EP3267455B1 - Safety system - Google Patents

Description

The invention relates to a security system for unlocking at least one door lock, in particular for securing escape routes, the security system comprising a triggering element, in particular an emergency button. The triggering element comprises an actuating element that can be actuated manually, wherein the actuating element can be actuated to unlock at least one locking mechanism of a door lock. The security system includes a central escape route control. The central escape route control includes a central emergency button. The central emergency button includes an emergency button actuating element, wherein the emergency button actuating element can be actuated to unlock the at least one locking mechanism.

Security systems for securing escape routes are known. The security systems include at least one emergency button and a door lock. A central emergency button can be provided in the security system, with which several door locks can be unlocked. The central emergency buttons used in practice up to now are not single-fault-proof. The EP 2 725 172 A2 discloses a security system with a central emergency button with two microprocessors. The security system includes a local emergency button, a local door lock and a central escape route control including a central emergency button and an input and / or output device (touch screen). When the trigger element is actuated, the door lock waits for a first delay period before unlocking takes place. Within this first delay period, the delay can be lengthened via the user interface of the input and/or output device (touch screen).

It is the object of the invention to specify a safety system in which a central emergency button is single-fault-proof and the safety system is also improved.

This object is solved by a security system according to independent claim 1 . Advantageous developments of the security system are specified in the dependent device claims, the description and in the figures. The features mentioned in the description and in the claims can each be essential to the invention individually or in combination

The central emergency button according to the invention comprises a first digital emergency processing unit and a second digital emergency processing unit. The first and second emergency processing units may each include a processor. The first and/or the second emergency processing unit can each be designed as a microprocessor or microcontroller. The first and second emergency processing units can each include a non-volatile memory. An emergency button electronics unit of the central emergency button can include the first and the second emergency processing unit. Because a first and a second emergency processing unit are provided, the second emergency processing unit can operate redundantly with respect to the first emergency processing unit, so that one-fault security is achieved.

In addition, the emergency button electronics unit can include a third digital emergency button processing unit. The third emergency processing unit may include a processor. The third emergency processing unit can be designed as a microprocessor or microcontroller. The third emergency processing unit may include non-volatile memory and/or have access to non-volatile memory.

Locking is understood to be the transfer of the door lock into the locked state. Unlocking is understood to mean the transfer of the door lock into the unlocked state.

The security system may include the locking mechanism.

The locking mechanism can e.g. B. be formed electromechanically or purely electromagnetically. The locking mechanism includes z. B. at least one coil. Activation of the locking mechanism for locking or unlocking can be implemented in particular by switching an electrical power supply on or off. The electrical power supply can be used to supply the coil with electrical current.

An electromagnetic locking mechanism is exemplified in US Pat DE100 50 111 C1 described. In the unlocked state z. B. no magnetic forces on the door. In the locked state z. B. magnetic forces on a door.

An electromechanical locking mechanism has a mechanical connection to the door when locked. In the unlocked state, the mechanical connection can be canceled or canceled.

So the electromechanical locking mechanism z. B. a locking element, d. H. a bolt or door latch, which is in a retracted position in the unlocked state of the door latch. In the retracted position, the latch member is disengaged from the door. In the locked state, the latch member is engaged with the door. In a further alternative of an electromechanical locking mechanism, the locking mechanism is constructed in the manner of a door opener. i.e. the locking mechanism includes a latch member. In the locked state of the door lock, a door latch of the door is engaged with the locking mechanism. In the unlocked state, the latch element releases the door latch in such a way that the door latch, in particular by pressure on the door, can disengage from the locking mechanism.

Switching off the electrical power supply preferably leads to an unlocked state of the door lock. Thus, the control of the locking mechanism realized to unlock the door lock by switching off the electrical power supply. Switching on the electrical power supply preferably leads to a locked state of the door lock. Thus, the control of the locking mechanism for locking is implemented by switching on the electrical power supply.

Alternatively, the safety system can be designed without the locking mechanism. In this case, the safety system only controls the locking mechanism. For example, the security system turns on or off the electrical power supply to the locking mechanism, or causes the electrical power supply to be turned on or off.

An "actuation for locking or unlocking" also occurs when the security system receives feedback on the status of the locking mechanism. "Triggering to lock or unlock" also occurs when, as detected by the feedback, the locking mechanism does not conform to the target state and therefore an alarm is issued and/or another attempt is made to reach the target state .

The security system may include a door lock controller. If a door locking control is provided, the door locking control preferably controls the locking mechanism. To do this, the door lock controller can switch the electrical power supply for the locking mechanism on and off.

The security system may include the door lock control but not the locking mechanism. In this case, the door locking control is designed as a door locking adapter. The door locking adapter serves to use the security system according to the invention with locking mechanisms that have already been installed.

The door lock includes the locking mechanism and, if equipped, the door lock controller. The security system particularly preferably includes the door lock.

The door latch or locking mechanism can be integrated into a mechanical lock.

In the following, a distinction is made between a user and an operator. A user can be anyone who uses the security system. For example, a user can B. be a guest who wants to escape through the door secured by the security system. An operator serves to operate the security system. The operator has access to a guard of the security system and / or can opposite Authenticate security system, especially to operate the security system. The guard device can be designed as a PC or a monitor. By the operator z. B. the cancellation condition can be met. In the following, the actuation signal is understood to be the signal generated by the user by actuating the actuating element in order to unlock the door lock and release the escape route.

The security system is used in particular to secure escape routes. The safety system thus serves to release the escape route. i.e. actuation of the actuating element leads to unlocking without authentication of the user. Unlocking can be immediate or delayed.

The triggering element is preferably designed as an emergency button. In this case, the actuating element corresponds to the actuating element of the emergency button. Alternatively, the triggering element can be designed as a panic bar assembly. In this case, the actuating element is designed as a panic bar. The triggering element can be designed as a fitting assembly. In this case, the actuator z. B. designed as a door handle.

The door locking controller and the triggering element are preferably connected to a first bus system. A connection to a bus system is understood below to mean a direct connection, so that a component connected to the bus system is to be regarded as a bus system participant with its own bus address. The door locking controller and the triggering element are connected to one another via the first bus system.

The triggering element can directly control the locking mechanism for unlocking. Alternatively and particularly preferably, the triggering element triggers activation of the locking mechanism for unlocking. Initiating an activation is understood in particular as meaning the sending of a message via the first or a second bus system, which message contains information and/or a command which prompts the direct or indirect recipient of the message to carry out the activation. The sender of the message initiates the activation. Initiating a triggering is thus understood to mean an indirect triggering. So e.g. B. send the triggering element a message via the first bus system to the door lock controller, whereupon the door lock controller controls the locking mechanism for unlocking. The triggering element can in particular cause the unlocking of the locking mechanism with a time delay.

The door lock controller may include a first processing means and a second processing means. The first and/or the second processing means can each comprise a processor. The first and/or the second processing means can e.g. B. each as a microprocessor - or microcontroller be formed. The first and/or the second processing means can each comprise a non-volatile memory.

A first door lock switch is actuated by the first processing means. A second door lock switch is actuated by the second processing means. Actuating, in particular opening, the first door lock switch is sufficient to switch off the electrical power supply for the locking mechanism. Actuating, in particular opening, the second door lock switch is sufficient to switch off the electrical power supply for the locking mechanism. There is thus redundancy.

After the generation of the actuation signal and/or when a fire alarm signal is present, both the first and the second processing means preferably actuate the locking mechanism for unlocking. Here, both the first and the second door lock switch are preferably actuated.

The first and the second emergency processing unit can each independently detect a signal via an actuation of an emergency button actuating element. Here, the first emergency processing unit detects a first signal about the actuation of the emergency button actuating element and the second emergency processing unit detects a second signal about the actuation of the emergency button actuating element. The first and the second emergency processing unit can then, independently of one another, trigger the activation of the door locking mechanism for unlocking. For this purpose, in particular at least one message is sent in which the first and/or the second emergency processing unit informs about the presence of the first or second signal about the actuation of the emergency button actuating element.

Preferably, the first emergency processing unit informs the first processing means and the second emergency processing unit informs the second processing means. In this way, in particular, both the first and the second processing means actuate the locking mechanism for unlocking, ie switch off the electrical power supply.

It may be that the first emergency processing unit always sends the notification of the presence of a signal of the operation of the emergency actuator. The Message may include the information of the first and the second emergency processing unit.

The central escape route control, in particular the central emergency button, can be connected to the second bus system.

The connection between the central escape route control and the door locking control can involve at least one bus system, in particular at least the second bus system. The door locking controller is preferably connected to the first bus system. The door locking controller can preferably not be connected to the second bus system. The connection between the central escape route control and the door locking control can include the first and the second bus system.

If the door locking controller is not connected to the second bus system, a control device can particularly preferably be connected both to the first bus system and to the second bus system. The control device can forward messages from the central escape route control to the door lock control. The control device can adapt the format of the message to the first bus system, but leave the message itself untouched.

The control device can be designed to initiate a non-safety-related activation of the locking mechanism for unlocking or for locking.

Thus, the control device can control the door locking mechanism for unlocking after receiving a positive authentication signal or cause such a control. For this purpose, the control device can be connected or can be connected to an access control system. The access control system can be connected or connectable to the first bus system. The access control system can B. a reader, a key switch, a keyboard for entering a code or a lock cylinder of a mechanical lock, in particular a self-locking panic lock, include or be designed in such a way.

The control device can, for. B. control the door locking mechanism for unlocking at a predetermined time or cause such a control. The unlocking at a predetermined time can be provided if z. B. the door should be unlocked in a time window per day.

If there is no danger, ie neither the triggering element was actuated nor is there a fire alarm signal, the control device can use the door locking mechanism to automatically relock it after the time has elapsed drive a predetermined period of time or cause such a drive. This can e.g. B. be the case if the door lock was previously unlocked due to a positive authentication signal. The predetermined period of time can be stored in the security system. The predetermined period of time may be selectable by an operator. The predetermined period of time can in particular some, z. ten, seconds, some, e.g. B. five, minutes or some, z. B. correspond to eight hours. The operator can store the predetermined period of time using a parameterization program.

Additionally or alternatively, it can be provided that the control device activates the locking mechanism for automatic relocking immediately after receiving a signal about a closed state of the door or initiates such an activation. The closed state of the door can be detected by at least one door state monitoring device.

The central escape route control can include an identification device. The identification device can be used to trigger activation of the locking mechanism for locking after the central emergency button has been actuated. If the central emergency button has been actuated and the locking mechanism has then been actuated for unlocking, the locking mechanism of the door lock for locking is electronically prevented, in particular by the door lock control, until a cancellation condition is present. The override condition can be achieved by actuation of the identification device. Actuation of the identification device can include entering a code, wireless or wired transmission of a code, recognizing a key by turning it, recognizing personal features such as fingerprints or irises. For example, the central escape route control can include a keypad, a key switch, a fingerprint sensor or a reader as an identification device. It may be that authentication at the identification device is sufficient to achieve the cancellation condition. Provision can be made for the emergency button operating element to be actuated in such a way that the emergency button operating element can be moved from an initial position into an operating position. Thus, the emergency button actuating element is mechanically movable. In the operating position, the signal is preferably generated by operating the emergency button operating element. As a result, the emergency button actuating element can give the user feedback about the actuation in a simple manner.

Furthermore, it is conceivable that the emergency button actuating element can always be moved from the actuating position to the starting position after actuation without manual intervention, preferably by a restoring means. The emergency button actuator can by the reset means z. B. be moved to the starting position after activation of the restoring means or immediately after the end of the manual operation. The restoring means can be a spring. Additionally or alternatively, the emergency button actuation element can always be actuated mechanically without locking. During actuation, the emergency button actuation element can remain in the initial position or be moved into the initial position immediately after the end of the manual actuation. The result of this is that the emergency button actuating element can be actuated again even without a manual return of the emergency button actuating element. Pressing the emergency button actuation element again can only unlock the door lock if the door lock is not already in the unlocked state. If the door lock is already in the unlocked state and the emergency button actuating element is actuated, the locking mechanism in particular is not actuated. The door lock remains in the unlocked state.

The security system may include multiple locking mechanisms or be connectable to multiple locking mechanisms. It is possible that as a result of pressing the central emergency button, all locking mechanisms are activated for unlocking. The security system may include multiple door lock controls. It is possible that as a result of the central emergency button being actuated, all door locking controls trigger the respective locking mechanism for unlocking.

Alternatively, it can be provided that, as a result of the actuation of the central emergency button, at least one locking mechanism is not activated for unlocking.

So it is conceivable that as a result of an actuation of the central emergency button, only some of the locking mechanisms are activated for unlocking, in particular that only some of the door locking controls activate the respective locking mechanism for unlocking. The other door locking controls can refrain from such a control. Unlocking is thus selective when the central emergency button is actuated.

For this purpose, it can be stored in the security system, preferably in the door locking controls of the security system, whether an unlocking as a result of an actuation of the central emergency button is approved. In particular, an operator can make the deposit. For this purpose, the operator z. B. use a parameterization program to set which door lock is to be unlocked as a result of pressing the central emergency button.

If the door lock controller receives a message regarding the actuation of the central emergency button, the door lock controller can first check whether unlocking is permitted as a result of the central emergency button being actuated. Only when unlocking is permitted as a result of the central emergency button being actuated does the door locking control activate the locking mechanism for unlocking. If, on the other hand, unlocking is not permitted as a result of the central emergency button being actuated, the locking mechanism for unlocking is not actuated. This procedure is particularly useful when all door locking controls of the security system are notified of the actuation of the central emergency button.

In particular, as a result of the actuation of the central emergency button, a message regarding the actuation of the central emergency button is sent to at least one door locking controller of the security system, preferably several door locking controllers of the security system, particularly preferably all door locking controllers of the security system. It may then be the case that at least some of the notified door locking controls activate the respective locking mechanism for unlocking.

It is conceivable that the security system includes several central escape route controls. For example, one of the central escape route controls may be intended for placement in the guard room. Another central escape route control can be provided for arrangement in a nurse's room. The security system can thus include several central emergency buttons.

There is preferably selectivity with regard to unlocking the door locks as a result of the actuation of the different emergency buttons. It may be the case that it can be stored in the safety system, in particular in the door locking controls, as a result of the actuation of which central emergency button is actuated to unlock the locking mechanism. It may be the case that a certain door locking control activates the locking mechanism as a result of the actuation of a first emergency button and the door lock fails to activate the locking mechanism for unlocking as a result of the actuation of a second emergency button. For this purpose z. B. in the door locking control a list with the central emergency buttons can be stored, as a result of which the locking mechanism to be actuated for unlocking. For example, the list B. created by an operator in the parameterization program sets the selectivity of the central emergency button to the door locks. This procedure is particularly useful when all door locking controls of the security system are notified of the actuation of the central emergency button of the security system.

The identification device can alternatively or additionally serve to achieve an override condition: as a result of actuation of the trigger element locally, it may be that as a result of the actuation signal generated by the actuation of the trigger element being electronically prevented without the presence a cancellation condition, a locking mechanism of the door lock can be controlled to lock.

1. a.) seit dem Erzeugen des Betätigungssignals kein Signal der Türzustandsüberwachungsvorrichtung über das Öffnen des Türblatts innerhalb des vorbestimmten Zeitintervalls in dem Sicherheitssystem, insbesondere von der Elektronikvorrichtung, empfangen worden ist,
2. b.) das vorbestimmte Zeitintervall verstrichen ist und
3. c.) ein Aufhebesignal durch eine Authentifizierung an der Identifizierungsvorrichtung an erzeugt ist.

In particular, if the door, in particular the door leaf, remains closed after the actuation signal has been generated, the cancellation condition can be achieved by the following conditions if

1. a.) since the activation signal was generated, no signal has been received from the door status monitoring device about the opening of the door leaf within the predetermined time interval in the security system, in particular by the electronic device,
2. b.) the predetermined time interval has elapsed and
3. c.) a cancellation signal is generated by authentication at the identification device.

1. a.) weder ein Signal von der ersten Türzustandsüberwachungsvorrichtung noch von der zweiten Türzustandsüberwachungsvorrichtung, die für ein Türblatt und/oder eine Türverriegelung vorgesehen sind, über das Öffnen des Türblatts seit dem Erzeugen des Betätigungssignals innerhalb des vorbestimmten Zeitintervalls in dem Sicherheitssystem, insbesondere von der Elektronikvorrichtung, empfangen worden ist.

If a first and a second door status monitoring device are provided, the condition a.) can deviate from that

1. a.) neither a signal from the first door status monitoring device nor from the second door status monitoring device provided for a door leaf and/or a door lock about the opening of the door leaf since the actuation signal was generated within the predetermined time interval in the security system, in particular from the electronic device , has been received.

Conditions a.) to c.) may be sufficient to achieve the termination condition.

It is preferably conceivable that a permissible cancellation signal, which contributes to the achievement of the cancellation condition, can only be generated after the predetermined time interval has elapsed. On the other hand, authentication at the identification device within the predetermined time interval does not lead to a permissible override signal contributes to the achievement of the termination condition. It may be that the elapse of the predetermined time interval can be optically displayed on the central escape route control, in particular on the central emergency button. For this purpose, the central escape route control, in particular the central emergency button, can include lamps.

It is conceivable that the lighting means of the central escape route control can be used to show in different ways whether the locking mechanism for locking can be activated by a cancellation condition or a cancellation condition. So that different information can be displayed by the lighting means, the lighting means can be controllable in at least two groups. The light sources can be designed as multi-color light sources, so that the different information can be displayed as different light patterns.

In particular, a delay in the unlocking as a result of the actuation of the triggering element can also be displayed with the lighting means.

It may be that the conditions a.) to c.) are not sufficient to achieve the cancellation condition and thus trigger the locking mechanism to lock. Rather, it may be the case that the cancellation condition is only met if it is also stored electronically in the security system, in particular, that the existence of conditions a.) to c.) is permissible for the fulfillment of the cancellation condition. The deposit of the admissibility of can be made by an operator. Permissibility can be stored with the help of a parameterization program. In the parameterization program, the operator can set manually whether the conditions a.) to c.) are permissible for achieving the cancellation condition. In particular, it can be stored individually for each door locking control as to whether the conditions a.) to c.) for achieving the cancellation condition are permissible.

If several central escape route controls are provided, it can be stored for which identification device authentication is permitted in order to fulfill condition c.). The storage can be made individually for each door locking control.

The on-site triggering element may include illuminants. The lighting means can show in different ways whether the locking mechanism for unlocking was actuated by actuating the central emergency button or by actuating the triggering element. Thus, an on-site operator can immediately perceive whether the override condition or an override condition must be met. So that different information can be displayed by the light sources, the light sources can be divided into at least two groups be controllable. The light sources can be designed as multi-color light sources, so that the different information can be displayed as different light patterns.

The central escape route control can include a first operating element. The first operating element is used to deactivate the triggering element. The triggering element can be brought into the deactivated state by actuating the first operating element if the triggering element is in the activated state. In the deactivated state, as a result of an actuation of the actuating element, the locking mechanism for unlocking the door lock is not activated. In the activated state, as a result of an actuation of the actuating element, the locking mechanism is actuated to unlock the door lock. Actuation of the first operating element can include authentication, in particular entering a code, wireless or wired transmission of a code, recognition of a key by turning, recognition of personal features such as fingerprints or irises. The first operating element can be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader.

The central escape route control can include a second operating element. The triggering element can be switched to the activated state by actuating the second operating element if the triggering element is in the deactivated state. In order to actuate the second operating element, it may not be necessary for authentication to take place. So the second control z. B. be designed as a button.

The central escape route control and the triggering element can be connected to one another via at least one bus system, in particular via at least a second bus system. The central escape route control can be connected to the second bus system. The triggering element can be connected to the second bus system. Alternatively, the triggering element can be connected to the first bus system but not to the second bus system. The connection between the central escape route control and the triggering element can thus include the second bus system or the first and the second bus system.

The second bus system can in particular be a LON or LAN bus. The first bus system can in particular be a CAN or DCW bus.

If the triggering element is not connected to the second bus system, the control device can particularly preferably be connected both to the first bus system and to the second bus system. The control device can receive messages from the forward the central escape route control to the triggering element. The control device can adapt the format of the message to the first bus system, but leave the message itself untouched.

The central escape route control and/or the connection of the central escape route control to the triggering element can be monitored for errors, in particular when the triggering element is in the deactivated state. If an error is detected during monitoring, the tripping element is switched to the activated state. The error can in particular be a malfunction or failure of the central emergency button and/or a malfunction or interruption of the connection, in particular of the bus system. This can increase on-site security if activation or unlocking can no longer be carried out via the central escape route control or via the guard device.

A live sign signal from the first emergency processing unit and the second emergency processing unit may be repetitively sent over the link to the triggering element. The triggering element can check the receipt of the sign-of-life signals. If at least the sign-of-life signal from the first emergency processing unit or the second emergency processing unit fails to appear once or several times, the triggering element switches itself to the activated state.

It may be that the activated state and/or the deactivated state of the triggering element is stored electronically in the triggering element. The triggering element can thus change to the activated state by the triggering element changing the state from “deactivated” to “activated”. To this end, the triggering element can store and change a variable that can assume a deactivation value and an activation value.

In the deactivated state, the triggering element is preferably always supplied with electrical power. In the deactivated state, an electronics unit of the triggering element is in particular capable of receiving signals and/or sending messages.

It may be that the first and/or the second operating element is electrically connected to the triggering element via the central emergency button. The first and/or the second operating element are preferably not connected to the second bus system. A signal about the actuation of the first and/or second operating element is particularly preferably recorded or processed by the emergency module, in particular by the central emergency button.

When the first operating element is actuated, a first deactivation circuit and a second deactivation circuit can be opened or closed. It may be that a deactivation signal of a first deactivation circuit is detected by the first digital emergency processing unit of the central emergency button and a deactivation signal of a second deactivation circuit is detected by the second digital emergency processing unit of the central emergency button. At least one message, in which the first and/or the second emergency processing unit provides information about the presence of the first or second deactivation signal, is then sent to the triggering element. Particularly preferably, the triggering element is only switched to the deactivated state when the triggering element has been informed both of the presence of the first deactivation signal and of the presence of the second deactivation signal.

A signal about the actuation of the second operating element can be detected or processed by the third emergency processing unit. After detecting or processing the signal via an actuation of the second operating element, a message for activation can be sent to the triggering element. The central emergency button and the second operating element are preferably connected via a bus, in particular an I ² C bus.

The first and/or the second operating element are preferably designed without a processor. The fact that the signals about the actuation of the first and/or second operating element are recorded or processed by the electronic emergency button unit means that it is not necessary for the deactivation module to have its own intelligence, e.g. B. in the form of at least one processor.

According to the invention, the central escape route control includes a delay element. As a result of an actuation of the trigger element, the actuation of the locking mechanism for unlocking can be delayed by a first delay period.

An operation of the delay element within the first delay period causes the delay in actuating the locking mechanism to be lengthened. Operating the delay element can include authentication, in particular entering a code, wireless or wired transmission of a code, recognizing a key by turning it, recognizing personal features such as fingerprints or irises. Manual operation can therefore take place through physical contact or without contact. The delay element can be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader.

The central escape route control preferably includes a termination element for ending the delay. If the terminating element is operated, the deceleration is terminated and the locking mechanism is actuated immediately for unlocking. It may not be necessary for authentication to operate the termination element. So the termination element z. B. be designed as a button.

According to the invention, the delay element is electrically connected to the triggering element via the central emergency button.

It may be that the terminating element is electrically connected to the triggering element via the central emergency button.

The delay element and/or the termination element are preferably not connected to the second bus system. A signal about the actuation of the delay element and/or the termination element is particularly preferably recorded or processed by the central emergency button. For this purpose, the central emergency button can include the digital emergency button electronics unit.

A signal about the actuation of the delay element and/or the termination element can be detected or processed in particular by the third emergency processing unit. After detecting or processing the signal about an actuation of the delay element, a delay extension message may be sent to the trigger element. After detecting or processing the signal of operation of the terminating element, a delay ending message may be sent to the triggering element. The central emergency button and the delay element and/or the termination element are preferably connected via a bus, in particular an I ² C bus.

The delay element and/or the termination element are preferably designed without a processor. Since the signals relating to the actuation of the delay element and/or the termination element are recorded or processed by the electronic emergency button unit, it is not necessary for the delay module to have its own intelligence, e.g. B. in the form of at least one processor.

A multi-door display device and the central escape route control, in particular the central emergency button, can be connected to one another via a third bus system. The third bus system can be in the form of a CAN bus or a DCW bus. The central escape route control, in particular the central emergency button, and the multi-door display device can thus be connected to the third bus system. The central emergency button can forward messages from the control device, the triggering element and/or the door lock control to the multi-door display device. The central emergency button can change the format of the message. It is also conceivable to connect several multi-door display devices to the third bus system.

The central escape route control can have a modular structure. The central escape route control can include an emergency module. In addition to the central emergency button, the emergency module can include the identification device.

The central escape route control can include a deactivation module. The deactivation module may include the first control and the second control.

The central escape route control can include a delay module. The delay module may include the delay element and the termination element.

The deactivation module and/or the delay module can be arranged and in particular fastened in a common escape route control housing together with the emergency module. The emergency module can include a first attachment plate, with which the emergency module is attached to the escape route control housing. The deactivation module can include a second attachment plate with which the deactivation module is attached to the escape route control housing. The delay module may include a third attachment plate that attaches the delay module to the escape route control housing.

In particular, the central emergency button and the identification device are mechanically fastened to one another via the first fastening plate. In particular, the first and the second operating element are mechanically fastened to one another via the second fastening plate. In particular, the delay element and the terminating element are fixed to each other by means of the third fixing plate.

The emergency module and/or the deactivation module can be fastened at different points in the escape route control housing. The arrangement of the modules in the escape route control housing is preferably variable. The modules can be arranged side by side in different sequences. In particular, each module can be arranged on the right, left or in the middle. It can be the case that the emergency module can be arranged both to the left and to the right of the deactivation module in the flight path control housing. It is preferably conceivable that, in addition to the central escape route control, the multi-door display device can be arranged in the escape route control housing.

The escape route control housing can include attachment options for variable attachment of the modules and/or the multi-door display device. The mounting options can be designed as a perforated strip or as a slot.

The emergency module, the deactivation module and/or the delay module can have a display area. The display area is preferably provided on the first, second and/or third mounting plate. The display area can be used to display symbols that explain the function of the modules. In addition, at least one optical light can be provided for displaying states of the security system. The optical light can be provided in at least one of the display areas and/or provided behind at least one of the display areas in such a way that the light emitted by the optical lights can be seen on the display area. For this purpose, the emergency module, the deactivation module and/or the delay module can include at least one optical light.

A mechanical key, an electro-mechanical key, a mobile code-storing device, e.g. B. understood a code card, a code, a biometric feature or the like. The security system according to the invention can include the authentication means.

It is conceivable that the matching means of authentication on the delay element and on the first operating element differ from one another. The matching means of authentication at the delay element and at the identification device can differ from each other. Additionally or alternatively, the matching means of authentication on the first operating element and on the identification device can differ from one another. Particularly preferably, the appropriate authentication means on the delay element, the first control element and on the identification device differ from one another. For example, a different key or code is required in each case. The authentication means are particularly preferably designed in the manner of a master key system. A first authentication means can be used to authenticate a first number of elements, selected from the delay element, first control element and/or the identification device, while a second authentication means can be used to authenticate a second number of elements, selected from the delay element, first control element and/or the identification device, the second number being less than the first number. The second number can also be one. For example, both the identification device, the first operating element and the delay element can be operated with a first authentication means. However, only the delay element and/or the identification device can be operated with a second authentication means, while with the second authentication means the first control element cannot be operated. So e.g. B. All operators operate the delay element, but only a few or only one operator is allowed to operate the first control element and deactivate the trigger elements on site. If only two of the elements selected from the delay element, the first operating element and the identification device are present in the central escape route control, authentication can be possible on both elements with the first authentication means, while authentication can be carried out on only one of the two elements with the second authentication means can be possible. The central emergency button is preferably used to control the optical light. In particular, the central emergency button is used to control an optical light of the deactivation module and/or the delay module. In this case, the central emergency button can be connected to the optical light of the deactivation module and/or the delay module via a bus. The central emergency button is particularly preferably connected to the optical lamp of the deactivation module and/or the delay module via the bus, through which the emergency button is connected to the second control element, the delay element and/or the termination element.

The central escape route control can include lighting means for visual display of the first delay period. The optical representation of the first delay period makes it possible for the operator to recognize in a simple manner whether and how long the operator has to extend the delay, in particular by operating the delay element.

For example, the lighting means for visual representation of the first delay time period can be controlled in such a way that as the first delay time period progresses, an increasing or decreasing number of lighting means light up and/or that an increasing or decreasing number of light sources light up in one color as the first delay time period progresses.

The central escape route control can include lighting means for visual display of the second delay period. The lamps can be controlled in such a way that as the second delay time progresses, an increasing or decreasing number of lamps light up and/or that an increasing or decreasing number of lamps light up in one color as the second delay time period progresses.

Preferably, the same lighting means that visually represent the first delay period can visually represent the second delay period. Here, the representation of the first and the second delay period can differ from one another. This gives the operator feedback as to which delay time is elapsing. The second delay period can be represented in such a way that the visual representation of the passage of time is repeatedly interrupted by a pattern that symbolizes a passage of time.

In particular, the emergency module can include the light source. Particularly preferably, the central emergency button includes lighting means for visual display of the first and/or second delay period.

The lighting means, which are used to visually represent the first and/or the second delay period, can be used to visually represent that the cancellation condition can be reached by operating the identification device. The lighting means, which are used to visually represent the first and/or the second delay period, can represent whether the cancellation condition can be reached by operating the identification device.

The lighting means can preferably be controlled in at least two groups, particularly preferably individually.

Provision is preferably made for the light sources to be in the form of multiple color light sources. This means that the lamps can emit light of different colors. The lighting means can in particular be in the form of multi-color LEDs. In this case, each illuminant has a number of individual LEDs. The light sources are particularly preferably designed as RGB LEDs. The different colors can be generated in part by the simultaneous light emission of the individual LEDs of the multi-color LED. In this case, different colors can be generated by different light components of the individual LEDs.

It is conceivable that the lighting means can be controlled in such a way that light can be emitted by the lighting means in at least two, preferably in at least three, particularly preferably in at least four different colors. For example, the light sources can emit red, green, yellow and blue light. Due to the different colors, different statuses of the security system can be displayed particularly well.

The lighting means can be connected to a bus, in particular a ring bus. The central escape route control, in particular a digital emergency processing unit of the central emergency button, can control the lighting means by means of the bus, in particular the ring bus. The third digital emergency processing unit particularly preferably controls the lighting means.

The central emergency button preferably includes an optical fiber. The light guide can be used to guide the light emitted by the lighting means in the direction of the surface of the central emergency button that is visible to the operator. The light guide is preferred designed in such a way that the different activation of the at least two groups of light sources is visible to the operator. For this purpose in particular, the light guide can have light guide areas that are assigned to each group of light sources. If lighting means can be controlled individually, a light guide area can be assigned to each lighting means that can be controlled individually. Each light source can particularly preferably be controlled individually and each light source is assigned a light guide area.

Provision can be made for light beams emitted by one of the lighting means to be guided essentially only in the light guide area assigned to the respective lighting means. The surface of the light guide that is visible to the operator can be perceived at least divided into luminous areas. Each light guide area can include a luminous area. Emission of light from a lighting means preferably results essentially only in the lighting of the associated lighting area. The lighting means are located in the direction of the surface of the triggering element in the middle below the lighting areas.

Additionally or alternatively, the surface of the light guide that is visible to the operator can be designed, for example, as a circular ring. The luminous areas can, in particular, each correspond to a sector of the circular ring.

The lamps can be arranged in a ring. The light guide can surround the emergency button actuating element in a ring shape.

It is conceivable that gaps are provided between the light guide areas. The cutouts in the light guide are provided so that the light sources, which can be controlled differently, cannot be routed from one light guide area to the other. The recesses are located between the groups of light sources, in particular the individual light sources. The light guide areas are located in the direction of the surface of the triggering element above the lighting means.

Preferably, the light guide areas each include a spreading section. The expanding section can be used to spread the light emitted by the associated illuminant. As a result, the emitted light can be distributed over the associated lighting area. The spreading section can in a projection z. B. in the shape of a trapezoid, in particular in the shape of an isosceles trapezium.

The area of the spread-apart end of the spread-apart section corresponds in particular to the luminous area in terms of size and/or shape. As a result, the emitted light can be distributed particularly well over the associated lighting area.

The expanding section is preferably arranged in the direction of the surface of the triggering element above the lighting means. As a result, the light emitted by the lamps reaches the light guide particularly well.

Provision is preferably made for the light guide area to have a transmission section for light transmission, with the light from the lighting means being able to be conducted through the transmission section to the spreading section. The forwarding section is thus arranged between the expanding section and the associated illuminant. The forwarding section serves to forward the light emitted by the illuminant to the spreading section. The forwarding section can spread at least less than the spreading section. The forwarding section can thus have edges that are parallel to one another in the direction of the light guide. The forwarding section may be provided when the light guide is a plate, e.g. B. the mounting plate or a circuit board, protrudes. Since the spreading section begins near the lighting area due to the forwarding section, the light guide can have a small space requirement at the height of the plate to be projected through. Thus, the stability of the plate can be guaranteed.

The light guide is preferably designed in one piece. The light guide can also be made of the same material. The light guide is particularly preferably designed as a monolith. The light guide is made in particular from translucent material.

The light guide area can have a connection section. The connecting section can be used to connect the light guide areas to one another. In particular, the connection areas of the light guide areas merge into one another in one piece, particularly preferably monolithically. The light from the lighting means can preferably be guided through the expanding section to the connecting section. In this way, the connecting section can join the expanding section in the direction of the light guide. The connection portion may include the luminous area. The connection areas together can comprise the surface facing the user.

The connecting section can have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the recesses are designed to be particularly deep, so that the light guide areas are separated to a particularly large extent. Thus essentially only the lighting area is illuminated by the associated lighting means. The depth of the connecting section nevertheless enables a mechanically stable, one-piece light guide.

It is conceivable that the light guide surrounds the emergency button actuating element. For example, the light guide and the emergency button actuator can be concentric be arranged to each other. The light guide, the emergency button actuator z. B. ring-shaped.

Provision is preferably made for the light guide to have a contact surface for the emergency button actuating element. The contact surface can hold the emergency button actuating element in a form-fitting manner, in particular against an actuating direction. It may be that the restoring means presses the emergency button actuating element against the contact surface. The restoring means can be used to move the emergency button actuating element back into the starting position after it has been actuated. The restoring means particularly preferably moves the emergency button actuating element back into the starting position without manual intervention. Thus, the emergency button actuating element can return to the starting position immediately after actuation.

The central emergency button can include at least one circuit board, preferably at least two circuit boards.

Provision can be made for the central emergency button to include an emergency button switch. The emergency button switch can be actuated by the emergency button actuating element. The emergency button switch can be used in particular to generate at least one signal about the actuation of the emergency button actuating element.

The emergency button switch can be integrated into a circuit on the circuit board or on one of the circuit boards. The emergency button switch can in particular end on one of the circuit boards. In particular, it is provided that the emergency button switch is used when the actuating element is actuated to generate at least two signals about the actuation of the emergency button actuating element. The signals can be generated by interrupting at least one first and one second electric circuit. The emergency button switch can be arranged on a first circuit board. The first emergency processing unit and/or the second emergency processing unit are preferably arranged on a second circuit board. In this case, an arrangement on an upper side or on an underside of the second circuit board is conceivable.

In order in particular to ensure reliable signal transmission, it is conceivable for the first emergency processing unit and/or second emergency processing unit to be able to detect the signals via the activation of the emergency button activation element without cables. The first emergency processing unit and/or the second emergency processing unit can be electrically connected to the emergency button switch without a cable. For example, the first and second emergency processing units and the emergency button switch are electrically connected to each other by plugs. Conductor tracks go from the plug the emergency button switch on the first circuit board and/or from the connector there are conductive paths to the emergency processing units on the second circuit board.

It may be that the first and the second circuit board are connected to one another in such a way that the first and the second circuit board are arranged mechanically immovably from one another at a fixed distance. At least two fastening means can be provided for connecting the first and the second circuit board to one another. For example, the boards can be connected to one another by bolts. The bolts can be detachable, e.g. B. be arranged by one or more screws in the central emergency button.

It is conceivable that the third emergency processing unit is arranged on the second circuit board.

The emergency button switch can also return from an operating position to a starting position and/or can be actuated without resting after the operating element has been actuated without manual intervention. For this purpose, the emergency button switch can have a resetting device, e.g. B. have a spring element.

The lighting means can possibly be arranged on the first circuit board. Additionally or alternatively, at least one acoustic alarm can be arranged on the circuit board, in particular on the first circuit board.

The central emergency button preferably has a structural height AH of less than 48 mm, preferably less than 46 mm, particularly preferably less than 44 mm, from a front surface, in particular from a crest of the front surface of the actuating element. The construction height means the construction height that extends from the crest in the direction of installation. A lower limit may be limited by what is technically feasible. For example, the structural height AH can be at least 29 mm, preferably at least 27 mm, particularly preferably at least 25 mm.

It is conceivable that the central emergency button includes a mounting plate for attachment. The central emergency button can be used with the mounting plate, e.g. B. be fastened to the mounting plate.

The central emergency button can be constructed in such a way that a built-in part of the emergency button or the central emergency button extends from the mounting plate in the actuation direction, with the built-in part being able to be arranged in a flush-mounted box with a diameter of 60 mm and a depth of 41 mm.

It can preferably be the case that the first circuit board and the second circuit board are arranged one behind the other. In this case, one behind the other means in the installation direction. So it can be that the first circuit board is arranged between the front side of the emergency button actuating element and the second circuit board. The emergency button switch on the is particularly preferred first circuit board integrated into a circuit. Additionally or alternatively, the emergency button switch can end on the first circuit board.

In particular, to save space, an emergency button switch can be used, which extends from the underside of the mounting plate less than 15 mm, preferably less than 12 mm, particularly preferably less than 10 mm from the underside of the mounting plate in the installation direction. A lower limit for the distance can be determined by what is technically feasible. The extension can be as small as possible, e.g. B. at least 9 mm, preferably at least 7 mm, particularly preferably at least 5 mm. The emergency button switch can extend from an upper side of the mounting plate against the installation direction between 1 mm and 5 mm, preferably between 2 mm and 4 mm.

Preferably, a distance MP from an underside of the mounting plate to an upper side of the board, in the case of several boards a distance from an underside of the mounting plate to an upper side of the board, which is furthest away from the mounting plate, is less than 22 mm, preferably less than 20 mm, particularly preferably less than 17 mm. A lower limit for the distance can be determined by what is technically feasible. The distance MP can be as small as possible, z. B. at least 17 mm, preferably at least 15 mm, particularly preferably at least 10 mm.

The emergency button actuating element and/or the emergency button switch are preferably designed in such a way that an operator can only operate the emergency button actuating element and/or the emergency button switch without rotating it about an axis. Particularly preferably, the operator can only operate the emergency button actuating element and/or the emergency button switch without rotating it. So the emergency button actuator and / or the emergency button switch z. B. can only be moved in translation.

It may be that the emergency button actuating element has at least one guide means. The guiding means serves to guide the emergency button actuating element during the actuation of the emergency button actuating element. The guide means preferably allows only a translational movement of the emergency button actuating element.

The emergency button actuation element can have an actuation means. The actuating means is used to actuate the emergency button switch. In this way, the emergency button switch can be in contact with the actuating means during actuation.

The guiding means can be arranged parallel to an actuating means of the emergency button actuating element. Additionally or alternatively, the guide means can be arranged parallel to the emergency switch.

For example, the emergency button switch can be arranged eccentrically to an imaginary axis, in particular to an axis of symmetry and/or a central axis, of the emergency button actuating element. In this case, it is possible to provide the guide means centrally in the emergency button actuating element.

Alternatively and particularly preferably, the guide means is arranged eccentrically to an imaginary axis, in particular to an axis of symmetry and/or a central axis, of the emergency button actuating element. It is possible that the emergency button switch is arranged on the imaginary axis in this case. The actuating means can also be provided centrally in the emergency button actuating element.

It is conceivable that the emergency button actuating element comprises a plurality of guide means, preferably at least three guide means. A rotational movement of the emergency button actuating element can be prevented by the plurality of guide means. The plurality of guiding means can be arranged parallel to one another. The guide means can be arranged in particular around the emergency button switch.

The emergency button actuator may include a bottom. The at least one guide means can extend in the form of a rod from the underside.

The at least guide means can be accommodated and guided in a guide sleeve. The guide sleeve can in particular be connected to the mounting plate. In the case of several guide means, each guide means can be guided in a guide sleeve.

It is possible for the multiple guide means and/or the multiple guide sleeves to be designed differently. Thus, a guide means and/or a guide sleeve can be longer than another guide means or guide sleeve. In this case, the particularly well-guided guiding means can serve to actually guide the emergency button actuating element, while the at least one other guiding means essentially only prevents the emergency button actuating element from rotating. In particular, in order to achieve good guidance, at least one guide sleeve can extend at least as far as the first circuit board, preferably through the first circuit board.

Provision is preferably made for the restoring means to have a cavity. The actuating means and/or the emergency button switch can be arranged at least partially in the cavity.

The actuating means can be designed to protrude. In particular, the actuating means protrudes from the underside of the actuating element. The actuating means can be designed in the form of a circular cylinder.

The actuating means may be formed with a hollow interior. A light source can be provided in the emergency button switch. Rays of light emittable from the light source can propagate through the hollow interior. The light beams can be visible to a user through an illuminated area of the emergency button actuator. For this purpose, the illuminated area of the emergency button actuation element is translucent, in particular translucent.

The emergency button actuating element can comprise a base body made of opaque material. The base body can be made of plastic. The body may include an opening. As a result, the illuminating area can be made possible. The base body can be of homogeneous design. A transparent, in particular translucent, insert can be arranged in the opening. The insert can be fastened in the opening, in particular pressed in. The light from the light source can be guided through the insert.

Fig. 1

eine Draufsicht auf einen Ausschnitt eines erfindungsgemäßen Sicherheitssystems mit einem Nottaster als Auslöseelement in einem betriebsfertigen Zustand an einer Tür gemäß einem ersten Ausführungsbeispiel,

Fig. 2

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 1,

Fig. 3

ein zu Fig. 2 modifiziertes Funktionsschema eines Ausschnitts eines erfindungsgemäßen Sicherheitssystems gemäß einem zweiten Ausführungsbeispiel,

Fig. 4

eine Draufsicht auf einen Ausschnitt auf ein erfindungsgemäßes Sicherheitssystem mit mehreren Nottastern in einem betriebsfertigen Zustand an einer Tür gemäß einem dritten Ausführungsbeispiel,

Fig. 5

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 4,

Fig. 6

ein zu Fig. 5 modifiziertes Funktionsschema eines Ausschnitts aus einem erfindungsgemäßen Sicherheitssystem gemäß einem vierten Ausführungsbeispiel,

Fig. 7

eine Draufsicht auf ein erfindungsgemäßes Sicherheitssystem in einem betriebsfertigen Zustand gemäß einem fünften Ausführungsbeispiel,

Fig. 8

ein Funktionsschema einer zentralen Fluchtwegsteuerung des Sicherheitssystems aus Figur 7,

Fig. 9

ein Funktionsschema des Sicherheitssystems aus Figur 7,

Fig. 10

ein Funktionsschema eines erfindungsgemäßen Sicherheitssystems gemäß einem sechsten Ausführungsbeispiel,

Fig. 11

ein Ausführungsbeispiel für einen erfindungsgemäßen Nottaster in einer Seitenansicht,

Fig. 12

der Nottaster aus Figur 11 in einem Längsschnitt,

Fig. 13

der Nottaster aus Figur 11 in einer Explosionsdarstellung,

Fig. 14

ein Betätigungselement des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 15

eine weitere perspektivische Ansicht des Betätigungselements aus Figur 14,

Fig. 16

ein Lichtleiter des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 17

eine weitere perspektivische Ansicht des Lichtleiters aus Figur 16 und

Fig. 18a-d

eine schematische Darstellung eines Ablaufs einer Funktionsfreigabe in einem erfindungsgemäßen Sicherheitssystem.

The invention is explained in more detail below using exemplary embodiments. Technical features with the same function are provided with identical reference symbols in the figures. Show it:

1

a top view of a section of a security system according to the invention with an emergency button as a trigger element in a ready-to-operate state on a door according to a first embodiment,

2

a functional diagram of the security system according to the invention figure 1 ,

3

one to 2 modified functional diagram of a section of a security system according to the invention according to a second embodiment,

4

a top view of a section of a security system according to the invention with several emergency buttons in a ready-to-operate state on a door according to a third embodiment,

figure 5

a functional diagram of the security system according to the invention figure 4 ,

6

one to figure 5 modified functional diagram of a section of a safety system according to the invention according to a fourth embodiment,

7

a plan view of a security system according to the invention in an operational state according to a fifth embodiment,

8

a functional diagram of a central escape route control of the security system figure 7 ,

9

a functional diagram of the safety system figure 7 ,

10

a functional diagram of a security system according to the invention according to a sixth embodiment,

11

an embodiment of an emergency button according to the invention in a side view,

12

the emergency button off figure 11 in a longitudinal section,

13

the emergency button off figure 11 in an exploded view,

14

an actuating element of the emergency button figure 11 in a perspective view,

15

Another perspective view of the actuating element figure 14 ,

16

an optical fiber of the emergency button figure 11 in a perspective view,

17

Another perspective view of the light guide figure 16 and

Fig. 18a-d

a schematic representation of a process of enabling a function in a security system according to the invention.

In the following, a distinction is made between a user and an operator. A user can be anyone who uses the security system 1 . For example, a user can B. be a guest who wants to escape through the door secured by the security system 1. An operator is used to operate the security system 1. The operator can z. B. to authenticate against the security system. For example, the operator can B. Be a member of a security guard. The operator can particularly preferably set the safety system 1 .

In the following, the term "actuation of the emergency button" means "actuation of the actuating element of the emergency button".

A connection to a bus system is understood below to mean a direct connection, so that a component connected to the bus system is to be regarded as a bus system participant with its own bus address.

Initiating an activation is understood in particular as meaning the sending of a message via a first and/or second bus system, which message contains information and/or a command which causes the direct or indirect recipient of the message to carry out the activation. The sender of the message initiates the activation. Initiating a triggering is thus understood to mean an indirect triggering. In particular, the message can correspond to a bus telegram.

As a result of an operation means that an operation is the cause, regardless of whether the operation continues or not.

In the Figures 1 to 6 excerpts from security systems 1 according to the invention are shown. The excerpts of the security systems 1 in the Figures 1 to 6 are also connected to a central escape route control 300 . An example of such an escape route control 300 is in FIGS figures 7 and 8th shown.

In the figures 1 and 2 a section of a first exemplary embodiment of a security system 1 according to the invention for a door 2 is shown. The door 2 is not part of the security system 1 according to the invention. The security system 1 according to the invention includes a door lock 200 and an emergency button 10. The emergency button 10 includes a control device 100. The emergency button 10 is assigned a key switch 500. The security system 1 can include the key switch 500 . Alternatively, the security system 1, in particular the emergency button 10, have a key switch input via which a connection to the key switch 500 can be established.

As in figure 2 shown, the emergency button 10 and the door lock 200 are connected to one another via a first bus system 400 . The key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402 . The connection 402 is shown as a dashed arrow to show that signals about a position of a key inserted into the key switch 500 are fed to an electronic unit 24 of the emergency switch 10 . As an alternative to the connection 402, the key switch 500 can also be connected to the first bus system 400 (not shown). This alternative applies to all exemplary embodiments.

The emergency button 10 is designed to send a message to the door lock 200 as a result of an actuation of the emergency button 10 via the first bus system 400 and thereby to cause the door lock to be unlocked. The message as a result of pressing the emergency button 10 can be delayed.

The security system 1 according to the invention, in particular the emergency button 10, can also be connectable to a fire alarm (not shown). If a fire alarm signal is present, the security system 1 also causes the door lock 200 to be unlocked.

The control device 100 does not carry out safety-related functions: The control device 100 can thus cause the door lock 200 to be unlocked for authorized persons. For this purpose, the control device 100 can be connected to an access control system (not shown). In particular, the access control system can be connected or can be connected to the first bus system 400 . The control device 100 receives from the access control system, in particular via the bus system 400, a positive authentication signal about the authentication that has taken place. After that, the Control device 100 unlocking the door lock 200. The access control system can, for. B. a reader, a key switch, a keyboard for entering a code or a lock cylinder of a mechanical lock, in particular a self-locking panic lock, include or be designed in such a way.

Likewise, the control device 100 can automatically trigger an unlocking of the door lock 200 at a specified time or after a specified period of time, e.g. B. if the door should be unlocked in a time window per day.

If there is no danger, i .e. If neither the emergency button 10 has been actuated nor is there a fire alarm signal, the control device 100 can automatically initiate a re-locking after a predetermined period of time has elapsed. Here, in addition to the positive authentication signal, the control device 100 can also receive an access signal from the access control system and/or measure the length of the positive authentication signal. The control device 100 can adapt the length of the predetermined period of time by means of the access signal or based on the length of the authentication signal. For example, a person can B. hold an ID card in front of the reader for a long time or turn the key for a long time. This signals that the predetermined period of time should correspond to a long period of time previously stored in control device 100 . If the person holds the ID card briefly in front of the reader or if the user turns the key briefly, a signal is given that the predetermined period of time should correspond to a short period of time previously stored in the control device 100 .

A first door status monitor 204 and a second door status monitor 206 detect whether the door 2 is open or closed. The control device 100 receives at least indirectly a signal from the door status monitoring devices 204, 206. If the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 can immediately and automatically cause the door lock 200 to be locked again as soon as the control device 100 with the aid of the door status monitoring devices 204, 206 the information is available that the door is first opened and now closed again.

The emergency button 10 includes an acoustic alarm device 23 and light source 41 (see also figure 13 ). The lamps 41 are used to display the locked or unlocked state of the door lock 200 and thus serve as a display device. The lamps 41 are used for the visual representation of a time-delayed unlocking of the door lock 200 as a result of an actuation of the emergency button 10 and thus serve as a display device. The lamps 41 are used for optical representation of a Alarm condition after receiving the fire alarm signal or as a result of pressing the emergency button 10 and thus serve as a display. The lamps 41 are used for visual display when a previously described re-locking fails.

The control device 100 controls the acoustic alarm generator 23 in order to emit an acoustic alarm when there is a dangerous situation, i. H. if a fire alarm signal has been received or the emergency button 10 has been pressed. The control device 100 controls the acoustic alarm generator 23 in order to emit an acoustic alarm if re-locking fails.

The control device 100 controls the lighting means 41 to display the locking or unlocking status of the door lock 200, to visually display a time-delayed unlocking and/or to emit a visual alarm when a fire alarm signal is received or the emergency button 10 has been actuated, or when relocking fails.

In the unlocked state of the door lock 200, the control device 100 can monitor the opening of the door with the aid of the door state monitoring devices 204, 206. If desired, the control device 100 can have an acoustic alarm emitted if the door 2 was opened while the door lock 200 was in the unlocked state, at least if there is no positive authentication signal. This way it can be monitored when someone opens the door, even if the door is unlocked.

The emergency button 10 can include at least one additional output. The control device 100 can use the output to control other components that can be connected to the security system 1 according to the invention, e.g. B. a room light.

The parameters for executing the named functions of the control device 100 are stored in the control device 100 . So are e.g. B. the predetermined time (s), the predetermined period of time (s), parameters for the audible alarms, e.g. B. in which volume with which frequency an acoustic alarm is to be output, and parameters for the different activations of the light sources 41 for visual representation of the different, above-mentioned states of the security system 1 are stored in the control device 100. The parameters for the light sources can include flashing frequencies, colors to be emitted, color intensities and/or lighting patterns. For parameterization, the control device 100 can communicate with a mobile communication device via a radio module 64 . Alternatively, the parameters can be set using a monitoring device 301 via a second bus system 401 (see Fig. Figures 9 and 10 ). A parameterization program is provided for the parameterization, which is based on a communication device, e.g. B. a personal computer, a mobile phone and / or a tablet, executable. The operator can set the parameters using the parameterization program.

In figure 2 the structure of the door lock 200 and the emergency button 10 is shown in more detail.

The emergency button 10 has a first emergency button processing unit 20 , a second emergency button processing unit 21 and a third emergency button processing unit 22 . The first, the second and the third emergency button processing unit 20, 21, 22 are each designed as microprocessors or microcontrollers. The first and the second emergency button processing units 20, 21 comprise a non-volatile memory. The third emergency button processing unit 22 includes a non-volatile memory and/or has access to a non-volatile memory. The first, second and third emergency button processing unit 20, 21, 22 are collectively referred to as the electronic unit 24 of the emergency button 10.

Electronics unit 24 also serves as control device 100. First emergency button processing unit 20 serves as first processing unit 103 of control device 100. Second emergency button processing unit 21 serves as second processing unit 104 of control device 100. Third emergency button processing unit 22 serves as third processing unit 105 of control device 100.

The first and the second emergency button processing unit 20, 21 are used to carry out the safety-related functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 is used to carry out the non-safety-related functions. One of the safety-relevant functions is the initiation of unlocking in the event of danger. The non-safety-related functions include the other functions listed above.

When the emergency button 10 is actuated, an actuating element 11 is moved from a starting position 11.I to an actuating position 11.II, whereby a switch 63 is actuated (see also figures 12 , 13 ). As a result, a first and a second actuation signal are generated. This opens a first and a second circuit (not shown). A first circuit opening signal is detected by the first emergency button processing unit 20 . A signal about the opening of the second circuit is detected by the second emergency button processing unit 21 . The actuation signal is understood to be the signal generated by the user by actuating the actuating element in order to unlock the door lock and release the escape route. The expression "as a result of an actuation of the emergency button 10" is used in particular in the sense of "after the actuation signal has been generated", i.e. regardless of whether the Actuating element 11 is still in the operating position 11.II or has already returned to the starting position 11.I.

The first emergency button processing unit 20 and the second emergency button processing unit 21 each cause the door lock 200 to be unlocked independently of one another after the actuation signal has been detected via the first bus system 400. The second emergency button processing unit 21 thus acts redundantly to the first emergency button processing unit 20.

The door lock 200 includes a door lock controller 201. The door lock controller 201 includes a first processing means 202 and a second processing means 203. The first and second processing means 202, 203 are referred to collectively as the electronic device 207. The first and the second processing means 202, 203 are each designed as a microprocessor or microcontroller. The first and the second processing means 202, 203 can each control a locking mechanism 205 of the door lock 200 for unlocking. In case of danger, i. H. as a result of the actuation of the emergency button 10 or after receiving a fire alarm signal, both the first processing means 202 and the second processing means 203 control the locking mechanism 205 for unlocking. The second processing means 203 is therefore redundant with respect to the first processing means 202. One-fault security is achieved with this structure.

The locking mechanism 205 is designed to be electromechanical. The locking mechanism 205 includes z. B. an electromechanically actuated case element (not shown), which locks a door latch of the door 2 in the locked state of the door lock 200 and in the unlocked state of the door lock 200 releases. When the locking mechanism 205 is activated for locking, the first and the second processing means 202, 203 switch on an electric current for the locking mechanism 205. When the locking mechanism 205 is activated for unlocking, the first and the second processing means 202, 203 switch off an electrical current for the locking mechanism 205. A separate switch is assigned to each processing means 202, 203 for this purpose. Opening just one of the switches will shut off power to the locking mechanism 205.

The door lock controller 201 receives feedback on the state of the lock mechanism 205 via an unillustrated lock mechanism state monitor. Specifically, a position of an armature of a coil of the lock mechanism 205 is monitored. If the status of the door lock 205 does not correspond to the desired status, an alarm is issued. Additionally or alternatively, in this case, another attempt can be made to reach the target state.

As a result of the emergency button 10 being actuated, the first and the second emergency button processing unit 20, 21 communicate with the first and the second processing means 202, 203 via the first bus system 400 with the aid of a message. The message may contain notification of being operated or an unlock control command. The first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 informs the second processing means 203. With the message, the first and the second emergency button processing units 20, 21 cause both the first and the second processing means 202, 203 to activate the locking mechanism 205 trigger for unlocking, i.e. switch off the electric current.

The presence of a fire alarm signal is detected by the first and the second emergency button processing unit 20, 21. The first and the second emergency button processing unit 20, 21 then cause the locking mechanism 205 to be unlocked by the door locking control 201 by sending a message to the first and the second processing means 202, 203. The first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 informs the second processing means 203. With the message, the first and the second emergency button processing units 20, 21 cause both the first and the second processing means 202, 203 to activate the locking mechanism 205 trigger for unlocking, i.e. switch off the electric current.

The actuation of the emergency button 10 or the presence of a fire alarm signal can be sent in a message from one of the two emergency button processing units 20, 21, with the first emergency button processing unit 20 writing a first part of the message and the second emergency button processing unit 21 writing a second part of the message. The first and the second processing means 202, 203 are each responsible for at least part of the message. The emergency button processing units 20, 21, 22 and the first and the second processing means 202, 203 can each receive messages via the first bus system 400. In this case, the electronic unit 24 and the door locking control 201 can each be assigned a bus address.

The first and the second emergency button processing units 20, 21 monitor each other. If an error is detected, the electronics unit 24, in particular the intact emergency button processing unit 20, 21, causes the first and the second processing means 202, 203 to activate the door locking mechanism 205 for unlocking. The first and second processing means 202, 203 monitor each other mutual. If an error is detected, then at least the intact processing means 202, 203 actuates the locking mechanism 205 for unlocking. Likewise, if there is a fault in the bus system 400, the locking mechanism 205 is activated by the door locking controller 201 for unlocking. For this purpose and to check the first and the second emergency button processing unit 20, 21, a sign-of-life signal from the first and the second emergency button processing unit 20, 21 is regularly sent to the door lock controller 201. If there is no sign-of-life signal, the first and second processing means 202, 203 actuate the locking mechanism 205 for unlocking. The first and the second processing means 202, 203 communicate with one another when the door lock controller 201 has received a message about the actuation of the emergency button 10 and/or the presence of a fire alarm signal. If only the first processing means 202 or the second processing means 203 determines that the emergency button 10 has been actuated or a fire alarm signal is present, the determining processing means 202, 203 triggers the door locking mechanism 205 to unlock and initiates that the other processing means 202, 203 also release the Door locking mechanism 205 controls for unlocking. An error and a fault always include a failure of the respective component. In the event of a power failure, the locking mechanism 205 automatically switches to the unlocked state. In the processes described in this section, the security system 1 also emits an acoustic and/or visual alarm, in particular by means of the control device 100 .

If the actuation signal has been generated, it is electronically prevented that the door lock 200 is transferred to the locked state without the existence of a cancellation condition. This prevents the door from being locked while a hazardous condition persists. For this purpose, an electronic determination is integrated in the electronic device 207 . As a result of the actuation of the actuation element 11, which is used to release the escape route, the electronic determination is transferred to an actuation state. In the actuated state, the activation of the door lock 200 for locking is prevented.

The electronic statement includes a first program code. The first program code includes a first variable or has access to a first variable. In an initial state of the electronic determination, the first variable is set to an initial value. In the actuation state, the first variable is set to an actuation value which prevents the door lock 200 from being actuated to lock. The first variable can be binary. If the cancellation condition is met, the electronic determination is converted into a Returned to initial state. To do this, the value of the first variable is set to the initial value. In the initial state of the electronic determination, activation of the door lock 200 for locking is permitted. The first program code detects the first value of the first variable and allows the door latch 200 to lock when the value of the first variable equals the initial value and prevents the door latch 200 from locking when the value of the first variable equals the actuation value.

The electronic determination is stored both in the first processing means 202 and redundantly in the second processing means 203. The first program code is stored in the first processing means 202 for this purpose. The first variable is stored in the non-volatile memory of the first processing means 202 . A second program code with the same functionality as the first program code is stored in the second processing means 203 . The first variable is redundantly stored in the non-volatile memory of the second processing means 203 .

The first variable is additionally stored in the first emergency button processing unit 20 and in the second emergency button processing unit 21 in the non-volatile memories. As a result of the actuation of the emergency button 10, the first variable in the first and in the second emergency button processing unit 20, 21 is converted from the initial value to the actuation value. The changed value of the first variable is transmitted to the electronic device 207 via the bus system 400 . The emergency button 10 repeatedly sends the actuation value of the first variable to the electronic device 207 until a cancellation condition is met. The sending can take place at regular time intervals, in particular together with the sign-of-life signal.

At least when at least one of the door status monitoring devices 204, 206 has detected that the door 2 was opened after the emergency button 10 was actuated, a cancellation action on the emergency button 10 is necessary to achieve the cancellation condition.

The actuating element 11 is non-latching. The actuating element 11 is transferred from the initial position 11.I to the actuating position 11.II when actuated (see Fig. figure 11 ). Immediately after actuation, the actuation element 11 moves back into the starting position 11.I by the force of a return means 12 designed as a spring (see Fig. figure 12 , 13 ). The actuating element 11 is actuated in a translatory manner.

The cancellation action on the emergency button 10 is carried out by actuating the actuating element 11 . This generates an override signal that corresponds to the actuation signal. So that the control device 100 can recognize whether an actuation of the Emergency button 10 is used to unlock the door lock 200 or there is a cancellation action, another signal must be generated at the same time to achieve the cancellation condition. To do this, an operator authenticates himself. The authentication takes place by inserting and turning a key in the key switch 500. The activation of the activation element 11 and the authentication must overlap in time. i.e. the operator must keep the key turned while the operating element 11 is in the operating position 11.II. The actuator 11 must return to the home position 11.I while the key is in the turned state. The course of action is sufficient to achieve the cancellation condition.

If the door status monitoring devices 204, 206 have detected that the door 2 has remained permanently closed as a result of the actuation of the emergency button 10, the cancellation condition can be achieved in at least one other way, namely by the elapse of a predetermined time interval. So e.g. B. after 60 seconds after the last generation of the actuation signal, the cancellation condition can be reached if the door 2 has remained closed. In this case, authentication at the key switch 500 and cancellation action at the emergency button 10 are not necessary.

The first and the second door status monitoring devices 204, 206 are provided in order to detect with a one-fault certainty that the door 2 has remained permanently closed as a result of the actuation of the emergency button 10. For this purpose, the door status monitoring devices 204, 206 are preferably designed differently. The first door status monitor 204 may e.g. B. be designed as a door contact. The second door status monitoring device 206 can e.g. B. be designed as a trap contact. Alternatively, e.g. B. at least one of the door status monitors magnetically, z. B. as a reed switch, monitor the status of door 2. The door lock controller 201 receives a signal from the first and second door status monitors 204, 206, respectively, as to whether the door 2 is open or closed. Only if no door opening signal has been sent from either the first door status monitor 204 or the second door status monitor 206 during the predetermined time interval can the cancellation condition be achieved by the elapse of the predetermined time interval.

The door lock controller 201 includes a timer to measure the predetermined time interval. The door lock controller 201 starts the timer as a result of the actuation of the emergency button 10. If the door lock controller 201 receives a signal from the first or second door status monitoring device 204, 206 during the predetermined time interval that the door has been opened, a cancellation action must be taken at the emergency button 10 done. In this case, the lapse of the predetermined time interval is not enough. The length of the predetermined time interval is stored in the door lock controller 201 .

The door lock controller 201 checks whether the cancellation condition is allowed to be reached by elapse of the predetermined time interval before the door lock controller 201 controls the lock mechanism 205 to lock. So an operator when starting up the security system 1, d. H. before the start of operation of the security system 1, whether an elapse of the predetermined time interval without opening the door 2 is permissible as a cancellation condition and thus leads to the door 2 being locked again. The deposit can be made in the emergency button 10. A check of the permissibility, an elapse of the predetermined time interval and an absence of a signal from the first and second door status monitors 204, 206 about opening of the door 2 is sufficient for the achievement of the cancellation condition.

Door locking controller 201 communicates the open or closed state of the door to emergency button 10 and/or to control device 100 via bus 400.

The electronics unit 24 includes a timer. A first delay period can be stored in the electronics unit 24 . If the door lock 200 is to be unlocked with a time delay, after the activation signal has been generated, the electronic unit 24 waits for the first delay time before the first and second emergency button processing units 20, 21 communicate with the door lock controller 201 via the first bus system 400 in order to initiate unlocking .

The third processing unit 105 causes the to figure 1 and 2 described non-safety unlocking and locking of the door lock 200, z. B. unlocking after receipt of the authentication signal, at a predetermined time or after a predetermined period of time or locking after a predetermined period of time or immediately after closing the door 2. For this purpose, the third processing unit 105 communicates via the first bus system 400 with the door lock controller 201. The communication can e.g. B. contain information or a control command that causes the door lock controller 201 to control the locking mechanism for unlocking or locking. If control device 100 is connected to the second bus system (see 7 ), the third processing unit 105 is used to forward messages from and/or to a central escape route controller 300.

The third emergency button processing unit 22 controls the acoustic alarm device 23 and the lighting means 41 .

If at least one of the processing means 202, 203 shows that the locking mechanism 205 has assumed the unlocked state, the processing means 202, 203 sends a corresponding signal via the bus 400 to the electronic unit 24. The electronic device 207 is connected to the door status monitoring device 204, 206 or connectable and receives signals about an open or closed status of the door from the door status monitors 204, 206.

The functions mentioned, which the control device 100, the door locking control 2021 and/or the emergency button 10 execute, can be executed with the aid of software modules. Program codes are stored in the electronic device 207 and/or the electronic unit 24, with the aid of which the functions can be executed.

figure 3 represents a variant of the in the figures 1 and 2 represented section of the security system 1. Here, the control device 100 is formed separately from the emergency button 10 and the door lock 200. The control device 100 can e.g. B. in a DIN rail housing (not shown) can be arranged. The control device 100 is not integrated in an emergency button 10 or in a door lock 200 . For example, the control device 100 can be provided for arrangement in a technical room. The first bus system 400 connects the control device 100, the door lock 200 and the emergency button 10 to one another. As in the first exemplary embodiment, the key switch 500 is electrically connected or can be connected to the emergency button 10 via a connection 402 .

Unless otherwise described, the structure and function corresponds to the first embodiment, with the functions belonging to the figures 1 and 2 are described with the aid of the control device 100 or the processing units 103, 104, 105, from the control device 100 of FIG figure 3 are executed and the functions belonging to the figures 1 and 2 are described with the aid of the emergency button 10 or the emergency button processing units 20, 21, 22, are executed by the emergency button 10: In particular, the first and the second emergency button processing unit 20, 21 detect the actuation signal, communicate as a result of an actuation of the emergency button 10 with the first and the second processing means 202, 203 via the first bus system 400 and thus cause the locking mechanism 205 to be actuated by the door locking controller 201. The measures for achieving on-fault safety or redundancy are carried out with the aid of the first and the second emergency button processing units 20, 21. The first variable is in the first and the second emergency button processing unit 20, 21 and is transmitted from there to the door lock control 201. The emergency button 10 includes the timer for determining the first delay period. The control device 100 is connected or can be connected to the second bus system 401 . The third processing unit 105 causes the to figure 1 and 2 described non-safety unlocking and locking of the door lock 200, z. B. unlocking after receipt of the authentication signal, at a predetermined time or after a predetermined period of time or automatic re-locking after a predetermined period of time or immediately after closing the door 2.

The first, second and third processing units 103, 104, 105 are each designed as a microprocessor or microcontroller. The first, second and third processing units 103, 104, 105 together form processing electronics 101. The first and second processing units 103, 104 have a non-volatile memory. The third processing unit 105 comprises a non-volatile memory and/or has access to a non-volatile memory.

A fire alarm signal can be received both by the control device 100 and by the emergency button 10 . The presence of a fire alarm signal is detected by the first and the second emergency button processing unit 20, 21 for the emergency button 10 or by the first and the second processing unit 103, 104 for the control device 100. Accordingly, both the control device 100 with the aid of the first and the second processing unit 103, 104 and the emergency button 10 with the aid of the first and the second emergency button processing unit 20, 21 can cause the door lock 200 to be unlocked. For this purpose, communication takes place via the first bus system 400 with the door locking controller 201 .

The control device 100 is informed via the first bus system 400 when the emergency button 10 causes the door lock 200 to be unlocked, that is to say as a result of the emergency button 10 being actuated or after a fire alarm signal has been received. The control device 100 is also informed of a time-delayed unlocking of the door lock 200 as a result of the emergency button 10 being actuated. The control device 100 is informed of the locking and unlocking status of the door lock 200 . The control device 100 is informed of the open or closed state of the door 2 .

The control device 100 causes activation of the alarm device 23 and the light source 41 for the figures 1 and 2 described acoustic alarms and visual representations. For this purpose, the control device 100 can be connected to the electronics unit 24, in particular to the third emergency button processing unit 22, via the first bus system 400 communicate. The third emergency button processing unit 22 then controls the alarm device 23 or the lighting means 41 . For this purpose, the parameters for the alarm device 23 and the lighting means 41 are stored in the control device 100 .

In the embodiments of Figures 1 to 3 the door lock 200 includes the door status monitoring devices 204, 206. As an alternative to this and not shown, the door status monitoring devices 204, 206 can be connected to the first bus system 400 or directly to the emergency button 10 and/or the control device 100.

In the embodiments of Figures 1 to 3 At least one additional emergency button (not shown) can be connected to first bus system 400, which is configured without control device 100. The other emergency button is like the emergency button 10 in figure 3 formed and can cause the unlocking of the door lock 200 upon actuation. The additional emergency button corresponds to the emergency button 10 in terms of structure and functionality figure 3 .

In the embodiments of Figures 1 to 3 at least one further door lock (not shown) can be connected to the first bus system 400 . The further door lock is like the door lock 200 in figure 2 or 3 formed and can also be unlocked when the emergency button 10 is pressed. The other door lock corresponds to the structure and functionality of the door locks 200 of Figures 1 to 3 .

In figure 4 a section of a third embodiment of a security system 1 according to the invention with several emergency buttons 10, 1010, 2010, 3010 is shown. The security system 1 includes several door locks 200, 1200, 2200, 3200. Each emergency button 10, 1010, 2010, 3010 is assigned a key switch 500, 1500, 2500, 3500. The security system 1 is used to arrange the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 on different doors 2, 2002, 3002. The doors 2, 2002, 3002 are not part of the security system 1 according to the invention. The several Emergency buttons 10, 1010, 2010, 3010 are connected to the first bus system 400 and thus correspond to a number of emergency buttons 10, 1010, 2010, 3010. The door locks 200, 1200, 2200, 3200 are connected to the first bus system 400 and thus correspond to one Number of door locks 200, 1200, 2200, 3200.

In the example of figure 4 the emergency buttons 10, 1010 are assigned to the door locks 200, 1200. The emergency button 2010 is assigned to the door lock 2200. The emergency button 3010 is assigned to the door lock 3200. As a result of an actuation of one of the emergency buttons 10, 1010, the two door locks 200, 1200 unlocked, but not the door locks 2200, 3200. If the emergency button 2010 is pressed, only that Door lock 2200 unlocked. Accordingly, when the emergency button 3010 is pressed, only the door lock 3200 is unlocked. Thus, in this embodiment, the door latches 200, 1200, 2200, 3200 are selectively unlocked.

For example, the emergency buttons 10, 1010 can be provided for arrangement on a double-leaf door 2. In each case, a door lock 200, 1200 is to be arranged on a door leaf 3, 4 of the door 2. The emergency button 2010 and the door lock 2200 are intended to be arranged on another door 2002 . The emergency button 3020 and the door lock 3200 are to be arranged on a door 3002, as in figure 4 shown.

The security system 1 off figure 4 can also for from figure 4 deviating selective unlocking can be set. At one to figure 4 deviating exemplary setting, only one associated door lock 200, 1200, 2200, 3200 is unlocked when one of the emergency buttons 10,1010, 2010, 3010 is actuated. Thus, only one door lock 200, 1200, 2200, 3200 is assigned to each emergency button 10, 1010, 2010, 3010. In particular, a safety system 1 adjusted in this way is suitable for four single-leaf doors, each with a door lock 200, 1200, 2200, 3200.

In another exemplary setting of the security system 1, not shown, only the two door locks 200, 1200 are unlocked when one of the emergency buttons 10, 1010 is actuated, and when one of the emergency buttons 2010, 3010 is actuated, only the other two door locks 2200, 3200 are unlocked. The emergency buttons 10, 1010 are therefore assigned to the door locks 200, 1200 and the emergency buttons 2010, 3010 to the door locks 2200, 3200. In particular, the safety system 1 adjusted in this way is suitable for two double-leaf doors, each with a door lock 200, 1200, 2200, 3200 per door leaf.

The security system 1 can also be set in such a way that when an emergency button 10, 1010, 2010, 3010 is actuated, all door locks 200, 1200, 2200, 3200 are unlocked.

Deviating from the security system 1, which is in figure 4 is shown, a security system 1 according to the invention can include a number of emergency buttons 10, 1010, 2010, 3010, which does not correspond to the number of door locks 200, 1200, 2200, 3200. E.g. can in figure 4 the door 2 can be single-leaf and one of the emergency buttons 10, 1010 or one of the door locks 200, 1200 is missing.

In figure 5 shows that the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 are connected to one another via the first bus system 400. One emergency button 10, 1010, 2010, 3010 is connected to a key button 500, 1500, 2500, 3500 assigned to the respective emergency button 10, 1010, 2010, 3010 via a connection 402, 1402, 2402 or 3402 electrically connected or connectable. Alternatively, the key buttons 500, 1500, 2500, 3500 are connected to the first bus system 400 (not shown). In the embodiment of figures 4 and 5 if the control device 100 is in one of the emergency buttons 10, 1010, 2010, 3010, e.g. B. the emergency button 10 integrated. The first bus system 400 is only connected to a single control device 100 . Unless otherwise described below, the structure and the functions of the door locks 200, 1200, 2200, 3200 correspond to the structure and the functions of the door lock 200 of FIG figures 2 and 3 , the structure and the functions of the emergency button 10 the structure and the functions of the emergency button 10 of figure 2 and the structure and the functions of the emergency button 1010, 2010, 3010 the structure and the functions of the emergency button 10 of figure 3 . The reference numbers from figures 2 and 3 are used. It is understood that the door locks 200, 1200, 2200, 3200 each have their own door locking mechanism, their own processing means, etc., and the emergency buttons 10, 1010, 2010, 3010 each have their own emergency button processing units, alarms, lamps, switches and actuators.

So that the emergency buttons 10, 1010, 2010, 3010 can be assigned to the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010 , 2010, 3010 to the door locks 200, 1200, 2200, 3200. For this purpose, one of the door locks 200, 1200, 2200, 3200 is switched to an assignment mode. Then a conscious action is taken at the emergency buttons 10, 1010, 2010, 3010. The deliberate action can be performed as an actuation of the actuating element 11 of the respective emergency button 10, 1010, 2010, 3010. After all emergency buttons 10, 1010, 2010, 3010 that are to be assigned to that door lock 200, 1200, 2200, 3200 that is in the assignment mode have been actuated, the assignment mode of the door lock 200, 1200, 2200, 3200 is ended. In the embodiment of figure 4 becomes e.g. B. first the door lock 200 transferred to the assignment mode and then the emergency button 10, 1010 is actuated, whereby the assignment of the emergency button 10, 1010 to the door lock 200 takes place. Then, the association mode of the door lock 200 is terminated. Then z. B. the door lock 1200 is transferred to the assignment mode and then the emergency button 10, 1010 is actuated, whereby the assignment of the emergency button 10, 1010 to the door lock 1200 takes place. Then the association mode of the door lock 1200 is terminated. The door lock 2200 is now transferred to the assignment mode and the emergency button 2010 is then actuated, as a result of which the emergency button 2010 is assigned to the door lock 2200. The door lock 2200 pairing mode is exited. The door lock 3200 and the emergency button 3010 can then be used accordingly.

The assignment stores in the respective door locks 200, 1200, 2200, 3200, in particular in the respective door lock controls 201, which emergency button 10, 1010, 2010, 3010 is to be assigned to the respective door lock 200, 1200, 2200, 3200. Through the assignment, the assignment of the emergency buttons 10, 1010, 2010, 3010 to the door locks 200, 1200, 2200, 3200 deposited. A bus address, in particular an unchangeable bus address, of the respective emergency button 10, 1010, 2010, 3010 is stored for the assignment.

The assignment is stored in the respective door locks 200, 1200, 2200, 3200 in the first digital processing means 202 and redundantly in the second digital processing means 203, in particular in the non-volatile memories of the processing means 202, 203.

If e.g. B. the emergency button 10 is actuated, the emergency button 10 communicates with all door locks 200, 1200, 2200, 3200 of the first bus system 400. The door locks 200, 1200, 2200, 3200 each check on the basis of the deposit whether the respective door lock 200, 1200, 2200, 3200 has been assigned to the activated emergency button 10. The associated door locks 200, 1200 then only activate the respective door locking mechanism 205 if they are assigned.

In the event of a fire alarm signal, the door locks 200, 1200, 2200, 3200, which are assigned to the emergency button 10, 1010, 2010, 3010 receiving the fire alarm signal, are unlocked.

If a door lock 200, 1200, 2200, 3200 is to be unlocked with a time delay as a result of the actuation of an associated emergency button 10, 1010, 2010, 3010, a first delay time period is stored in that emergency button 10, 1010, 2010, 3010. The storage takes place when the safety system 1 is put into operation by the parameterization program. For each emergency button 10, 1010, 2010, 3010, a different first delay time can be stored by the operator. For example, a first delay time that differs from the first delay time that is stored in the emergency button 2010 is stored in the emergency button 10 . The emergency buttons 1010, 3010 are intended to unlock the associated door locks 2200 or 3200 without a time delay, so that the emergency buttons 1010, 3010 do not store a first delay time or a first delay time of 0 s. As an alternative to this, the security system 1 can be designed in such a way that in the emergency buttons 10, 1010, 2010, 3010, the same door lock 200, 1200, 2200, 3200 are assigned, always the same first delay period is stored. For this purpose, the parameterization program allows the operator only one common setting.

The control device 100 takes over the non-safety-related functions for unlocking and locking all door locks 200, 1200, 2200, 3200, as before figure 1 and 2 described. For this purpose, the control device 100 can communicate selectively with the door locks 200, 1200, 2200, 3200. It is stored in the control device 100 which door lock 200, 1200, 2200, 3200 is assigned to which access control system, so that in the event of a positive authentication signal from an access control system, only the assigned door lock(s) 200, 1200, 2200, 3200 are unlocked. Also stored in the control device 100 is whether and when, yes, which door lock 200, 1200, 2200, 3200 is to be unlocked at which predetermined time. It can also be stored in the control device 100 after which predetermined period of time or which predetermined periods of time which door lock 200, 1200, 2200, 3200 is to be locked again. Also stored in the control device 100 is whether and, if so, which door locks 200, 1200, 2200, 3200 are to be locked again immediately after the door 2, 2002, 3002 is closed. It can be stored in the control device 100 whether, and if so, for which door lock 200, 1200, 2200, 3200 an acoustic alarm should be triggered when the unlocked door 2, 2002, 3002 is opened without a positive authentication signal being present. It can be stored in the control device 100 whether an acoustic alarm should be triggered if the door 2, 2002, 2003 is not closed again. The deposits can be made differently for each door lock 200, 1200, 2200, 3200 or for the groups of door locks 200, 1200, 2200, 3200 to be arranged on a door 2, 2002, 3002. The storage is done with the help of the parameterization program by the operator during commissioning.

The control device 100 causes an acoustic and visual alarm as a result of the actuation of an emergency button 10, 1010, 2010, 3010 to also be output in the at least one other emergency button 10, 1010, 2010, 3010 of the same door lock 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010 is assigned. If in the embodiment of figures 4 and 5 e.g. If, for example, the emergency button 10 is actuated, the control device 100, by communicating with the electronic unit 24 of the emergency button 1010, causes the acoustic alarm device 23 and the lighting means 41 of the emergency button 1010 to also emit an acoustic or visual alarm.

If, after an emergency button 10, 1010, 2010, 3010 has been actuated, unlocking is initiated with a time delay, the control device 100 causes the first Delay time period with which the unlocking is initiated, is also shown in the at least one further emergency button 10, 1010, 2010, 3010, which is assigned to the same door lock 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. For this purpose, the control device 100 communicates with the electronics unit 24 of the at least one further emergency button 1010, 2010, 3010 or controls the lighting means 41 of the emergency button 10, in which the control device 100 is integrated.

The control device 100 can use the non-safety-related assignment for selective communication, e.g. B. assign an access control system to a door lock 200, 1200, 2200, 3200 based on a bus address. In this case, the participants of the first bus system 400 each have a setting device for manually setting a bus address. The setting device can include DIP switches. At least the users of the first bus system 400 that have the same setting on the setting device are automatically assigned to one another. In order to be able to assign different bus addresses to users with the same setting, users of the first bus system 400 have different identification numbers, from which different bus addresses are configured using the setting made. The bus address, which is determined with the help of the setting, is for the emergency buttons 10, 1010, 2010, 3010 and for the door locks 200, 1200, 2200, 3200, just another bus address that the emergency buttons 10, 1010, 2010, 3010 and use the door locks 200, 1200, 2200, 3200 in addition to the bus address used in a safety-related communication.

If a door lock 200, 1200, 2200, 3200 has already been unlocked, the control device 100 can prevent unlocking of a further door lock 200, 1200, 2200, 3200 until a condition is met, provided there is no danger. If the condition is met, the control device 100 causes the unlocking of the other door lock 200, 1200, 2200, 3200. In this way, the control device 100 communicates with a plurality of door locks 200, 1200, 2200, 3200 such that a lock is formed. For example, door 2002 may be located at an entrance to a room and door 3002 may be located at an exit of the same room. If a positive authentication signal for the door lock 2200 is present, the control device 100 can cause the door lock 2200 to be unlocked. Even if there is a positive authentication signal for the door lock 3200 of the control device 100, the control device 100 can prevent the unlocking of the door lock 3200 until a condition is present. If the condition is present, the control device 100 causes the door lock 3200 to be unlocked. B. a lock time interval or the achievement of a measured variable such as room temperature, humidity, air purity or number of people in the room. The control device 100 can do this with a meter connected or connectable. The condition may include the closing of the first opened door 2002, which is measurable by the door status monitors 204,206. The condition and the door locks 2200 , 3200 involved in the lock can be stored in the control device 100 . The storage can be done by the operator with the help of the parameterization program.

In figure 6 is a variant of the in den figures 4 and 5 illustrated section of the security system 1 is shown. Here, the control device 100 is designed separately from the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200. The first bus system 400 connects the control device 100 to the door locks 200, 1200, 2200, 3200 and the emergency buttons 10, 1010, 2010, 3010. The control device 100 of figure 6 corresponds to the structure of the control device 100 of FIG figure 3 . The emergency button 10 der figure 6 Corresponds in structure to the emergency button 10 of figure 3 . For the rest, the structure and the functionalities correspond to the previous ones figure 5 are described, the structure and the functionalities of the security system 1 of figure 6 .

The fact that in the embodiments of Figures 4 to 6 the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010, 2010, 3010 and, if applicable, the control device 100 act as participants in a single first bus system 400, only the cables of the bus system 400 are necessary so that the participants can communicate with one another. The security system 1 thus has only a few cables.

The bus system 400 can include at least two cables for communication and at least two cables for power supply. In particular, the bus system 400 has exactly two cables for communication and two cables for the power supply. In each of the exemplary embodiments of the security system 1 according to the invention, a power pack can be integrated as a connection to a power grid at any point in the bus system 400 . Thus, the power pack can be provided as an independent component of the security system 1 outside of the emergency button 10 or the emergency buttons 10, 1010, 2010, 3010 and the door lock 200 or the door locks 200, 1200, 2200, 3200. As a result, the security system 1 is flexible in terms of spatial structure.

If, as in the third and fourth exemplary embodiment, there are several emergency buttons 10, 1010, 2010, 3010 and one of the emergency buttons 10, 1010, 2010, 3010 has been actuated, the electronic detection only prevents the emergency button 10, 1010, 2010, 3010 associated door locks 200, 1200, 2200, 3200 are locked. Reaching the cancellation condition enables the door lock(s) 200, 1200, 2200, 3200 assigned to the actuated emergency button 10, 1010, 2010, 3010 to be locked Actuation of the actuating element 11 of the emergency button 10, 1010, 2010, 3010 that was previously operated and authentication at the key switch 500, 1500, 2500, 3500 assigned to the operated emergency button 10, 1010, 2010, 3010 is necessary. At least this course of action is necessary for the door lock 200, 1200, 2200, 3200 assigned to the activated emergency button 10, 1010, 2010, 3010, in which at least one of the door status monitoring devices 204, 206 has detected that the door 2 or one of the door leaves 3, 4 was opened after pressing the emergency button 10.

If the door status monitoring devices 204, 206 of the door locks 200, 1200, 2200, 3200 assigned to the activated emergency button 10, 1010, 2010, 3010 have detected that the door 2 has remained permanently closed after the emergency button 10, 1010, 2010, 3010 has been activated, the override condition may be met by the expiration of the predetermined time interval. For example, the cancellation condition can B. after 60 seconds after the last operation of the emergency button 10 can be reached. The permissibility of whether locking should take place after the predetermined time interval has elapsed with door 2, 2002, 3002 remaining closed can be for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, in particular for door locks , which are intended to be arranged on the same door, can be individually set and stored. The deposit can e.g. B. in the emergency buttons 10, 1010, 2010, 3010. Likewise, for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, in particular for door locks that are intended to be arranged on the same door, the length of the predetermined time interval can be stored in an individually adjustable manner. Here, a minimum length, z. B. 60 s, be fixed for the predetermined time interval. The storage is carried out by the parameterization program.

In figure 7 a fifth exemplary embodiment of the security system 1 according to the invention is shown. The fifth embodiment includes the security system 1 according to the first embodiment of FIG figures 1 and 2 . This means that the emergency button 10, which includes the control device 100, is connected to the door lock 200 via the bus system 400. The key switch 500 is connected or can be connected to the emergency button 10 via a connection 402 . In the fifth embodiment, additional components 301, 510 are provided compared to the first embodiment. The central escape route control 300, which is already part of the embodiments of figures 1 and 2 is is shown explicitly.

The security system 1 comprises the central escape route control 300. The central escape route control 300 is intended to be arranged remotely from the door 2. So the central escape route control 300 z. B. together with a guard device 301, which can be designed as a monitor or personal computer, and/or a multi-door display device 350 (see 10 ) to be arranged in a guard room. The guard device 301 is optionally part of the security system 1 according to the invention. Alternatively, the guard device 301 can be connected to the security system 1 according to the invention.

The central escape route control 300 has a modular structure. An emergency module 310 includes a first mounting plate 311. The first mounting plate 311 accommodates a central emergency button 302 and an identification device 312 designed as a key switch, for example. The central emergency button 302 and the identification device 312 are mechanically rigidly connected to one another by means of the first fastening plate 311 . The central emergency button 302 serves to unlock the door lock 200 as a result of the central emergency button 302 being actuated. The door lock 200 can thus be unlocked remotely from the door 2 by the central emergency button 302 . The unlocking as a result of the actuation of the central emergency button 302 takes place with a one-fault security. The actuation of the central emergency button 302 is thus suitable for emergencies.

A deactivation module 320 comprises a first control element 322, embodied as a key switch, and a second control element 323, embodied as a button state transferred. If the emergency button 10 is in a deactivated state, an actuation of the emergency button 10 does not unlock the door lock 200. The second operating element 323 serves to activate the emergency button 10. If the emergency button 10 is in the deactivated state and becomes the second operating element 323 is actuated, the emergency button 10 is switched to an activated state. In the activated state of the emergency button 10, the emergency button 10 causes unlocking of the door lock 200 when the emergency button 10 has been actuated. The deactivation module includes a second mounting plate 321. The second mounting plate 321 serves to accommodate the first and the second control element 322, 323. The second mounting plate 321 mechanically rigidly connects the first and the second control element 322, 323 to one another.

A delay module 330 includes a third mounting plate 331. The third mounting plate 331 accommodates a delay element 332. FIG. The delay element 332 is embodied as a key switch, for example. The delay element 332 serves to further delay the unlocking of the door lock 200 within the first delay period. The delay module 330 includes a termination element 333, which is designed as a button. Termination element 333 is at the third Mounting plate 331 attached. The termination element 333 is mechanically rigidly connected to the delay element 332 by means of the third fastening plate 331 . By actuating the terminating element 333, the delay in unlocking the door lock 200 can be terminated.

The central escape route control 300 comprises an escape route control housing 340 which is open on one side and in which the emergency module 310, the deactivation module 320 and the delay module 330 are arranged. The deactivation module 320 and the delay module 330 are optional components of the central escape route security system 300. The multi-door display device 350 can also be arranged in the escape route control housing 340, if present.

The escape route control housing 340 can mechanically attach the emergency module 310 , the deactivation module 320 and the delay module 330 . The emergency module 310, the deactivation module 320 and the delay module 330 are each individually attached to the escape route control housing 340, in particular screwed. The first fastening plate 311 for the emergency module 310, the second fastening plate 321 for the deactivation module 320 and/or the third fastening plate 331 for the delay module 330 are used for fastening to the escape route control housing 340. The escape route control housing 340 and the modules 310, 320, 330 are designed in such a way that different sequences in which the modules 310, 320, 330 can be arranged next to one another are possible. So e.g. B. in a not shown central escape route security 300 z. B. the emergency module 310 between the deactivation module 320 and the delay module 330 can be arranged. In another exemplary central escape route control 300 that is not shown, a free space can be arranged on the left, the delay module 330 can be arranged in the middle, and the emergency module 310 can be arranged on the right. The space is created by the absence of the deactivation module 320 and is covered by a panel. The escape route control housing 340 can have rails for inserting the modules 310, 320, 330. The escape route control housing 340 can have mounting options, e.g. B. perforated strips or slots for variable attachment of the module 310, 320, 330 have.

On the first mounting plate 311, on the second mounting plate 321 and on the third mounting plate 331, a display area 314, 324 or 334, shown purely schematically, is provided in each case. Icons are present on the display area to explain the function of the modules 310, 320, 330. In addition, optical lights for displaying states of the security system 1 can be provided in the display areas 314, 324, 334.

In the embodiment of figure 7 the security system 1 further comprises an audio and video module 510. The audio and video module 510 is intended to be placed in the vicinity of the door 2, which can be locked by the door lock 200. With the audio and video module 510 enabled, an operator in the guard room can speak to the user in front of door 2 and view the room near door 2.

As in figure 8 shown, the central emergency button 302 is constructed similarly to the emergency button 10 . The central emergency button 302 includes an emergency button electronics unit 308. The emergency button electronics unit 308 includes a first emergency processing unit 303, a second emergency processing unit 304 and a third emergency processing unit 305. The first, second and third emergency processing units 303, 304, 305 are each designed as a microprocessor or microcontroller. The first and the second emergency processing unit 303, 304 have a non-volatile memory. The third emergency processing unit 305 has a non-volatile memory and/or has access to a non-volatile memory. The central emergency button 302 is activated by an emergency button activation element 306 being activated. As a result, an emergency button switch 307 is actuated. This generates a first and a second signal. For this purpose, a first and a second circuit (not shown) are opened. A first circuit opening signal is detected by the first emergency processing unit 303 . A second circuit opening signal is detected by the second emergency processing unit 304 .

The central emergency button 302 is connected to a second bus system 401 . As in figure 9 shown, the control device 100 is also connected to the second bus system 401 . The second bus system 401 is a different type of bus system than the first bus system 400. For example, the second bus system 401 can be in the form of a LON or LAN bus and the first bus system 400 can be in the form of a CAN or DCW bus.

In figure 9 includes the emergency button 10, the control device 100. The emergency button 10 and the door lock 200, in figure 9 are shown correspond to the emergency button 10 and the door lock 200 of figure 2 .

In an alternative, not shown, the control device 100, the emergency button 10 and the door lock 200 according to figure 3 educated. In this alternative, which is not shown, the control device 100, the emergency button 10 and the door lock 200 are connected to one another via the first bus system 400, with the control device 100 being connected to the second bus system 401.

The control device 100 receives messages from the central escape route security system 300 via the second bus system 401. The control device 100 forwards the messages the first bus system to other participants of the first bus system 400 on. In particular, the message can contain information regarding an actuation of the central emergency button 302, the key switch 312, the first control element 322, the second control element 323, the delay element 332 and/or the termination element 333 or a control command as a result of an actuation of one of the aforementioned elements 302 , 312, 322, 323, 332, 333. If the control device 100 is integrated in the emergency button 10, there is no forwarding to the emergency button 10 in which the control device 100 is integrated. For example, according to the figure 9 the control device 100 forwards the message to the door lock 200 . If the control device 100 and the emergency button 10 are connected via the first bus system 400, the control device 100 forwards the message to the emergency button 10 and/or the door lock 200. The control device 100 adapts the message to the format of the first bus system 400 . Security-related messages are otherwise left untouched.

If the central emergency button 302 has been actuated, the first emergency processing unit 303 and, redundantly, the second emergency processing unit 304 cause the door lock 200 to be unlocked. 203. The first and the second processing means 202, 203 then control the locking mechanism 205. The first and second processing units 103, 104 have previously forwarded the message. Here, the control device 100 has left the content of the message untouched.

The central emergency button 302 has an input for receiving a fire alarm signal. If the fire alarm signal is received, the central emergency button 302 causes the door lock 200 to be unlocked. Like previously described.

A signal about an actuation of the key button 312 of the first module 310 is received by the emergency button electronic unit 308, in particular the third emergency processing unit 305. The emergency button electronics unit 308 sends a message regarding the actuation of the key button 312 via the second bus system 401 to the control device 100. The control device 100 forwards the message to the first bus system 400.

The emergency button actuating element 306 has a non-latching design. The emergency button actuating element 306 is designed identically to the actuating element 11 of the emergency button 10 (see Fig. Figures 13 to 15 ). In this way, the emergency actuating element 306 is transferred from an initial position to an actuating position when it is actuated (analogous to figure 11 ). Immediately after actuation, the emergency actuation element 306 moves back into the starting position by the force of a restoring means designed as a spring (analogous to figure 11 ). The actuation of the emergency actuation element 306 takes place in a translatory manner. If the door lock 200 is switched to the unlocked state as a result of the actuation of the central emergency button 302, the electronic device 207 prevents the door lock 200 from being able to be switched back to the locked state without the existence of a cancellation condition. The cancellation condition after the central emergency button 302 has been actuated can be achieved by actuating the key button 312 . In particular, an actuation of the key switch 312 is sufficient to achieve the override condition.

If the security system 1 includes the central escape route control 300, the override condition can be reached in another way as a result of the emergency button 10 being actuated: if the door status monitoring devices 204, 206 have detected that the door 2 remained permanently closed after the emergency button 10 had been actuated then the override condition may be achieved by elapse of a predetermined time interval and override treatment at the central escape route controller 300 after the predetermined time interval. The cancellation treatment can correspond to an authentication at the central escape route control 300, in particular an actuation of the key switch 312. Through the cancellation treatment, e.g. B. the actuation of the key switch 312, a cancellation signal can be generated. The cancellation signal is forwarded to the door lock controller 201 via the controller 100 . In this case, authentication at the key switch 500 and cancellation action at the emergency button 10 are not necessary.

The door locking controller 201 checks whether the cancellation condition can be reached by the predetermined time interval and authentication at the central escape route controller 300 with the door 2 remaining closed before the door locking controller 201 activates the locking mechanism 205 to lock. Thus, when starting up the security system 1, an operator can store whether the elapse of the predetermined time interval without opening the door 2 and the additional actuation of the key switch 312 is permissible as a cancellation condition and thus leads to the door 2 being locked again. Permissibility checking, elapse of the predetermined time interval, actuation of key switch 312 after the predetermined time interval and the fact that no door opening signal has been sent by either the first door status monitor 204 or the second door status monitor 206 during the predetermined time interval are sufficient to achieve the override condition.

This is a variant of achieving an override condition that is part of the figures 1 and 2 was described. This variant can B. be selected by the operator if only the elapse of the predetermined time interval with the door 2 remaining closed does not seem safe enough to the operator. The operator can select and store this variant using the parameterization program.

In particular, if the operator has selected this option, the elapse of the predetermined time interval with the door 2 remaining closed is indicated optically on the central escape route control 300 . In particular, the lighting means 313 are used to indicate that the predetermined time interval has elapsed without a signal about the opening of the door 2 being received within the predetermined time interval. The operator learns from the optical display that the door 2 can be locked by the authentication at the central escape route control 300 .

If the door status monitoring devices 204, 206 have not sent a signal about opening the door while a fire alarm signal is present, the door lock 200 can also be locked by the same actuation of the key switch 312 after the fire alarm signal has ended. The possibility of locking the door lock 200 by actuating the key switch 312 after the fire alarm signal has ended is also indicated optically by the lighting means 313 .

The control device 100 forwards messages from the emergency button 10 and/or the door lock 200 via the second bus system 401 . In this case, the control device 100 adapts the message to the format of the second bus system 401 . Control device 100 sends information about the status of emergency button 10 and/or door lock 200 via second bus system 401.

For example, the central escape route control 300 and the multi-door display device 350 can be connected to a third bus system 403 (see Fig. 10 ). The central emergency button 302, particularly preferably the electronic emergency button unit 308, can preferably be connected to the third bus system 403 (see Fig. 8 ). The multi-door display device 350 can visually display the locked and unlocked status of the door lock 200 . In addition, one of the door locks 200, 200', 1200', 2200' of the security system 1 (see Fig. 10 ) can be unlocked. Unlocking using the Multi-door display device 350 is not single-fault-proof. The third bus system 403 can be the same type of bus system as the first bus system 400, e.g. B. a CAN or DCW bus.

The control device 100 forwards via the second bus system 401 to the central escape route control 300 if the emergency button 10 waits a first delay period before the emergency button 10 causes the door locking control 201 to activate the locking mechanism 205 for unlocking.

The first delay period is displayed visually at the central escape route controller 300 . For this purpose, the central emergency button 302 is constructed according to the emergency button 10, as is the case figures 13 , 16, 17 is described. The lighting means 313 of the central emergency button 302 are controlled by the electronic emergency button unit 308 for the visual display of the first delay period. As the first delay period progresses, fewer illuminants 313 light up in the same color. For example, fewer illuminants 313 can illuminate in a first color and an increasing number of illuminants 313 can illuminate in a second color. The lamps 41 of the emergency button 10 are controlled in an identical manner in order to visually represent the first delay period.

During the first delay period, e.g. B. 8 s, the operator can actuate the delay element 332. To do this, the operator turns a key in the key switch, which serves as a delay element 332 . An actuation of the delay element 332 is detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. A corresponding message is sent via the second bus system 401 and possibly the first bus system 400. The emergency button 10 receives the message. As a result of the actuation of the delay element 332, the emergency button 10 ends the first delay period and begins a second delay period. The second delay period, e.g. B. 180 s, is longer than the first delay period. At the end of the second delay period, the emergency button 10 causes the unlocking of the door lock 200. The second delay period is determined in the emergency button 10 using the same timer that is used to determine the first delay period. During the second delay period, the key of the delay element 322 need not remain turned. Rather, turning the key once is sufficient to start the second delay period.

The second delay period is displayed visually on the central escape route control 300 and on the emergency button 10 . The visual display on the central escape route control 300 is the same as the visual display on the emergency button 10. As the second delay time progresses, fewer lamps 41, 313 in shine same color. For example, fewer lamps 41, 313 can shine in a first color and an increasing number of lamps 41, 313 can shine in a second color. To represent that the second delay period is long, a timing-associating pattern, e.g. B. a rotating color dot or a rotating color window (see description of Figure 16, 17 ) can be displayed visually.

If the termination element 333 is actuated during the first or second delay period, the emergency electronics unit 308, in particular the third emergency processing unit 305, detects the actuation of the termination element 333 and sends a message regarding the actuation of the termination element 333 via the second bus system 401. This prompts the emergency electronics unit 308 the emergency button 10 not to delay the unlocking any further, but to prompt unlocking of the door lock 200 immediately. The terminating element 333 is non-latching. A single actuation of the termination element 333 is sufficient to terminate the delay in causing unlocking.

The emergency button 10 can be switched to the deactivated state by actuating the first operating element 322 . To do this, the operator turns a key in the key switch that serves as the first operating element 322 . An actuation of the first operating element 322 is detected by the electronic emergency button unit 308 . When the first operating element 322 is actuated, a first and a second deactivation circuit are opened or closed. Opening or closing of the first deactivation circuit is detected by the first emergency processing unit 303 . Opening or closing of the second deactivation circuit is detected by the second emergency processing unit 304 . The first and the second emergency processing unit 303, 304 communicate with the emergency button 10 via the second bus system 401. If the first bus system 400 is located between the emergency button 10 and the central emergency button 302, the control device 100 forwards the message from the first and the second emergency processing unit 303 , 304 further. When redirected, the format is changed, but the content remains unchanged.

In the deactivated state of the emergency button 10, actuation of the emergency button 10 has no effect on the door lock 200.

The activated state and the deactivated state are electronically stored in the emergency button 10 . Because the activated state and the deactivated state are stored in the emergency button 10, the key in the first operating element 322 does not have to remain turned during the deactivated state. Rather, turning the key once is sufficient to deactivate the emergency button 10 .

The deactivation remains until the second control element 323 is actuated. The actuation of the second control element 323 can be detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. The emergency electronics unit 308 sends a message regarding the actuation of the second operating element 323 via the second bus system 401 and possibly via the first bus system 400 to the emergency button 10, whereupon the emergency button 10 is transferred to the activated state. The second operating element 323 is non-latching. Because the activated and deactivated states are stored in the emergency button 10, a single actuation of the second operating element 323 is sufficient to convert the emergency button 10 into the activated state.

The central escape route control 300 includes a bus 341 via which the emergency electronics unit 308, in particular the third emergency processing unit 305, can detect signals from the second control element 323, the delay element 332 and the termination element 333. The emergency electronics unit 308 serves as intelligence for the entire central escape route control 300. Only the emergency electronics unit 308 includes microprocessors. The deactivation module 320 and/or the delay module 322 can be designed to be processor-free. The bus 341 can be designed as an I ² C bus.

A second variable can be stored in the first emergency button processing unit 20 and redundantly in the second emergency button processing unit 21, in particular in the non-volatile memories, to store the activated and the deactivated state. The second variable can be binary. If the emergency button 10 is in the deactivated state, the second variable is set to a deactivation value. If the emergency button 10 is in the activated state, the second variable is set to an activation value. As a result of an actuation of the first operating element 322, the second variable is set to the deactivation value. As a result of an actuation of the second operating element 323, the second variable is set to the activation value. Before the emergency button 10 causes the unlocking of the door lock 200, the emergency button 10 checks the value of the second variable. If the emergency button determines that the emergency button 10 is deactivated, then there is no communication between the emergency button 10 and the door lock controller 201 in order to initiate unlocking 200 .

The first emergency processing unit 303 and the second emergency processing unit 304 monitor each other for errors. If an error is detected, a message is sent via the second bus system 401. The emergency button 10 receives the message and then converts itself into the activated state if the emergency button 10 is in the disabled state. For this purpose, the emergency button 10 changes the value of the second variable to the activation value.

The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly send, in particular at regular intervals, a sign-of-life signal via the second bus system 401. The emergency button 10 receives the sign-of-life signals. If there is no sign-of-life signal once or several times, the emergency button 10 switches to the activated state if the emergency button 10 is in the deactivated state.

If the security system 1 receives a fire alarm signal, the emergency button 10 changes to the activated state if the emergency button 10 is in the deactivated state.

The actuation of the emergency button 10 in the deactivated state is displayed on the central escape route control 300, on the guard device 301 and/or on the multi-door display device 350. If there is actually a risk, the emergency button 10 can be switched to the activated state by the operator by actuating the second operating element 323, or the operator can directly control the door lock for unlocking. The operator can press the central emergency button 302 for this purpose. Whether there is a risk, the operator z. B. via the audio and video module 510 perceive. This achieves increased security.

The deactivation can e.g. B. be made at night in a department store. Furthermore, it is conceivable to use the deactivatable emergency button 10 in a building in which people with an impaired mental state live. Thus, emergency buttons 10 can also be used on doors to which people with impaired mental status have access, e.g. B. in a psychiatric or dementia ward.

If the emergency button 10 is actuated in the deactivated state and the emergency button 10 is then transferred to the activated state, the actuation of the emergency button 10 which took place in the deactivated state does not lead to an unlocking of the door lock 200 even after the transfer to the activated state deactivated state, pressing the emergency button 10 has no effect. On the one hand, this is due to the fact that the actuating element 11 and the switch 63 are non-latching. On the other hand, the actuation of the emergency button 10 in the deactivated state was not stored in the emergency button 10. The door lock controller 201 does not receive a message regarding the operation of the emergency button 10 in the deactivated state. The electronic determination was therefore not transferred to the actuation state. This ensures that the door lock 100 is not unlocked immediately when the emergency button 10 is activated, e.g. B. because the emergency button 10 was pressed long before. This achieves increased building security.

In order to achieve a particularly high level of security, it can be provided that the audio and video module 510 is switched on during the first and/or the second delay period. In this case, the emergency button 10 enables the audio and video module 510 at the beginning of the first and/or second delay period. The audio and video module 510 is also enabled by the emergency button 10 if the emergency button 10 is actuated in the deactivated state. For this purpose, the emergency button 10 communicates with the audio and video module 510 via the second bus system 401 and, if necessary, via the first bus system 400.

It may be that the emergency button 10 can only be deactivated if the audio and video module 510 can be unlocked. If the audio and video module 510 is part of the security system 1 according to the invention, deactivation can be omitted if the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module 510 is faulty. This does not apply if the security system 1 does not include an audio and video module 510, but rather a monitoring system that is separate from the security system 1 is provided in the building.

It may be that the emergency button 10 only delays the initiation of the unlocking by the first and/or second delay period if the audio and video module 510 is unlockable. If the audio and video module 510 is part of the security system 1 according to the invention, a delay can be omitted if the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module is faulty. This does not apply if the security system 1 does not include an audio and video module 510, but rather a monitoring system that is separate from the security system 1 is provided in the building.

In figure 10 a further exemplary embodiment of a security system 1 according to the invention is shown. As in the embodiment of Figures 7 to 9 includes the security system 1 a central escape route control 300, according to the figures 7 and 8th is constructed. Key buttons 500, 500', 1500, 1500', 2500 associated with the respective emergency buttons 10, 10', 1010, 1010', 2010 are not shown for the sake of clarity. The central escape route control 300 is connected to the second bus system 401 . A first subsystem 5 and a second subsystem 6 are connected to the second bus system 401 . The two subsystems 5, 6 each include a first bus system 400, 400'. Emergency buttons 10, 1010 or 10', 1010', 2010' and door locks 200 or 200', 1200', 2200' are connected to the respective first bus system 400, 400'. The first bus systems 400, 400' are the same type of bus system, e.g. B. um a CAN or a DCW bus. The second bus system 401 is a different type of bus system, e.g. B. a LON or LAN bus.

The security system 1 comprises the multi-door display device 350. The multi-door display device 350 can e.g. B. visually indicate which door lock 200 or 200 ', 1200', 2200 'is in the unlocked state and which door lock is in the unlocked state. An operator can use the multi-door display device 350 to lock and unlock individual door locks 200 or 200′, 1200′, 2200′ of the security system 1 that are not safety-related.

Each subsystem 5, 6 comprises only one control device 100, 100'. In each case the control device 100, 100' of the respective subsystem 5, 6 is connected to the second bus system 401. The control device 100 of the first subsystem 5 is connected to the emergency buttons 10, 1010 and the door lock 200 of the first subsystem 5 via the first bus system 400. The control device 100' of the second subsystem 6, on the other hand, is integrated in an emergency button 10' of the second subsystem 6 and connected to the other emergency buttons 1010', 2010' and the door locks 200', 1200', 2200' of the other first bus system 400'.

A first emergency button 10 and a second emergency button 1010 are provided in the subsystem 5 . If one of the emergency buttons 10, 1010 is actuated, the actuated emergency button 10, 1010 causes the door lock 200 to be unlocked.

A first emergency button 10', a second emergency button 1010' and a third emergency button 2010' are provided in the subsystem 6. The emergency buttons 10', 1010', 2010' selectively cause the door locks 200', 1200', 2200' of the second subsystem 6 to be unlocked. For example, when the first emergency button 10' is actuated, only the first door lock 200' is unlocked. Accordingly, when the second emergency button 1010' is actuated, only the second door lock 1200' is unlocked, and when the third emergency button 2010' is actuated, only the third door lock 2200' is unlocked.

Various deviations are conceivable. Thus, a security system 1 according to the invention z. B. be configured without the first or the second subsystem 5, 6. As a single or additional subsystem z. B. one of the in the Figures 1 to 6 described security systems 1 according to the invention may be provided. The design and the functions of the emergency buttons 10, 10', 1010, 1010', 2010' and the door locks 200, 200', 1200', 2200' are designed in accordance with the previous exemplary embodiments, unless additionally or differently described below.

In each of the door locks 200, 200', 1200', 2200' of the security system 1 it is stored whether the respective door lock 200, 200', 1200', 2200' is unlocked when the central emergency button 302 is actuated. So e.g. B. allow the door locks 200, 200 ', 2200' an unlocking as a result of pressing the central emergency button 302, the door lock 1200 'not. If the central emergency button 302 is actuated, the door lock controls 201 of the door locks 200, 200', 2200' activate the respective locking mechanism 205 for unlocking. On the other hand, there is no such activation in the door lock 1200'.

If the central emergency button 302 is actuated, the control devices 100, 100' receive a corresponding message from the central emergency button 302 via the second bus system 401 and forward the message to all door locks 200 or 200', 1200', 2200' of the respective first bus system 400 , 400' further. The door locks 200, 200 ', 1200', 2200 'decide based on the deposit, which includes the approval of unlocking as a result of pressing the central emergency button 302, whether the respective door lock control 201 of the door locks 200, 200', 1200 ', 2200' the respective locking mechanism 205 controls for unlocking or not.

The storage of whether the door lock 200, 200′, 1200′, 2200′ is unlocked as a result of an actuation of the central emergency button 302 takes place when the security system 1 is put into operation by the operator. The storage is carried out by the parameterization program.

In each of the emergency buttons 10, 1010, 10'. 1010′, 2010′ is stored as to whether, when the first operating element 322 is actuated, the respective emergency button 10, 1010, 10′. 1010', 2010' is allowed or not. This results in selective deactivation by actuating the single first control element 322 of the security system 1. B. the emergency buttons 10, 10 ', 2010' are transferred to the deactivated state as a result of an actuation of the first operating element 322, the emergency buttons 1010, 1010 'but not.

If the first control element 322 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to all emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400' that are not include the control device 100, further. The emergency buttons 10, 1010, 10'. 1010′, 2010′ of the security system 1 decide based on the deposit of permission for deactivation whether the respective emergency button 10, 1010, 10′, 1010′, 2010′ converts itself to the deactivated state as a result of the actuation of the first control element 322 or not.

When storing whether a deactivation of the emergency buttons 10, 1010, 10', 1010', 2010' should be permitted, it can be a third variable. The third variable can be binary. The third variable is stored in the non-volatile memory of the respective first and second emergency button processing units 20, 21 of each emergency button 10, 1010, 10', 1010', 2010'. If deactivation is permitted for the respective emergency button 10, 1010, 10', 1010', 2010', then the third variable assumes a first value. If deactivation is prohibited for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable assumes a second value. The emergency button 10, 1010, 10', 1010', 2010' checks the value of the third variable before the emergency button 10, 1010, 10', 1010', 2010' deactivates and only deactivates if the third variable has the first value has.

The operator decides whether the emergency button 10, 1010, 10', 1010', 2010' can be deactivated when the safety system 1 is put into operation. This is stored using a parameterization program.

In each of the emergency buttons 10, 1010, 10'. 1010', 2010' it is stored whether, when the delay element 332 is actuated, the respective emergency button 10, 1010, 10'. 1010', 2010' the unlocking of the emergency button 10, 1010, 10'. 1010', 2010' associated door locks 200, 200', 1200', 2200' delayed by a second delay period or not. The second delay period is for the respective emergency buttons 10, 1010, 10'. 1010', 2010' of different lengths and stored in the security system 1, in particular in the emergency buttons 10, 1010, 10', 1010', 2010'. Alternatively, the delay by the second delay period and possibly the length of the second delay period can only be permitted for groups of emergency buttons 10, 1010, 10'. be individually adjustable. The setting and storage is carried out by the operator with the help of the parameterization program.

So e.g. For example, the emergency button 10, 2010' further delays the unlocking of the door locks 200 or 2200' as a result of an actuation of the delay element 332, whereas the emergency button 1010, 10', 1010' does not. The length of the second delay time for the emergency button 10 is selected to be different from the length of the second delay time for the emergency button 2010′. If the emergency button 10 is actuated and the delay element 332 is actuated within the first delay period stored for the emergency button 10, the emergency button 10 delays the unlocking from the actuation of the delay element 332 by the second delay period stored in the emergency button 10 . If the emergency button 2010' is actuated and the delay element 332 is actuated within the first delay period stored for the emergency button 2010', the emergency button 2010' decelerates from the actuation of the Delay element 332 unlocking the second delay time that is stored in the emergency button 2010 'and which differs from the second delay time for the emergency button 10. If the emergency button 1010 is actuated, the emergency button 1010 delays unlocking by the first delay period that is stored for the emergency button 1010 . If the delay element 332 is actuated during the first delay period of the emergency button 1010, the unlocking is not delayed by a second delay period, since this delay is not permitted for the emergency button 1010, but the emergency button 1010 immediately unlocks the door lock after the first delay period 200 cause. The emergency buttons 10', 1010' do not delay the unlocking of the associated door lock 200' or 1200' at all. Neither a first delay nor a second delay is permitted for the emergency buttons 10', 1010'. Instead of not allowing a delay by the first and/or the second delay period, a period of 0 s can also be stored. Actuation of the termination element 333 terminates any delay in unlocking.

If the delay element 332 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to the emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400', which do not Control device 100 include further. The emergency buttons 10, 1010, 10'. 1010', 2010' of the security system 1 use the deposit to decide how to proceed.

The deposit as to whether the emergency button 10, 1010, 10', 1010', 2010' allows the delay by the second delay period and, if so, the deposit of the length of the second delay period, takes place when the safety system 1 is put into operation. The deposits are made by the Operator defined with the help of the parameterization program. The first and/or the second delay time period can only be selected up to a maximum, fixed predetermined time period.

The operator can also use the parameterization program to selectively store which cancellation condition is permitted for which emergency button 10, 1010, 1010', 2010'. The cancellation condition for the cancellation action on site is always permitted. For each emergency button 10, 1010, 1010′, 2010′, however, it is possible to selectively allow the cancellation condition to be reached by the predetermined time interval elapsing or the cancellation condition to be reached by the predetermined time interval elapsing and the identification device 312 then being actuated with the door 2 remaining closed or not.

The storage of whether the emergency button 10 can be deactivated when the first operating element 322 is actuated, whether the emergency button 10 should delay unlocking by a second delay period when the delay element 332 is actuated, the length of the first and second delay periods, the storage of the cancellation condition and /or the deposit of whether the door lock 200 is to be unlocked when the central emergency button 302 is actuated can also be used for the security system 1 according to the exemplary embodiment of FIG Figures 7 to 9 be made.

Deviating and not shown from the Figures 7 to 10 several central escape route controls 300, 300' can also be connected to the second bus system 401. For example, in a psychiatric ward, a central escape route control 300 can be provided for arrangement in a guard room and a further central escape route control 300′ can be provided for arrangement in a nurses’ room.

In the respective door locks 200, 200', 1200', 2200' it can be stored with the aid of the parameterization program which of the central emergency buttons 302, 302' should be unlocked as a result of an actuation. A list is stored in the door locks for this purpose. In the respective emergency buttons 10, 10′, 1010, 1010′, 2010′ it can be stored with the aid of the parameterization program which of the first operating elements 322, 322′ is permitted to be deactivated as a result of an actuation. Deviating from the third variable, a list is stored in each of the emergency buttons 10, 10', 1010, 1010', 2010'.

The first to fourth exemplary embodiments of the security system 1 according to the invention also have a second bus system 401 and a central escape route control 300, even if the second bus system 401 and the central escape route control are not shown. In this case, the control device 100 and the central escape route control 300 are each connected to the second bus system 401 . The central escape route control can be used as in the figures 7 and 8th be shown formed. In addition, exemplary embodiments of the security system 1 according to the invention are conceivable in which the first to fourth exemplary embodiments additionally include the missing components 301, 510 at least in part. If the security system 1 is designed for several doors, an audio and video module 510 can be assigned to each door. The emergency buttons 1010, 2010, 3010, which do not include the control device 100, and the door locks 200, 1200, 2200, 3200 are not connected to the second bus system 401.

In the Figures 1 to 10 the door locks 200, 200', 1200, 1200', 2200, 2200', 3200 are part of the security system 1 according to the invention. However, it is conceivable that only the door lock controls 201 are part of the security system 1 according to the invention. In this case, the door lock controls 201 each with the Locking mechanism 205 and, if necessary, the door status monitoring devices 204, 206 can be connected. In this case, the door lock 200 is not unlocked in the security system 1, but part of the security system 1 is that the door lock control 201 controls the locking mechanism 205, ie the door lock control 201 switches the electrical current for the locking mechanism 205 on or off. In this case, instead of the terms "unlocking or locking of the door lock" respectively "actuation of the locking mechanism for unlocking or locking" can be used.

In the Figures 11 to 13 an emergency button 10 is shown. the inside figure 11 The emergency button 10 shown is an emergency button 10, 10', 1010, 1010', 2010, 3010 in one of the security systems 1 according to the invention Figures 1 to 10 usable or used.

The emergency button 10 includes the actuating element 11. The actuating element 11 can be moved from the initial position 11.I, which is in the figure 11 is shown, move to the operating position 11.II, which is shown in figure 11 is indicated. In figure 12 the actuating element 11 is also in the starting position 11.I.

In the operating position 11.II, the switch 63 is operated. The switch 63 also changes from a first position 63.1 to a second position 63.11, as in figure 12 implied.

After actuation, the actuating element 11 returns to the starting position 11.I immediately and without manual intervention. For this purpose, a restoring means 12 designed as a spring is provided in the emergency button 10 . The switch 63 also returns to the first position 63.1 immediately and without manual intervention after it has been actuated.

The emergency button 10 comprises at least a first circuit board 60. This makes it possible to design the emergency button 10 in a compact manner and with reliable functionality.

The emergency button 10 has a height AH of less than 48 mm, preferably less than 45 mm, particularly preferably less than 43 mm from a crest 32 of a front surface 19 of the actuating element 11 in the installation direction.

The switch 63 is fixed on the first circuit board 60 . The first and the second circuit are interrupted on the first circuit board 60 by actuating the switch 63 .

The emergency button 10 also includes a second circuit board 61. The first, the second and the third emergency button processing unit 20, 21, 22 are arranged on the second circuit board 61. The arrangement of the first, second and third emergency button processing units 20, 21, 22 is independent of whether the first, second and third emergency button processing units 20, 21, 22 serve as processing units 103, 104, 105 of the control device 100.

The first and second emergency button processing units 20, 21 can detect the opening of the first and second circuits without cables. For this purpose, the first and the second circuit board 60, 61 are connected to one another via plugs 68.

The first and second sinkers 60, 61 are arranged at a fixed distance from each other. Bolts 69 are provided for this purpose, which fasten the first and second circuit boards 60, 61 to one another at a fixed distance from one another via screws 70 (see Fig. figure 13 ). The first and second sinkers 60, 61 are arranged parallel to each other.

The emergency button 10 includes a mounting plate 62. The mounting plate 62 is also arranged at a fixed distance from the first and the second circuit board 60, 61. Bolts 71 are provided for this purpose, which connect the mounting plate 62 to the first circuit board 61 via screws 72 .

The mounting plate 62 is used for attachment to a flush-mounted box. The flush-mounted box can have a diameter of 60 mm and a depth of 41 mm. The part of the emergency button 10 that extends from the mounting plate 62 in the direction of installation is referred to as the built-in part 73 . The built-in part 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm, particularly preferably less than 29 mm. This leaves enough space for cables in the flush-mounted box. The distance MP from an underside of the mounting plate 62 to an upper side of the second circuit board 62 is less than 22 mm, preferably less than 20 mm, particularly preferably less than 17 mm. The mounting plate 62 can also be used for attachment to a cover element of a surface-mounted housing (not shown). The distances mentioned apply in particular to an emergency button in which the Bluetooth module 64 is attached to an underside of the second circuit board 61, in contrast to the illustration in the figures.

As described above, the override action performed directly on the emergency button 10 is performed without rotating the actuator 11 and the switch 63. This makes it possible to use a switch 63 with a small height. Thus, the switch 63 is formed such that the switch 63 is free from rotation. The switch 63 has a height SH of less than 20 mm, preferably less than 17 mm, particularly preferably less than 15 mm.

The type of cancellation action and the low height of the switch 63 contributes to the low overall height AH of the emergency button 10.

The fact that the switch 63 is arranged centrally under the actuating element 11 and the actuating element 11 is guided eccentrically in the emergency button 10 also contributes to the low installation height AH of the emergency button 10 .

As in the Figures 14 and 15 shown, the actuating element 11 has rod-shaped guide means 35 . The guide means 35 are guided in guide sleeves 65 . The guide sleeves 65 are connected to the mounting plate 62 . In order to achieve good guidance, one of the guide sleeves 65 extends through the first plate 60.

The guide means 35 are arranged parallel to the switch 63 . The guide means 35 prevent a rotational movement of the actuating element 11 about an imaginary axis 701 which runs in the direction of actuation 700 .

The actuating element 11 can only be moved in a translatory manner by the guide means 35 guided in the guide sleeves 65 .

The actuating element 11 has an actuating means 36 . As in the figures 12 and 15 shown, the actuating means 36 is in the form of a circular cylinder. This ensures that the actuating means 36 always actuates the switch 63 . In particular, a first and a second switching element 74, 75 of the switch are always actuated simultaneously (see Fig. figure 13 ). The first circuit is opened by the first switching element 74 and the second circuit is opened by the second switching element 75 .

The actuator 36 is formed with a hollow interior 38 . In the switch 63, a light source (not shown) is arranged. The light emitted by the light source is directed through the hollow interior 38 to the crest 32 of the front face 19 of the actuator 11 where the light passes through the actuator 11 . The tip 32 thus serves as an illuminating area 32 of the actuating element 11.

The actuating element 11 can comprise an opaque base body 33 . The base body 33 can be provided with an opening in deviation from the representation in the figures. A light-permeable, in particular translucent, insert (not shown) can be arranged in the opening. The insert can be fastened in the opening, in particular pressed in. As a result, the actuating element 11 can be produced in a particularly simple manner.

The front surface 19 is partially conical. The illuminating area 32 forms the tip of the truncated cone. The illuminated area 32 protrudes from a cover 14 of the emergency button 10 against the direction of actuation 700 . As a result, the light that leaves the illuminated area 32 is clearly visible to the side of the emergency button 10 .

The restoring means 12 has a cavity 37 . The actuating means 36 of the actuating element 11 and the switch 36 with the first and the second switching element 74, 75 protrude into the cavity 37. This results in a space-saving arrangement.

The Bluetooth module 64 is arranged between the first and the second circuit board 60, 61. The Bluetooth module 64 is used for parameterization. Alternatively and not shown, and more space-saving, the Bluetooth module 64 is attached to a side of the second circuit board 61 facing away from the actuating element 11 . As a result, the distance between the first and the second circuit board 60, 61 can be further reduced.

A tamper switch 66 is arranged on the first circuit board 60 . Because of the low overall height, an actuating extension 67 of the sabotage switch 66 is passed through the mounting plate 62 . The actuating extension 67 rests directly on the cover 14 of the emergency button 10 .

If the control device 100 is integrated in the emergency button 10, the emergency button 10 can include the functions described above, despite the low installation height AH, and can therefore be configured intelligently. The functions described above are executed using a program code that is stored in at least one of the processing units 103, 104, 105.

The emergency button 10 has a cover 13 . The covering means 13 is transparent and covers the front surface 19 of the actuating element 11 . As a result, the covering means 13 prevents the user from directly touching the actuating element 11 . The covering means 13 serves as a mental obstacle for the user.

The cover 13 remains non-destructive when the emergency button 10 is actuated. When the emergency button 10 is actuated, the covering means 13 moves from an initial position 13.1 to an actuated position 13.11. The covering means 13 actuates the actuating element 11 only indirectly via the covering means 13 by the user.

The covering means 13 is arranged in the emergency button 10 so that it cannot be removed. The result of this is that a user cannot improperly remove the covering means 13 .

The covering means 13 is firmly connected to the actuating element 11 . For this purpose, the covering means 13 has extensions 27, which figure 13 are shown. As in the figures 13 , 14 and 15 shown, the actuating element 11 has holes 28 through which the extensions 27 are guided and connected to the actuating element 11 in a materially bonded manner.

The actuating element 11 has a flange-like section 31 to which the covering means 13 is fastened. The flange-like section 31 has the holes 28 .

The flange-like section 31 serves as a stop for the actuating element 11 in the direction of actuation 700. The actuating element 11 reaches the actuating position 11.II when the flange-like section 31 rests against the mounting plate 62 or against the guide sleeves 65.

The flange-like section 31 serves as a stop for the actuating element 11 against the direction of actuation 700. The actuating element 11 reaches the initial position 11.1 when the flange-like section 31 rests against a light guide 40. The light guide 40 holds the actuating element 11 against the force of the restoring means 12. The light guide 40 has a contact surface 51 for this purpose.

The light guide 40 is attached to the mounting plate 62 . As a result, the actuating element 11 is held against the force of the restoring means 12 even when the cover 14 is removed. The light guide 40 has a flange 52 with which the light guide 40 is attached to the mounting plate 62 (see Fig. 17 ). The light guide 40 is attached to the mounting plate 62 by the same screws 72 that attach the mounting plate 62 to the first circuit board 60 .

Alternatively and not shown, the covering means 13 can be designed as an elastic foil that spans the actuating element 11 .

Due to the fixed connection, the distance between the operating position 11.II and the starting position 11.I and the distance between the operating position 13.11 and the starting position 13.1 correspond to one another. Immediately after the end of the actuation and without manual intervention, the covering means 13 is moved back into the starting position 13.1. The restoring means 12 is used for this purpose. The restoring means 12 transfers the covering means 13 indirectly via the actuating element 11 into the starting position 13.1.

The covering means 13 and the actuating element 11 each have a circular cross section. The cover 14 has a circular recess 15 . The covering means 13 protrudes through the recess 15 counter to the direction of actuation 700. The actuation element 11 also protrudes through the recess 15.

The recess 15, the actuating element 11 and the covering means 13 have a common imaginary axis 701. The recess 15, the actuating element 11 and the covering means 13 are arranged concentrically.

The covering means 13 has an actuating surface 17 which is at a distance from the front surface 19 of the actuating element 11 . The covering means 13 also has a side surface 16 which is formed at a distance from the side surface 18 of the actuating element 11 .

Due to the spacing of the front surface 19 and the actuating surface 17, the transparent covering means 13 can project far out of the cover 14, while the partially opaque actuating element 11 projects out of the cover 14 only to a small extent. As a result, the light guide 40, which is essentially flush with the cover 14, remains clearly visible even to users standing at an angle in front of the emergency button 10. The The light guide deviates from a planar termination with the cover 14 by a maximum of ±3 mm, preferably a maximum of ±2 mm, particularly preferably ±1 mm.

Due to the fact that the covering means 13 protrudes far out of the cover 14, the user can operate the emergency button 10 with the palm of his hand. For this purpose, the covering means 13 is flush with the cover 14 in the operating position 13.II or the covering means 13 protrudes from the cover 14 against the operating direction 700 in the operating position 13.II. In other words, the distance ABS between the starting position 13.1 and the operating position 13.II corresponds at most to the distance DF of an elevation 30 of the operating surface 17 from the cover 14 distance DF. In figure 11 the distance ABS and the magnitude of the distance AB correspond to the distance DF.

The emergency button 10 includes lamps 41. The lamps 41 are used to display the unlocked and locked state of the door lock 200. If there are several emergency buttons 10, 1010, 2010, 3010, the lamps 41 indicate the unlocked and locked state of the associated door lock or door locks 200, 1200, 2200, 3200. The lighting means 41 are arranged concentrically around the actuating element 11 . For example, the unlocked state is indicated by a green light and the locked state is indicated by a red light. In particular, all light sources 41 emit the same light to indicate the locked and unlocked state, at least if there is no danger.

The lighting means 41 can be controlled in at least two groups. Due to the different control z. B. patterns are possible through which the user more states of the security system 1 are displayed. As a result of the additional display options, a large number of states can be displayed to the user and/or the operator in a compact and simple manner without additional display means. This increases the security of the security system 1 .

In figure 13 1 shows six individual illuminants of the eight individual illuminants 41 present by way of example, of which three illuminants are provided with the reference symbols 41a, 41b, 41c. The individual light sources are referred to below as 41a, 41b, 41c, etc.

Each of the individually controllable groups of light sources 41 can only include a single light source 41a, 41b, 41c, etc. In the embodiment of Figures 11 to 17 each lamp 41a, 41b, 41c, etc. can be controlled individually. Each light source 41a, 41b, 41c, etc. is in the form of an RGB LED. The lamps 41a, 41b, 41c, etc. can be controlled in such a way that each lamp 41a, 41b, 41c, etc. has at least four can emit different, preferably at least five different colors. This can be z. B. be red, blue, yellow, green and pink light.

The lighting means 41 are controlled by the third emergency button processing unit 22 . For this purpose, the emergency button processing unit 22 and the lighting means 41 are connected to a ring bus (not shown).

The lighting means 41 are arranged on the first circuit board 60 . The acoustic alarm device 23 is also arranged on the first circuit board 60 . The acoustic alarm device 23 is activated by the third emergency button processing unit 22 .

Are several door locks 200, 1200 associated with the emergency button 10 such. Am figure 4 shown, at least two options are conceivable. On the one hand, the emergency button 10 can only display the unlocked state when all the door locks 200, 1200 assigned to the emergency button 10 are in the unlocked state. Here, the unlocked state is only displayed when the entire escape door width of the two door leaves 3, 4 is available for escape. Alternatively, the emergency button 10 already indicates the unlocked state when one of the door locks 200, 1200 or all the door locks of a door leaf 3, 4 are in the unlocked state. As a result, the possibility of escape is displayed as early as possible when one of the door leaves 3, 4 is unlocked. The options can be selected by the operator. For this purpose z. B. a switch (not shown) in the security system 1 may be provided.

A further state of the security system 1, which is indicated by the lighting means 41 that can be controlled in groups, is danger. In this case, the lighting means 41 can indicate whether a fire alarm signal is present or whether an actuation signal has been generated.

The lighting means 41 can be controlled in such a way that the progression of the time delay of the unlocking after the activation signal has been generated by the lighting means 41 is displayed. Here emit z. B. increasingly fewer lamps 41 light of one color, in particular red light.

As a further state of the security system 1, which can be represented by the lighting means 41, a fault can be represented by the lighting means 41. The error that can be represented in this way can be an error in the safety system 1 . For example, it can be indicated that the control device 100, the door locking control 200 or the first or the second emergency button processing unit 20, 21 of the security system 1 is not operational, defective, failed, switched off intentionally or has been removed. The fault can be a fault of the alarm system connected to the security system 1, which is inoperable, defective, failed, intentionally switched off or removed.

The light guide 40 comprises a plurality of light guide regions 44 (see Figures Figures 16 and 17 ). Each of the lighting means 41a, 41b, 41c, etc. is assigned a light guide area 44 in each case. The light guide 40 can be mentally divided into the light guide areas 44 . Recesses 46 are provided between the light guide regions 44 . Due to the recesses 46, the light essentially remains in the light guide areas 44.

Each light guide area 44 has a forwarding section 48 . The forwarding section 48 is arranged above the lighting means 41 in the transmission direction 702 . The direction of transmission 702 is opposite to the direction of actuation 700. The forwarding section 48 is used to conduct light up to a section 45 of the light guide region 44 that spreads out.

The spreading section 45 follows the forwarding section 48 in the transmission direction 702 . The spreading section 45 serves to widen the light beam of the emitted light. The forwarding section 48 widens less than the expanding section 45.

The light guide 40 is formed in one piece. The light guide 40 is made of the same material, in particular monolithic. The light guide 40 is made of translucent material.

The light guide areas 44 have a connecting section 49 . The connecting section 49 adjoins the expanding section 45 in the transmission direction 702 . The connecting sections 49 of the light guide regions 44 are connected to one another in one piece in such a way that the one-piece light guide 40 that is made of the same material results.

The connecting sections can have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the light from one of the lamps 41a, 41b, 41c, etc. is almost limited to a lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h on the surface 47 of the light guide 40 facing the user. Each light guide area 44 includes a lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h.

The surface 47 of the light guide 40 corresponds to a circular ring. The luminous areas 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are designed as sectors of the circular ring. The associated luminous area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h is illuminated by the emission of light from a luminous means 41a, 41b, 41c, etc. The circular ring encloses the actuating element 11.

The lamps 41 can be controlled in such a way that at least one lamp 41a, 41b, 41c, etc. emits the light of one color and at least one other lamp 41a, 41b, 41c, etc. emits the light of a different color at the same time. In this way, for example, the luminous areas 50a, 50b, 50e, 50f can display light of one color and the luminous areas 50c, 50d, 50g and 50h can display light of another color. While the luminous areas 50a, 50b, 50e, 50f z. B. are continuously illuminated, the luminous areas 50c, 50d, 50g and 50h may be illuminated by illuminants 41 that emit blinking light.

are e.g. B. First, the luminous areas 50a, 50b, 50e, 50f are illuminated by light of a first color and the luminous areas 50c, 50d, 50g and 50h by light of a second color; then the luminous areas 50a, 50h, 50d, 50e are illuminated by the light of the first color and the luminous areas 50b, 50c, 50f and 50g by the light of the second color; If the luminous areas 50h, 50g, 50d, 50c are then illuminated by light of the first color and the luminous areas 50a, 50b, 50e and 50f by light of the second color, the impression of a circumferential color window is created.

The opposing luminous areas 50, ie the luminous areas 50 which lie on a straight line leading through the imaginary axis 701, in figure 14 namely 50a and 50e or 50b and 50f or 50c and 50g or 50d and 50h are preferably illuminated in the same way, ie in the same color and the same flashing frequency. Thus, the pattern can also be guessed at for users standing at an angle in front of the emergency button 10, even if at least one of the opposing luminous areas 50 is covered by the actuating element 11.

So that the light guide 40 is covered as little as possible, the illuminating area 32 protrudes at most 10 mm, preferably at most 7 mm, particularly preferably at most 5 mm above the light guide 40 .

The emergency button 10 can include a brightness sensor (not shown). The brightness sensor measures the ambient brightness of the emergency button 10. If the ambient brightness decreases, the luminous intensity of the light emitted by the lamps 41 is also reduced.

Via the Bluetooth module 64, parameters can be set via a mobile communication device, e.g. B. in which way the lamps are to be controlled in which state of the security system 1. The parameters include the flashing frequencies of the lamps 41, whether a continuous or a flashing light is to be emitted, which state is to be indicated by which color. After the parameterization, the settings are stored in an electronic memory of the security system 1, in particular of the control device 100. Likewise, the display of certain For safety reasons, states cannot be selected by the operator and are constantly stored in the electronic memory. The operator can himself select states of the security system 1 which the operator would like to display through the lighting means 41 . For this purpose, colors and/or patterns can be emitted by the lighting means 41 that are not assigned to any predetermined state. For example, the operator can choose which condition the operator would like to be indicated by blue light. In addition to parameterization via the Bluetooth module 64, parameterization via the monitoring device 301 is possible.

The change in the status of the door lock 200 is then indicated after the door lock controller 201 communicates the status change to the control device 100 . The control device 100 then controls the lighting means 41 or causes the lighting means 41 to be controlled.

When the security system 1 is put into operation, several initialization views are successively generated by the lighting means 41 at fixed time intervals. Possible activated functions of the control device 100 are displayed in one of the initialization views. In a second initialization view, the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 that can be integrated into the security system 1 are displayed, with the status error-free/faulty/not present being displayed. The status of inputs and outputs is displayed in a third initialization view.

The central emergency button 302 is constructed almost identically to the emergency button 10 . In particular, the operating element 11 corresponds in function and structure to the emergency button operating element 306. The switch 63 corresponds to the emergency button switch 307. The central emergency button 302 also includes a resetting means corresponding to the resetting means 12. The central emergency button 302 comprises a first and a second circuit board and/or a mounting plate, which are constructed and connected to one another in accordance with the first circuit board 60, the second circuit board 61 and the mounting plate 62. The alarm transmitter 309 and the lighting means 313 are arranged on the first circuit board of the central emergency button 302 in accordance with the alarm transmitter 23 and the lighting means 41 . The first to third emergency processing units 303, 304, 305 are arranged on the second printed circuit board of the central emergency button 302. The emergency button switch 307 ends on the first circuit board of the central emergency button 302. When the emergency button switch 307 is actuated, a first and a second circuit are opened on the first circuit board, which can be detected wirelessly by the first and the second emergency processing unit 303, 304. For this purpose, the first and the second circuit board are connected via plugs. The The light guide of the central emergency button 302 corresponds to the light guide 40 in terms of structure and function.

It is conceivable that in the case of the central emergency button 302 a covering means 13 corresponding to the covering means 13 is configured differently or is missing. The lamps 313 are not used in particular to visually indicate a locked state of an emergency button 10. The lamps 313 are used to indicate the first and the second delay period and/or to indicate that cancellation is possible.

The security system 1 according to the invention does not necessarily have to have all the functions that are specified in the description for at least one of the Figures 1 to 10 is mentioned, can perform. Rather, although in the security system 1, the functions in the description of at least one of Figures 1 to 10 are mentioned, deposited. However, in order to be able to execute the functions, the functions must be activated. This takes place in that the control device 100 communicates with a communication module 801 . The communication module 801 is designed as a chip card. The communication module 801 includes a memory in which at least one code for activating at least one function is stored. The communications module 801 includes a microprocessor that is only used to encrypt the code. The communication module 801 is pushed into a receptacle 77 of the control device 100 (see Fig. 18a ). The arrangement in the receptacle 77 mechanically holds the communication module 801 in the receptacle 77 in a positive and/or non-positive manner. At the same time, the arrangement in the receptacle 77 makes electrical contact with the communication module 801, so that the control device 100 can read out the at least one code from the communication module 801. In this case, the control device 100 and the communication module 801 are wired (not shown).

In order to read out the code, the control device 100 must first be given access to the communication module 801 with the aid of a password. The control device 100 must decrypt the at least one code before the function can be activated. By enabling the function, the program code that can be used to execute the function is enabled.

To enable the function, the program code that can be used to execute the function is enabled. If the program code is stored on the emergency button 10 and the control device 100 and the emergency button 10 are connected to one another by the first bus system 400, the control device 100, after reading out the code of the communication module 801, initiates an activation in the emergency button 10 via the first bus system 400. Is the program code in the door lock controller 201 stored, then after the code of the communication module 801 has been read out, the control device 100 causes an activation in the door locking control 201 via the first bus system 801.

A code can unlock one or more functions, especially function blocks.

In the parameterization program, only parameters for the functions that have been released before can be set. Only these parameters are displayed on the screen.

The function only remains activated if the code is repeatedly read out of the communication module 801 again, in particular at regular time intervals. For this purpose, predefined, non-adjustable time intervals can be stored in the control device 100 . After the specified time interval has elapsed, the control device 100 blocks the function if the associated code could not be read from the communication module 801 . If the function is carried out by the emergency button 10, which is connected to the control device 100 via the first bus system 400, the control device 100 causes the function to be blocked via the first bus system 400. If the function is performed by the door lock controller 201, which is connected to the control device 100 via the first bus system 400, then the control device 100 causes the function to be blocked via the first bus system 400.

Several codes Code1, Code2 for different functions can be stored on the 801 communication module (see Fig. 18a ).

If an additional function is to be released, it is conceivable to remove the communication module 801 from the mount 77 and to insert another communication module 802 into the mount 77 (see Fig. Figure 18b ). The communication module 801 is referred to as the mother module 801 in the following. The additional communication module 802 is referred to below as an auxiliary module. The auxiliary module 802 is designed as a chip card. The auxiliary module 802 includes a memory in which at least one code for enabling the additional function is stored. The auxiliary module 802 includes a microprocessor that is only used to encrypt the code. The code Code3, which is stored on the auxiliary module 802, is read out by the control device 100 (see Fig. Figure 18b ). In order to read out the code Code3, the control device 100 must first have access to the auxiliary module 802 with the aid of a password. The control device 100 must decrypt the at least one code before the function can be activated. The code Code3 des Auxiliary module 802 is stored in a memory 107 of the control device 100 (see 18c ). After that, the code of the auxiliary module 802 on the auxiliary module 802 is deleted (see 18c ). The auxiliary module 802 is removed from the receptacle 77 . Then the mother module 801 is pushed into the receptacle 77 (see Fig. Figure 18d ). The code of the auxiliary module 802 is stored on the mother module 801 (s. Figure 18d ). The code is deleted from the memory of the control device 100 (see Figure 18d ). The additional function will be unlocked.

In the case of a mother module 801, on the other hand, the code is not stored in the control device 100 (see Fig. Fig. 18a, d ). With a mother module 801 the code is not deleted. Rather, the mother module 801 is used for a permanent arrangement in the receptacle 77. The codes Code1, Code2, Code3 stored on the mother module 801 are read out repeatedly. The control device 100 uses an identifier K801, K802 of the communication module 801, 802 to decide whether it is a mother module 801 or an auxiliary module 802. The identifier K801, K802 is stored electronically in particular on the mother module 801 and the auxiliary module 802. The identifier K801 of the mother module 801 differs from the identifier K802 of the auxiliary module 802.

The insertion and removal from the receptacle 77 is done manually. The rest of the operations are automatic.

The insertion and removal from the receptacle 77 can be reserved for an operator. For this purpose, the receptacle 77 is arranged inaccessible to an unauthorized user. In particular, the tamper switch 66 is actuated in the event of an unauthorized attempt to gain access to the receptacle. The recording can between the first board 60 and the second board 61, z. B. on an underside of the first circuit board 60 can be arranged.

In order for the security system 1 to be functional, a mother module 801 must be arranged in a receptacle 77 of the security system 1 . The mother module 801 must remain in the receptacle 77 so that the safety system 1 remains functional for longer than the specified time interval.

Each emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 includes a receptacle 77. Precisely one mother module 801 is required and provided for each first bus system 400, 400' of the security system 1. The emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 is only used if the mother module 801 is inserted into the receptacle of an emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 as a control device 100 for the corresponding first bus system 400, 400'. The other emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 of the security system 1, in the holder of which there is no mother module 801, have the same program codes as in the control device 100 deposited. Without the mother module 801, however, the program codes are not enabled, so that the other emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 cannot serve as the control device 100. Because the mother module 801 is located in the receptacle 77, the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 serves as a control device 100.

If the control device 100 is to be designed separately from the emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 and the door locks 200, 200', 1200, 1200', 2200, 2200', 3200, then a mother module 801 inserted into a receptacle 77 of the processing electronics 101. Because the mother module 801 is located in the receptacle 77, the processing electronics 101 are able to carry out the functions of the control device 100.

If the security system 1 includes a plurality of subsystems 5, 6 and thus a plurality of first bus systems 400, 400', then the security system 1 includes exactly the same number of mother modules 801, 801' as there are subsystems 5, 6 (see Fig. figure 10 ). The emergency button 10', which communicates with the mother module 801', and the processing electronics 101 of the control device 100 off figure 10 , which communicates with the mother module 801, are also provided in order to be connected to the second bus system 401.

The mother module 801, 801' can contain 5.6 different codes for each subsystem and thus enable different functions. So e.g. B. the mother module 801 'of the second subsystem 6 include a code for the selective assignment of the door locks 200', 1200', 2200' to the emergency buttons 10', 1010', 2010'. On the other hand, the code for a selective assignment of door locks to emergency buttons on the mother module 801 for the subsystem 5 is not necessary.

The communication module 801, 801′, 802 can have a gap 803 through which a tape, in particular a self-adhesive tape, is guided. The self-adhesive tape is used to manually remove the communication module 801, 801', 802 from the receptacle 77. The self-adhesive tape includes information about the functions that can be unlocked using the codes stored on the respective communication module 801, 801', 802. The information can be a color identifier, a QR code and/or a bar code.

Alternatively, the communication module 801, 801', 802 can be in the form of a chip card with a flexible section. Part of the chip card protruding from the exception 77 can be provided with the information, ie the color code, the QR code and/or the bar code.

A mother module 801 that has been used once in a security system 1 can be functionally used again in a receptacle 77 of another security system 1 according to the invention.

Claims (13)

1. A security system (1) for unlocking at least one door lock (200), in particular for escape route security,

   having at least one trigger element (10), in particular an emergency button (10), wherein the trigger element (10) comprises a manually activatable activation element (11), wherein the activation element (11) is activatable for unlocking at least one lock mechanism (205) of a door lock (200), having a central escape route controller (300),

   wherein the central escape route controller (300) comprises a central emergency button (302), wherein the central emergency button (302) comprises an emergency button activation element (306), wherein the emergency button activation element (306) is activatable for unlocking the at least one lock mechanism (205),

   wherein the central emergency button (302) comprises a first digital emergency processing unit (303) and a second digital emergency processing unit (304), the central escape route controller (300) comprises a delay element (332), wherein, following an activation of the trigger element (10), the actuation of the lock mechanism (205) for unlocking purposes can be delayed by a first delay time and an activation of the delay element (332) within the first delay time causes the delay of an actuation of the lock mechanism (205) to be extended, wherein the delay element is electrically connected to the trigger element (10) via the central emergency button (302).
2. The security system according to claim 1, characterized in that the first and the second emergency processing unit (303, 304) each initiate, independently of one another, an actuation of the door lock mechanism (205) for unlocking purposes.
3. The security system according to claim 1 or 2, characterized in that the emergency button activation element (306) is movable from a starting position to an activation position and the emergency button activation element (306) is movable by a restoring means from the activation position to the starting position following the activation without manual intervention and/or in that the emergency button activation element (306) is activated mechanically without latching.
4. The security system according to one of the preceding claims, characterized in that, following the activation of the emergency button activation element (306) up until there is a cancel condition, the lock mechanism (205) is electronically prevented from being actuated for locking purposes, wherein in particular the cancel condition can be achieved by activating an identification device (312) of the central escape route controller (300).
5. The security system (1) according to one of the preceding claims, characterized in that the security system comprises a plurality of lock mechanisms (205) or can be connected to a plurality of lock mechanisms (205), following the activation of the central emergency button (302) at least for a lock mechanism (205), an actuation for unlocking purposes does not take place, wherein in particular it can be stored in the security system (1), preferably in door lock controllers (201) of the security system (1), whether unlocking is permitted following an activation of the central emergency button (302).
6. The security system (1) according to one of the preceding claims, characterized in that, following the activation of the activation element (11), a lock mechanism (205) of the door lock (200) is electronically prevented from being actuatable for locking purposes without a cancel condition being present, wherein the cancel condition can be achieved in that

   a.) since the activation signal has been generated, a signal of a door status monitoring device (204, 206) regarding the opening of a door leaf (2, 3, 4) has not been received within a predetermined time interval in the security system (1) or neither a signal of a first door status monitoring device (204) nor of a second door status monitoring device (206) regarding the opening of the door leaf (2, 3, 4) has been received yet since the activation signal has been generated within a predetermined time interval in the security system (1) and

   b.) the predetermined time interval has lapsed and

   c.) a cancel signal is generated at the central escape route controller (300), in particular by the identification device (312), and it is stored in the security system (1) that the presence of the conditions a.) to c.) is permitted for achieving the cancel condition, wherein it can be individually stored in particular for a plurality of trigger elements (10, 10', 1010, 1010', 2010, 2010', 3010) and/or a plurality of door locks (200, 200', 1200, 1200', 2200, 2200', 3200) of the security system (1) whether the presence of the conditions a.) to c.) is permitted for achieving the cancel condition.
7. The security system (1) according to one of the preceding claims, characterized in that a multi-door display device (350) and the central emergency button (302) are connected to one another via a third bus system (403), wherein the central emergency button (302) relays messages, which are received by the central emergency button (302) from at least one bus participant of the first bus system (400) via the second bus system (401), to the multi-door display device (350).
8. The security system (1) according to one of the preceding claims, characterized in that the central emergency button (302) and the identification device (312) is secured to a first securing plate (311) and/or in that the central emergency button (302) can be variably secured to an escape route controller housing (340) by means of the securing plate (311).
9. The security system (1) according to one of the preceding claims, characterized in that the central emergency button (302) comprises light means (313) for visually illustrating the first and/or second delay time, wherein the light means (313) are arranged on a first circuit board of the central emergency button (302).
10. The security system (1) according to claim 9, characterized in that the light means (313) can be actuated at least in two groups, preferably individually, wherein the light means (313) can be actuated by a third digital emergency button processing unit (305).
11. The security system (1) according to one of claims 9 or 10, characterized in that the central emergency button (302) comprises a light guide, wherein the light guide has light guide regions, which are each assigned to the actuatable groups of light means or to the individual light means, wherein recesses are provided between the light guide regions.
12. The security system (1) according to one of the preceding claims, characterized in that an emergency button switch (307) is activatable by the emergency button activation element (306), wherein the emergency button switch (307) serves to generate a first and a second signal regarding the activation of the emergency button activation element (306) when the emergency button activation element (306) is activated, wherein the first signal can be recorded wirelessly by the first emergency processing unit (303) and the second signal by the second emergency processing unit (304).
13. The security system (1) according to one of the preceding claims, characterized in that the emergency button activation element (306) has guide means, wherein only one translatory movement of the emergency button activation element (306) is made possible by the guide means.

Images