is arranged inaccessible to an unauthorized user. In particular, the sabotage switch 66 is actuated in an unauthorized attempt to get to the recording. The recording can between the first board 60 and the second board 61, z. B. on an underside of the first board 60 may be arranged.

In order for the security system 1 to function, a mother module 801 must be arranged in a receptacle 77 of the security system 1. So that the security system 1 remains functional for longer than the predetermined time interval, the mother module 801 must remain in the receptacle 77.

Each emergency button 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 comprises a receptacle 77. Exactly one parent module 801 is necessary and provided for each first bus system 400, 400' of the security system 1. Only when the mother module 801 is inserted into the receptacle of a emergency button 10, 10 ', 1010, 1010', 2010, 2010 ', 3010, the emergency button 10, 10', 1010, 1010 ', 2010, 2010', 3010 simultaneously serves as control device 100 for the corresponding first bus system 400, 400 '. The other emergency buttons 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 of the security system 1, in whose reception there is no mother module 801, are indeed the same program codes as in the control device 100 deposited. Without mother module 801, however, the program codes are not enabled, so that the remaining emergency buttons 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 can not serve as a control device 100. Characterized in that the mother module 801 is in the receptacle 77, the emergency button 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 serves as a control device 100th

If the control device 100 is to be formed separately from the emergency buttons 10, 10 ', 1010, 1010', 2010, 2010 ', 3010 and the door locks 200, 200', 1200, 1200 ', 2200, 2200', 3200, then a mother module is formed 801 inserted into a receptacle 77 of the processing electronics 101. By having the mother module 801 in the receptacle 77, the processing electronics 101 are able to perform the functions of the control device 100.

If the security system 1 comprises a plurality of subsystems 5, 6 and thus a plurality of first bus systems 400, 400 ', the security system 1 comprises exactly the same number of parent modules 801, 801' as there are subsystems 5, 6 (see FIG. FIG. 10 ). The emergency button 10 ', which communicates with the mother module 801', and the processing electronics 101 of the control device 100 FIG. 10 that communicates with the mother module 801 are also provided to be connected to the second bus system 401.

The mother module 801, 801 'can contain different codes for each subsystem 5, 6 and thus enable different functions. So z. For example, the parent module 801 'of the second subsystem 6 may include a code for selectively associating the door locks 200', 1200 ', 2200' with the emergency buttons 10 ', 1010', 2010 '. On the other hand, the code for selective assignment of door locks to emergency buttons on the mother module 801 for the subsystem 5 is not necessary.

The communication module 801, 801 ', 802 may have a gap 803, through which a particular self-adhesive tape is guided. The self-adhesive tape is used for manual removal of the communication module 801, 801 ', 802 from the receptacle 77. The self-adhesive tape comprises information about the functions that can be unlocked by the codes stored on the respective communication module 801, 801', 802. The information may be a color code, a QR code and / or a bar code.

Alternatively, the communication module 801, 801 ', 802 may be formed as a smart card with a flexible portion. Part of the exception 77 outstanding part of the chip card may be provided with the information, ie the color code, the QR code and / or the bar code.

Once inserted in a security system 1 mother module 801 can be used again in a receptacle 77 of another security system 1 according to the invention.

Claims (15)

Security system (1) for unlocking at least one door lock (200), in particular for escape route security,
with at least one triggering element (10), in particular an emergency button (10), wherein the triggering element (10) comprises a manually operable actuating element (11), wherein the actuating element (11) for unlocking at least one locking mechanism (205) of a door lock (200) operable is
with a central escape route control (300),
the central escape route controller (300) comprising a central emergency button (302), the central emergency button (302) comprising an emergency button actuator (306), the emergency button actuator (306) being operable to unlatch the at least one latch mechanism (205).
characterized,
that the central emergency button (302) comprises a first digital emergency processing unit (303) and a second digital emergency processing unit (304). A security system according to claim 1, characterized in that the first and second emergency processing units (303, 304) each independently cause actuation of the door lock mechanism (205) for unlocking. A safety system according to claim 1 or 2, characterized in that the emergency button actuator (306) is movable from a home position to an actuated position and the emergency button actuator (306) is movable from the actuated position to the home position after manual actuation by a return means, and / or that an actuation of the emergency button actuating element (306) takes place without mechanical detents. Security system according to one of the preceding claims, characterized in that, as a result of the actuation of the emergency button actuating element (306), it is prevented until the presence of a cancellation condition that the Locking mechanism (205) is actuated to lock, in particular the Aufhebebonditionung by an operation of an identification device (312) of the central escape route control (300) is reached. Security system (1) according to one of the preceding claims, characterized in that the security system comprises a plurality of locking mechanisms (205) or with a plurality of locking mechanisms (205) is connectable, as a result of the operation of the central emergency button (302) at least for a locking mechanism (205) Control for unlocking is omitted, wherein in particular in the security system (1), preferably in door lock controls (201) of the security system (1), can be stored, whether an unlocking as a result of actuation of the central emergency button (302) is allowed. Safety system (1) according to one of the preceding claims, characterized in that, as a result of the actuation of the actuating element (11), it is prevented that a locking mechanism (205) of the door lock (200) can be actuated for locking without the presence of a cancellation condition, wherein the Termination condition is achievable by that a.) since the generation of the actuation signal, no signal of a door condition monitoring device (204, 206) has been received on the opening of a door leaf (2, 3, 4) within a predetermined time interval in the security system (1), or neither a signal from a first Door condition monitoring device (204) has been received from a second door condition monitoring device (206) via the opening of the door leaf (2, 3, 4) since generating the actuation signal within a predetermined time interval in the safety system (1) and b.) the predetermined time interval has elapsed and c.) a cancellation signal is generated at the central escape route control (300), in particular by the identification device (312), and is stored in the security system (1) that the existence of the conditions a.) to c.) for reaching the cancellation condition is permitted is, in particular for a plurality of tripping elements (10, 10 ', 1010, 1010', 2010, 2010 ', 3010) and / or a plurality of door locks (200, 200', 1200, 1200 ', 2200, 2200', 3200) of the security system (1) it is individually definable whether the existence of the conditions a.) To c.) To achieve the cancellation condition is permissible. Security system (1) according to one of the preceding claims, characterized in that the central escape route control (300) comprises a first operating element (322), wherein the triggering element (10) by an operation of the operating element (322) can be converted into a deactivated state, if the triggering element (10) is in an activated state, and the first operating element (322, 323) is electrically connected to the triggering element (10) via the central emergency button (302). Safety system (1) according to one of the preceding claims, characterized in that the central escape route control (300) comprises a delay element (332), wherein the activation of the locking mechanism (205) for unlocking by a first delay time period due to an actuation of the trigger element (10) is delayable and an actuation of the delay element (332) within the first delay period causes an extension of the delay of driving the locking mechanism (205), wherein the delay element are electrically connected via the central emergency button (302) with the trigger element (10). Security system (1) according to one of the preceding claims, characterized in that a multi-door indicator (350) and the central emergency button (302) via a third bus system (403) are interconnected, said central emergency button (302) messages, the central emergency button (302) receives from at least one bus subscriber of the first bus system (400) via the second bus system (401) to the multi-door display device (350). Security system (1) according to one of the preceding claims, characterized in that the central emergency button (302) and the identification device (312) is fastened to a first attachment plate (311) and / or that the central emergency button (302) is attached by means of the attachment plate (311 ) is variably fastened to an escape route control housing (340). Security system (1) according to one of the preceding claims, characterized in that the central emergency button (302) comprises lighting means (313) for optical representation of the first and / or second delay time duration, wherein the lighting means (313) on a first board of the central emergency button (31 302) are arranged. Security system (1) according to one of the preceding claims, characterized in that the lighting means (313) are at least in two groups, preferably individually controllable, wherein the lighting means (313) by a third digital Notfalltasterverarbeitungseinheit (305) are controllable. Security system (1) according to one of the preceding claims, characterized in that the central emergency button (302) comprises a light guide, wherein the light guide, the light guide having light guide portions, which are each associated with the controllable groups of lamps or the individual bulbs, wherein recesses between the light guide regions are provided. A security system (1) according to any one of the preceding claims, characterized in that an emergency button switch (307) is actuable by the emergency button actuator (306), the emergency button switch (307) operating upon actuation of the emergency button actuator (306) to generate a first and a second signal the operation of the Notfalltasterbetätigungselements (306) is used, wherein the first signal from the first emergency processing unit (303) and the second signal from the second emergency processing unit (304) is detectable wirelessly. Safety system (1) according to one of the preceding claims, characterized in that the emergency button actuating element (306) has guide means, wherein only a translational movement of the emergency button actuating element (306) is made possible by the guide means.

Images