EP3584770A1 - Closure system; method for operating a closure system and tube safe - Google Patents

Abstract

Method for operating a locking system comprising an electronic key and an electronic lock and a central unit used in the locking operation separately from the electronic key and the electronic lock, in which case the central unit uses an authorization code determination program to generate an external authorization code, the external authorization code being the electronic one Key is transmitted, the external authorization code is stored in a memory by the electronic key, the external authorization code being read out of the memory by the electronic lock when the electronic key interacts with the electronic lock and checked by a processor of the electronic lock in that the processor determines its own authorization code with its own authorization code determination program and with the exte received from the electronic key compares the authorization code and the processor enables an opening operation if the determined own authorization code is identical to the transmitted external authorization code.

Description

The invention relates to a method for operating a locking system and a locking system.

With locking systems, there is generally a requirement to ensure the highest possible security with the simplest possible operation.

This object is achieved by a method for operating a locking system comprising an electronic key and an electronic lock as well as a central unit used in the locking operation separately from the electronic key and the electronic lock, which in the method generates an external authorization code from the central unit using an authorization code determination program, the external authorization code is transmitted to the electronic key, the external authorization code is stored in a memory by the electronic key, the external authorization code being read out of the memory by the electronic lock when the electronic key interacts with the electronic lock and thereby checked by a processor of the electronic lock is that the processor with its own authorization code determination program itself determines its own authorization code and with the electronic Key received external authorization code compares and the processor enables an opening process if the determined own authorization code is identical with the transmitted external authorization code.

An advantage of the method according to the invention can be seen in the fact that with a plurality of electronic keys and a large number of electronic locks, the output of the external authorization code means that only a specific electronic key is capable of a specific electronic lock when this external authorization code is entered to open.

Another advantage of the method according to the invention is that by determining an external authorization code and transmitting it to the electronic key, it is possible to check before the transmission of the electrical authorization code whether the circumstances under which a request for such an authorization code is made is justified by an operator and thus the requirements for opening the electronic lock can be clarified locally, away from the electronic key and electronic lock.

In addition, in the method according to the invention, the determination of the external authorization code by means of the central unit means that misuse or unauthorized opening by a user who has an electronic key is not possible.

It is particularly favorable for the security of the method according to the invention if the authorization code determination program of the central unit determines the external authorization code in such a way that it is only allowed to be opened once.

In particular, this prevents an operator from storing the authorization code and trying to use it again.

The authorization code determination program of the central unit can be used to determine the authorization code as a one-time authorization code in a particularly simple manner if the authorization code is determined, inter alia, by taking into account a cycle counter in the central unit, the cycle counter determining and recording the opening processes of the electronic lock waiting to be opened.

In order to also give the authorization code determination program of the electronic lock the possibility of determining the correct own authorization code, it is provided that the authorization code determination program of the electronic lock also determines its own authorization code taking into account a cycle counter.

Furthermore, it is preferably provided that the authorization code determination programs of the central unit and the electronic lock determine the respective authorization code taking into account the identification code of the electronic key used and the identification code of the electronic lock to be opened.

In order to generate the highest possible level of security, it is preferably provided that the authorization code determination programs determine the authorization codes by means of a hash algorithm.

In order to ensure that the authorization code determination program of the central unit and the authorization code determination program of the electronic lock can determine the authorization code independently of one another based on the same parameters and states, it is preferably provided that the electronic lock is activated by the central unit before the electronic lock is installed at the location provided for it is, the central unit here the identification code of the electronic lock, the status of the cycle counter of the electronic lock with the identification code of the electronic lock stored in the central unit and the status of the cycle counter stored in the central unit.

The term match is understood to mean that the corresponding data, that is to say for example the identification code and / or the status of the cycle counter, are exchanged between the electronic lock and the central unit or read out by one of them and stored in the other.

It is preferably provided that the identification code of the electronic lock is stored in a secure memory.

Furthermore, it is preferably provided that the central unit compares passwords to be stored when the electronic lock is activated, in particular assignment passwords for the electronic key and the electronic lock, for example to one or more access groups, between the electronic lock and the central unit.

For security, it is particularly advantageous if an assignment password is compared when the electronic lock is activated.

The assignment password is intended to determine the assignment of the electronic lock to a specific group of locks and / or a specific group of keys.

Furthermore, an advantageous solution provides that the central unit, when the electronic key is activated, compares the identification code of the electronic key with the identification code of the electronic key stored in the central unit.

In this case, too, the term “compare” is to be understood in such a way that the electronic key is exchanged between the two units or read out in one unit and stored in the other unit or simultaneously stored in both units.

It is particularly secure for the use of the electronic key if an assignment password is stored in the memory when the electronic key is activated.

Furthermore, it is preferably provided that the identification code of the electronic key is stored in a memory of the electronic key.

The memory of the electronic key can preferably be written to and read out only when a security hash code is used.

It is preferably provided that the processor has determined the security hash code in the electronic key for storing the external authorization code.

Furthermore, it is preferably also provided that a processor in the electronic lock generates a security hash code for accessing the secure memory in order to read the external authorization code from the secure memory of the electronic key.

No details have so far been given regarding the type of saved memory.

A preferred solution thus provides for a memory of a security processor to be used as the memory in the electronic key, the security processor in particular requiring the security hash code to be generated in order to store data, for example, in the memory of the security processor to be able to store the authorization code and / or the identification code and / or passwords.

In order to further prevent an attack on the electronic lock per se and at the same time the electronic lock at least indicates whether any relevant states can be reached by an attack with an unauthorized electronic key, it is preferably provided that the state signals of the electronic lock prevent the electronic keys for display are transmitted and thus in particular the electronic lock itself has no possibility of displaying its status.

In particular, it is provided that the electronic key has a processor which controls signal elements to display the states of the electronic lock transmitted by the electronic lock.

One embodiment of a method for secure access authorization or for secure key handover for at least one user by means of an electronic lock and at least one electronic key carried by the user, in particular according to the features described below, comprises the following method steps:
Sending at least one information characteristic of the electronic lock and / or the user to a central information processing point or central unit arranged remotely from the electronic lock by means of a communication device, checking the transmitted information by the central information processing point, sending an authorization code to the user by means of the communication device in the case of a positive review of the Information, input of the authorization code by the user by means of the input unit in the electronic key carried along, unlocking of the electronic lock by interaction with the electronic key.

For example, it is provided that the information characteristic of the lock is formed by a combination of numbers or by a bar code.

As an alternative or in addition to this, it is particularly provided that the information characteristic of the user is formed by a letter / number combination and / or by a password.

It is particularly expedient if the information processing source or the central unit, before sending an authorization code to the user, checks in addition to the information characteristic of the lock and / or the user, a time parameter for the place of use and / or the time of use linked with both pieces of information ,

An expedient solution provides for the electronic lock to be arranged on a closure cover of a tubular safe, from which a physical key for entering at least one other room is removed after the electronic lock has been unlocked.

Furthermore, it is expediently provided that the electronic lock and / or the device released by it sends information to the central information processing point or the central unit during activation and / or deactivation.

A favorable solution provides that a mobile phone is used as the communication device for the transmission of the at least one information characteristic of the electronic lock and / or the user and / or for the reception of the authorization code.

In particular, it is expedient if the communication device contains an application program by means of which the at least one information characteristic of the electronic lock and / or the user can be detected and / or by means of which the authorization code can be received and / or by which the authorization code is sent to the electronic key is transferable.

A particularly advantageous variant is designed such that the communication device and the electronic key form a unit.

By checking information which is characteristic of the electronic lock, for example a code which is arranged in the area of the lock and which can be read out mechanically by means of a communication device or manually by the user, and information which is characteristic of the user, for example a password or a letter or code entered in the communication device. A combination of numbers that are sent to a central information processing point located at a distance from the lock and checked by means of a communication device provides a high degree of security. The access authorization is not checked and issued on site in the area of the electronic lock to be opened, but removed from it in the information processing center which has the central unit.

After the authorization code has been issued and transmitted, it is transmitted to an electronic key carried by the user, by means of which the electronic lock is then unlocked. The transmission of the authorization code to the electronic key represents a further advantageous security barrier. As an alternative to manually entering the transmitted authorization code into the electronic key by means of an input device, the transmission of the authorization code can also be carried out automatically, for example by transmission via Bluetooth, an infrared transmitter or other short-range transmission methods from the communication device to the electronic key.

The electronic lock itself can already allow access to a protected area or a protected facility. In an alternative embodiment, however, the protected area is formed by a relatively small, burglar-proof container, for example a pipe safe, arranged on the outside of a building or in the vicinity of the building. In this tube safe, the electronic lock, after opening with the electronic key, enables access to a physical key, which can then be used to enter the building. The physical key is particularly advantageously connected to the inside of a closing cover of the pipe safe containing the electronic lock, so that it is forcibly returned to the pipe safe after leaving the building and after the pipe safe has been closed again by means of the closing cover.

According to a further advantageous application, after the authorization codes have been checked, the electronic lock receives and transmits a voltage transmitted by an electrical voltage source of the electronic key, optionally changed by a voltage converter this to activate an electric motor lock or an electric actuator - optionally with the interposition of a control unit - to this.

In a particularly simple form, the communication device is formed by a mobile phone, by means of which the user - for example a security guard - calls the information processing point - for example the service center of the security service - and transmits his name, information specific to the lock and a password, whereupon the information processing unit checks this information, if necessary additionally compares it with an operational plan stored there, and transmits an authorization code to the user or the communication device in the event of a positive evaluation of all information. The authorization code can be communicated to the user by telephone or via a short message generated by a computer in the information processing center.

The user passes on this authorization code via the input unit to the electronic key carried by him and can then bring the electronic lock into contact with the electronic key or operate it by means of a contactless signal transmission, for example by radio.

Starting from this particularly simple form, one or more of these steps can be automated. For example, the code of the electronic lock can be automatically read out by means of software (“app”) stored in the communication device and corresponding sensors - for example a camera of a smartphone serving as communication device. This can be done, for example, by means of a barcode reading program or Aztec code reading program stored in the smartphone, for which purpose a corresponding graphic code in the area of the electronic lock is arranged. However, other electronic signal transmitters arranged in the area of the electronic lock and correspondingly aligned sensors in the communication device are also possible, for example an invisible, magnetically coded signal.

The authorization code can also be transmitted to the user's smartphone as a barcode, QR code or similar. In the event that it is transmitted in machine-readable form, the transmitted code is then transmitted from the communication device (the smartphone) to an electronic input device on the electronic key.

The information characteristic of the user can also be queried automatically by the software stored in the communication device, for example after reading in the information specific to the electronic lock, and entered by the user, for example as a letter / number combination, and transmitted to the information processing point.

As a further advantageous method step, it is provided that the information processing point, before sending an authorization code to the user, in addition to the information characteristic of the electronic lock and / or of the user, information relating to the place of use and / or the time of use linked to both pieces of information by means of a deployment plan reviewed. This creates additional security, since it is ruled out that an access code is also transmitted completely outside of a normal intended route for security personnel.

A further advantageous embodiment of the invention provides that the electronic lock and / or the device protected by it sends information to the central information processing point when the electronic lock is released and closed.

An advantageous further development of the system provides that the check in the central information processing point further includes the evaluation of at least one time parameter which uses a stored schedule - in particular the route planner of a security guard - for the information characteristic of the lock and / or the user intended opening of the lock verified.

In a special embodiment it can be provided that the communication device and the electronic key form a unit. This unit combines all functions of a transmitter and receiver for recording and transmitting the information characteristic of the lock and / or the user to a central information processing point and for receiving an authorization code with the function of the electronic key. By means of the authorization code received, the electronic key, for example a magnetic transponder, is programmed such that it can be used to open the electronic lock.

The present invention can be used, for example, in connection with a tube safe, such as that in the WO 2012/045474 A1 is disclosed. The transponder acts as an electronic key after it is placed on the electronic lock and acts as a handle for removing the cover.

In addition, the above-mentioned object is achieved by an electronic locking system comprising an electronic key and an electronic lock, which can be brought into interaction with one another by means of a contact set and a counter-contact set, the electronic key having a processor which interacts with an input unit through which an externally generated authorization code can be transmitted to the processor, the processor cooperating with a memory and the externally generated authorization code in the memory writes and wherein the electronic lock has a processor which, when the electronic key interacts with the electronic lock, interacts with the memory in the electronic key via the contact set and the counter-contact set in order to read out the externally generated authorization code.

The advantage of the solution according to the invention has already been explained in connection with the method according to the invention, so that reference is made to this.

Another advantage can be seen in the fact that there is the possibility of using the electronic key and the electronic lock with the greatest possible security, without the possibility of opening only with the electronic key and the electronic lock if the externally generated authorization code is not available is.

In order to increase the security of the electronic key, it is preferably provided that the memory in the electronic key is a secure memory and that the processor of the electronic key generates a security code in order to store the externally generated authorization code in the secure memory.

In order also to ensure a high level of security when reading out the authorization code from the secured memory, it is preferably provided that the processor of the electronic lock generates a security code in order to read out the authorization code stored in the secured memory.

Furthermore, it is preferably provided that the electronic key has display elements in order to indicate states of the electronic lock transmitted by the electronic lock to the electronic key.

In this case, it is expediently provided that the processor of the electronic lock transmits status signals relating to the present states of the electronic lock to the processor of the electronic key and that the processor of the electronic lock controls the display elements of the electronic key in accordance with the transmitted states.

No details have so far been given regarding the implementation of the secured memory.

An advantageous solution provides that the secured memory is the memory of a security processor.

Such a security processor is preferably a processor that only allows access to the secured memory when a security code is transmitted.

The security code is expediently determined by a hash algorithm.

In principle, it would be possible to always operate the electronic lock with its own power supply.

However, having your own power supply has the disadvantage that in this case, especially when the electronic lock has not been used for a long time, the voltage source no longer supplies sufficient voltage.

For this reason, it is expediently provided that the electronic lock can be operated by a voltage source of the electronic key.

The electronic lock could also have its own voltage source and could only be operated by the voltage source of the electronic key if the same fails.

However, it is particularly favorable if the electronic lock can always only be operated with the voltage source of the electronic key, since the application of the voltage can then also serve to start the functions of the electronic lock.

Furthermore, the solution according to the invention provides that the electronic lock comprises a locking drive for actuating a locking bolt.

In this case, the electric lock is itself immediately able to initiate an opening process by actuating the closing drive or to allow closing by not actuating the closing drive.

In the event that the electronic lock has a locking drive, it is preferably also provided that the locking drive of the electronic lock can be operated by the electrical voltage source of the electronic key.

In this case, it is expediently provided that the electronic lock has a voltage converter in order to operate the locking drive, since such a locking drive generally requires higher voltages than are required to operate the processors in the electronic key and in the electronic lock.

As an alternative to providing an electric locking drive in the electronic lock, another advantageous solution provides that the electric lock has a switching unit in order to activate and block an external locking system.

In this case, the electronic lock itself is not used to directly initiate or initiate a closing process or an opening process, rather the electronic lock can serve to activate or block an external locking system.

This means, for example, that it is possible to use existing locking systems by using the electronic key and the electronic lock, which, however, have an inadequate security level.

These existing locking systems can thereby be brought to a higher security level, namely the security level of the electronic key or the electronic lock if the electronic lock activates or blocks the existing locking system.

Another advantageous solution provides that the electronic key has an interface for activating the electronic key by means of a central unit.

The central unit serves to generate the external authorization code, so that it is necessary for the central unit to activate the electronic key and thus to know the data of the electronic key required for generating the authorization code.

It is further provided that the electronic lock has an interface for activating the electronic lock by a central unit.

In this case, activation is also required for the electronic lock in order to also put the electronic lock in a state that allows it to generate the external authorization code.

In particular, it is preferably provided that the activation of the electronic key or the electronic lock by the central unit takes place in a line-bound manner in order to obtain the greatest possible security against the transfer of the data by third parties during the activation.

An advantageous solution of an electronic key with at least two contacts for transmitting data and / or energy to an electronic lock provides at least one input device provided on a housing of the electronic key for entering an authorization code.

It is advantageous if the input device and the contacts are arranged on different sides of the housing.

In particular, it is advantageous if the input device is arranged on a front side and the contacts on an opposite rear side of the housing.

The electronic key is expediently provided with at least one electrical voltage.

In particular, the electronic key is provided with at least one magnet for centering in cooperation with a corresponding counter magnet on the electronic lock.

Furthermore, the contacts of the electronic key are resiliently mounted in the housing.

The electronic locking system further comprises at least one electronic lock, which is provided with at least two concentrically arranged counter contacts and a magnetic centering.

In particular, the counter contacts are designed as concentric circles which come into contact with the contacts of the electronic key in any relative angular position of the electronic key.

The electronic lock is expediently arranged on a cover of a tubular safe, the electronic key in contact with the electronic lock serving as a handle for actuating the cover.

For example, the electronic lock is connected upstream of a motor lock of a device to be secured and activates its energization.

However, it is also conceivable for a control device to be arranged between the electronic lock and the motor lock, the energization of which is activated by the electronic key when the electronic lock is brought into contact and the authorization code entered by means of the input unit is verified.

Furthermore, it is preferably provided that the embodiments of the electronic locking system work according to the method described at the beginning for operating a locking system.

In particular, the invention makes it possible to provide an electronic key which can be activated at short notice and alternately for opening a wide variety of locks.

In particular, an electronic key according to the invention advantageously interacts with at least one electronic lock.

An electronic key according to the invention is characterized by an input unit provided on a housing of the electronic key for entering an authorization code. The input unit can be in the form a numerical or alphanumeric keyboard, the authorization code for the desired release being entered manually by the user in this case.

According to a further aspect of the invention, the electronic key can be programmed for opening various electronic locks by means of authorization codes which can be entered via the input unit.

As an alternative or in addition, the input unit can also be formed by an electronic detection device. This can be formed, for example, by a reading or receiving device that uses radio, Bluetooth, RFID or NFC communication or by optical transmission, for example a bar code, QR code or the like, by the user or a communication device handled by the user (for example, a smartphone) transmitted authorization code.

The authorization code is preferably temporarily stored in a memory of the electronic key and, after being brought into contact with an electronic lock, is transmitted to the electronic lock via at least one contact.

The authorization code that can be entered into the electronic key separately by means of the input unit without a spatial proximity to the electronic lock to be opened significantly increases the security in the authentication of the access authorization, since the corresponding access data can hardly be intercepted by unauthorized third parties and the electronic key is only finished with it authorization code entered is approximated to the electronic lock.

A possibly stolen or lost electronic key is worthless for the thief or finder, because the thief cannot find out for which electronic lock the relevant key was prepared by the authorization code.

The input unit and the contacts are preferably arranged on different sides of the housing. The input device is particularly preferably on a front side of the housing and the contacts are arranged on a rear side of the housing. As a result, the input device can also be actuated very easily in a position in which the contacts engage with the respective counter-contacts on the electronic lock.

The electronic key is particularly preferably provided with at least one electrical voltage source - preferably with a rechargeable accumulator - which not only serves for the self-supply of the electronic components of the electronic key, but also for supplying the electronic lock at least during the opening process or an initialization process. or activation process during which the electronic lock cannot be connected to its own power supply.

The advantage is that the device provided with the electronic lock does not have to be constantly supplied with an operating voltage, since the current required for opening is only supplied by the electronic key when required. For example, pipe safes set up remotely from a power network, in which physical keys are deposited, can be operated without a fixed power supply but also without batteries to be replaced. This reduces the maintenance and wear of these systems.

Lockers, valuables lockers or safes can also be operated without a permanent power supply, since the power for the initialization of access is supplied by the electronic key. Optionally, the electronic lock operates after confirmation of authentication Access authorization is first a control device, by means of which an external operating voltage source is then activated for actuating a motor lock or another actuator.

The electronic key is preferably provided with at least one magnet - in particular a ring magnet - for centering in cooperation with a corresponding counter magnet on the electronic lock. Due to the increasing magnetic forces, the electronic key automatically brings itself into the contact position when approaching the electronic lock.

To support reliable contact formation, the contacts on the electronic key are preferably resiliently mounted in its housing.

In addition to the electronic key, the electronic locking system comprises at least the electronic lock, which is provided with at least two concentrically arranged counter-contacts and a magnetic centering.

According to an advantageous application of an electronic locking system, the electronic lock is arranged on a closure cover of a tubular safe, the electronic key in its contact position with the electronic lock preferably also serving as a handle for actuating the closure cover.

According to an alternative application of an electronic locking system, the electronic lock is connected upstream of a motor lock or an actuator of a device to be secured and activates its energization. As already mentioned, this means that lockers, valuables lockers or safes can be operated without a permanent power supply, since the electricity is supplied by the electronic key for initializing access. Optionally, after confirmation of an authentication of the access authorization, the electronic lock first actuates a control, by means of which an external operating voltage source is then activated for actuating a motor lock or another actuator.

The counter-contact surfaces on the electronic lock are preferably designed as concentric circles which come into contact with the contacts of the electronic key in any relative angular position of the electronic key. Since no rotational alignment of the electronic key with respect to the electronic lock is required, the docking of the electronic key to the electronic lock is extremely easy for the user to carry out even in poor visibility conditions.

In addition, the invention also relates to a tubular safe comprising a tubular body and a tubular body cover, in which an electronic lock is arranged in order to lock or unlock the tubular body cover in its closed position inserted into the tubular body.

In this case, a key is preferably kept in the tubular body, since this generally serves as a key safe.

In order to obtain access to the key in a simple manner and, on the other hand, to be able to deposit the key in the tubular body in a simple manner without in particular jamming with the tubular body cover when the latter is moved into the closed position, provision is made according to an embodiment of the tubular safe according to the invention that a key container is held on the tubular body cover, which can be inserted into or removed from the tubular body with the tubular body cover.

The key container is preferably designed in such a way that it has a receiving space for a key, so that the key can be deposited in and removed from the key container in a simple manner.

Furthermore, it is preferably provided that the key on the key container is secured against complete removal from the key container; this ensures that the key is not lost when the key container is used or is removed from the key container in an unacceptable manner.

A further advantageous solution provides that the receiving space of the key container is accessible through an opening through which the key can be removed or inserted into it.

In order to ensure that the operator deposits the key container in the tubular body and specifically deposits the key container when the tubular body is closed so that the tubular body is closed by the tubular body cover, it is preferably provided that the position of the key container in the tubular body is carried out by a sensor is detectable.

The sensor could be formed by any type of sensor.

It is particularly simple and reliable if the sensor is a magnetic field sensor which detects a magnet held on the key container.

In order to be able to evaluate the sensor signal in a simple manner, it is preferably provided that the sensor interacts with a transmission unit which transmits a closed position of the tubular body cover to a security center, for example a central unit mentioned above.

In order to be absolutely certain that the tubular body is correctly closed by the tubular body cover, a further advantageous solution provides that a sensor is arranged on the tubular body which detects a closed position of the tubular body cover in the tubular body.

In this case, too, it is preferably provided that the tubular body cover is provided with a magnet, the position of which the sensor detects.

This sensor also preferably interacts with the transmission unit already explained above in order to transmit the locking of the tubular safe to a security center or the central unit mentioned at the beginning.

1. 1. Verfahren zum Betreiben eines Schließsystems (10) umfassend einen elektronischen Schlüssel (12) und ein elektronisches Schloss (14) sowie eine im Schließbetrieb lokal getrennt vom elektronischen Schlüssel (12) und vom elektronischen Schloss (14) eingesetzte Zentraleinheit (102), wobei bei dem Verfahren von der Zentraleinheit (102) mittels eines Berechtigungscodeermittlungsprogramms (BCEPZ) ein externer Berechtigungscode (BCZ) erzeugt wird, der externe Berechtigungscode (BCZ) dem elektronischen Schlüssel (12) übermittelt wird, der externe Berechtigungscode (BCZ) vom elektronischen Schlüssel (12) in einem Speicher (39) abgelegt wird, wobei bei Zusammenwirken des elektronischen Schlüssels (12) mit dem elektronischen Schloss (14) vom elektronischen Schloss (14) der externe Berechtigungscode (BCZ) aus dem Speicher (39) ausgelesen und von einem Prozessor (72) des elektronischen Schlosses (14) dadurch überprüft wird, dass der Prozessor (72) mit einem eigenen Berechtigungscodeermittlungsprogramm (BCEPS) selbst einen eigenen Berechtigungscode (BCS) ermittelt und mit dem vom elektronischen Schlüssel (12) erhaltenen externen Berechtigungscode (BCZ) vergleicht und wobei der Prozessor (72) bei Identität des ermittelten eigenen Berechtigungscodes (BCS) mit dem übermittelten externen Berechtigungscode (BCZ) einen Öffnungsvorgang ermöglicht.
2. 2. Verfahren nach Ausführungsform 1, wobei das Berechtigungscodeermittlungsprogramm (BCEPZ) der Zentraleinheit (102) den externen Berechtigungscode (BCZ) so ermittelt, dass mit diesem nur eine einmalige Öffnung zugelassen wird.
3. 3. Verfahren nach Ausführungsform 2, wobei das Berechtigungscodeermittlungsprogramm (BCEPZ) der Zentraleinheit (102) den Berechtigungscode (BCZ) unter anderem durch Berücksichtigung eines Zykluszählers (ZCZ) ermittelt.
4. 4. Verfahren nach Ausführungsform 3, wobei das Berechtigungscodeermittlungsprogramm (BCEPS) des elektronischen Schlosses (14) den eigenen Berechtigungscode (BCS) ebenfalls unter Berücksichtigung eines Zykluszählers (ZCS) ermittelt.
5. 5. Verfahren nach einer der voranstehenden Ausführungsformen, wobei die Berechtigungscodeermittlungsprogramme (BCEPZ, BCEPS) der Zentraleinheit (102) und des elektronischen Schlosses (14) den jeweiligen Berechtigungscode (BCZ, BCS) unter Berücksichtigung des Identifikationscodes (ICK) des elektronischen Schlüssels (12) und des Identifikationscodes (ICL) des elektronischen Schlosses (14) ermitteln.
6. 6. Verfahren nach einer der voranstehenden Ausführungsformen, wobei die Berechtigungscodes (BCZ, BCS) durch die Berechtigungscodeermittlungsprogramme (BCEPZ, BCEPS) mittels eines Hash-Algorithmus ermittelt werden.
7. 7. Verfahren nach einer der voranstehenden Ausführungsformen, wobei vor Montage des elektronischen Schlosses (14) an dem für diesen vorgesehenen Ort das elektronische Schloss (14) durch die Zentraleinheit (102) aktiviert wird, wobei die Zentraleinheit (102) hierbei den Identifikationscode (ICL) des elektronischen Schlosses (14), den Stand des Zykluszählers (ZZ) des elektronischen Schlosses (14) mit dem im in der Zentraleinheit (102) abgespeicherten Identifikationscode (ICL) und dem gespeicherten Stand des Zykluszählers (ZZ) abgleicht.
8. 8. Verfahren nach einer der voranstehenden Ausführungsformen, wobei der Identifikationscode (ICL) des elektronischen Schlosses (14) in einem gesicherten Speicher (76) gespeichert wird.
9. 9. Verfahren nach einer der voranstehenden Ausführungsformen, wobei die Zentraleinheit (102) bei der Aktivierung des elektronischen Schlosses (14) zu speichernde Passwörter zwischen dem elektronischen Schloss (14) und der Zentraleinheit (102) abgleicht.
10. 10. Verfahren nach einer der voranstehenden Ausführungsformen, wobei bei der Aktivierung des elektronischen Schlosses (14) ein Zuordnungspasswort abgeglichen wird.
11. 11. Verfahren nach einer der voranstehenden Ausführungsformen, wobei die Zentraleinheit (102) bei der Aktivierung des elektronischen Schlüssels (12) den Identifikationscode (ICK) des elektronischen Schlüssels (12) mit dem in der Zentraleinheit (102) gespeicherten Identifikationscode (ICK) des elektronischen Schlüssels (12) abgleicht.
12. 12. Verfahren nach einer der voranstehenden Ausführungsformen, wobei bei der Aktivierung des elektronischen Schlüssels (12) ein Zuordnungspasswort in dem Speicher (39) abgelegt wird.
13. 13. Verfahren nach einer der voranstehenden Ausführungsformen, wobei der Identifikationscode (ICK) des elektronischen Schlüssels (12) in einem Speicher (39) des elektronischen Schlüssels (12) gespeichert wird.
14. 14. Verfahren nach einer der voranstehenden Ausführungsformen, wobei der Speicher (39) des elektronischen Schlüssels (12) nur bei Verwendung eines Sicherheitshash-Codes (SC) beschreibbar und auslesbar ist.
15. 15. Verfahren nach Ausführungsform14, wobei von einem Prozessor (34) im elektronischen Schlüssel (12) zum Speichern des externen Berechtigungscodes (BCZ) der Sicherheitshash-Code (SC) ermittelt wird.
16. 16. Verfahren nach Ausführungsform 14 oder 15, wobei zum Auslesen des externen Berechtigungscodes (BCZ) aus dem gesicherten Speicher (39) des elektronischen Schlüssels (12) ein Prozessor (72) im elektronischen Schloss (14) einen Sicherheitshash-Code (SC) zum Zugriff auf den gesicherten Speicher (39) erzeugt.
17. 17. Verfahren nach einer der voranstehenden Ausführungsformen, wobei als Speicher (39) im elektronischen Schlüssel (12) ein Speicher eines Sicherheitsprozessors (38) verwendet wird.
18. 18. Verfahren nach einer der voranstehenden Ausführungsformen, wobei Zustandssignale des elektronischen Schlosses (14) dem elektronischen Schlüssel (12) zur Anzeige übermittelt werden.
19. 19. Verfahren nach Ausführungsform 18, wobei der elektronische Schlüssel (12) einen Prozessor (34) aufweist, welcher Signalelemente (92, 94) zur Anzeige der vom elektronischen Schloss übermittelten Zustände des elektronischen Schlosses (14) ansteuert.
20. 20. Elektronisches Schließsystem (10) umfassend einen elektronischen Schlüssel (12) und ein elektronisches Schloss (14), welche durch einen Kontaktsatz (16) und einen Gegenkontaktsatz (18) miteinander in Wechselwirkung bringbar sind, wobei der elektronische Schlüssel (12) einen Prozessor (34) aufweist, welcher mit einer Eingabeeinheit (36) zusammenwirkt, durch welche ein extern erzeugter Berechtigungscode (BCZ) dem Prozessor (34) übermittelbar ist, wobei der Prozessor (34) mit einem Speicher (39) zusammenwirkt und den extern erzeugten Berechtigungscode (BCZ) in den Speicher (39) schreibt und wobei das elektronische Schloss (14) einen Prozessor (72) aufweist, welcher bei einer Wechselwirkung des elektronischen Schlüssels (12) mit dem elektronischen Schloss (14) über den Kontaktsatz (16) und den Gegenkontaktsatz (18) mit dem Speicher (39) im elektronischen Schlüssel (12) wechselwirkt, um den extern erzeugten Berechtigungscode (BCZ) auszulesen.
21. 21. Elektronisches Schließsystem nach Ausführungsform 20, wobei der Speicher (39) ein gesicherter Speicher ist und dass der Prozessor (34) des elektronischen Schlüssels (12) einen Sicherheitscode (SC) erzeugt, um den extern erzeugten Berechtigungscode (BCZ) in dem gesicherten Speicher (39) abzulegen.
22. 22. Elektronisches Schließsystem nach Ausführungsform 20 oder 21, wobei der Prozessor (72) des elektronischen Schlosses (14) einen Sicherheitscode (SC) erzeugt, um den in dem gesicherten Speicher (39) abgelegten Berechtigungscode (BCZ) auszulesen.
23. 23. Elektronisches Schließsystem nach einer der Ausführungsformen 20 bis 22, wobei der elektronische Schlüssel (12) Anzeigeelemente (92, 94) aufweist, um von dem elektronischen Schloss (14) dem elektronischen Schlüssel (12) übermittelte Zustände des elektronischen Schlosses (14) anzuzeigen.
24. 24. Elektronisches Schließsystem nach Ausführungsform 23, wobei der Prozessor (72) des elektronischen Schlosses (14) dem Prozessor (34) des elektronisches Schlüssel (12) Zustandssignale betreffend Zustände des elektronischen Schlosses (14) übermittelt und dass der Prozessor (34) des elektronischen Schlüssel (12) entsprechend den übermittelten Zuständen die Anzeigeelemente (92, 94) des elektronischen Schlüssels (12) ansteuert.
25. 25. Elektronisches Schließsystem nach einer der Ausführungsformen 21 bis 24, wobei der gesicherte Speicher (39) der Speicher eines Sicherheitsprozessors (38) ist.
26. 26. Elektronisches Schließsystem nach einer der Ausführungsformen 20 bis 25, wobei das elektronische Schloss (14) durch eine elektrische Spannungsquelle (32) des elektronisches Schlüssels (12) betreibbar ist.
27. 27. Elektronisches Schließsystem nach einer der Ausführungsformen 20 bis 26, wobei das elektronische Schloss (14) einen Schließantrieb (82) zum Betätigen eines Schließriegels (22) umfasst.
28. 28. Elektronisches Schließsystem nach Ausführungsform 27, wobei der Schließantrieb (82) des elektronischen Schlosses (14) durch die elektrische Spannungsquelle (32) des elektronischen Schlüssels (12) betreibbar ist.
29. 29. Elektronisches Schließsystem nach Ausführungsform 28, wobei das elektronische Schloss (14) einen Spannungswandler (86) aufweist, um den Schließantrieb (82) zu betreiben.
30. 30. Elektronisches Schließsystem nach einer der Ausführungsformen 20 bis 26, wobei das elektronische Schloss (14') eine Schalteinheit (362) aufweist, um ein externes Schließsystem (268) zu aktivieren oder zu blockieren.
31. 31. Elektronisches Schließsystem nach einer der Ausführungsformen 20 bis 30, wobei das der elektronische Schlüssel (12) eine Schnittstelle (42) zum Aktivieren des elektronischen Schlüssels (12) mittels einer Zentraleinheit (102) aufweist.
32. 32. Elektronisches Schließsystem nach einer der Ausführungsformen 20 bis 31, wobei das elektronische Schloss (14) eine Schnittstelle (84) zum Aktivieren des elektronischen Schlosses (14) durch eine Zentraleinheit (12) aufweist.
33. 33. Elektronisches Schließsystem nach Ausführungsform 31 oder 32, wobei die Aktivierung des elektronischen Schlüssels (12) beziehungsweise des elektronisches Schlosses (14) durch die Zentraleinheit (102) leitungsgebunden erfolgt.
34. 34. Rohrtresor (202) umfassend einen Rohrkörper (204) und einen Rohrkörperdeckel (206), in welchem ein elektronisches Schloss (14) angeordnet ist, um den Rohrkörperdeckel (206) in seiner in den Rohrkörper (204) eingesetzten Schließstellung zu verriegeln oder zu entriegeln, wobei an dem Rohrkörperdeckel (206) ein Schlüsselcontainer (222) gehalten ist, der mit dem Rohrkörperdeckel (206) in den Rohrköper (204) einführbar oder aus diesem entnehmbar ist.
35. 35. Rohrtresor nach Ausführungsform 34, wobei der Schlüsselcontainer (222) ein Aufnahmeraum (224) für einen Schlüssel (226) aufweist.
36. 36. Rohrtresor nach Ausführungsform 34 oder 35, wobei der Schlüssel (226) an dem Schlüsselcontainer (222) gegen ein vollständiges Entfernen vom Schlüsselcontainer (222) gesichert ist.
37. 37. Rohrtresor nach einer der Ausführungsformen 34 bis 36, wobei der Aufnahmeraum (224) des Schlüsselcontainers (222) durch eine Öffnung zugänglich ist.
38. 38. Rohrtresor nach einer der Ausführungsformen 34 bis 37, wobei die Position des Schlüsselcontainers (222) in dem Rohrkörper (204) durch einen Sensor (244) erfassbar ist.
39. 39. Rohrtresor nach Ausführungsform 38, wobei der Sensor ein Magnetfeldsensor (244) ist, welcher einen am Schlüsselcontainer (222) gehaltenen Magnet (342) erkennt.
40. 40. Rohrtresor nach einer der Ausführungsformen 38 oder 39, wobei der Sensor (244) mit einer Übermittlungseinheit (252) zusammenwirkt, welche eine Schließstellung des Rohrkörperdeckels (206) einer Sicherheitszentrale übermittelt.
41. 41. Rohrtresor nach einer der Ausführungsformen 34 bis 40, wobei am Rohrkörper (204) ein Sensor (248) angeordnet ist, welcher eine Schließstellung des Rohrkörperdeckels (206) in dem Rohrkörper (204) erfasst.
42. 42. Rohrtresor nach Ausführungsform 41, wobei der Rohrkörperdeckel (206) mit einem Magnet (246) versehen ist, dessen Position der Sensor (248) erfasst.

The above description of solutions according to the invention thus includes in particular the various combinations of features defined by the numbered embodiments below:

1. 1. A method for operating a locking system (10) comprising an electronic key (12) and an electronic lock (14) and a central unit (102) used in the locking operation which is locally separate from the electronic key (12) and from the electronic lock (14), wherein in the method, the central unit (102) generates an external authorization code (BCZ) using an authorization code determination program (BCEPZ), the external authorization code (BCZ) is transmitted to the electronic key (12), and the external authorization code (BCZ) is transmitted by the electronic key (12 ) is stored in a memory (39), the external authorization code (BCZ) being read out of the memory (39) by the electronic lock (14) when the electronic key (12) interacts with the electronic lock (14) and is read out by a processor ( 72) of the electronic lock (14) is checked by the processor (72) having its own authorization code program (BCEPS) itself determines its own authorization code (BCS) and compares it with the external authorization code (BCZ) received from the electronic key (12), and the processor (72) enables an opening process if the determined own authorization code (BCS) is identical with the transmitted external authorization code (BCZ) ,
2. 2. The method according to embodiment 1, wherein the authorization code determination program (BCEPZ) of the central unit (102) determines the external authorization code (BCZ) in such a way that it is only allowed to be opened once.
3. 3. The method according to embodiment 2, wherein the authorization code determination program (BCEPZ) of the central unit (102) determines the authorization code (BCZ), inter alia, by taking a cycle counter (ZCZ) into account.
4. 4. The method according to embodiment 3, wherein the authorization code determination program (BCEPS) of the electronic lock (14) determines its own authorization code (BCS), also taking into account a cycle counter (ZCS).
5. 5. The method according to one of the preceding embodiments, wherein the authorization code determination programs (BCEPZ, BCEPS) of the central unit (102) and the electronic lock (14) the respective authorization code (BCZ, BCS) taking into account the identification code (ICK) of the electronic key (12) and the identification code (ICL) of the electronic lock (14).
6. 6. The method according to one of the preceding embodiments, wherein the authorization codes (BCZ, BCS) are determined by the authorization code determination programs (BCEPZ, BCEPS) by means of a hash algorithm.
7. 7. The method according to one of the preceding embodiments, wherein the electronic lock (14) is activated by the central unit (102) before assembly of the electronic lock (14) at the location provided for this, the central unit (102) in this case the identification code (ICL ) of the electronic lock (14), the status of the cycle counter (ZZ) of the electronic lock (14) with the identification code (ICL) stored in the central unit (102) and the stored status of the cycle counter (ZZ).
8. 8. The method according to one of the preceding embodiments, wherein the identification code (ICL) of the electronic lock (14) is stored in a secure memory (76).
9. 9. The method according to one of the preceding embodiments, wherein the central unit (102) compares passwords to be stored between the electronic lock (14) and the central unit (102) when the electronic lock (14) is activated.
10. 10. The method according to one of the preceding embodiments, wherein an assignment password is compared when the electronic lock (14) is activated.
11. 11. The method according to any one of the preceding embodiments, wherein the central unit (102) upon activation of the electronic key (12) the identification code (ICK) of the electronic key (12) with the identification code (ICK) of the electronic stored in the central unit (102) Key (12) compared.
12. 12. The method according to one of the preceding embodiments, wherein when the electronic key (12) is activated, an assignment password is stored in the memory (39).
13. 13. The method according to any one of the preceding embodiments, wherein the identification code (ICK) of the electronic key (12) is stored in a memory (39) of the electronic key (12).
14. 14. The method according to one of the preceding embodiments, the memory (39) of the electronic key (12) being writable and readable only when using a security hash code (SC).
15. 15. The method according to embodiment 14, the security hash code (SC) being determined by a processor (34) in the electronic key (12) for storing the external authorization code (BCZ).
16. 16. The method according to embodiment 14 or 15, wherein a processor (72) in the electronic lock (14) for reading out the external authorization code (BCZ) from the secured memory (39) of the electronic key (12) has a security hash code (SC) Access to the secured memory (39) generated.
17. 17. The method according to one of the preceding embodiments, wherein a memory of a security processor (38) is used as the memory (39) in the electronic key (12).
18. 18. The method according to one of the preceding embodiments, wherein status signals of the electronic lock (14) are transmitted to the electronic key (12) for display.
19. 19. The method according to embodiment 18, wherein the electronic key (12) has a processor (34) which controls signal elements (92, 94) to display the states of the electronic lock (14) transmitted by the electronic lock.
20. 20. Electronic locking system (10) comprising an electronic key (12) and an electronic lock (14) which can be brought into interaction with one another by a contact set (16) and a counter-contact set (18), the electronic key (12) being a processor (34) which interacts with an input unit (36) through which an externally generated authorization code (BCZ) can be transmitted to the processor (34), the processor (34) interacting with a memory (39) and the externally generated authorization code ( BCZ) in the memory (39) and wherein the electronic lock (14) has a processor (72) which, when the electronic key (12) interacts with the electronic lock (14) via the contact set (16) and the counter-contact set (18) interacts with the memory (39) in the electronic key (12) in order to read out the externally generated authorization code (BCZ).
21. 21. Electronic locking system according to embodiment 20, wherein the memory (39) is a secure memory and that the processor (34) of the electronic key (12) generates a security code (SC) to the externally generated authorization code (BCZ) in the secure memory (39).
22. 22. Electronic locking system according to embodiment 20 or 21, wherein the processor (72) of the electronic lock (14) generates a security code (SC) in order to read out the authorization code (BCZ) stored in the secure memory (39).
23. 23. Electronic locking system according to one of the embodiments 20 to 22, wherein the electronic key (12) has display elements (92, 94) in order to indicate states of the electronic lock (14) transmitted by the electronic lock (14) to the electronic key (12) ,
24. 24. Electronic locking system according to embodiment 23, wherein the processor (72) of the electronic lock (14) to the processor (34) of the electronic key (12) transmits status signals relating to states of the electronic lock (14) and that the processor (34) of the electronic Key (12) controls the display elements (92, 94) of the electronic key (12) according to the transmitted states.
25. 25. Electronic locking system according to one of the embodiments 21 to 24, wherein the secured memory (39) is the memory of a security processor (38).
26. 26. Electronic locking system according to one of the embodiments 20 to 25, wherein the electronic lock (14) can be operated by an electrical voltage source (32) of the electronic key (12).
27. 27. Electronic locking system according to one of the embodiments 20 to 26, wherein the electronic lock (14) comprises a locking drive (82) for actuating a locking bolt (22).
28. 28. Electronic locking system according to embodiment 27, wherein the locking drive (82) of the electronic lock (14) can be operated by the electrical voltage source (32) of the electronic key (12).
29. 29. Electronic locking system according to embodiment 28, wherein the electronic lock (14) has a voltage converter (86) to operate the locking drive (82).
30. 30. Electronic locking system according to one of the embodiments 20 to 26, wherein the electronic lock (14 ') has a switching unit (362) in order to activate or block an external locking system (268).
31. 31. Electronic locking system according to one of the embodiments 20 to 30, wherein the electronic key (12) has an interface (42) for activating the electronic key (12) by means of a central unit (102).
32. 32. Electronic locking system according to one of the embodiments 20 to 31, wherein the electronic lock (14) has an interface (84) for activating the electronic lock (14) by a central unit (12).
33. 33. Electronic locking system according to embodiment 31 or 32, wherein the activation of the electronic key (12) or the electronic lock (14) by the central unit (102) takes place in a line-bound manner.
34. 34. Pipe safe (202) comprising a tubular body (204) and a tubular body cover (206), in which an electronic lock (14) is arranged in order to lock or close the tubular body cover (206) in its closed position inserted into the tubular body (204) unlock, a key container (222) being held on the tubular body cover (206) and insertable or removable from the tubular body (204) with the tubular body cover (206).
35. 35. Pipe safe according to embodiment 34, wherein the key container (222) has a receiving space (224) for a key (226).
36. 36. Pipe safe according to embodiment 34 or 35, wherein the key (226) on the key container (222) is secured against complete removal from the key container (222).
37. 37. Pipe safe according to one of the embodiments 34 to 36, the receiving space (224) of the key container (222) being accessible through an opening.
38. 38. Pipe safe according to one of the embodiments 34 to 37, the position of the key container (222) in the pipe body (204) being detectable by a sensor (244).
39. 39. Pipe safe according to embodiment 38, the sensor being a magnetic field sensor (244) which detects a magnet (342) held on the key container (222).
40. 40. Pipe safe according to one of the embodiments 38 or 39, the sensor (244) interacting with a transmission unit (252) which transmits a closed position of the pipe body cover (206) to a security center.
41. 41. Pipe safe according to one of the embodiments 34 to 40, wherein a sensor (248) is arranged on the pipe body (204) and detects a closed position of the pipe body cover (206) in the pipe body (204).
42. 42. Pipe safe according to embodiment 41, wherein the tubular body cover (206) is provided with a magnet (246), the position of which is detected by the sensor (248).

Further features and advantages of the invention are the subject of the following description and the drawing of some exemplary embodiments.

Fig. 1

eine schematische Darstellung eines elektronischen Schlüssels und eines elektronischen Schlosses eines ersten Ausführungsbeispiels eines erfindungsgemäßen Schließsystems;

Fig. 2

eine schematische Darstellung einer Aktivierung des elektronischen Schlüssels und des elektronischen Schlosses mit einer Zentraleinheit des elektronischen Schließsystems;

Fig. 3

eine schematische Darstellung einer Möglichkeit einer Erzeugung und Übermittlung eines externen Berechtigungscodes;

Fig. 4

eine perspektivische Frontansicht eines ersten Ausführungsbeispiels eines Rohrtresors ohne aufgesetzten elektronischen Schlüssel;

Fig. 5

ein Schnitt durch den Rohrtresor längs Linie 5-5 in Fig. 4 mit aufgesetztem elektronischem Schlüssel;

Fig. 6

eine perspektivische Ansicht des Rohrtresors gemäß Fig. 4 beim Öffnen desselben;

Fig. 7

eine schematische Darstellung ähnlich Fig. 1 eines zweiten Ausführungsbeispiels eines erfindungsgemäßen Schließsystems;

Fig. 8

ein weiteres Ausführungsbeispiel eines Rohrtresors mit einem in einen Verschlussdeckel integrierten elektronischen Schloss und einem für das elektronische Schloss charakteristischen Code;

Fig. 9

ein Ablaufdiagramm, das die Übermittlung der Codes zwischen einem Benutzer und einer zentralen Informationsverarbeitungsstelle verdeutlicht;

Fig. 10

die Hand eines Benutzers bei der Eingabe des Berechtigungscodes in einen elektronischen Schlüssel;

Fig. 11

die Verwendung des elektronischen Schlüssels als Griff beim Öffnen des elektronischen Schlosses;

Fig. 12

die Anordnung eines physikalischen Schlüssels an der Innenseite des Verschlussdeckels des Rohrtresors;

Fig. 13

ein Ablaufdiagramm, das die Kommunikation zwischen dem Benutzer, einem Client-Rechner, einem Server, einem Administrator und dem elektronischen Schloss verdeutlicht;

Fig. 14

ein Diagramm, das die Funktionen auf Seiten des Benutzers, des Clientrechners, des Servers und des Administrators verdeutlicht;

Fig. 15

einen schematischen Schaltplan für eine Anwendung eines elektronischen Schlosses im Zusammenwirken mit einem Steuergerät und einem Motorschloss;

Fig. 16

eine schematische Vorderansicht eines elektronischen Schlüssels, und

Fig. 17

eine schematische Ansicht der Rückseite eines elektronischen Schlüssels.

The drawing shows:

Fig. 1

a schematic representation of an electronic key and an electronic lock of a first embodiment of a locking system according to the invention;

Fig. 2

a schematic representation of an activation of the electronic key and the electronic lock with a central unit of the electronic locking system;

Fig. 3

a schematic representation of a possibility of generating and transmitting an external authorization code;

Fig. 4

a front perspective view of a first embodiment of a tube safe without attached electronic key;

Fig. 5

a section through the tube safe along line 5-5 in Fig. 4 with electronic key attached;

Fig. 6

a perspective view of the tube safe according Fig. 4 when opening it;

Fig. 7

a schematic representation similar Fig. 1 a second embodiment of a locking system according to the invention;

Fig. 8

a further embodiment of a tube safe with an electronic lock integrated in a closure cover and a code characteristic of the electronic lock;

Fig. 9

a flow chart illustrating the transmission of the codes between a user and a central information processing point;

Fig. 10

a user's hand when entering the authorization code into an electronic key;

Fig. 11

the use of the electronic key as a handle when opening the electronic lock;

Fig. 12

the arrangement of a physical key on the inside of the cover of the tube safe;

Fig. 13

a flowchart illustrating the communication between the user, a client computer, a server, an administrator and the electronic lock;

Fig. 14

a diagram illustrating the functions on the part of the user, the client computer, the server and the administrator;

Fig. 15

a schematic circuit diagram for an application of an electronic lock in cooperation with a control unit and a motor lock;

Fig. 16

is a schematic front view of an electronic key, and

Fig. 17

a schematic view of the back of an electronic key.

An in Fig. 1 The illustrated first exemplary embodiment of an electronic locking system 10 according to the invention, designated as a whole by 10, comprises an electronic key 12 and an electronic lock 14.

The electronic key 12 has a contact set 16 which has spring contacts in particular and which can be operatively connected to a counter contact set 18 which has in particular concentric contact rings via a galvanic connection by attaching the contact set 16 to the counter contact set 18.

Due to the electrical interaction between the electronic key 12 and the electronic lock 14, it is then possible to actuate a locking bolt 22 by means of the electronic key 12, that is to say to move it from a closed position into an open position or possibly vice versa.

For this purpose, the electronic key 12 comprises a voltage source 32, for example in the form of a battery, which supplies a processor 34 with current and voltage.

The processor 34 is able to interact with an input unit 36 in and with a security processor 38, which is provided with a secured memory 39.

Not only is an identification code ICK and an assignment password of the key 12 stored in the secured memory 39, but an externally generated authorization code BCZ can also be stored therein by the processor 34.

The processor 34 is also provided with an interface 42, which serves to activate and / or configure the processor 34.

Furthermore, a data line 44 leads from the processor 34 to the memory 39 and further to a data contact 46 of the contact set 16.

A ground line 48 leads directly from the voltage source 32 to the processor 34 on the one hand and to a ground contact 52 of the contact set 16 on the other hand.

The processor 34 is able to activate a supply line 58 leading from the voltage source 32 to a supply contact 56 of the contact set 16 via a switching unit 54.

When the contact set 16 of the electronic key 12 interacts with the counter-contact set 18 of the electronic lock 14, the ground contact 52 touches a ground counter-contact 62, which is designed in particular as a contact ring, and the supply contact 56 touches a supply counter-contact 66, in particular designed as a contact ring. This is a processor provided in the electronic lock 14 72 can be activated by the electronic key 12 and operated with the voltage source 32 of the electronic key 12 without the electronic lock 14 needing its own voltage source for this.

Furthermore, in this case the data contact 46 of the contact set 16 also touches a counter data contact 68 of the counter contact set 18 which is in particular in the form of a contact ring and which in turn is connected to the processor 72 via a data line 74.

An identification code ICL of the electronic lock 14 and a memory 76 in the form of an EEPROM, a clock 78 and a locking drive 82 which stores an assignment password are also coupled to the processor 72.

Furthermore, activation and / or configuration of the processor 72 is possible via an interface 84 coupled to it.

The processor 72 is in turn operated with the voltage of the voltage source 32; in the case of a closing drive 82 which is also to be operated via the voltage source 32, a voltage converter 86 is preferably provided in the electronic lock 14, which converts the voltage provided by the voltage source 32 to a higher one Implemented voltage for example to operate the closing drive. In addition, the processor 72 is also assigned a log memory 88 in which activities of the processor 72 of the electronic lock 14 are logged and stored.

The locking system 10 according to the invention now works as follows:
The externally generated authorization code BCZ, which the processor 34 stores in the secured memory 39 of the security processor 38, is transmitted to the electronic key 12 via the input unit 36.

For this purpose, the processor 34 calculates a security code SC in the form of a hash code and transmits it to the security processor 38 with the authorization code BCZ.

In addition, the processor 34 activates the supply contact 56 via the switching unit 54, so that it is at the supply voltage of the voltage source 32.

If a connection is established between the contact set 16 of the electronic key 12 and the mating contact set 18 of the electronic lock 14, the processor 72 of the electronic lock 14 is established solely by the supply voltage being applied to the supply mating contact 66 and the ground being applied to the ground mating contact 62 started up a reset and now begins to communicate with the security processor 38 via the connection of the data line 74 to the data line 44.

Before the content of the secured memory 39 of the security processor 38 is read out, however, a check is carried out to determine whether the security processor 38 as such is authorized to exchange data with the processor 72, for example by checking whether a list contained in the memory 76 contains the security processor 38 has listed.

The processor 72 then calculates a security code SC in the form of a hash code and, using the security code SC, reads out the secured memory 39, which includes the authorization code BCZ.

This reading of the memory 39 takes place in particular without the processor 34 of the electronic key 12 being active.

After reading out the authorization code BCZ, the processor 72 checks the correctness of the authorization code BCZ on the basis of an own authorization code BCS determined with an own authorization code determination program BCEPS and an authorization code verification program BCUP comparing the authorization code BCZ with the authorization code BCS with regard to your identity, and sees in the case of one of the authorization codes BCZ and BCS before opening the electronic lock 14.

If the authorization codes BCZ and BCS are identical, the processor 72 in the first exemplary embodiment activates the locking drive 82 and this moves the locking bolt 22, for example from its locking position into its open position, so that the electronic lock 14 then enables access to a secured unit, for example.

At the same time, the processor 72 creates a log by reading the clock 78, which records the access to the lock 14, the reading of the access data record ZD from the memory 38 and the activation of the locking drive 82, this log then being stored in the log memory 88.

All states of the electronic lock 14, which are to be determined by the processor 72 and are to be displayed to the user, are preferably not displayed by the electronic lock 14, but rather are transmitted via the data line 74 and the data line 44 to the processor 34 of the electronic key 12, which then in turn, one or more optical display units 92, 94, such as, for example, LED lamps or display indicators or acoustic signal transmitters, such as, for example, buzzer, or sound sequences that are transmitted through a loudspeaker, are generated.

In order to maintain the intended function of the electronic key 12 and the electronic lock 14, both the electronic key 12 and the electronic lock 14 are to be activated by a central unit 102, which in turn is connected via an interface 104 to the interface 42 of the electronic key 12 and can access the interface 84 of the electronic lock 14 at the same time or also in succession or in each case separately via an interface 106 in order to activate both the electronic key 12 and the electronic lock 14, in particular assignment passwords and / or the respective identification code ICK and the respective one Identification code ICL and cycle states ZZ of the cycle counters ZCZ and ZCS are compared or exchanged between the central unit 102 and the electronic key 12 and the electronic lock 14, that is to say either transmitted or read out.

After such activation of the electronic key 12 and the electronic lock 14, the respective connections between the interfaces 42 and 104 as well as 84 and 106 can be separated and the central unit 102 is able to use the authorization code determination program BCEPZ present in the central unit 102 to identify the one-offs external authorization code BCZ using a hash algorithm to determine which can then be entered into the electronic key 12, for example by the user, via the input unit 36, whereupon the processor 34 of the electronic key 12 is able to store the authorization code BCZ in the secured memory 39.

Furthermore, the electronic lock 14 is then able - as described - after interaction with the electronic key 12 to read out the external authorization code and by means of the authorization code determination program BCEPS also using the identification code ICK of the identification code ICS, the cycle state ZZ of its own cycle counter ZCS by means of the same hash Algorithm as in the central unit 102 to determine the own authorization code BCS and to check whether this is identical to the external authorization code BCZ and allows the locking bolt 22 to be opened.

As in Fig. 3 As shown, a locking device 10 according to the invention can be used in the field, for example, in such a way that an operator can initiate opening of the lock 14 by means of the following procedure in the case of a lock 14 arranged stationary in the field with an electronic key 12.

The operator, who wants to open a lock 14 arranged in the field, requests the central unit 102, for example via a mobile communication unit 112, in particular a portable mobile radio device or another communication device, to transmit an external authorization code BCZ.

For this purpose, the central unit 102 can check a large number of data or query a large number of data which must be present before the authorization code BCZ is received.

Such data are, for example, a local code LC of the lock 14 and / or a personal code PC of the operator and / or time information ZA at the location of the operator and / or location information OA for the operator.

All of this information can be checked by the central unit 102. In the event that the verification of all of this information and information is positive, the central unit 102 generates an external authorization code BCZ, since the central unit 102 uses the local code LC and / or the personal code PC and / or the times and / or the locations OA can conclude the identification codes ICK and ICL and therefore using the known identification code ICK of the electronic key 12 to be used for opening and the identification code ICL of the electronic lock 14 to be opened and the cycle state ZZ of the cycle counter ZCZ by means of the authorization code determination program BCEPZ the external authorization code BCZ by means of a hash algorithm which is transmitted to the operator, for example acoustically or as a message or as a data record, for example via the mobile communication unit 112.

The authorization code BCZ is then transmitted from the operator or from the mobile communication unit 112 via the input unit 36 to the electronic key 12.

The authorization code BCZ is in particular only an authorization code BCZ, which authorizes the electronic lock 14 to be opened once.

The electronic key 12 then stores this authorization code BCZ in the memory 39 by means of a processor 34.

If the contact set 16 is now connected to the counter-contact set 18, the processor 72 of the electronic lock 14 is activated, as already described, and reads out the authorization code BCZ from the electronic key 12, as already described.

By own calculations of an authorization code BCS by means of its authorization code determination program BCEPS using the identification code ICK of the electronic key 12 read from the secured memory 39, the identification code ICK of the electronic lock 14 stored in the memory 76 and the cycle state ZZ of the cycle counter ZCS of the electronic lock 14 and through Checking the identity of the authorization code BCZ with the authorization code BCS by means of its authorization code check program BCUP, the processor 72 is able to determine whether the external authorization code BCZ authorizes a subsequent opening of the locking bar 22 and - if this is the case if the authorization code is identical - The locking drive 82 is activated to actuate the locking bolt 22.

After the electronic lock 14 has been opened once, the authorization code BCZ for the one-time opening of the electronic lock 14 has been used up and can no longer be used to open the same.

Even if the access data record ZD were to remain stored in the electronic key 12, reactivating the processor 72 of the electronic lock 14 and checking the authorization code BCZ would result in the latter not authorizing the electronic lock 14 to be reopened.

The central unit 102 can check the information transmitted via the mobile communication unit 12 with regard to the local code and / or the personal code and / or the times and / or the location information is given by a person who, for example, monitors the activities of the operator in the field and is able to assess whether this information is consistent.

However, it is also possible for the central unit 102 to carry out this check under program control.

The authorization code BCZ in the central unit 102 is, however, determined by the authorization code determination program BCEPZ, which uses all or only part of this information to determine the authorization code BCZ.

In particular, the advantage of the locking system according to the invention can be seen in the fact that the electronic lock 14 itself does not require a voltage source, but rather can be unused for as long as desired, since the entire power supply for activating the processor 72 of the electronic lock and for operating the processor 72 of the electronic lock Via the voltage source 32 of the electronic key, which is carried by the operator and can therefore always be recharged or renewed by the operator.

Furthermore, due to the activation of the electronic key 12 and the associated electronic lock 14 by the central unit 102, there is a clear correlation between the electronic key 12 and the electronic lock 14 and the central unit 102 and thus a clear correlation between those for a specific electronic lock 14 Opening the provided electronic key 12 and the correspondingly correlated central unit 102, which is based on this correlation of the electronic key 12, electronic lock 14 and central unit 102 when calculating the authorization code BCZ. Thus, when one or more electronic keys 12 and one or more electronic locks 14 are provided for this electrical key 12, by activating passwords, exchanging or checking the identification codes ICK and ICS and comparing the cycle counters, initial conditions can be created with which the Authorization code determination programs BCEPS and BCEPK can independently determine identical authorization codes BCZ and BCS.

Such an electronic locking device can be used, for example, in a tube safe designated as a whole as 202, which has a locally permanently installed tubular body 204, in which a tubular body cover 206 comprising the electronic lock 14 can be inserted and can be locked with the tubular body 204.

The tubular body cover 206 carries on its outer front side 208 the mating contact unit 18 of the electronic lock 14 with the contact rings 62, 66, 68.

Furthermore, the tube body 204 is provided with the local code LC, which allows the specific tube safe 202 to be identified at the respective specific location.

As in Fig. 5 shown, the tubular body cover serves as a housing for receiving the electronic lock 14, wherein the locking drive 82 and the locking bolt 22 are also arranged in the tubular body cover 206, so that the locking bolt 22 can engage, for example, in a locking bolt receptacle 212 on an inside 214 of the tubular body 204 to the tubular body cover 206 in its in Fig. 5 fix shown closing position.

Since such tube safes 202 often serve to store access keys securely, a key container 222 is also held on the tubular body cover 206, for example permanently mounted or detachably held, which has a receiving space 224 for a key 226, the key 226 also in the receiving space 224 for example is still secured by a holding strap 228, so that the key 226 can be removed from the receiving space 224, but cannot be separated from the key container 222.

Such a key container 222 has the great advantage that it offers the possibility of arranging the key 226 on the tubular body cover 206 in such a way that it can be easily attached to the tubular body cover 206 without the key jamming in the tubular body 204 or between the tubular body 204 and can clamp the tubular body cover 206, can be inserted into the tubular body 204 and can be reliably fixed by locking the tubular body cover 206.

In addition, a key container 222 also offers the possibility of storing the key 226 in the tubular body 204 in a dry and / or contamination-free manner, for example when installing the tubular body 206 in an environment lying to moisture, so that, for example, dirt from the key 226 entering the tubular body 204 can be kept away during storage.

As in Fig. 5 and Fig. 6 illustrated, the electronic key 12 according to the invention is arranged in a housing 232 which has a rear side 234 which can be placed on the front side 208 of the tubular body cover 206, which has the contact set 16 for contacting the mating contact set 18 on the front side 208 of the tubular body cover 206 and on the other side at the Back 234 opposite front 236 carries the input unit 36 ', which in this case is designed as a keypad or touch panel and is used to enter the authorization code BCZ.

For releasably fixing the housing 232 of the electronic key 12 to the tubular body cover 206, a magnetic connection 238 is provided, which comprises either two magnets M1, M2 or a magnet M1 and an element magnetizable by this.

The magnetic connection is used not only for releasably fixing the electronic key 12 to the electronic lock, but also for centering the contact set 16 relative to the mating contact set 18.

This magnetic coupling between the housing 232 and the tubular body cover 206 makes it possible, when the electronic lock 14 is unlocked with the housing 232 of the electronic key 12, to pull the tubular body cover 206, which represents the housing for the electronic lock 14, out of the tubular body 206 by pulling out the tubular body cover 206 can be seen from the tubular body 204.

In order to further allow for a local display that the tubular body cover 206 is seated reliably in the tubular body 204, it is possible, for example, to provide a magnet 242 on the key container 222, the position of which inside the tubular body is determined by a magnetic field sensor 244 which is arranged on the tubular body to detect its position in the tubular body 204 and thereby determine whether the key container 222 and preferably then also the tubular body cover 206 are arranged in a position in the tubular body 204 in which the tubular body cover 206 is locked by the locking bolt 22, which is acted upon, for example, by an elastic force accumulator 24 ,

If the position of the tubular body cover 206 is also to be recorded in this regard, it is also possible to arrange a magnet 246 in the tubular body cover 206 and to detect its position by means of a magnetic field sensor 248 likewise arranged on the tubular body 204, so that there is both the correct position of the key container 222 as well as the correct position of the tubular body cover 206 in its closed position and, for example, transmission unit 252 either wirelessly or wired to a security center or to central unit 102.

In a second exemplary embodiment of a locking device 10 according to the invention, shown in FIG Fig. 7 , All those parts that are identical to those of the first exemplary embodiment are provided with the same reference numerals, so that reference can be made in full to the first exemplary embodiment with regard to the description thereof.

In contrast to the first exemplary embodiment, however, the electronic lock 14 'is not provided with a locking drive 82, but rather with a switching unit 262 which is capable of establishing or interrupting a connection between external connections 264 and 266 of the electronic lock 14', so that There is the possibility of activating or blocking an existing locking system 268 via the external connections 264 and 266.

For example, the outer connections 266 and 264 can serve to interrupt a power supply to the already existing locking system 268 and thus shut it down or to produce the power supply to it and thus to activate the already existing locking system 268.

The existing locking system 268 can be any locking system that is already present in a building and is fully installed, for example, so that the locking device 10 ′ according to the invention only serves to completely shut down or activate this locking system 268.

An existing locking system 268, which has a low security level, can thus be secured with the locking system 10 ′ according to the invention, which has a very high security level, without the existing locking system 268 having to be completely uninstalled and a new locking system having to be installed.

One in Fig. 8 The closure device 310 shown is formed by a tube safe 312, which is arranged in a theft-proof and burglar-proof manner in a wall of a building or on a stable support near the building. The tube safe 312 is closed by a cover 314 on its front side. An electronic lock 316, as detailed in FIG WO 2012/045474 A1 is shown and described, the disclosure content of which is hereby made the subject of the present application.

On the inside of the cover 314 is - as in Figure 12 shown - a physical key 318 is arranged, by means of which at least one access to the building (not shown) and optionally further doors in this building can be opened.

A code 320 characteristic of the electronic lock 316 is arranged on the locking device 310 blocked by means of the electronic lock 316, which corresponds, for example, to that of the first exemplary embodiment. In the exemplary embodiment shown, this is in the form of a barcode 320, but can also be formed by an Aztek code or an invisible magnetic code. The code 320 is the simplest Case can be read out manually by a user 320. According to an advantageous embodiment, a communication device 324 carried by the user 322 has a sensor or a reading device for automatically detecting the code 320. The communication device 324 can be formed, for example, by a smartphone, the camera of which, in conjunction with a stored application program ("app") Reading a barcode or alternatively an Aztek code, which in the exemplary embodiment is used as the code 320 characteristic of the electronic lock 316. As already mentioned, invisible codes 320 transmitted magnetically or via a radio signal can also be transmitted by the electronic lock 316 or a device arranged in the vicinity thereof and received or read out by the communication device 324.

The electronic lock 316 can be unlocked by means of an electronic key 332, provided that an authorization code 336 suitable for the electronic lock 316 is entered into this electronic key 332. In Figure 10 shows how the authorization code 336 is entered by the user 322 via a keyboard arranged on the electronic key 332. The electronic key 332 can then, as in FIG Figure 11 shown, placed on the electronic lock 316 and used directly as a handle for opening the cover 314.

According to the invention, however, this process is preceded by that in FIGS Figures 9 . 13 and 14 illustrated procedure, in which the user 322 the information characteristic of the electronic lock 316 (code 320) and information characteristic of his person in the form of a code 326 - for example in the form of a personal password or a letter / number combination - by means of the communication device 324 to a central information processing point 330 - for example the headquarters of a security service. The one for the electronic lock 316 Characteristic information 320 and information 326 characteristic of the person of the user 322 together form an inquiry data record 334, which in the simplest case is transmitted manually to the central information processing point 330 via a telephone call.

According to an advantageous embodiment of the invention, the request data record 334 is transmitted automatically, for example as a character string in a short message (SMS) sent by the communication device 324.

In the information processing center 330, the request data record 334 is checked with the codes 320 and 326 contained therein, preferably with additional comparison with a time parameter 328 (for example the duty roster or route plan of the user 322). If this check leads to a positive result, the information processing point 330 generates an authorization code 336, as described in the first exemplary embodiment of the locking system, and sends this to the communication device 324. In the simplest case, this can again be done by telephone.

According to an advantageous development, the transmission of the authorization code 336 to the communication device 324 is automated, for example in the form of a character string embedded in a short message (SMS).

Authorization code 336 is issued by user 322, as in connection with Figure 10 mentioned, either transmitted manually to the electronic key 332 via an input device, in particular a keyboard, or the authorization code 336 is automatically transmitted from the communication device 324 to the electronic key 332. This transmission can take place in that the communication device 324 has a transmitter and the electronic key 332 has a receiver communicating with this transmitter. The transmission can take place, for example, via an infrared signal, via Bluetooth or another suitable local transmission protocol.

According to a development of the invention, the communication device 324 and the electronic key 332 can also form a structural unit, which has a sensor for detecting the code 320, an input device for the code 326, a transmission device for the transmission of the request data record 334 to the central office Information processing point 330, a receiver for receiving the authorization code 336 and a memory for storing the authorization code 336 in the electronic key 232. The structural unit also contains software for recording the codes 320 and 326, for the automated transmission of the request data record 334, for the automated reception and for the storage of the authorization code 336.

The central information processing point 330 advantageously has at least one client computer 310 and at least one server 3320. The client computer 3310 serves to receive the request data record 34 and to transmit this data record to the server 3320. The data traffic between the client computer 3310 and the server 3320 is designated 3315 in the figures.

In addition, time parameters 328 are stored in the server 3320, which, for example, map a route plan of the user 322 with a time characteristic for the opening of the electronic lock 316 concerned, preferably with a corresponding time buffer (earliest opening time, latest opening time, latest closing time). All data in the server 3320 is managed by an administrator 3330. The data traffic between the server 3320 and the administrator 3330 is designated 3325 in the figures.

A signal can also be transmitted to the server 3320, which signal is automatically sent by a transmitter installed on the electronic lock 316 when the electronic lock 316 is opened and closed.

The method and the locking system can be contrary to the representation in the Figures 9 . 13 and 14 in an advanced embodiment also function fully automatically without human interaction. The receipt of an inquiry record 334 by the client computer 3310, the transmission of the inquiry record 334 to the server 3320, the checking of the characteristic information contained in the inquiry record 334 (codes 320 and 326), the comparison with the at least one Time parameters 328, the generation of an authorization code 336 and the transmission of the authorization code 336 to the communication device 324, optionally again with the interposition of a client computer 3310, can preferably take place in a fully automated manner by means of software.

It has already been described in connection with the possible embodiments of the communication device 324 and the electronic key 332 that the method and system according to the invention for the secure release of an access authorization or for the secure key handover can also take place fully automatically on the part of the user 322.

According to the invention, the electronic key 332 is provided with an input device 333, by means of which the user 322 can enter the authorization code 336 transmitted from the central information processing point 330 to the communication device 324 into the electronic key. Such an electronic key 332 provided with an input device 333 can generally also be used instead of the stationary input devices which are already widely used today, in which the entry of a code by an authorized user can be observed relatively easily by an unauthorized observer and thereby represents a significant security risk. On the other hand, the entry of a code into a mobile electronic key 332, which is only used after the opening of an electronic lock, can take place completely unnoticed and at a distance from the electronic lock 316.

As in the exemplary embodiment shown, a key 332 placed on the electronic lock 316 and preferably temporarily connected to the electronic lock 316 by magnetic force can be used as the electronic key 332. The magnetic forces are provided by a magnet 3329 in the central area of the electronic key 332 and by a counter magnet 3161 in the central area of the electronic lock 316, which are preferably designed as permanent ring magnets and for automatic centering of the electronic key 332 with the electronic lock 316 and an alignment of the contacts 3324, 3325 and 3326 to the concentrically arranged counter-contact surfaces 3164, 3165, 3166 on the electronic lock 316, regardless of the relative angle to one another.

However, electronic keys 332 interacting with the electronic lock 316 over a certain distance, for example in the form of a transponder, can also be used without contact.

The electronic key 332 has a housing 3321, according to its front Fig. 10 and 16 the input device 333 is arranged. In the exemplary embodiment shown, this is a numeric keyboard with 310 number keys 3331, a delete key 3332 ("C") and an enter key 3333 ("OK"). On the back of the housing 3321, three resilient contacts 3324, 3325 and 3326 emerge in the housing, of which the centrally arranged contact 3325 carries the positive voltage, the outermost contact 3324 represents the ground connection and the contact 3326 for serial data transmission serves.

In the rear view of the electronic key 332 according to Fig. 17 the lid of a battery compartment 3327 is also indicated, behind which an accumulator 3332 is arranged. This is designed, for example, as a lithium-ion accumulator with an output voltage.

The electronic key 332 is also provided with at least one interface 328, which in the present case is formed, for example, by a micro USB interface and is used for programming the electronic key 332 and optionally also for charging the battery 3322.

The electronic key 332 works either with that in FIGS Figures 8 to 13 electronic lock 316 shown, for example on a tube safe 312 or in a protected room or other device requiring access authorization. The concept of "facility" can be seen very broadly here. Machines, vehicles or the like, but also lockers, valuables, safes or doors to security areas can be protected by an electronic lock 316.

The example according to Fig. 15 shows that the protected device by the electronic lock 316 can not only be released directly but also indirectly. In this case, the electronic lock 316 comprises a 220 V protection module for a protected device, not shown, which is ultimately only released by the actuation of a motor lock 340.

Between the electronic lock 316, which, for example, according to that of the second embodiment Fig. 7 corresponds, and in this case a control unit 50 is also arranged to the motor lock 340, which can be supplied by means of its own voltage supply, but which is only activated by the actuation of the electronic lock 316. After transmission of a valid authorization code 336 from in Fig. 15 not shown Electronic key 332 via the counter contact 3166 responsible for data transmission activates the external voltage supply on the control unit 350 and actuates the motor lock 350. A more detailed description of controller 50 follows at the end of the description.

The advantage of indirect actuation is that when the protected device is not in use, there is no need to apply an operating voltage to it. This can be initialized at any time by means of the electronic key 332 via the electronic lock 316.

Claims (15)

Electronic locking system (10) comprising an electronic key (12) and an electronic lock (14), which can be brought into interaction with one another by means of a contact set (16) and a counter contact set (18), the electronic key (12) comprising a processor (34 ) which interacts with an input unit (36) through which an externally generated authorization code (BCZ) can be transmitted to the processor (34), the processor (34) interacting with a memory (39) and the externally generated authorization code (BCZ) writes in the memory (39) and the electronic lock (14) has a processor (72) which, when the electronic key (12) interacts with the electronic lock (14), via the contact set (16) and the counter-contact set (18 ) interacts with the memory (39) in the electronic key (12) in order to read out the externally generated authorization code (BCZ). Electronic locking system according to claim 1, characterized in that the memory (39) is a secure memory and that the processor (34) of the electronic key (12) generates a security code (SC) to the externally generated authorization code (BCZ) in the secure Store memory (39), in particular the secured memory (39) being the memory of a security processor (38). Electronic locking system according to claim 1 or 2, characterized in that the processor (72) of the electronic lock (14) generates a security code (SC) in order to read out the authorization code (BCZ) stored in the secure memory (39). Electronic locking system according to one of Claims 1 to 3, characterized in that the electronic key (12) has display elements (92, 94) in order to indicate states of the electronic lock (14) transmitted from the electronic lock (14) to the electronic key (12). to be displayed, in particular the processor (72) of the electronic lock (14) transmitting status signals relating to states of the electronic lock (14) to the processor (34) of the electronic key (12) and that the processor (34) of the electronic key (12) accordingly the display elements (92, 94) of the electronic key (12) controls the transmitted states. Electronic locking system according to one of claims 1 to 4, characterized in that the electronic lock (14) can be operated by an electrical voltage source (32) of the electronic key (12). Electronic locking system according to one of claims 1 to 5, characterized in that the electronic lock (14) comprises a locking drive (82) for actuating a locking bolt (22), in particular the locking drive (82) of the electronic lock (14) by the electrical The voltage source (32) of the electronic key (12) can be operated, the electronic lock (14) in particular having a voltage converter (86) to operate the locking drive (82). Electronic locking system according to one of Claims 1 to 5, characterized in that the electronic lock (14 ') has a switching unit (362) in order to activate or block an external locking system (268). Electronic locking system according to one of claims 1 to 7, characterized in that the electronic key (12) has an interface (42) for activating the electronic key (12) by means of a central unit (102). Electronic locking system according to one of claims 1 to 8, characterized in that the electronic lock (14) has an interface (84) for activating the electronic lock (14) by a central unit (12). Electronic locking system according to claim 8 or 9, characterized in that the activation of the electronic key (12) or of the electronic lock (14) by the central unit (102) is carried out by wire. Pipe safe (202) comprising a tubular body (204) and a tubular body cover (206) in which an electronic lock (14) is arranged in order to lock or unlock the tubular body cover (206) in its closed position inserted into the tubular body (204), characterized in that a key container (222) is held on the tubular body cover (206) and can be inserted into or removed from the tubular body (204) with the tubular body cover (206). Tube safe according to claim 11, characterized in that the key container (222) has a receiving space (224) for a key (226) and / or that the key (226) on the key container (222) prevents complete removal from the key container (222) is secured. Pipe safe according to claim 11 or 12, characterized in that the position of the key container (222) in the tubular body (204) can be detected by a sensor (244), the sensor in particular being a magnetic field sensor (244) which is attached to the key container (222 ) detects the magnet (342) and / or the sensor (244) interacts with a transmission unit (252) which transmits a closed position of the tubular body cover (206) to a security center. Pipe safe according to one of claims 11 to 13, characterized in that a sensor (248) is arranged on the tubular body (204) which detects a closed position of the tubular body cover (206) in the tubular body (204), in particular the tubular body cover (206) a magnet (246) is provided, the position of which is detected by the sensor (248). Method for operating a locking system (10) comprising an electronic key (12) and an electronic lock (14) as well as a central unit (102) used separately in the locking operation from the electronic key (12) and from the electronic lock (14) The central unit (102) uses an authorization code determination program (BCEPZ) to generate an external authorization code (BCZ), the external authorization code (BCZ) is transmitted to the electronic key (12) and the external authorization code (BCZ) is transmitted from the electronic key (12) in is stored in a memory (39), the interaction between the electronic key (12) and the electronic lock (14), the electronic lock (14) reading the external authorization code (BCZ) from the memory (39) and by a processor (72) of the electronic lock (14) is checked in that the processor (72) has its own Authorization code determination program (BCEPS) itself determines its own authorization code (BCS) and compares it with the external authorization code (BCZ) received from the electronic key (12), and the processor (72) identifies the determined own authorization code (BCS) with the transmitted external authorization code ( BCZ) enables an opening process.

Images