EP3971931B1 - Safety system - Google Patents

Description

The invention relates to a security system for unlocking at least one door lock, in particular for securing escape routes, the security system comprising a triggering element, in particular an emergency button, the triggering element comprising a manually operable actuating element, an actuation signal for unlocking the door lock being able to be generated by actuating the actuating element . The invention further relates to a method for unlocking at least one door lock, in particular for securing escape routes, wherein a triggering element, in particular an emergency button, comprises a manually operable actuating element, and an actuation signal for unlocking the door lock is generated by actuating the actuating element. The invention further relates to a use of the security system according to the invention.

Security systems for securing escape routes are known. The security systems include at least one latching emergency button and a door lock. If the actuating element of the emergency button is actuated, the actuating element remains in an actuating position. In the actuation position, a circuit is interrupted so that a door lock is transferred to an unlocked state. If a locked state of the door lock is to be restored, an operator, i.e. H. Authorized person can manually return the emergency button on site by turning the actuating element from the actuating position to a starting position.

According to the draft DIN EN 13637, it is also permitted to use non-latching trigger elements. The problem here is that the door lock can lock again despite the ongoing danger, meaning that the escape route is no longer available to those fleeing.

The DE 10 2014 113647 A1 discloses an emergency button designed as a movable display, in which a main alarm can be triggered via a pre-alarm and continuous touching of a display. An alarm open mode simulates a mechanical locking of the emergency button.

The EP 2 725 172 A2 discloses a security system in which an emergency switching device is connected to a locking device via a bus system.

It is therefore the object of the invention to provide a security system and a method for unlocking at least one door lock, which ensures the security of the security system even when using a non-latching actuating element.

This task is solved by a security system according to independent claim 1. Advantageous developments of the security system are specified in the dependent device claims, the description and in the figures. Furthermore, the invention is also solved by the features of the independent method claim according to claim 15. Features and details that are described in connection with the security system according to the invention also apply Connection with the method according to the invention and vice versa. The features mentioned in the description and in the claims can each be essential to the invention individually or in combination. In particular, a method that can be carried out with a security system according to one of claims 1 to 14 and/or a security system with which a method according to claim 15 can be carried out is protected. Furthermore, use of the security system according to the invention is protected.

The previously derived and demonstrated task is solved based on the security system described at the beginning in that the security system comprises an electronic device and, as a result of the actuation signal, the electronic device electronically prevents a locking mechanism of the door lock from being able to be controlled for locking without the existence of a cancellation condition. In other words, the actuation signal causes the electronic device, in particular in the electronic device, to electronically prevent a locking mechanism of the door lock from being controlled for locking without the presence of a cancellation condition. This means that activation of the locking mechanism for locking is prevented until the cancellation condition is reached. This ensures that after the actuating element has been actuated to unlock the door lock, locking of the door lock is reliably prevented. Thus, the security of the security system can be guaranteed by electronically preventing the locking mechanism from being activated for locking without reaching the cancellation condition, in particular as a result of the actuation signal. Because the prevention takes place electronically, the security of the security system can be easily guaranteed. In particular, no additional mechanical components are required and/or the electronic prevention is static. “As a result of the actuation signal” means in particular that relocking is prevented after the actuation signal has been generated, regardless of whether the actuation signal is still generated or not.

After the cancellation condition has been reached, the security system allows control for locking again. It may be that after the cancellation condition has been reached, the locking mechanism is activated for locking. In particular, the locking mechanism is immediately and automatically activated for locking after the cancellation condition has been reached. In particular, reaching the cancellation condition causes the locking mechanism to be activated for locking. Thus, it is always through that When the cancellation condition is reached, the door lock is transferred to the locked state.

Locking is understood to mean the transfer of the door lock to the locked state. Unlocking refers to the transfer of the door lock to the unlocked state.

The security system may include the locking mechanism.

The locking mechanism can e.g. B. be electromechanical or purely electromagnetic. The locking mechanism includes e.g. B. at least one coil. A control of the locking mechanism for locking or unlocking can be implemented in particular by switching off or on an electrical power supply. The electrical power supply can be used to supply the coil with electrical current.

An electromagnetic locking mechanism is exemplified in the DE100 50 111 C1 described. When unlocked, z. B. no magnetic forces on the door. In the locked state z. B. magnetic forces on a door.

An electromechanical locking mechanism has a mechanical connection to the door when locked. In the unlocked state, the mechanical connection can be canceled or canceled.

The electromechanical locking mechanism can z. B. a locking element, d. H. a latch or door latch, which is in a retracted position in the unlocked state of the door lock. In the retracted position, the latch member is disengaged from the door. In the locked state, the locking element is in engagement with the door. In a further alternative to an electromechanical locking mechanism, the locking mechanism is constructed in the manner of a door opener. I.e. the locking mechanism includes a latch element. When the door lock is locked, a door latch of the door engages the locking mechanism. In the unlocked state, the latch element releases the door latch in such a way that the door latch can disengage from the locking mechanism, in particular by pressing on the door.

Switching off the electrical power supply preferably results in the door lock being unlocked. The locking mechanism for unlocking the door lock is thus activated by switching off the electrical power supply. Switching on the electrical power supply preferably leads to a locked state of the door lock. This means that the control of the Locking mechanism for locking realized by switching on the electrical power supply.

The security system can alternatively be designed without the locking mechanism. In this case, the security system only controls the locking mechanism. For example, the security system switches the electrical power supply for the locking mechanism on or off or causes the electrical power supply to be switched on or off.

A “control for locking or unlocking” also occurs when the security system receives feedback about the status of the locking mechanism. A "control for locking or unlocking" also occurs if, as detected by the feedback, the locking mechanism does not correspond to the target state and an alarm is therefore issued and/or a new attempt is made to achieve the target state .

According to the invention, the security system includes a door lock control. If a door locking control is provided, the door locking control preferably controls the locking mechanism. For this purpose, the door lock control can switch the electrical power supply for the locking mechanism on and off.

The security system may include the door lock control but not the locking mechanism. In this case, the door locking control is designed as a door locking adapter. The door locking adapter is used to use the security system according to the invention with locking mechanisms that have already been installed.

The door lock includes the locking mechanism and, if equipped, the door lock control. The security system particularly preferably includes the door lock.

The door latch or locking mechanism may be integrated into a mechanical lock.

A distinction is made below between a user and an operator. A user can be any person who uses the security system. A user can e.g. B. a guest who wants to escape through the door secured by the security system. An operator is used to operate the security system. The operator has access to a guard device of the security system and/or can authenticate himself to the security system, in particular in order to operate the security system. The monitoring device can be designed as a PC or a monitor. The operator can z. B. the cancellation condition can be achieved. The actuation signal is in The following means the signal that is generated by the user by actuating the actuating element in order to unlock the door lock and get the escape route released.

The security system is used in particular to secure escape routes. The security system therefore serves to release the escape route. I.e. Actuation of the actuation element leads to unlocking without authentication of the user. Unlocking can take place immediately or with a time delay.

The trigger element is preferably designed as an emergency button. In this case, the actuating element corresponds to the actuating element of the emergency button. Alternatively, the trigger element can be designed as a panic bar assembly. In this case, the actuating element is designed as a panic bar. The trigger element can be designed as a fitting assembly. In this case the actuating element is z. B. designed as a door handle.

According to the invention, the door lock control and the trigger element are connected to a first bus system. In the following, a connection to a bus system is understood to mean a direct connection, so that a component connected to the bus system is to be viewed as a participant in the bus system with its own bus address. The door lock control and the trigger element are connected to one another via the first bus system.

The trigger element can directly control the locking mechanism for unlocking. Alternatively and particularly preferably, the trigger element causes the locking mechanism to be activated for unlocking. Initiating a control in particular involves sending a message, e.g. B. via the first bus system, which contains information and / or a command that causes the direct or indirect recipient of the message to carry out the control. The sender of the message initiates the control. Thus, causing a control is understood to mean an indirect control. So can e.g. B. the trigger element sends a message via the first bus system to the door locking control, whereupon the door locking control controls the locking mechanism for unlocking. The trigger element can, in particular, cause the locking mechanism to be unlocked with a time delay.

It can be provided that the actuation of the actuating element can be carried out in such a way that the actuating element can be moved from a starting position into an actuating position. The actuating element is therefore mechanically movable. The actuation signal is preferably generated in the actuation position. This can do that Actuating element gives the user feedback about the actuation in a simple way.

Furthermore, it is conceivable that the actuating element can always be moved from the actuating position to the starting position after actuation without manual action, preferably by a restoring means. The actuating element can be z. B. can be moved into the starting position after the reset means has been activated or immediately after the end of the manual operation. The restoring means can be a spring. According to the invention, the actuation element is always actuated in a mechanically non-locking manner. The actuating element can remain in the starting position during operation or can be moved into the starting position immediately after the end of the manual operation. This ensures that the actuating element can be actuated again even without manual return of the actuating element. The renewed actuation of the actuating element can only cause the door lock to be unlocked, provided that the door lock is not already in the unlocked state. If the door lock is already in the unlocked state and the actuating element is actuated, the locking mechanism in particular is not activated. The door lock remains in the unlocked state.

The actuating element preferably has an illuminating area. The illuminating area is preferably provided centrally in the actuating element. With the help of the illuminating area, light of one color, in particular red light, is always emitted. A light source, which is arranged behind the actuator, can shine through the illumination area.

It can be provided that a first program code is stored in the electronic device, the first program code preventing the locking mechanism from being able to be controlled for locking without the existence of the cancellation condition as a result of the generation of the actuation signal. The aim according to the invention can hereby be achieved particularly easily. In particular, the first program code is stored in a first digital processing means of the electronic device. A second program code can be stored redundantly in a second processing means of the electronic device. As a result of the generation of the actuation signal, the first program code and the second program code can prevent the locking mechanism from being controlled for locking without the existence of the cancellation condition. This achieves one-fault security.

The first and/or the second processing means can each comprise a processor. The first and/or the second processing means can e.g. B. each as Microprocessors or microcontrollers can be designed. The first and/or the second processing means can each comprise a non-volatile memory.

The electronic device can, for. B. located in the trigger element, especially in the emergency button. However, door locking, particularly in the door locking control, particularly preferably includes the electronic device. As a result of the actuation signal, the door locking control thereby prevents the locking mechanism from being controlled for locking without the existence of a cancellation condition. This prevents locking in the event of danger where the safety-relevant control of the locking mechanism is carried out.

The door lock controller may include the first and second digital processing means. The first and second processing means serve to independently control the locking mechanism. This achieves redundancy.

The triggering element, in particular the emergency button, can comprise an electronic unit. The electronic unit serves as a trigger element control. The electronic unit can comprise a first and a second digital trigger element processing unit, in particular a first and a second emergency button processing unit. The first and/or the second trigger element processing unit may each comprise a processor. The first and/or the second trigger element processing unit can be designed as a microprocessor or microcontroller. The first and second trigger element processing units may each include non-volatile memory. In addition, the electronic unit can include a third digital trigger element processing unit.

The first and second trigger element processing units can each independently detect an actuation signal. Here, the first trigger element processing unit detects a first actuation signal and the second trigger element processing unit detects a second actuation signal. The first and second trigger element processing units can then independently trigger the activation of the door locking mechanism for unlocking via the first bus system. In particular, at least one message in which the first and/or the second trigger element processing unit informs about the presence of the first or second actuation signal is sent to the door lock control via the first bus system. In particular, the first trigger element processing unit informs the first processing means and the second trigger element processing unit informs the second processing means. As a result, both the first and the second processing means in particular control the locking mechanism for unlocking, i.e. switch off the electrical power supply.

A sign-of-life signal from the first and second trigger element processing units is preferably sent regularly to the door lock controller. The first and second trigger element processing units in particular each emit their own sign of life signal. The sign of life signals can be contained in a message. The first processing means checks the sign of life of the first trigger element processing unit and the second processing means checks the sign of life of the second trigger element processing unit. If one of the sign-of-life signals fails once or several times, the locking mechanism is activated for unlocking by the first and second processing means. Here, one processing agent can inform the other processing agent about the absence of a sign of life.

According to the invention, the trigger element electronically stores that an actuation signal, in particular the first and the second actuation signal, has been generated until the cancellation condition is met. According to the invention, the trigger element electronically stores in the first trigger element processing unit and redundantly in the second trigger element processing unit that an actuation signal has been generated. The storage can take place in the non-volatile memories of the first and second trigger element processing units. In particular, the first trigger element processing unit stores that the first actuation signal has been generated and the second trigger element processing unit stores that the second actuation signal has been generated. This ensures that the safety system does not forget to activate the actuating element.

The door lock control can electronically store that an actuation signal has been generated until the cancellation condition is met. In particular, the door lock controller electronically stores in the first processing means and redundantly in the second processing means that an actuation signal has been generated. The storage can take place in the non-volatile memories of the first and second processing means.

Preferably, the fact that an actuation signal has been generated is stored both in the triggering element and in the door locking control.

In order to achieve a particularly high level of security, according to the invention, the trigger element repeatedly sends a signal to the door lock control that an actuation signal has previously been generated until the cancellation condition is met. The signal is preferably always sent together with a sign of life signal until the cancellation condition is met. The first trigger element processing unit can use the first processing means repeatedly until the Termination condition over that the actuation signal has been generated and the second trigger element processing unit can accordingly inform the second processing means. The information may be included in a message sent over the first bus system.

It may be that the first trigger element processing unit always receives the safety-relevant message, e.g. B. sends the message about the presence of an actuation signal, the signs of life or the signal that the actuation signal has previously been generated to the door lock control. The message includes the information of the first and second trigger element processing units.

It can be provided that the electronic device comprises an electronic detection, wherein the electronic detection can be converted into an actuation state as a result of the actuation signal. When the cancellation condition is reached, the electronic determination can be transferred to an initial state. In the actuation state, the electronic detection prevents the locking mechanism from being activated for locking. In the initial state, the electronic detection allows the locking mechanism to be activated for locking. When the cancellation condition is reached, the electronic determination is transferred to the initial state. The electronic detection prevents locking after the actuation signal has been generated in a particularly safe and simple manner.

The electronic determination can include a variable in addition to the first program code. The first program code includes the variable or has access to the variable. In an initial state of the electronic determination, the variable is set to an initial value. In the actuation state, the variable is set to an actuation value that prevents the door lock from locking. The variable can be binary. If the cancellation condition is reached, the value of the variable is set to the initial value. The first program code detects the value of the variable and allows locking of the door lock if the value of the variable equals the initial value and prevents locking of the door lock if the value of the variable equals the actuation value. The variable is stored in the non-volatile memory of the first processing means. The second program code handles the variable that is stored redundantly in the non-volatile memory of the second processing means accordingly.

The variable may be stored in the first and second trigger element processing units. The variable can be repeatedly transmitted from the trigger element to the door lock control.

If the variables that the first and second trigger element processing units transmit to the door locking control do not match, then in particular activation of the locking mechanism for locking is not permitted. If the variables that the first and second processing means have stored do not match, then in particular the locking mechanism for locking is not permitted to be activated. For this purpose, the first and second processing means communicate with one another.

Preferably, it can be provided that a number of door locking controls and a number of triggering elements are connected to one another via the first bus system and the number of door locking controls are assigned to the number of triggering elements in such a way that when one of the triggering elements is actuated, only the at least one door locking control that corresponds to the actuated trigger element is assigned, controls the respective door locking mechanism for unlocking. The assignment provides for selective unlocking of the door locks. When one of the triggering elements that are connected to the first bus system is actuated, not all door locking controls that are connected to the first bus system are caused to activate the respective door locking mechanism for unlocking, but only those door locking controls that have previously been assigned to the actuated triggering element are. The other door locking controls that have not been assigned to the actuated trigger element do not activate the respective door locking mechanism for unlocking. This makes it possible to arrange the door locks that are connected to the first bus system on different doors. If the trigger element is actuated, z. B. only allow the door on which the trigger element is arranged to be opened. The other doors remain locked. If the actuation signal is generated on a triggering element of such a security system, only the at least one door locking control that is assigned to the actuated triggering element is electronically prevented from being able to control the corresponding locking mechanism for locking until the cancellation condition is met. However, the door locking controls of the first bus system that are not assigned to the actuated trigger element remain lockable.

A cancellation signal can be used to achieve the cancellation condition, the cancellation signal being able to be generated by a cancellation action carried out directly on the triggering element. This ensures that the operator goes to the trigger element and makes sure on site that there is no longer any danger. The cancellation action can be carried out at least by touching the trigger element or by near-field communication.

The cancellation action, which is carried out directly on the triggering element, can be generated by actuating the actuating element. As a result, the actuating element already provided for releasing the escape route is conveniently used. This means that a further element on the triggering element can be dispensed with and it can be achieved to a particular extent that the operator goes to the triggering element.

It may be that the cancellation condition can be achieved without a rotational movement of the actuating element. The cancellation action on the trigger element can take place without rotating the actuating element. In particular, it is conceivable that the actuating element can only be moved in translation. In particular, the actuating element can only be moved between the starting position and the actuating position.

It is conceivable that the cancellation signal corresponds to the actuation signal. Thus, the same action that is used to generate the actuation signal to unlock the door lock can also serve as a cancellation action.

In order for the electronic device to recognize that the actuation of the actuating element is carried out to achieve the cancellation condition and not to generate the actuation signal to release the escape route, the electronic device must have further information.

It may be that the security system includes an authentication device assigned to the trigger element or is in communication connection with the authentication device assigned to the trigger element. Communication can be wired or wireless.

Authentication at the authentication device can be carried out, for example, by entering a code, wireless or wired transmission of a code, recognizing a key by turning it, recognizing personal features such as a fingerprint or iris. The authentication device can be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader. The authentication device can be assigned to one or more trigger elements. Preferably, the authentication device is assigned to only one trigger element.

After successful authentication, the electronic device receives a positive identification signal via authentication at the authentication device.

It is conceivable that the authentication device, if there is no danger, serves to trigger the door lock to be unlocked for an authorized person.

Here, a control device of the security system can receive a positive authentication signal from the authentication device and cause the door lock to be unlocked.

To achieve the cancellation condition, authentication at the authentication device can take place, in particular a positive identification signal is received by the trigger element. To achieve the cancellation condition, it may be that both the cancellation signal has been generated and the authentication has taken place at the authentication device, in particular the reception of the positive identification signal.

It may be that in order to achieve the cancellation condition, a predetermined time sequence must be adhered to when generating the cancellation signal and the authentication, in particular the reception of the positive identification signal. Additionally or alternatively, in order to achieve the cancellation condition, a predetermined sequence must be adhered to in the generation of the cancellation signal and the authentication, in particular the reception of the positive identification signal. The generation of the cancellation signal and the authentication that has taken place, in particular the generation of the cancellation signal and the authentication that has taken place, in which the time sequence and/or the order is adhered to, may be sufficient to achieve the cancellation condition and thus at least allow the door lock to be locked.

In particular, the cancellation signal and the authentication, in particular the reception of the positive identification signal, must be present at least partially at the same time. The authentication, in particular the reception of the positive identification signal, must preferably last longer than the generation of the cancellation signal.

For example, in order to achieve the cancellation condition, it may be sufficient that the actuating element is first actuated and while the actuating element remains actuated, a key is turned in the key switch. The key remains turned while the actuator is released.

In another example to achieve the cancellation condition, it may be sufficient that the key is first turned in the key switch and then the actuating element is actuated while the key remains turned. The key remains turned while the actuator is released.

It may be that the cancellation signal, which is generated by an action taken directly on the trigger element, is always necessary to achieve the cancellation condition. Alternatively, it may be that the cancellation signal, which is generated by an action taken directly on the trigger element, only is then necessary to achieve the cancellation condition if the door was opened after the actuation signal was generated. For this purpose, the security system, in particular the electronic device, can have a signal from at least one door condition monitoring device. A door can also be understood as a door leaf.

The door condition monitoring device is used to detect whether the door is opened or closed. The door condition monitoring device can be, for. B. be a door contact, a sensor, a switch and/or a door lock with a detectable latch and/or latch position. The security system may include the door condition monitoring device or be connectable to the door condition monitoring device.

Particularly preferably, at least a first door condition monitoring device and a second door condition monitoring device are provided for a door, in particular for a door leaf, and/or a door lock. In this way, one-fault security can be achieved. The first door condition monitoring device preferably differs in its design from the second door condition monitoring device. This increases error security.

1. a.) seit dem Erzeugen des Betätigungssignals kein Signal der Türzustandsüberwachungsvorrichtung über das Öffnen des Türblatts innerhalb des vorbestimmten Zeitintervalls in dem Sicherheitssystem, insbesondere von der Elektronikvorrichtung, empfangen worden ist und
2. b.) das vorbestimmte Zeitintervall verstrichen ist.

In particular, if the door, in particular the door leaf, remains closed after the actuation signal has been generated, the security system has at least one further option available to achieve the cancellation condition. For example, in this case it may be sufficient for a predetermined time interval, e.g. B. 60 s has passed since the actuation signal was generated. In the expression "since the operation signal was generated", a time to notify the electronic device of the operation signal can be neglected. The predetermined time interval can be stored in the electronic device. It may therefore be sufficient to achieve the cancellation condition if

1. a.) since the actuation signal was generated, no signal from the door condition monitoring device about the opening of the door leaf has been received in the security system, in particular from the electronic device, within the predetermined time interval and
2. b.) the predetermined time interval has elapsed.

The electronic device can include a timer to determine the time interval.

The predetermined time interval can be predetermined and stored in the electronic device in such a way that it cannot be changed. Alternatively, an operator can do the predetermined

Set the time interval using a parameterization program. A minimum time can be specified here.

1. a.) weder ein Signal von der ersten Türzustandsüberwachungsvorrichtung noch von der zweiten Türzustandsüberwachungsvorrichtung, die für ein Türblatt und/oder eine Türverriegelung vorgesehen sind, über das Öffnen des Türblatts seit dem Erzeugen des Betätigungssignals innerhalb des vorbestimmten Zeitintervalls in dem Sicherheitssystem, insbesondere von der Elektronikvorrichtung, empfangen worden ist.

If the first and second door condition monitoring devices are provided, condition a.) can be different:

1. a.) neither a signal from the first door condition monitoring device nor from the second door condition monitoring device, which are provided for a door leaf and / or a door lock, about the opening of the door leaf since the actuation signal was generated within the predetermined time interval in the security system, in particular from the electronic device , has been received.

It can be provided that the security system includes a central escape route control, with a cancellation signal being able to be generated at the central escape route control. The cancellation signal or a message about the cancellation signal can be sent to the electronic device via at least one bus system, in particular at least via a second bus system. The cancellation signal can be used to achieve the cancellation condition. In particular, an operator must be authenticated at the central escape route control in order to generate the cancellation signal. For this purpose, the escape route control can include an identification device. Authentication at the central escape route control can be done by entering a code, wireless or wired transmission of a code, recognizing a key by turning it, and recognizing personal characteristics such as a fingerprint or iris. For example, the central escape route control can include a keypad, a key switch, a fingerprint sensor or a reader as an identification device.

The identification device preferably has at least one further function. The central escape route security can include a central emergency button. If the central emergency button is pressed, the locking mechanism is activated to unlock. The process by which the locking mechanism is activated for unlocking as a result of pressing the central emergency button is one-fault-safe and is therefore suitable for emergency situations. If the central emergency button has been pressed, the electronic device is preferably electronically prevented from being able to control the locking mechanism of the door lock for locking until a corresponding signal has been generated by the identification device via authentication and the signal or a message about the signal from the Electronic device has been received.

In particular, if automatic relocking after the predetermined time interval has elapsed with the door remaining closed is not felt to be secure enough, it is conceivable that in addition to conditions a) and b), the following further condition is provided for achieving the cancellation condition:
c.) the cancellation signal is generated at the central escape route control.

Conditions a.) to c.) may be sufficient to achieve the cancellation condition.

It is preferably conceivable that a permissible cancellation signal, which contributes to achieving the cancellation condition, can only be generated after the predetermined time interval has elapsed. However, authentication at the central escape route control within the predetermined time interval does not lead to a permissible cancellation signal that contributes to achieving the cancellation condition. It may be that the elapse of the predetermined time interval can be visually displayed on the central escape route control. For this purpose, the central escape route control can include lighting means with which, in particular, a delay in unlocking as a result of the actuation of the trigger element can be represented. The central escape route control can include an emergency module. The emergency module can include the lighting devices in addition to the central emergency button and the identification device.

If the door lock has been unlocked due to a fire alarm signal and the door has subsequently not been opened, which can be detected in particular by both the first and the second door status monitoring device, then after the end of the fire alarm signal the door can also be locked by authentication at the identification device Door locking may be triggered. Only if the fire alarm signal has already ended will authentication at the identification device lead to a lock again. To do this, the door lock control receives a signal about authentication. It may be that the possibility of causing the door lock to lock after the end of the fire alarm signal through authentication on the identification device can be visually displayed on the central escape route control. In particular, the same light sources are used for this purpose.

It is conceivable that the triggering element includes lighting devices on site. The on-site lighting means of the triggering element can serve to visually show whether the presence of a fire alarm signal or actuation of the actuating element electronically prevents the locking mechanism of the door lock from being controllable for locking without the presence of a cancellation condition. Preferred The lamps can show in different ways whether relocking is prevented by the presence of a fire alarm signal or by actuation of the actuating element.

Furthermore, it is conceivable that the lighting means of the trigger element can be displayed on site and that relocking is prevented by pressing the central emergency button. In particular, the lighting means of the triggering element can be used to display in different ways on site whether an actuation of the central emergency button or an actuation of the actuating element took place on site. This allows the operator to find out whether relocking can be achieved by means of a cancellation action on site or by operating the identification device.

In particular, a signal about opening the door after the predetermined time interval has elapsed or after the fire alarm signal has ended does not prevent the cancellation condition from being reached.

It may be that conditions a.) and b.) or a.) to c.) are not sufficient to achieve the cancellation condition and thus allow the door lock to be locked. Rather, it may be that the cancellation condition is only achieved if it is also stored in the security system, in particular electronically, that the existence of conditions a.) and b.) is permissible to achieve the cancellation condition and/or it is stored in the security system that Conditions a.) to c.) are permissible to achieve the cancellation condition.

Depositing the admissibility of can be done by an operator. The admissibility can be stored using a parameterization program. In the parameterization program, the operator can manually set whether the conditions a.) and b.) and/or the conditions a.) to c.) are permissible for achieving the cancellation condition. It may be that the deposit may only be made when the security system is put into operation.

If the safety system includes several triggering elements, it can be stored individually for each triggering element or for groups of triggering elements whether the presence of conditions a.) and b) and/or the presence of conditions a.) to c.) is permissible to achieve the cancellation condition is. The group of triggering elements can in particular include the triggering elements that can be assigned to a door or a door lock. The admissibility is preferably stored electronically in the respective trigger elements.

If the security system includes several door locks, it can be stored individually for each door lock or for groups of door locks The existence of conditions a.) and b) and/or the existence of conditions a.) to c.) is permissible to achieve the cancellation condition. The group of door locks can in particular include the door locks that can be assigned to a door or a door leaf. The admissibility is preferably stored electronically in the respective door locks.

Before the locking mechanism is activated for locking, the electronic device checks whether the conditions a.) and b.) and/or the conditions a.) to c.) have been stored as permissible. If the conditions a.) and b) and/or the conditions a.) to c.) have not been stored as permissible, the locking will not be permitted or the locking mechanism will not be activated for locking. Therefore, in order to achieve the cancellation condition, it may be sufficient
the conditions a.) and b.) are met and it is deposited that the existence of the conditions a.) and b.) is permissible to achieve the cancellation condition.

Alternatively, in order to achieve the cancellation condition, it may be sufficient that conditions a.) to c.) are met and it is deposited that the existence of conditions a.) to c.) is permissible to achieve the cancellation condition.

It may be that the security system, for example, B. includes a first triggering element, which is always on site, i.e. H. by generating the override signal and the authentication, the override condition must be achieved regardless of whether the door has been opened since the actuation signal was generated or not. Any other approach is not permitted. In the case of a second triggering element of the security system, if the door has remained closed since the actuation signal was generated, the cancellation condition can be achieved by expiry of the predetermined time interval and by the fact that the permissibility for this has been stored. In the case of a third triggering element of the security system and the case that the door has remained closed since the actuation signal was generated, the elapse of the predetermined time interval is not sufficient to reach the cancellation condition. Rather, the cancellation signal must also have been generated at the central escape route control after the predetermined time interval in order to achieve the cancellation condition, and this possibility of achieving the cancellation condition must have been stored as permissible.

If the conditions for achieving the cancellation condition are stored for the triggering element and/or in the triggering element, it may be that the electronic device asks the triggering element in which the actuation signal was generated before activating the locking mechanism for locking. whether the fulfilled conditions present in the electronic device are stored in the trigger element as permissible for achieving the cancellation condition.

The security system can include several central escape route controls. The central escape route controls can each include an identification device.

In this case, it can be stored in the security system at which identification device a cancellation signal that is permissible to fulfill condition c.) can be generated. This can be stored individually for several trigger elements and/or several door locks.

The trigger element can be brought into a deactivated state. In the deactivated state, the locking mechanism for unlocking the door lock is not activated as a result of an actuation of the actuating element. The trigger element can be brought from the deactivated state to the activated state. In the activated state, the locking mechanism is activated to unlock the door lock as a result of an actuation of the actuating element. The deactivated state can e.g. B. be set at night in a department store or in a closed ward of a psychiatric hospital. The triggering element can be brought into the deactivated and/or activated state, in particular by the central escape route control.

It is preferably provided that in the activated state of the triggering element, a previous actuation of the triggering element in the deactivated state has no effect on the activation of the locking mechanism. This prevents the door lock from being unlocked immediately during or after the transfer to the activated state, even though the actuating element was actuated hours or days before when the triggering element was in the deactivated state. This is particularly advantageous for the present non-latching trigger element.

The security system is preferably designed to display an actuation of the actuating element in the deactivated state of the triggering element at a control center. This allows an operator to recognize a danger to the user and act accordingly. The operator can transfer the trigger element to the activated state or unlock the door lock. In particular, the control center is the central escape route control or the guarding device.

The functioning of the central escape route control and/or the connection of the central escape route control to the control device is monitored in particular when the trigger element is deactivated. If an error occurs, the trigger element is transferred to the activated state. This can increase security on site if activation or unlocking can no longer be carried out via the control center.

The emergency button can have an at least partially transparent covering means. When the actuating element is actuated, the covering means can be moved from an initial position into an actuating position. The covering means can cover the actuating element, so that the actuating element is actuated via the covering means. The covering means serves to create a mental barrier to the actuation of the trigger element and thus to counteract improper actuation. The mental barrier arises because the user believes that he has to destroy or remove the covering means before the user can activate the trigger element.

It can be provided that the covering means is arranged to be non-removable. Because the covering means is arranged to be non-removable, the covering means cannot be removed. This means that the emergency button remains as originally designed and built.

In particular, the covering means is designed to be transparent in such a way that the actuating element can be perceived by the user through the covering means. The actuating element is preferably actuated indirectly via the covering means. “Irremovable” means in particular that the covering means cannot be removed or opened to generate the cancellation signal.

The irremovable arrangement in the trigger element is made possible in particular by the fact that the operator does not have to rotate the actuating element in order to achieve the cancellation condition. Thus, the irremovable arrangement can be made possible, in particular by electronically preventing the locking mechanism for locking the door lock from being controllable without the existence of a cancellation condition.

The irremovable arrangement of the covering means can be designed in various ways. For example, the covering means can be stored in a non-removable manner. The covering means can therefore be guided in particular in a movable manner in the emergency button. Additionally or alternatively, the covering means can be made of an elastic material. For example, the covering means can comprise an elastic film which is stretched over the actuating element. In this way, the covering means can contribute to the waterproof design of the emergency button. Additionally or alternatively, the covering means can be firmly connected to the actuating element. The connection is designed in particular to be form-fitting or cohesive. This makes it possible to prevent misuse, with the actuating element in particular only being movable together with the cover element.

The security system according to the invention is particularly suitable for use in a building in which people with an impaired mental state live, in particular a psychiatric ward, a dementia ward or the like. Especially through The possibility of deactivation, monitoring and, if necessary, activation can thereby increase the safety of the occupants.

The object of the invention is also achieved by a method for unlocking at least one door lock, in particular for securing escape routes. In the method, a triggering element, in particular an emergency button, comprises a manually operable actuating element. By actuating the actuating element, an actuation signal for unlocking the door lock is generated. As a result of the actuation signal, an electronic device electronically prevents a locking mechanism from being activated for locking without the existence of a cancellation condition.

Fig. 1

eine Draufsicht auf ein erfindungsgemäßes Sicherheitssystem mit einem Nottaster als Auslöseelement in einem betriebsfertigen Zustand an einer Tür gemäß einem ersten Ausführungsbeispiel,

Fig. 2

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 1,

Fig. 3

ein zu Fig. 2 modifiziertes Funktionsschema eines erfindungsgemäßen Sicherheitssystems gemäß einem zweiten Ausführungsbeispiel,

Fig. 4

eine Draufsicht auf ein erfindungsgemäßes Sicherheitssystem mit mehreren Nottastern in einem betriebsfertigen Zustand an einer Tür gemäß einem dritten Ausführungsbeispiel,

Fig. 5

ein Funktionsschema des erfindungsgemäßen Sicherheitssystems aus Figur 4,

Fig. 6

ein zu Fig. 5 modifiziertes Funktionsschema eines erfindungsgemäßen Sicherheitssystems gemäß einem vierten Ausführungsbeispiel,

Fig. 7

eine Draufsicht auf ein erfindungsgemäßes Sicherheitssystem in einem betriebsfertigen Zustand gemäß einem fünften Ausführungsbeispiel,

Fig. 8

ein Funktionsschema einer zentralen Fluchtwegsteuerung des Sicherheitssystems aus Figur 7,

Fig. 9

ein Funktionsschema des Sicherheitssystems aus Figur 7,

Fig. 10

ein Funktionsschema eines erfindungsgemäßen Sicherheitssystems gemäß einem sechsten Ausführungsbeispiel,

Fig. 11

ein Ausführungsbeispiel für einen erfindungsgemäßen Nottaster in einer Seitenansicht,

Fig. 12

der Nottaster aus Figur 11 in einem Längsschnitt,

Fig. 13

der Nottaster aus Figur 11 in einer Explosionsdarstellung,

Fig. 14

ein Betätigungselement des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 15

eine weitere perspektivische Ansicht des Betätigungselements aus Figur 14,

Fig. 16

ein Lichtleiter des Nottasters aus Figur 11 in einer perspektivischen Ansicht,

Fig. 17

eine weitere perspektivische Ansicht des Lichtleiters aus Figur 16 und

Fig. 18a-d

eine schematische Darstellung eines Ablaufs einer Funktionsfreigabe in einem erfindungsgemäßen Sicherheitssystem.

The invention is explained in more detail below using exemplary embodiments. Technical features with the same function are provided with identical reference numbers in the figures. Show it:

Fig. 1

a top view of a security system according to the invention with an emergency button as a triggering element in a ready-to-use state on a door according to a first exemplary embodiment,

Fig. 2

a functional diagram of the security system according to the invention Figure 1 ,

Fig. 3

one to Fig. 2 modified functional diagram of a security system according to the invention according to a second exemplary embodiment,

Fig. 4

a top view of a security system according to the invention with several emergency buttons in an operational state on a door according to a third exemplary embodiment,

Fig. 5

a functional diagram of the security system according to the invention Figure 4 ,

Fig. 6

one to Fig. 5 modified functional diagram of a security system according to the invention according to a fourth exemplary embodiment,

Fig. 7

a top view of a security system according to the invention in a ready-to-use state according to a fifth exemplary embodiment,

Fig. 8

a functional diagram of a central escape route control of the security system Figure 7 ,

Fig. 9

a functional diagram of the security system Figure 7 ,

Fig. 10

a functional diagram of a security system according to the invention according to a sixth exemplary embodiment,

Fig. 11

an exemplary embodiment of an emergency button according to the invention in a side view,

Fig. 12

the emergency button off Figure 11 in a longitudinal section,

Fig. 13

the emergency button off Figure 11 in an exploded view,

Fig. 14

an actuating element of the emergency button Figure 11 in a perspective view,

Fig. 15

another perspective view of the actuating element Figure 14 ,

Fig. 16

a light guide from the emergency button Figure 11 in a perspective view,

Fig. 17

Another perspective view of the light guide Figure 16 and

Fig. 18a-d

a schematic representation of a function release process in a security system according to the invention.

A distinction is made below between a user and an operator. A user can be any person who uses the security system 1. A user can e.g. B. be a guest who wants to escape through the door secured by the security system 1. An operator is used to operate the security system 1. The operator can e.g. B. authenticate to the security system. The operator can e.g. B. Be a member of a security guard. The operator can particularly preferably adjust the security system 1.

In the following, the term “actuation of the emergency button” is understood to mean “actuation of the actuation element of the emergency button”.

In the following, a connection to a bus system is understood to mean a direct connection, so that a component connected to the bus system is to be viewed as a participant in the bus system with its own bus address.

Initiating a control is understood in particular to mean sending a message via a first and/or second bus system, which contains information and/or a command that causes the direct or indirect recipient of the message to carry out the control. The sender of the message initiates the control. Thus, causing a control is understood to mean an indirect control. The message can correspond in particular to a bus telegram.

As a result of an activity means that an activity is causal, regardless of whether the activity continues or not.

In the Figures 1 and 2 A first exemplary embodiment of a security system 1 according to the invention for a door 2 is shown. Door 2 is not part of the Security system 1 according to the invention. The security system 1 according to the invention comprises a door lock 200 and an emergency button 10. The emergency button 10 comprises a control device 100. A key button 500 is assigned to the emergency button 10. The security system 1 can include the key switch 500. Alternatively, the security system 1, in particular the emergency button 10, can have a key button input via which a connection to the key button 500 can be established.

As in Figure 2 shown, the emergency button 10 and the door lock 200 are connected to one another via a first bus system 400. The key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402. The connection 402 is shown as a dashed arrow to show that signals about a position of a key inserted into the key switch 500 are fed to an electronics unit 24 of the emergency button 10. As an alternative to the connection 402, the key switch 500 can also be connected to the first bus system 400 (not shown). This alternative applies to all exemplary embodiments.

The emergency button 10 is designed to send a message via the first bus system 400 to the door lock 200 as a result of an actuation of the emergency button 10 and thereby cause the door lock to be unlocked. The message as a result of pressing the emergency button 10 can be delayed.

The security system 1 according to the invention, in particular the emergency button 10, can also be connectable to a fire detector (not shown). If there is a fire alarm signal, the security system 1 also causes the door lock 200 to be unlocked.

The control device 100 does not carry out security-relevant functions: The control device 100 can trigger the door lock 200 to be unlocked for authorized persons. For this purpose, the control device 100 can be connectable to an access control system, not shown. The access control system can in particular be connected or connectable to the first bus system 400. The control device 100 receives a positive authentication signal from the access control system, in particular via the bus system 400, about the authentication that has taken place. The control device 100 then causes the door lock 200 to be unlocked. The access control system can, for. B. include a reader, a key switch, a keyboard for entering a code or a locking cylinder of a mechanical lock, in particular a self-locking panic lock, or be designed in such a way.

The control device 100 can also cause the door lock 200 to be unlocked automatically at a predetermined time or after a predetermined period of time, e.g. B. if the door should be unlocked in a time window per day.

If there is no danger, i.e. If the emergency button 10 has not been pressed nor is there a fire alarm signal, the control device 100 can automatically initiate relocking after a predetermined period of time has elapsed. In this case, the control device 100 can receive an access signal from the access control system in addition to the positive authentication signal and/or measure the length of the positive authentication signal. The control device 100 can adjust the length of the predetermined period of time using the access signal or based on the length of the authentication signal. For example, a person can B. hold an ID card in front of the reader for a long time or turn the key for a long time. This signals that the predetermined period of time should correspond to a long period of time previously stored in the control device 100. If the person holds the ID card briefly in front of the reader or the user briefly turns the key, it is signaled that the predetermined period of time should correspond to a short period of time previously stored in the control device 100.

A first door condition monitoring device 204 and a second door condition monitoring device 206 detect whether the door 2 is open or closed. The control device 100 at least indirectly receives a signal from the door status monitoring devices 204, 206. If the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 can immediately and automatically cause the door lock 200 to be relocked as soon as the control device 100 with the help of the door status monitoring devices 204, 206 the information is available that the door was first opened and now closed again.

The emergency button 10 includes an acoustic alarm 23 and lighting means 41 (see also Figure 13 ). The lamps 41 serve to display the locking or unlocking state of the door lock 200 and thus serve as a display device. The lamps 41 serve to visually represent a time-delayed unlocking of the door lock 200 as a result of an actuation of the emergency button 10 and thus serve as a display device. The lamps 41 are used to visually display an alarm state after receiving the fire alarm signal or as a result of an actuation of the emergency button 10 and thus serve as a display. The lamps 41 serve to provide a visual representation if a previously described relocking fails.

The control device 100 controls the acoustic alarm generator 23 to issue an acoustic alarm when there is a danger, ie when a Fire alarm signal was received or emergency button 10 was pressed. The control device 100 controls the acoustic alarm generator 23 to issue an acoustic alarm if relocking fails.

The control device 100 controls the lighting means 41 to display the locking or unlocking state of the door lock 200, to visually display a time-delayed unlocking and/or to issue a visual alarm when a fire alarm signal is received or the emergency button 10 has been pressed or when a relocking fails.

When the door lock 200 is in the unlocked state, the control device 100 can monitor the opening of the door using the door condition monitoring devices 204, 206. The control device 100 can, if desired, issue an audible alarm if the door 2 has been opened during the unlocked state of the door lock 200, at least if there is no positive authentication signal. This means it can be monitored when someone opens the door, even if the door is unlocked.

The emergency button 10 can include at least one additional output. The control device 100 can use the output to control further components that can be connected to the security system 1 according to the invention, e.g. B. a room light.

The parameters for executing the mentioned functions of the control device 100 are stored in the control device 100. So are e.g. B. the predetermined time(s), the predetermined time period(s), parameters for the acoustic alarms, e.g. B. at what volume and at what frequency an acoustic alarm should be issued, and parameters for the various controls of the lamps 41 for the visual representation of the various states of the security system 1 mentioned above are stored in the control device 100. The parameters for the lamps can include flashing frequencies, colors to be emitted, color intensities and/or lighting patterns. For parameterization, the control device 100 can communicate with a mobile communication device via a radio module 64. Alternatively, the parameterization can be done with the help of a monitoring device 301 via a second bus system 401 (see. Figures 9 and 10 ). For the parameterization, a parameterization program is provided that runs on a communication device, e.g. B. a personal computer, a mobile phone and / or a tablet, can be executed. The operator can set the parameters using the parameterization program.

In Figure 2 the structure of the door lock 200 and the emergency button 10 is shown in more detail.

The emergency button 10 has a first emergency button processing unit 20, a second emergency button processing unit 21 and a third emergency button processing unit 22. The first, second and third emergency button processing units 20, 21, 22 are each designed as microprocessors or microcontrollers. The first and second emergency button processing units 20, 21 include a non-volatile memory. The third emergency button processing unit 22 includes a non-volatile memory and/or has access to a non-volatile memory. The first, second and third emergency button processing units 20, 21, 22 are collectively referred to as the electronics unit 24 of the emergency button 10.

The electronics unit 24 also serves as a control device 100. Here, the first emergency button processing unit 20 serves as a first processing unit 103 of the control device 100. The second emergency button processing unit 21 serves as a second processing unit 104 of the control device 100. The third emergency button processing unit 22 serves as a third processing unit 105 of the control device 100.

The first and second emergency button processing units 20, 21 are used to execute the safety-relevant functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 is used to carry out the non-safety-relevant functions. The safety-relevant functions include triggering unlocking in the event of danger. The non-security-relevant functions include the other functions listed above.

When the emergency button 10 is actuated, an actuating element 11 is moved from a starting position 11.1 to an actuating position 11.II, whereby a switch 63 is actuated (see also Figures 12 , 13 ). This generates a first and a second actuation signal. This opens a first and a second circuit (not shown). A signal about the opening of the first circuit is detected by the first emergency button processing unit 20. A signal about the opening of the second circuit is detected by the second emergency button processing unit 21. The actuation signal is understood to be the signal that is generated by the user by actuating the actuating element in order to unlock the door lock and clear the escape route. The expression "as a result of an actuation of the emergency button 10" is used in particular in the sense of "after generation of the actuation signal", that is, regardless of whether the actuation element 11 is still in the actuation position 11.11 or has already returned to the starting position 11.I.

The first emergency button processing unit 20 and the second emergency button processing unit 21 each independently cause the door lock 200 to be unlocked after detecting the actuation signal via the first bus system 400. The second Emergency button processing unit 21 thus acts redundantly to the first emergency button processing unit 20.

The door lock 200 includes a door lock controller 201. The door lock controller 201 includes a first processing means 202 and a second processing means 203. The first and second processing means 202, 203 are collectively referred to as an electronic device 207. The first and second processing means 202, 203 are each designed as a microprocessor or microcontroller. The first and second processing means 202, 203 can each control a locking mechanism 205 of the door lock 200 for unlocking. In case of danger, i.e. H. As a result of the operation of the emergency button 10 or after receiving a fire alarm signal, both the first processing means 202 and the second processing means 203 control the locking mechanism 205 for unlocking. The second processing means 203 is therefore redundant to the first processing means 202. This structure achieves one-fault security.

The locking mechanism 205 is designed electromechanically. The locking mechanism 205 includes e.g. B. an electromechanically actuated latch element (not shown) which locks a door latch of the door 2 in the locked state of the door lock 200 and releases it in the unlocked state of the door lock 200. When the locking mechanism 205 is activated for locking, the first and second processing means 202, 203 switch on an electrical current for the locking mechanism 205. When the locking mechanism 205 is activated for unlocking, the first and second processing means 202, 203 switch off an electrical current for the locking mechanism 205. A separate switch is assigned to each processing means 202, 203 for this purpose. Opening just one of the switches will turn off the power to the locking mechanism 205.

The door lock controller 201 receives feedback about the state of the locking mechanism 205 via a locking mechanism state monitoring device, not shown. In particular, a position of an armature of a coil of the locking mechanism 205 is monitored. If the state of the door lock 205 does not correspond to the target state, an alarm is issued. Additionally or alternatively, in this case a new attempt can be made to achieve the target state.

As a result of an actuation of the emergency button 10, the first and second emergency button processing units 20, 21 communicate with the first and second processing means 202, 203 via the first bus system 400 with the aid of a message. The message can Contains notification of actuation or a control command for unlocking. Here, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 informs the second processing means 203. Through the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 to activate the locking mechanism 205 to unlock, i.e. switch off the electrical power.

The presence of a fire alarm signal is detected by the first and second emergency button processing units 20, 21. The first and second emergency button processing units 20, 21 then cause the locking mechanism 205 to be activated by the door lock control 201 for unlocking by sending a message to the first and second processing means 202, 203. Here, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 informs the second processing means 203. Through the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 to activate the locking mechanism 205 to unlock, i.e. switch off the electrical power.

The actuation of the emergency button 10 or the presence of a fire alarm signal can be sent in a message from one of the two emergency button processing units 20, 21, with the first emergency button processing unit 20 writing a first part of the message and the second emergency button processing unit 21 writing a second part of the message. The first and second processing means 202, 203 are each responsible for at least part of the message. The emergency button processing units 20, 21, 22 and the first and second processing means 202, 203 can each receive messages via the first bus system 400. Here, the electronic unit 24 and the door lock control 201 can each be assigned a bus address.

The first and second emergency button processing units 20, 21 monitor each other. If an error is detected, the electronics unit 24, in particular the intact emergency button processing unit 20, 21, causes the first and second processing means 202, 203 to control the door locking mechanism 205 for unlocking. The first and second processing means 202, 203 monitor each other. If an error is detected, the locking mechanism 205 is activated for unlocking at least by the intact processing means 202, 203. Likewise, in the event of a fault in the bus system 400, the locking mechanism 205 is activated by the door lock control 201 for unlocking. For this and to check the first and second Emergency button processing unit 20, 21, a sign of life signal from the first and second emergency button processing units 20, 21 is regularly sent to the door lock control 201. If the sign of life signal does not appear, the locking mechanism 205 is activated for unlocking by the first and second processing means 202, 203. The first and second processing means 202, 203 communicate with one another when the door lock control 201 has received a message about the actuation of the emergency button 10 and/or the presence of a fire alarm signal. If only the first processing means 202 or the second processing means 203 determines that the emergency button 10 has been pressed or that a fire alarm signal is present, the determining processing means 202, 203 controls the door locking mechanism 205 for unlocking and initiates that the other processing means 202, 203 also does so Door locking mechanism 205 is activated for unlocking. An error and a malfunction always include a failure of the respective component. In the event of a power failure, the locking mechanism 205 automatically switches to the unlocked state. During the processes described in this section, the security system 1 also issues an acoustic and/or visual alarm, in particular by means of the control device 100.

Once the actuation signal has been generated, the door lock 200 is electronically prevented from being transferred to the locked state without the existence of a cancellation condition. This prevents the door from locking while a hazardous condition persists. For this purpose, an electronic detection is integrated into the electronic device 207. The electronic detection is converted into an actuation state as a result of the actuation of the actuating element 11, which serves to release the escape route. In the actuation state, activation of the door lock 200 for locking is prevented.

The electronic determination includes a first program code. The first program code includes a first variable or has access to a first variable. In an initial state of the electronic determination, the first variable is set to an initial value. In the actuation state, the first variable is set to an actuation value that prevents the door lock 200 from being activated for locking. The first variable can be binary. If the cancellation condition is reached, the electronic determination is returned to an initial state. For this purpose, the value of the first variable is set to the initial value. In the initial state of the electronic detection, activation of the door lock 200 for locking is permitted. The first program code detects the first value of the first variable and allows the door lock 200 to be locked if the value of the first variable corresponds to the initial value, and prevents the door lock 200 from locking if the value of the first variable corresponds to the actuation value.

The electronic determination is stored both in the first processing means 202 and redundantly in the second processing means 203. For this purpose, the first program code is stored in the first processing means 202. The first variable is stored in the non-volatile memory of the first processing means 202. A second program code with the same functionality as the first program code is stored in the second processing means 203. The first variable is stored redundantly in the non-volatile memory of the second processing means 203.

The first variable is additionally stored in the first emergency button processing unit 20 and in the second emergency button processing unit 21 in the non-volatile memories. As a result of the actuation of the emergency button 10, the first variable in the first and second emergency button processing units 20, 21 is transferred from the initial value to the actuation value. The changed value of the first variable is transmitted to the electronic device 207 via the bus system 400. Until a cancellation condition is present, the emergency button 10 repeatedly sends the actuation value of the first variable to the electronic device 207. The sending can take place at regular time intervals, in particular together with the sign of life signal.

At least if at least one of the door status monitoring devices 204, 206 has detected that the door 2 was opened after the emergency button 10 was pressed, a cancellation action on the emergency button 10 is necessary to achieve the cancellation condition.

The actuating element 11 is designed to be non-latching. The actuating element 11 is transferred from the starting position 11.1 to the actuating position 11.II during actuation (see Fig. Figure 11 ). Immediately after actuation, the actuating element 11 moves back into the starting position 11.1 by the force of a restoring means 12 designed as a spring (see Fig. Figure 12 , 13 ). The actuation of the actuating element 11 takes place translationally.

The cancellation action on the emergency button 10 is carried out by actuating the actuating element 11. This generates a cancellation signal that corresponds to the actuation signal. So that the control device 100 can recognize whether an actuation of the emergency button 10 serves to unlock the door lock 200 or whether there is a cancellation action, a further signal must be generated at the same time to achieve the cancellation condition. For this purpose, an operator authenticates himself. Authentication is carried out by inserting and turning a key in the key switch 500. The actuation of the actuating element 11 and the authentication must overlap in time. I.e. the The operator must keep the key turned while the actuating element 11 is in the actuating position 11.11. The actuating element 11 must return to the starting position 11.1 while the key is in the turned state. The course of action is sufficient to achieve the cancellation condition.

If the door condition monitoring devices 204, 206 have detected that the door 2 has remained constantly closed as a result of the actuation of the emergency button 10, the cancellation condition can be achieved in at least one further way, namely by the elapse of a predetermined time interval. So can e.g. B. after 60 seconds after the last generation of the actuation signal, the cancellation condition can be reached, provided that the door 2 has remained closed. In this case, authentication on the key switch 500 and a cancellation action on the emergency button 10 are not necessary.

The first and second door status monitoring devices 204, 206 are provided to detect with one-fault security that the door 2 has remained permanently closed as a result of the emergency button 10 being actuated. For this purpose, the door condition monitoring devices 204, 206 are preferably designed differently. The first door condition monitoring device 204 can, for. B. be designed as a door contact. The second door condition monitoring device 206 can, for. B. be designed as a trap contact. Alternatively, e.g. B. at least one of the door condition monitors is magnetic, e.g. B. as a reed switch, monitor the condition of the door 2. The door lock controller 201 receives a signal from the first and second door condition monitoring devices 204, 206, respectively, as to whether the door 2 is opened or closed. Only if a signal about the opening of the door has not been sent by either the first door condition monitoring device 204 or the second door condition monitoring device 206 during the predetermined time interval, the cancellation condition can be achieved by expiration of the predetermined time interval.

The door lock controller 201 includes a timer to measure the predetermined time interval. The door locking control 201 starts the timer as a result of the operation of the emergency button 10. If the door locking control 201 receives a signal from the first or second door status monitoring device 204, 206 during the predetermined time interval that the door has been opened, a cancellation action must be carried out on the emergency button 10. In this case, the lapse of the predetermined time interval is not sufficient. The length of the predetermined time interval is stored in the door lock control 201.

The door lock controller 201 checks whether the cancellation condition is permitted to be reached by elapse of the predetermined time interval before the Door lock control 201 controls the locking mechanism 205 for locking. When putting the security system 1 into operation, ie before the start of operation of the security system 1, an operator can specify whether an elapse of the predetermined time interval without opening the door 2 is permissible as a cancellation condition and thus leads to the door 2 being relocked. The deposit can be made in the emergency button 10. A check of admissibility, an elapse of the predetermined time interval and a lack of a signal from the first and second door condition monitoring devices 204, 206 about an opening of the door 2 is sufficient to achieve the cancellation condition.

The door lock control 201 communicates the open or closed state of the door via the bus 400 to the emergency button 10 and/or to the control device 100.

The electronic unit 24 includes a timer. A first delay period can be stored in the electronic unit 24. If the door lock 200 is to be unlocked with a time delay, the electronics unit 24 waits for the first delay period after the actuation signal has been generated before the first and second emergency button processing units 20, 21 communicate with the door lock control 201 via the first bus system 400 in order to initiate unlocking .

The third processing unit 105 initiates this Figure 1 and 2 described non-safety-relevant unlocking and locking of the door lock 200, e.g. B. an unlocking after receiving the authentication signal, at a predetermined time or after a predetermined period of time or a locking after a predetermined period of time or immediately after closing the door 2. For this purpose, the third processing unit 105 communicates with the door locking controller via the first bus system 400 201. Communication can e.g. B. contain information or a control command that causes the door lock control 201 to control the locking mechanism for unlocking or locking. Is the control device 100 connected to the second bus system (see. Fig. 7 ), the third processing unit 105 is used to forward messages from and/or to a central escape route control 300.

The third emergency button processing unit 22 controls the acoustic alarm device 23 and the lighting means 41.

If at least one of the processing means 202, 203 is aware that the locking mechanism 205 has assumed the unlocked state, the processing means 202, 203 sends a corresponding signal via the bus 400 to the Electronics unit 24. The electronics device 207 is connected or connectable to the door condition monitoring devices 204, 206 and receives signals about an open or closed state of the door from the door condition monitoring devices 204, 206.

The functions mentioned, which the control device 100, the door lock control 2021 and/or the emergency button 10 carry out, can be carried out with the help of software modules. Program codes are stored in the electronic device 207 and/or the electronic unit 24, with the help of which the functions can be carried out.

Figure 3 represents a variant of the in the Figures 1 and 2 security system 1 shown. Here, the control device 100 is designed separately from the emergency button 10 and the door lock 200. The control device 100 can z. B. be arranged in a top-hat rail housing (not shown). The control device 100 is not integrated in an emergency button 10 or in a door lock 200. For example, the control device 100 can be provided for placement in a technical room. The first bus system 400 connects the control device 100, the door lock 200 and the emergency button 10 with each other. As in the first exemplary embodiment, the key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402.

Unless otherwise described, the structure and function correspond to the first exemplary embodiment, with the functions belonging to the Figures 1 and 2 with the help of the control device 100 or the processing units 103, 104, 105 are described by the control device 100 of the Figure 3 are executed and the functions that belong to them Figures 1 and 2 with the help of the emergency button 10 or the emergency button processing units 20, 21, 22 are described, are executed by the emergency button 10: In particular, the first and the second emergency button processing units 20, 21 detect the actuation signal, communicate as a result of an actuation of the emergency button 10 with the first and the second processing means 202, 203 via the first bus system 400 and thus cause the locking mechanism 205 to be activated by the door locking controller 201. The measures to achieve on-fault safety or redundancy are carried out with the help of the first and second emergency button processing units 20, 21. The first variable is stored in the first and second emergency button processing units 20, 21 and is transmitted from there to the door lock control 201. The emergency button 10 includes the timer for determining the first delay period. The control device 100 is connected or connectable to the second bus system 401. The third processing unit 105 initiates this Figure 1 and 2 described non-safety-relevant unlocking and locking of the door lock 200, e.g. B. an unlocking after receipt of the Authentication signal, at a predetermined time or after a predetermined period of time or an automatic relocking after a predetermined period of time or immediately after the door 2 is closed.

The first, second and third processing units 103, 104, 105 are each designed as a microprocessor or microcontroller. The first, second and third processing units 103, 104, 105 together form processing electronics 101. The first and second processing units 103, 104 have a non-volatile memory. The third processing unit 105 includes a non-volatile memory and/or has access to a non-volatile memory.

A fire alarm signal can be received by both the control device 100 and the emergency button 10. The presence of a fire alarm signal is detected by the first and second emergency button processing units 20, 21 for the emergency button 10 or by the first and second processing units 103, 104 for the control device 100. Accordingly, both the control device 100 with the aid of the first and second processing units 103, 104 and the emergency button 10 with the aid of the first and second emergency button processing units 20, 21 can cause the door lock 200 to be unlocked. For this purpose, communication takes place via the first bus system 400 with the door lock control 201.

The control device 100 is informed via the first bus system 400 when the emergency button 10 causes the door lock 200 to be unlocked, i.e. as a result of an actuation of the emergency button 10 or after receiving a fire alarm signal. The control device 100 is also informed about a time-delayed unlocking of the door lock 200 as a result of the emergency button 10 being actuated. The control device 100 is informed about the locking and unlocking status of the door lock 200. The control device 100 is informed about the opened or closed state of the door 2.

The control device 100 causes the alarm device 23 and the lighting means 41 to be activated for the Figures 1 and 2 acoustic alarms and visual displays described. For this purpose, the control device 100 can communicate with the electronics unit 24, in particular with the third emergency button processing unit 22, via the first bus system 400. The third emergency button processing unit 22 then controls the alarm device 23 or the lamps 41. For this purpose, the parameters for the alarm device 23 and the lamps 41 are stored in the control device 100.

In the exemplary embodiments of Figures 1 to 3 The door lock 200 includes the door condition monitoring devices 204, 206. Alternatively and not shown The door status monitoring devices 204, 206 can be connected to the first bus system 400 or directly to the emergency button 10 and/or the control device 100.

In the exemplary embodiments of Figures 1 to 3 At least one further emergency button, not shown, can be connected to the first bus system 400, which is designed without the control device 100. The additional emergency button is like the emergency button 10 in Figure 3 designed and can cause the door lock 200 to be unlocked when actuated. The additional emergency button corresponds to the emergency button 10 in terms of structure and functionality Figure 3 .

In the exemplary embodiments of Figures 1 to 3 At least one further door lock, not shown, can be connected to the first bus system 400. The further door lock is like the door lock 200 in Figure 2 or 3 designed and can also be unlocked when the emergency button 10 is pressed. The other door lock corresponds to the structure and functionality of the door locks 200 Figures 1 to 3 .

In Figure 4 a third exemplary embodiment of a security system 1 according to the invention with several emergency buttons 10, 1010, 2010, 3010 is shown. The security system 1 includes several door locks 200, 1200, 2200, 3200. Each emergency button 10, 1010, 2010, 3010 is assigned a key button 500, 1500, 2500, 3500. The security system 1 is used to arrange the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 on different doors 2, 2002, 3002. The doors 2, 2002, 3002 are not part of the security system 1 according to the invention. The several Emergency buttons 10, 1010, 2010, 3010 are connected to the first bus system 400 and thus correspond to a number of emergency buttons 10, 1010, 2010, 3010. The door locks 200, 1200, 2200, 3200 are connected to the first bus system 400 and correspond to one Number of door locks 200, 1200, 2200, 3200.

In the example of the Figure 4 the emergency buttons 10, 1010 are assigned to the door locks 200, 1200. The emergency button 2010 is assigned to the door lock 2200. The emergency button 3010 is assigned to the door lock 3200. As a result of pressing one of the emergency buttons 10, 1010, the two door locks 200, 1200 are unlocked, but not the door locks 2200, 3200. If the emergency button 2010 is pressed, only the door lock 2200 is unlocked. Accordingly, when the emergency button 3010 is pressed, only the door lock 3200 is unlocked. Thus, in this embodiment, the door locks 200, 1200, 2200, 3200 are selectively unlocked.

For example, the emergency buttons 10, 1010 can be provided for arrangement on a double-leaf door 2. There is one door lock 200, 1200 on each door leaf 3, 4 to be arranged in door 2. The emergency button 2010 and the door lock 2200 are intended to be arranged on another door 2002. The emergency button 3020 and the door lock 3200 are to be arranged on a door 3002, as in Figure 4 shown.

The security system 1 off Figure 4 can also for from Figure 4 different selective unlockings can be set. At one too Figure 4 deviating exemplary setting, when one of the emergency buttons 10, 1010, 2010, 3010 is pressed, only a single assigned door lock 200, 1200, 2200, 3200 is unlocked. This means that only one door lock 200, 1200, 2200, 3200 is assigned to each emergency button 10, 1010, 2010, 3010. In particular, a security system 1 set in this way is suitable for four single-leaf doors, each with a door lock 200, 1200, 2200, 3200.

In another exemplary setting of the security system 1, not shown, when one of the emergency buttons 10, 1010 is actuated, only the two door locks 200, 1200 are unlocked and when one of the emergency buttons 2010, 3010 is actuated, only the other two door locks 2200, 3200 are unlocked. The emergency buttons 10, 1010 are therefore assigned to the door locks 200, 1200 and the emergency buttons 2010, 3010 are assigned to the door locks 2200, 3200. In particular, the security system 1 set in this way is suitable for two double-leaf doors, each with a door lock 200, 1200, 2200, 3200 per door leaf.

The security system 1 can also be set so that when an emergency button 10, 1010, 2010, 3010 is pressed, all door locks 200, 1200, 2200, 3200 are unlocked.

Deviating from the security system 1, which is in Figure 4 is shown, a security system 1 according to the invention can include a number of emergency buttons 10, 1010, 2010, 3010, which does not correspond to the number of door locks 200, 1200, 2200, 3200. Eg can in Figure 4 the door 2 can be single-leaf and one of the emergency buttons 10, 1010 or one of the door locks 200, 1200 is missing.

In Figure 5 It is shown that the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 are connected to one another via the first bus system 400. Each emergency button 10, 1010, 2010, 3010 is electrically connected or connectable to a key button 500, 1500, 2500, 3500 assigned to the respective emergency button 10, 1010, 2010, 3010 via a connection 402, 1402, 2402 or 3402. Alternatively, the key switches 500, 1500, 2500, 3500 are connected to the first bus system 400 (not shown). In the exemplary embodiment Figures 4 and 5 is the control device 100 in one of the emergency buttons 10, 1010, 2010, 3010, e.g. B. the emergency button 10, integrated. The first bus system 400 is only connected to a single control device 100. Unless stated below described differently, the structure and functions of the door locks 200, 1200, 2200, 3200 correspond to the structure and functions of the door lock 200 of Figures 2 and 3 , the structure and functions of the emergency button 10 the structure and functions of the emergency button 10 the Figure 2 and the structure and functions of the emergency button 1010, 2010, 3010 the structure and functions of the emergency button 10 Figure 3 . The reference numbers from the Figures 2 and 3 are used. It is understood that the door locks 200, 1200, 2200, 3200 each include their own door locking mechanism, their own processing means, etc. and the emergency buttons 10, 1010, 2010, 3010 each include their own emergency button processing units, alarm devices, lamps, switches and actuating elements.

So that the emergency buttons 10, 1010, 2010, 3010 can be assigned to the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010 are assigned when the security system 1 is put into operation, i.e. before the start of operation of the security system 1 , 2010, 3010 to the door locks 200, 1200, 2200, 3200. For this purpose, one of the door locks 200, 1200, 2200, 3200 is transferred to an assignment mode. A conscious action is then carried out on the emergency buttons 10, 1010, 2010, 3010. The conscious action can be carried out as an actuation of the actuating element 11 of the respective emergency button 10, 1010, 2010, 3010. After all emergency buttons 10, 1010, 2010, 3010 that are to be assigned to the door lock 200, 1200, 2200, 3200 that is in the assignment mode have been pressed, the assignment mode of the door lock 200, 1200, 2200, 3200 is ended. In the exemplary embodiment Figure 4 will e.g. B. first the door lock 200 is transferred to the assignment mode and then the emergency buttons 10, 1010 are actuated, whereby the emergency buttons 10, 1010 are assigned to the door lock 200. Then the association mode of the door lock 200 is ended. Then z. B. the door lock 1200 is transferred to the assignment mode and then the emergency buttons 10, 1010 are actuated, whereby the emergency buttons 10, 1010 are assigned to the door lock 1200. Then the association mode of the door lock 1200 is ended. Now the door lock 2200 is transferred to the assignment mode and then the emergency button 2010 is actuated, as a result of which the emergency button 2010 is assigned to the door lock 2200. The association mode of the door lock 2200 is ended. You can then proceed accordingly with the door lock 3200 and the emergency button 3010.

Through the assignment, it is stored in the respective door locks 200, 1200, 2200, 3200, in particular in the respective door lock controls 201, which emergency button 10, 1010, 2010, 3010 is to be assigned to the respective door lock 200, 1200, 2200, 3200. Through the assignment, in the control device 100 for all emergency buttons 10, 1010, 2010, 3010 and all door locks 200, 1200, 2200, 3200 of the first Bus system 400 stores the assignment of the emergency buttons 10, 1010, 2010, 3010 to the door locks 200, 1200, 2200, 3200. For the assignment, a bus address, in particular an unchangeable bus address, of the respective emergency buttons 10, 1010, 2010, 3010 is stored.

The assignment is stored in the respective door locks 200, 1200, 2200, 3200 in the first digital processing means 202 and redundantly in the second digital processing means 203, in particular in the non-volatile memories of the processing means 202, 203.

Will e.g. B. the emergency button 10 is actuated, the emergency button 10 communicates with all door locks 200, 1200, 2200, 3200 of the first bus system 400. The door locks 200, 1200, 2200, 3200 each check based on the deposit whether the respective door lock 200, 1200, 2200, 3200 has been assigned to the activated emergency button 10. Only in the case of assignment do the assigned door locks 200, 1200 then control the respective door locking mechanism 205.

In the event of a fire alarm signal, the door locks 200, 1200, 2200, 3200, which are assigned to the emergency button 10, 1010, 2010, 3010 that receives the fire alarm signal, are unlocked.

If a door lock 200, 1200, 2200, 3200 is to be unlocked with a time delay as a result of the actuation of an assigned emergency button 10, 1010, 2010, 3010, a first delay time period is stored in that emergency button 10, 1010, 2010, 3010. The deposit takes place when the safety system 1 is commissioned by the parameterization program. A different first delay period can be stored by the operator for each emergency button 10, 1010, 2010, 3010. For example, a first delay period is stored in the emergency button 10, which differs from the first delay period stored in the emergency button 2010. The emergency buttons 1010, 3010 should trigger an unlocking of the assigned door locks 2200 and 3200 without a time delay, so that no first delay period or a first delay period of 0 s is stored in the emergency buttons 1010, 3010. Alternatively, the security system 1 can be designed in such a way that the same first delay time is always stored in the emergency buttons 10, 1010, 2010, 3010, which are assigned to the same door lock 200, 1200, 2200, 3200. For this purpose, the parameterization program only allows the operator to make one common setting.

The control device 100 takes over the non-safety-relevant functions for unlocking and locking all door locks 200, 1200, 2200, 3200, as before Figure 1 and 2 described. For this purpose, the control device 100 can be used with the Door locks 200, 1200, 2200, 3200 communicate selectively. So it is stored in the control device 100 which door lock 200, 1200, 2200, 3200 is assigned to which access control system, so that in the event of a positive authentication signal from an access control system, only the assigned door lock(s) 200, 1200, 2200, 3200 are unlocked. It is also stored in the control device 100 whether and when which door lock 200, 1200, 2200, 3200 should be unlocked and at what predetermined time. It can also be stored in the control device 100 after which predetermined time period or which predetermined time periods which door lock 200, 1200, 2200, 3200 should be locked again. It is also stored in the control device 100 whether and, if so, which door locks 200, 1200, 2200, 3200 are to be locked again immediately after the door 2, 2002, 3002 is closed. It can be stored in the control device 100 whether, and if so, for which door lock 200, 1200, 2200, 3200 an acoustic alarm should be triggered when the unlocked door 2, 2002, 3002 is opened without a positive authentication signal being present. It can be stored in the control device 100 whether an acoustic alarm should be triggered if the door 2, 2002, 2003 is not closed again. The deposits can be made differently for each door lock 200, 1200, 2200, 3200 or for the groups of door locks 200, 1200, 2200, 3200 that are to be arranged on a door 2, 2002, 3002. The storage is carried out by the operator during commissioning using the parameterization program.

The control device 100 causes an acoustic and visual alarm to be issued as a result of the actuation of an emergency button 10, 1010, 2010, 3010 in the at least one further emergency button 10, 1010, 2010, 3010, which has the same door lock 200, 1200, 2200, 3200 is assigned as the activated emergency button 10, 1010, 2010, 3010. In the exemplary embodiment the Figures 4 and 5 e.g. B. the emergency button 10 is actuated, the control device 100 causes the acoustic alarm generator 23 and the lamps 41 of the emergency button 1010 to also issue an acoustic or visual alarm through communication with the electronic unit 24 of the emergency button 1010.

If an unlocking is initiated with a time delay after an emergency button 10, 1010, 2010, 3010 has been pressed, the control device 100 causes the first delay period with which the unlocking is initiated to also occur in the at least one further emergency button 10, 1010, 2010, 3010 is shown, which is assigned to the same door lock 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. For this purpose, the control device 100 communicates with the electronic unit 24 of the at least one further emergency button 1010, 2010, 3010 or controls the lamps 41 of the emergency button 10, in which the control device 100 is integrated.

The control device 100 can use the non-safety-relevant assignment for selective communication, e.g. B. assign an access control system to a door lock 200, 1200, 2200, 3200 based on a bus address. Here, the participants of the first bus system 400 each have a setting device for manually setting a bus address. The setting device can include DIP switches. At least the participants of the first bus system 400 who have the same setting on the setting device are automatically assigned to one another. In order to be able to assign different bus addresses to participants with the same setting, participants of the first bus system 400 have different key figures, from which different bus addresses are configured using the setting made. The bus address that is determined using the setting is for the emergency buttons 10, 1010, 2010, 3010 and for the door locks 200, 1200, 2200, 3200, just another bus address that the emergency buttons 10, 1010, 2010, 3010 and use the door locks 200, 1200, 2200, 3200 next to the bus address used in safety-related communication.

If a door lock 200, 1200, 2200, 3200 has already been unlocked, the control device 100 can prevent unlocking of a further door lock 200, 1200, 2200, 3200 until a condition is met, provided there is no danger. If the condition is met, the control device 100 initiates the unlocking of the further door lock 200, 1200, 2200, 3200. In this way, the control device 100 communicates with several door locks 200, 1200, 2200, 3200 so that a lock is formed. For example, the door 2002 may be located at an entrance to a room and the door 3002 may be located at an exit from the same room. The control device 100 can cause the door lock 2200 to be unlocked if there is a positive authentication signal for the door lock 2200. Even if there is a positive authentication signal for the door lock 3200 of the control device 100, the control device 100 can prevent the unlocking of the door lock 3200 until a condition is met. If the condition exists, the control device 100 causes the door lock 3200 to be unlocked. The condition can be, for example: B. about a lock time interval or the achievement of a measurement variable, such as room temperature, humidity, air purity or number of people in the room. For this purpose, the control device 100 can be connected or connectable to a measuring device. The condition may include the closing of the first opened door 2002, which is measurable by the door condition monitors 204, 206. The condition and the door locks 2200, 3200 involved in the lock can be stored in the control device 100. The deposit can be done by the operator using the parameterization program.

In Figure 6 is a variant of the in the Figures 4 and 5 security system 1 shown. Here, the control device 100 is designed separately from the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200. The first bus system 400 connects the control device 100 with the door locks 200, 1200, 2200, 3200 and the emergency buttons 10, 1010, 2010, 3010. The control device 100 of Figure 6 corresponds to the structure of the control device 100 Figure 3 . The emergency button 10 Figure 6 The structure corresponds to emergency button 10 Figure 3 . Otherwise, the structure and functionalities correspond to those previously Figure 5 are described, the structure and functionalities of the security system 1 Figure 6 .

Because in the exemplary embodiments Figures 4 to 6 the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010, 2010, 3010 and possibly the control device 100 act as participants of a single first bus system 400, only the cables of the bus system 400 are necessary so that the participants can communicate with each other. The security system 1 therefore only has a few cables.

The bus system 400 may include at least two cables for communication and at least two cables for power supply. In particular, the bus system 400 has exactly two cables for communication and two cables for power supply. In each of the exemplary embodiments of the security system 1 according to the invention, a power supply unit can be integrated as a connection to a power network at any point in the bus system 400. The power supply unit can therefore be provided as an independent component of the security system 1 outside the emergency button 10 or the emergency buttons 10, 1010, 2010, 3010 and the door lock 200 or the door locks 200, 1200, 2200, 3200. This makes the security system 1 flexible in its spatial structure.

If, as in the third and fourth exemplary embodiments, there are several emergency buttons 10, 1010, 2010, 3010 and one of the emergency buttons 10, 1010, 2010, 3010 has been pressed, the electronic detection only prevents the emergency button 10, 1010, 2010, 3010 assigned door locks 200, 1200, 2200, 3200 can be locked. Reaching the cancellation condition enables the door lock(s) 200, 1200, 2200, 3200 assigned to the actuated emergency button 10, 1010, 2010, 3010 to be locked. 1010, 2010, 3010, which was previously pressed, and authentication on the key switch 500, 1500, 2500, 3500 assigned to the pressed emergency button 10, 1010, 2010, 3010. At least this course of action is necessary for the door lock 200, 1200, 2200, 3200 assigned to the activated emergency button 10, 1010, 2010, 3010, in which at least one of the Door condition monitoring devices 204, 206 have detected that the door 2 or one of the door leaves 3, 4 was opened after the emergency button 10 was pressed.

If the door condition monitoring devices 204, 206 of the door locks 200, 1200, 2200, 3200 assigned to the activated emergency button 10, 1010, 2010, 3010 have detected that the door 2 has remained permanently closed after the emergency button 10, 1010, 2010, 3010 has been pressed, so the cancellation condition can be achieved by expiry of the predetermined time interval. The cancellation condition can e.g. B. be reached after 60 seconds after the emergency button 10 was last pressed. The admissibility of whether a lock should take place after the predetermined time interval has elapsed with the door 2, 2002, 3002 remaining closed can be determined for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, in particular for door locks , which are intended for arrangement on the same door, can be individually adjusted and stored. The deposit can e.g. B. in the emergency buttons 10, 1010, 2010, 3010. Likewise, for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, in particular for door locks that are intended for arrangement on the same door, the length of the predetermined time interval can be stored in an individually adjustable manner. A minimum length, e.g. B. 60 s, be fixed for the predetermined time interval. The storage is done by the parameterization program.

In Figure 7 a fifth exemplary embodiment of the security system 1 according to the invention is shown. The fifth exemplary embodiment includes the security system 1 according to the first exemplary embodiment Figures 1 and 2 . This means that the emergency button 10, which includes the control device 100, is connected to the door lock 200 via the bus system 400. The key switch 500 is connected or can be connected to the emergency button 10 via a connection 402. In the fifth exemplary embodiment, additional components 300, 301, 510 are provided compared to the first exemplary embodiment.

The security system 1 includes the central escape route control 300. The central escape route control 300 is intended to be arranged away from the door 2. The central escape route control 300 can, for example, B. together with a monitoring device 301, which can be designed as a monitor or personal computer, and / or a multi-door display device 350 (see. Fig. 10 ) to be arranged in a guard room. The guarding device 301 is optionally part of the security system 1 according to the invention. Alternatively, the guarding device 301 can be connectable to the security system 1 according to the invention.

The central escape route control 300 has a modular structure. An emergency module 310 includes a first mounting plate 311. The first mounting plate 311 has a central one Emergency button 302 and an identification device 312 designed, for example, as a key button. By means of the first fastening plate 311, the central emergency button 302 and the identification device 312 are mechanically rigidly connected to one another. The central emergency button 302 is used to unlock the door lock 200 as a result of an actuation of the central emergency button 302. The door lock 200 can thus be unlocked by the central emergency button 302 away from the door 2. Unlocking as a result of pressing the central emergency button 302 takes place with one-fault security. The operation of the central emergency button 302 is therefore suitable in the event of danger.

A deactivation module 320 comprises a first control element 322 designed as a key switch and a second control element 323 designed as a button. The first control element 322 is used to deactivate the emergency button 10. Thus, by actuating the first control element 322, the emergency button 10 is deactivated State transferred. If the emergency button 10 is in a deactivated state, the door lock 200 is not unlocked as a result of an actuation of the emergency button 10. The second control element 323 is used to activate the emergency button 10. If the emergency button 10 is in the deactivated state and becomes the second control element 323 is pressed, the emergency button 10 is transferred to an activated state. In the activated state of the emergency button 10, the emergency button 10 causes the door lock 200 to be unlocked when the emergency button 10 has been pressed. The deactivation module includes a second fastening plate 321. The second fastening plate 321 serves to accommodate the first and second operating elements 322, 323. The second fastening plate 321 mechanically rigidly connects the first and second operating elements 322, 323 to one another.

A delay module 330 includes a third mounting plate 331. The third mounting plate 331 accommodates a delay element 332. The delay element 332 is designed, for example, as a key switch. The delay element 332 serves to further delay the unlocking of the door lock 200 within the first delay period. The delay module 330 includes a termination element 333, which is designed as a button. The termination member 333 is attached to the third mounting plate 331. The termination element 333 is mechanically rigidly connected to the delay element 332 by means of the third fastening plate 331. By operating the termination element 333, the delay in unlocking the door lock 200 can be ended.

The central escape route control 300 includes an escape route control housing 340 that is open on one side and in which the emergency module 310, the deactivation module 320 and the delay module 330 are arranged. The deactivation module 320 and The delay module 330 are optional components of the central escape route protection 300. The multi-door display device 350, if present, can also be arranged in the escape route control housing 340.

The escape route control housing 340 can mechanically attach the emergency module 310, the deactivation module 320 and the delay module 330. The emergency module 310, the deactivation module 320 and the delay module 330 are each individually attached to the escape route control housing 340, in particular screwed. The first fastening plate 311 for the emergency module 310, the second fastening plate 321 for the deactivation module 320 and/or the third fastening plate 331 for the delay module 330 are used to fasten to the escape route control housing 340. The escape route control housing 340 and the modules 310, 320, 330 are designed in such a way that different orders in which the modules 310, 320, 330 can be arranged next to one another are possible. So can e.g. B. in a central escape route safety device 300 (not shown) z. B. the emergency module 310 can be arranged between the deactivation module 320 and the delay module 330. In another exemplary central escape route control 300, not shown, a free space can be arranged on the left, delay module 330 in the middle and the emergency module 310 on the right. The free space is created by the absence of the deactivation module 320 and is covered by a plate. The escape route control housing 340 can have rails for inserting the modules 310, 320, 330. The escape route control housing 340 can have mounting options, e.g. B. perforated strips or elongated holes for variable attachment of the module 310, 320, 330.

On the first fastening plate 311, on the second fastening plate 321 and on the third fastening plate 331 a purely schematically illustrated display area 314, 324 and 334 is provided. There are symbols on the display area that explain the function of the modules 310, 320, 330. In addition, optical lights for displaying states of the security system 1 can be provided in the display areas 314, 324, 334.

In the exemplary embodiment Figure 7 The security system 1 further includes an audio and video module 510. The audio and video module 510 is intended to be arranged near the door 2, which can be locked by the door lock 200. If the audio and video module 510 is activated, an operator in the guard room can speak to the user in front of the door 2 and view the room near the door 2.

As in Figure 8 shown, the central emergency button 302 is constructed similarly to the emergency button 10. The central emergency button 302 thus comprises an emergency button electronics unit 308. The emergency button electronics unit 308 comprises a first emergency processing unit 303, a second emergency processing unit 304 and a third emergency processing unit 305. The first, second and third emergency processing units 303, 304, 305 are each designed as a microprocessor or microcontroller. The first and second emergency processing units 303, 304 have non-volatile memory. The third emergency processing unit 305 has a non-volatile memory and/or has access to a non-volatile memory. The central emergency button 302 is actuated by actuating an emergency button actuator 306. This causes an emergency button switch 307 to be activated. This generates a first and a second signal. For this purpose, a first and a second circuit (not shown) are opened. A signal about the opening of the first circuit is detected by the first emergency processing unit 303. A signal about the opening of the second circuit is detected by the second emergency processing unit 304.

The central emergency button 302 is connected to a second bus system 401. As in Figure 9 shown, the control device 100 is also connected to the second bus system 401. The second bus system 401 is a different type of bus system than the first bus system 400. For example, the second bus system 401 can be designed as a LON or LAN bus and the first bus system 400 can be designed as a CAN or DCW bus.

In Figure 9 The emergency button 10 includes the control device 100. The emergency button 10 and the door lock 200, which are in Figure 9 shown correspond to the emergency button 10 and the door lock 200 Figure 2 .

In an alternative, not shown, the control device 100, the emergency button 10 and the door lock 200 are according to Figure 3 educated. In this alternative, not shown, the control device 100, the emergency button 10 and the door lock 200 are connected to one another via the first bus system 400, with the control device 100 being connected to the second bus system 401.

The control device 100 receives messages from the central escape route security 300 via the second bus system 401. The control device 100 forwards the messages via the first bus system to other participants in the first bus system 400. The message can in particular contain information regarding an actuation of the central emergency button 302, the key button 312, the first operating element 322, the second operating element 323, the delay element 332 and/or the termination element 333 or a control command as a result of an actuation of one of the aforementioned elements 302 , 312, 322, 323, 332, 333. If the control device 100 is integrated in the emergency button 10, there is no need for forwarding to the emergency button 10 in which the control device 100 is integrated. E.g. directs according to the Figure 9 the control device 100 forwards the message to the door lock 200. Are If the control device 100 and the emergency button 10 are connected via the first bus system 400, the control device 100 forwards the message to the emergency button 10 and/or the door lock 200. The control device 100 adapts the message to the format of the first bus system 400. Security-relevant messages are otherwise left untouched.

If the central emergency button 302 has been pressed, the first emergency processing unit 303 and, redundantly, the second emergency processing unit 304 cause the door lock 200 to be unlocked. Here, the central emergency button 302 communicates via the control device 100 with the door lock control 201, in particular the first and second processing means 202, 203. The first and second processing means 202, 203 then control the locking mechanism 205. Previously, the first and second processing units 103, 104 forwarded the message. Here, the control device 100 left the content of the message untouched.

The central emergency button 302 has an input for receiving a fire alarm signal. If the fire alarm signal is received, the central emergency button 302 causes the door lock 200 to be unlocked. For this purpose, the first and second emergency processing units 303, 304 communicate with the door lock control 201 via the control device 100, namely via the first and second processing units 103, 104. Like previously described.

A signal about an actuation of the key switch 312 of the first module 310 is received by the emergency button electronics unit 308, in particular the third emergency processing unit 305. The emergency button electronic unit 308 sends a message regarding the actuation of the key button 312 to the control device 100 via the second bus system 401. The control device 100 forwards the message to the first bus system 400.

The emergency button actuation element 306 is designed to be non-latching. The emergency button actuation element 306 is identical to the actuation element 11 of the emergency button 10 (see. Figures 13 to 15 ). When actuated, the emergency actuating element 306 is transferred from a starting position to an actuating position (analog Figure 11 ). Immediately after actuation, the emergency actuation element 306 moves back into the starting position by the force of a restoring means designed as a spring (analog Figure 11 ). The emergency actuation element 306 is actuated translationally. If the door lock 200 is transferred to the unlocked state as a result of the central emergency button 302 being actuated, the electronic device 207 prevents this from occurring without the presence of an electronic device a cancellation condition, the door lock 200 can be returned to the locked state. The cancellation condition after pressing the central emergency button 302 can be achieved by pressing the key button 312. In particular, one actuation of the key switch 312 is sufficient to achieve the cancellation condition.

If the security system 1 includes the central escape route control 300, the cancellation condition can be achieved in a further way as a result of an actuation of the emergency button 10: If the door status monitoring devices 204, 206 have detected that the door 2 has remained permanently closed after the emergency button 10 has been actuated is, the cancellation condition can be achieved by expiry of a predetermined time interval and a cancellation treatment at the central escape route control 300 after the predetermined time interval. The cancellation treatment can correspond to an authentication at the central escape route control 300, in particular an actuation of the key switch 312. Through the lifting treatment, e.g. B. the actuation of the key switch 312, a cancellation signal can be generated. The cancellation signal is forwarded to the door lock control 201 via the control device 100. In this case, authentication on the key switch 500 and a cancellation action on the emergency button 10 are not necessary.

The door locking control 201 checks whether it is permissible to reach the cancellation condition by expiry of the predetermined time interval and the authentication at the central escape route control 300 with the door 2 remaining closed before the door locking control 201 controls the locking mechanism 205 for locking. When putting the security system 1 into operation, an operator can specify whether an elapse of the predetermined time interval without opening the door 2 and the additional actuation of the key switch 312 is permissible as a cancellation condition and thus leads to the door 2 being relocked. A check of admissibility, an elapse of the predetermined time interval, an actuation of the key switch 312 after the predetermined time interval and the fact that neither the first door condition monitoring device 204 nor the second door condition monitoring device 206 sent a signal about the door being opened during the predetermined time interval , are sufficient to achieve the cancellation condition.

This is a variant of achieving a cancellation condition that is one of the Figures 1 and 2 was described. This variant can e.g. B. can be selected by the operator if only the elapse of the predetermined time interval with the door 2 remaining closed does not seem safe enough to the operator. The operator can select and store this variant using the parameterization program.

In particular, if the operator has selected this option, the elapse of the predetermined time interval with the door 2 remaining closed is visually displayed on the central escape route control 300. In particular, the lighting means 313 serve to indicate that the predetermined time interval has elapsed without a signal about the opening of the door 2 being received within the predetermined time interval. The visual display tells the operator that the door 2 can be locked through authentication at the central escape route control 300.

If the door condition monitoring devices 204, 206 have not sent a signal that the door is being opened while a fire alarm signal is present, then after the fire alarm signal has ended, the door lock 200 can also be locked by the same actuation of the key switch 312. The possibility of locking the door lock 200 by operating the key switch 312 after the fire alarm signal has ended is also visually indicated by the lamps 313.

The control device 100 forwards messages from the emergency button 10 and/or the door lock 200 via the second bus system 401. Here, the control device 100 adapts the message to the format of the second bus system 401. The control device 100 sends information about the status of the emergency button 10 and/or the door lock 200 via the second bus system 401.

For example, the central escape route control 300 and the multi-door display device 350 can be connected to a third bus system 403 (see Fig. Fig. 10 ). The central emergency button 302, particularly preferably the emergency button electronic unit 308, can preferably be connected to the third bus system 403 (see Fig. Fig. 8 ). The multi-door display device 350 can visually display the locking and unlocking status of the door lock 200. In addition, with the help of the multi-door display device 350, one of the door locks 200, 200 ', 1200', 2200' of the security system 1 (see. Fig. 10 ) can be unlocked. Unlocking with the help of the multi-door display device 350 is not one-fault safe. The third bus system 403 may be the same type of bus system as the first bus system 400, e.g. B. a CAN or DCW bus.

The control device 100 forwards to the central escape route control 300 via the second bus system 401 when the emergency button 10 waits for a first delay period before the emergency button 10 causes the door locking control 201 to activate the locking mechanism 205 for unlocking.

The first delay period is displayed visually on the central escape route control 300. For this purpose, the central emergency button 302 corresponds to the emergency button 10 constructed as it is to the Figures 13 , 16, 17 is described. To visually display the first delay period, the lamps 313 of the central emergency button 302 are controlled by the emergency button electronics unit 308. As the first delay period progresses, fewer lamps 313 light up in the same color. For example, fewer lamps 313 can light up in a first color and an increasing number of lamps 313 can light up in a second color. The lamps 41 of the emergency button 10 are controlled in an identical manner in order to visually display the first delay period.

During the first delay period, e.g. B. 8 s, the operator can actuate the delay element 332. To do this, the operator turns a key in the key switch, which serves as a delay element 332. An actuation of the delay element 332 is detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. A corresponding message is sent via the second bus system 401 and possibly the first bus system 400. The emergency button 10 receives the message. As a result of the actuation of the delay element 332, the emergency button 10 ends the first delay period and begins a second delay period. The second delay period, e.g. B. 180 s is longer than the first delay period. At the end of the second delay period, the emergency button 10 causes the door lock 200 to be unlocked. The second delay period is determined in the emergency button 10 using the same timer that is used to determine the first delay period. During the second delay period, the key of the delay element 322 need not remain turned. Rather, turning the key once is sufficient to start the second delay period.

The second delay period is displayed visually on the central escape route control 300 and on the emergency button 10. The visual representation on the central escape route control 300 is similar to the visual representation on the emergency button 10. As the second delay period progresses, fewer lamps 41, 313 light up in the same color. For example, fewer lamps 41, 313 can light up in a first color and an increasing number of lamps 41, 313 can light up in a second color. In order to show that the second delay period lasts a long time, a pattern associating the passage of time can be repeated within the second delay period, e.g. B. a surrounding color dot or a surrounding color window (see description for Figure 16, 17 ) are displayed visually.

If the termination element 333 is actuated during the first or second delay period, the emergency electronics unit 308, in particular the third emergency processing unit 305, detects the actuation of the termination element 333 and sends a message regarding the actuation of the termination element 333 via the second bus system 401. As a result, the emergency electronics unit 308 causes the emergency button 10 not to delay the unlocking any further, but rather to immediately cause the door lock 200 to be unlocked. The termination element 333 is designed to be non-latching. A single actuation of the termination element 333 is sufficient to end the delay in initiating the unlocking.

The emergency button 10 can be switched to the deactivated state by actuating the first control element 322. To do this, the operator turns a key in the key switch, which serves as the first control element 322. An actuation of the first control element 322 is detected by the emergency button electronics unit 308. When the first control element 322 is actuated, a first and a second deactivation circuit are opened or closed. The opening or closing of the first deactivation circuit is detected by the first emergency processing unit 303. The opening or closing of the second deactivation circuit is detected by the second emergency processing unit 304. The first and second emergency processing units 303, 304 communicate with the emergency button 10 via the second bus system 401. If the first bus system 400 is located between the emergency button 10 and the central emergency button 302, the control device 100 forwards the message to the first and second emergency processing units 303 , 304 next. When redirected, the format is changed but the content remains unchanged.

In the deactivated state of the emergency button 10, the actuation of the emergency button 10 has no effect on the door lock 200.

The activated state and the deactivated state are stored electronically in the emergency button 10. Because the activated state and the deactivated state are stored in the emergency button 10, the key in the first control element 322 does not have to remain turned during the deactivated state. Rather, turning the key once is enough to deactivate the emergency button 10.

The deactivation remains until the second control element 323 is actuated. The actuation of the second control element 323 can be detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. The emergency electronics unit 308 sends a message regarding the actuation of the second control element 323 via the second bus system 401 and possibly via the first bus system 400 to the emergency button 10, whereupon the emergency button 10 is transferred to the activated state. The second control element 323 is not latching. Because the activated and deactivated states are stored in the emergency button 10, a single actuation is sufficient the second control element 323 to transfer the emergency button 10 to the activated state.

The central escape route control 300 includes a bus 341, via which the emergency electronics unit 308, in particular the third emergency processing unit 305, can detect signals from the second control element 323, the delay element 332 and the termination element 333. The emergency electronics unit 308 serves as the intelligence of the entire central escape route control 300. Only the emergency electronics unit 308 includes microprocessors. The deactivation module 320 and/or the delay module 322 can be designed to be processor-free. The bus 341 can be designed as an I ² C bus.

To store the activated and deactivated state, a second variable can be stored in the first emergency button processing unit 20 and redundantly in the second emergency button processing unit 21, in particular in the non-volatile memories. The second variable can be binary. If the emergency button 10 is in the deactivated state, the second variable is set to a deactivation value. If the emergency button 10 is in the activated state, the second variable is set to an activation value. As a result of an actuation of the first control element 322, the second variable is set to the deactivation value. As a result of an actuation of the second control element 323, the second variable is set to the activation value. Before the emergency button 10 causes the door lock 200 to be unlocked, the emergency button 10 checks the value of the second variable. If the emergency button determines that the emergency button 10 is deactivated, the emergency button 10 does not communicate with the door locking control 201 in order to trigger an unlocking 200.

The first emergency processing unit 303 and the second emergency processing unit 304 monitor each other for errors. If an error is detected, a message is sent via the second bus system 401. The emergency button 10 receives the message and then transfers itself to the activated state if the emergency button 10 is in the deactivated state. To do this, the emergency button 10 changes the value of the second variable to the activation value.

The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly, in particular at regular intervals, send a sign-of-life signal via the second bus system 401. The emergency button 10 receives the sign-of-life signals. If a sign of life signal is missing once or several times, the emergency button 10 switches to the activated state if the emergency button 10 is in the deactivated state. If the security system 1 receives a fire alarm signal, the emergency button 10 changes to the activated state if the emergency button 10 is in the deactivated state.

The actuation of the emergency button 10 in the deactivated state is displayed on the central escape route control 300, on the guard device 301 and/or on the multi-door display device 350. If there is actually a danger, the emergency button 10 can be switched to the activated state by the operator by actuating the second control element 323, or the door lock can be activated directly by the operator to unlock it. To do this, the operator can press the central emergency button 302. The operator can, for example, determine whether a dangerous situation exists. B. via the audio and video module 510. This achieves increased security.

The deactivation can e.g. B. can be done at night in a department store. Furthermore, it is conceivable to use the deactivatable emergency button 10 in a building in which people with an impaired mental state live. Emergency buttons 10 can also be used on doors to which people with impaired mental health have access, e.g. B. in a psychiatric or dementia ward.

If the emergency button 10 is actuated in the deactivated state and the emergency button 10 is then transferred to the activated state, the actuation of the emergency button 10 in the deactivated state does not lead to an unlocking of the door lock 200 even after the transfer to the activated state Pressing the emergency button 10 in the deactivated state remains ineffective. On the one hand, this is due to the fact that the actuating element 11 and the switch 63 are designed to be non-latching. On the other hand, the actuation of the emergency button 10 in the deactivated state was not saved in the emergency button 10. The door lock control 201 does not receive any message regarding the operation of the emergency button 10 in the deactivated state. The electronic detection was therefore not transferred to the actuation state. This ensures that the door lock 100 is not unlocked immediately when the emergency button 10 is activated, e.g. B. because the emergency button 10 was pressed long before. This achieves increased building security.

In order to achieve a particularly high level of security, it can be provided that the audio and video module 510 is switched on during the first and/or the second delay period. Here, the emergency button 10 activates the audio and video module 510 at the beginning of the first and/or second delay period. The audio and video module 510 is also activated by the emergency button 10 when the emergency button 10 is pressed in the deactivated state. For this purpose, the emergency button 10 communicates via the second one Bus system 401 and possibly via the first bus system 400 with the audio and video module 510.

It may be that the emergency button 10 can only be deactivated if the audio and video module 510 can be activated. If the audio and video module 510 is part of the security system 1 according to the invention, deactivation can be omitted if the audio and video module 510 is z. B. is not functional and/or the connection to the audio and video module 510 is disturbed. This does not apply if the security system 1 does not include an audio and video module 510, but rather a monitoring system separate from the security system 1 is provided in the building.

It may be that the emergency button 10 only delays the unlocking by the first and/or second delay time if the audio and video module 510 can be unlocked. If the audio and video module 510 is part of the security system 1 according to the invention, a delay can be omitted if the audio and video module 510 z. B. is not functional and/or the connection to the audio and video module is disturbed. This does not apply if the security system 1 does not include an audio and video module 510, but rather a monitoring system separate from the security system 1 is provided in the building.

In Figure 10 a further exemplary embodiment of a security system 1 according to the invention is shown. As in the exemplary embodiment Figures 7 to 9 The security system 1 includes a central escape route control 300, which corresponds to the Figures 7 and 8th is constructed. Key buttons 500, 500', 1500, 1500', 2500 associated with the respective emergency buttons 10, 10', 1010, 1010', 2010 are not shown for the sake of clarity. The central escape route control 300 is connected to the second bus system 401. A first subsystem 5 and a second subsystem 6 are connected to the second bus system 401. The two subsystems 5, 6 each include a first bus system 400, 400'. Emergency buttons 10, 1010 or 10', 1010', 2010' and door locks 200 or 200', 1200', 2200' are connected to the respective first bus system 400, 400'. The first bus systems 400, 400' are the same type of bus system, e.g. B. a CAN or a DCW bus. The second bus system 401 is a different type of bus system, e.g. B. a LON or LAN bus.

The security system 1 includes the multi-door display device 350. The multi-door display device 350 can, for. B. visually indicate which door lock 200 or 200 ', 1200', 2200' is in the unlocked state and which door lock is in the unlocked state. With the help of the multi-door display device 350, an operator can carry out a non-security-relevant locking and unlocking of individual door locks 200 or 200 ', 1200', 2200' of the security system 1.

Each subsystem 5, 6 includes only one control device 100, 100'. The control device 100, 100 'of the respective subsystem 5, 6 is connected to the second bus system 401. The control device 100 of the first subsystem 5 is connected to the emergency buttons 10, 1010 and the door lock 200 of the first subsystem 5 via the first bus system 400. The control device 100' of the second subsystem 6, on the other hand, is integrated in an emergency button 10' of the second subsystem 6 and is connected to the remaining emergency buttons 1010', 2010' and the door locks 200', 1200', 2200' of the further first bus system 400'.

A first emergency button 10 and a second emergency button 1010 are provided in the subsystem 5. If one of the emergency buttons 10, 1010 is pressed, the activated emergency button 10, 1010 causes the door lock 200 to be unlocked.

A first emergency button 10', a second emergency button 1010' and a third emergency button 2010' are provided in the subsystem 6. The emergency buttons 10', 1010', 2010' selectively cause the door locks 200', 1200', 2200' of the second subsystem 6 to be unlocked. For example, when the first emergency button 10' is actuated, only the first door lock 200' is triggered to unlock. Accordingly, when the second emergency button 1010' is actuated, only the second door lock 1200' is unlocked and when the third emergency button 2010' is actuated, only the third door lock 2200' is unlocked.

A variety of deviations are conceivable. A security system 1 according to the invention can, for example, B. be designed without the first or the second subsystem 5, 6. As a sole or additional subsystem, e.g. B. one of the in the Figures 1 to 6 Security systems 1 according to the invention described can be provided. The design and functions of the emergency buttons 10, 10', 1010, 1010', 2010' and the door locks 200, 200', 1200', 2200' are designed in accordance with the previous exemplary embodiments, unless additionally or differently described below.

In each of the door locks 200, 200', 1200', 2200' of the security system 1 it is stored whether the respective door lock 200, 200'1200', 2200' is unlocked when the central emergency button 302 is pressed. For example, B. the door locks 200, 200 ', 2200' allow unlocking as a result of an actuation of the central emergency button 302, but the door lock 1200' does not. If the central emergency button 302 is pressed, the door lock controls 201 of the door locks 200, 200 ', 2200' activate the respective locking mechanism 205 for unlocking. However, there is no such control in the door lock 1200'.

If the central emergency button 302 is pressed, the control devices 100, 100' receive a corresponding message from the central emergency button 302 via the second bus system 401 and forward the message to all door locks 200 or 200', 1200', 2200' of the respective first bus system 400 , 400' further. The door locks 200, 200', 1200', 2200' decide on the basis of the deposit, which includes the approval of an unlocking as a result of the actuation of the central emergency button 302, whether the respective door lock control 201 of the door locks 200, 200', 1200', 2200' controls the respective locking mechanism 205 for unlocking or not.

The determination of whether the door lock 200, 200'1200', 2200' is unlocked as a result of an actuation of the central emergency button 302 is made when the operator puts the security system 1 into operation. The storage is done by the parameterization program.

In each of the emergency buttons 10, 1010, 10'. 1010', 2010' it is stored whether, when the first operating element 322 is actuated, the respective emergency button 10, 1010, 10' is transferred to the deactivated state. 1010', 2010' is approved or not. This results in a selective deactivation by actuating the only first control element 322 of the security system 1. For example, B. the emergency buttons 10, 10 ', 2010' are transferred to the deactivated state as a result of an actuation of the first control element 322, but the emergency buttons 1010, 1010' are not.

If the first control element 322 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to all emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400', which are not the control device 100 include, further. The emergency buttons 10, 1010, 10'. 1010', 2010' of the security system 1 decide based on the deposit about approval for deactivation whether the respective emergency button 10, 1010, 10', 1010', 2010' transfers itself into the deactivated state as a result of the actuation of the first control element 322 or not.

A third variable can be used to determine whether deactivation of the emergency buttons 10, 1010, 10', 1010', 2010' should be permitted. The third variable can be binary. The third variable is stored in the non-volatile memory of the respective first and second emergency button processing units 20, 21 of each emergency button 10, 1010, 10', 1010', 2010'. If deactivation is permitted for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable takes on a first value. If deactivation is prohibited for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable takes on a second value. The emergency button 10, 1010, 10', 1010', 2010' checks the value of the third variable before the emergency button 10, 1010, 10', 1010', 2010' deactivates and only deactivates when the third variable has the first value.

The operator determines whether the emergency button 10, 1010, 10', 1010', 2010' should be deactivable when the safety system 1 is put into operation. This is stored using a parameterization program.

In each of the emergency buttons 10, 1010, 10'. 1010', 2010' it is stored whether the respective emergency button 10, 1010, 10' is activated when the delay element 332 is actuated. 1010', 2010' the unlocking of the emergency button 10, 1010, 10'. 1010', 2010' associated door locks 200, 200', 1200', 2200' are delayed or not by a second delay period. The second delay period is for the respective emergency buttons 10, 1010, 10'. 1010', 2010' can be set to different lengths and is stored in the security system 1, in particular in the emergency buttons 10, 1010, 10', 1010', 2010'. Alternatively, the delay can be permitted by the second delay period and, if necessary, the length of the second delay period only for groups of emergency buttons 10, 1010, 10 '. 1010', 2010', which are assigned to a door lock 200, 200', 1200', 2200' or a door 2, 2002, 3002, can be individually adjustable. The setting and storage is carried out by the operator using the parameterization program.

For example, B. the emergency buttons 10, 2010' further delay the unlocking of the door locks 200 or 2200' as a result of an actuation of the delay element 332, but the emergency buttons 1010, 10', 1010' do not. The length of the second delay period for the emergency button 10 is selected to be different from the length of the second delay period for the emergency button 2010'. If the emergency button 10 is actuated and the delay element 332 is actuated within the first delay period that is stored for the emergency button 10, the emergency button 10 delays the unlocking from the actuation of the delay element 332 by the second delay period that is stored in the emergency button 10 . If the emergency button 2010 'is actuated and the delay element 332 is actuated within the first delay time that is stored for the emergency button 2010', the emergency button 2010' delays the unlocking from the actuation of the delay element 332 by the second delay time that is in the emergency button 2010' is stored and which differs from the second delay time for the emergency button 10. If the emergency button 1010 is pressed, the emergency button 1010 delays unlocking by the first delay time that is stored for the emergency button 1010. If the delay element 332 is actuated during the first delay period of the emergency button 1010, the unlocking is not delayed by a second delay period, since this delay is not permitted for the emergency button 1010, but the emergency button 1010 is activated after the first delay period immediately cause the door lock 200 to be unlocked. The emergency buttons 10', 1010' do not delay the unlocking of the assigned door lock 200' or 1200' at all. For the emergency buttons 10', 1010', neither a first delay period nor a second delay period is permitted. Instead of not allowing a delay by the first and/or the second delay period, a period of 0 s can also be stored. Actuation of the termination element 333 terminates any delay in unlocking.

If the delay element 332 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to the emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400', which are not the Control device 100 include, further. The emergency buttons 10, 1010, 10'. 1010', 2010' of the security system 1 decide how to proceed based on the deposit.

The deposit as to whether the emergency button 10, 1010, 10', 1010', 2010' allows the delay by the second delay period and, if so, the deposit of the length of the second delay period occurs when the security system 1 is put into operation. The deposits are made by the Set by the operator using the parameterization program. The first and/or the second delay period can only be selected up to a maximum, predetermined period of time.

The operator can also use the parameterization program to selectively store which cancellation condition is permitted for which emergency button 10, 1010, 1010', 2010'. The cancellation condition for the cancellation action on site is always permitted. For each emergency button 10, 1010, 1010', 2010', however, the achievement of the cancellation condition by elapse of the predetermined time interval or the achievement of the cancellation condition by the elapse of the predetermined time interval and subsequent actuation of the identification device 312 with the door 2 remaining closed can be selectively permitted or not.

The storage of whether the emergency button 10 can be deactivated when the first control element 322 is actuated, whether the emergency button 10 should delay the unlocking by a second delay period when the delay element 332 is actuated, the length of the first and the second delay period, the storage of the cancellation condition and / or the deposit as to whether the door lock 200 should be unlocked when the central emergency button 302 is pressed can also be used for the security system 1 according to the exemplary embodiment Figures 7 to 9 be made.

Different and not shown from the Figures 7 to 10 Several central escape route controls 300, 300 'can also be connected to the second bus system 401. For example, in a psychiatric hospital, a central escape route control 300 can be provided for arrangement in a guard room and a further central escape route control 300' can be provided for arrangement in a nurse's room.

In the respective door locks 200, 200', 1200', 2200' it can be stored with the help of the parameterization program as a result of an actuation of which of the central emergency buttons 302, 302' an unlocking should take place. A list is stored in the door locks for this purpose. In the respective emergency buttons 10, 10', 1010, 1010', 2010' it can be stored with the help of the parameterization program as a result of an actuation which of the first control elements 322, 322' is permitted to be deactivated. In contrast to the third variable, a list is stored in the emergency buttons 10, 10', 1010, 1010', 2010'.

The first to fourth exemplary embodiments of the security system 1 according to the invention have no second bus system 401, no central escape route control 300, no security device 301 and no audio and video module 510. However, exemplary embodiments of the security system 1 according to the invention are conceivable, in which the first to fourth exemplary embodiments additionally at least partially include the missing components 401, 301, 300 and 510. If the security system 1 is designed for several doors, an audio and video module 510 can be assigned to each door. The emergency buttons 1010, 2010, 3010, which do not include the control device 100, and the door locks 200, 1200, 2200, 3200 are not connected to the second bus system 401.

In the Figures 1 to 10 the door locks 200, 200', 1200, 1200', 2200, 2200', 3200 are part of the security system 1 according to the invention. However, it is conceivable that only the door lock controls 201 are part of the security system 1 according to the invention. In this case, the door locking controls 201 can each be connected to the locking mechanism 205 and possibly the door condition monitoring devices 204, 206. In this case, the door lock 200 is not unlocked in the security system 1, but part of the security system 1 is that the door lock control 201 controls the locking mechanism 205, that is, the door lock control 201 switches the electrical power for the locking mechanism 205 on or off. In this case, instead of the terms “unlocking or locking the door lock” “control of the locking mechanism for unlocking or locking” can be used.

In the Figures 11 to 13 an emergency button 10 is shown. The in Figure 11 Emergency button 10 shown is as an emergency button 10, 10 ', 1010, 1010', 2010, 3010 in one of the security systems 1 according to the invention Figures 1 to 10 can be used or used.

The emergency button 10 includes the actuating element 11. The actuating element 11 can move from the starting position 11.1, which is in the Figure 11 is shown, move into the operating position 11.II, which is in Figure 11 is indicated. In Figure 12 the actuating element 11 is also in the starting position 11.I.

The switch 63 is actuated in the actuation position 11.II. The switch 63 also changes from a first 63.1 to a second position 63.II, as in Figure 12 indicated.

After actuation, the actuating element 11 returns to the starting position 11.1 immediately and without manual intervention. For this purpose, a restoring means 12 designed as a spring is provided in the emergency button 10. After actuation, the switch 63 also returns to the first position 63.1 immediately and without manual intervention.

The emergency button 10 comprises at least a first circuit board 60. This makes it possible to design the emergency button 10 in a compact manner and with secure functionality.

The emergency button 10 has a construction height AH of less than 48 mm, preferably less than 45 mm, particularly preferably less than 43 mm, from a crest 32 of a front surface 19 of the actuating element 11 in the installation direction.

The switch 63 is attached to the first circuit board 60. The first and second circuits are interrupted on the first circuit board 60 by operating the switch 63.

The emergency button 10 also includes a second circuit board 61. The first, the second and the third emergency button processing units 20, 21, 22 are arranged on the second circuit board 61. The arrangement of the first, second and third emergency button processing units 20, 21, 22 is independent of whether the first, second and third emergency button processing units 20, 21, 22 serve as processing units 103, 104, 105 of the control device 100.

The opening of the first and second circuit can be detected wirelessly by the first and second emergency button processing units 20, 21, respectively. For this purpose, the first and second circuit boards 60, 61 are connected to one another via plugs 68.

The first and second boards 60, 61 are arranged at a fixed distance from each other. For this purpose, bolts 69 are provided, which fasten the first and second boards 60, 61 to one another at a fixed distance from one another via screws 70 (see Fig. Figure 13 ). The first and second boards 60, 61 are arranged parallel to one another.

The emergency button 10 includes a mounting plate 62. The mounting plate 62 is also arranged at a fixed distance from the first and second circuit boards 60, 61. For this purpose, bolts 71 are provided which connect the mounting plate 62 to the first circuit board 61 via screws 72.

The mounting plate 62 is used to attach to a flush-mounted box. The flush-mounted box can have a diameter of 60 mm and a depth of 41 mm. The part of the emergency button 10 that extends from the mounting plate 62 in the installation direction is referred to as the installation part 73. The built-in part 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm, particularly preferably less than 29 mm. This means there is enough space for cables in the flush-mounted box. The distance MP from a bottom side of the mounting plate 62 to a top side of the second circuit board 62 is less than 22 mm, preferably less than 20 mm, particularly preferably less than 17 mm. The mounting plate 62 can also be used for attachment to a cover element of a surface-mounted housing (not shown). The distances mentioned apply in particular to an emergency button in which the Bluetooth module 64 is attached to an underside of the second circuit board 61, unlike the illustration in the figures.

As described above, the cancellation operation performed directly on the emergency button 10 is carried out without rotating the operating member 11 and the switch 63. This makes it possible to use a switch 63 with a low height. The switch 63 is designed such that the switch 63 is rotation-free. The switch 63 has a height SH of less than 20 mm, preferably less than 17 mm, particularly preferably less than 15 mm.

The manner of the cancellation action and the low height of the switch 63 contributes to the low installation height AH of the emergency button 10.

The fact that the switch 63 is arranged centrally under the actuating element 11 and the actuating element 11 is guided eccentrically in the emergency button 10 also contributes to the low installation height AH of the emergency button 10.

Like in the Figures 14 and 15 shown, the actuating element 11 has rod-shaped guide means 35. The guide means 35 are guided in guide sleeves 65. The guide sleeves 65 are connected to the mounting plate 62. In order to achieve good guidance, one of the guide sleeves 65 extends through the first board 60.

The guide means 35 are arranged parallel to the switch 63. The guide means 35 prevent a rotational movement of the actuating element 11 about an imaginary axis 701, which runs in the actuating direction 700.

Due to the guide means 35 guided in the guide sleeves 65, the actuating element 11 can only be moved in translation.

The actuating element 11 has an actuating means 36. Like in the Figures 12 and 15 shown, the actuating means 36 is designed in the form of a circular cylinder. This ensures that the actuating means 36 always operates the switch 63. In particular, a first and a second switching element 74, 75 of the switch are always actuated simultaneously (see Fig. Figure 13 ). The first circuit is opened by the first switching element 74 and the second circuit is opened by the second switching element 75.

The actuating means 36 is formed with a hollow interior 38. A light source (not shown) is arranged in the switch 63. The light emitted from the light source is guided through the hollow interior 38 to the crest 32 of the front surface 19 of the actuator 11, where the light passes through the actuator 11. The tip 32 thus serves as an illuminating area 32 of the actuating element 11.

The actuating element 11 can include an opaque base body 33. The base body 33 can be provided with an opening, which differs from the representation in the figures. A translucent, in particular translucent, insert (not shown) can be arranged in the opening. The insert can be attached, in particular pressed, into the opening. As a result, the actuating element 11 can be manufactured particularly easily.

The front surface 19 is partially conical. The illumination area 32 forms the tip of the truncated cone. The illumination area 32 protrudes from a cover 14 of the emergency button 10 against the actuation direction 700. As a result, the light that leaves the illumination area 32 is clearly visible to the side of the emergency button 10.

The restoring means 12 has a cavity 37. The actuating means 36 of the actuating element 11 and the switch 36 with the first and second switching elements 74, 75 protrude in the cavity 37. This results in a space-saving arrangement.

The Bluetooth module 64 is arranged between the first and second circuit boards 60, 61. The Bluetooth module 64 is used for parameterization. Alternatively and not shown and in a more space-saving manner, the Bluetooth module 64 is attached to a side of the second circuit board 61 facing away from the actuating element 11. As a result, the distance between the first and second boards 60, 61 can be further reduced.

A tamper switch 66 is arranged on the first circuit board 60. Due to the low installation height, an actuation extension 67 of the tamper switch 66 is guided through the mounting plate 62. The actuation extension 67 rests directly on the cover 14 of the emergency button 10.

If the control device 100 is integrated in the emergency button 10, the emergency button 10 can include the functions described above despite the low installation height AH and can therefore be designed intelligently. The functions described above are carried out with the help of a program code that is stored in at least one of the processing units 103, 104, 105.

The emergency button 10 has a covering means 13. The covering means 13 is designed to be transparent and covers the front surface 19 of the actuating element 11. As a result, the covering means 13 prevents a user from directly touching the actuating element 11. The covering means 13 serves as a mental obstacle for the user.

The covering means 13 remains non-destructive when the emergency button 10 is pressed. When the emergency button 10 is actuated, the covering means 13 moves from an initial position 13.1 into an actuation position 13.II. Through the covering means 13, the actuating element 11 is only actuated indirectly by the user via the covering means 13.

The covering means 13 is arranged irremovably in the emergency button 10. This ensures that a user cannot remove the covering means 13 improperly.

The covering means 13 is firmly connected to the actuating element 11. For this purpose, the covering means 13 has extensions 27, which are in Figure 13 are shown. Like in the Figures 13 , 14 and 15 shown, the actuating element 11 has holes 28 through which the extensions 27 are guided and materially connected to the actuating element 11.

The actuating element 11 has a flange-like section 31 to which the covering means 13 is attached. The flange-like section 31 has the holes 28.

The flange-like section 31 serves as a stop of the actuating element 11 in the actuating direction 700. The actuating element 11 reaches the actuating position 11.II when the flange-like section 31 rests on the mounting plate 62 or on the guide sleeves 65.

The flange-like section 31 serves as a stop of the actuating element 11 against the actuating direction 700. The actuating element 11 reaches the starting position 11.I when the flange-like section 31 rests on a light guide 40. The light guide 40 holds the actuating element 11 against the force of the restoring means 12. For this purpose, the light guide 40 has a contact surface 51.

The light guide 40 is attached to the mounting plate 62. As a result, the actuating element 11 remains held against the force of the restoring means 12 even when the cover 14 is removed. The light guide 40 has a flange 52 with which the light guide 40 is fastened to the mounting plate 62 (see Fig. Fig. 17 ). The light guide 40 is through the same screws 72 are attached to the mounting plate 62, through which the mounting plate 62 is attached to the first circuit board 60.

Alternatively and not shown, the covering means 13 can be designed as an elastic film which spans the actuating element 11.

Due to the fixed connection, the distance between the operating position 11.II and the starting position 11.I and the distance between the operating position 13.II and the starting position 13.1 correspond to one another. Immediately after the end of the operation and without manual intervention, the covering means 13 is moved back into the starting position 13.1. The restoring means 12 is used for this purpose. The restoring means 12 transfers the covering means 13 indirectly via the actuating element 11 into the starting position 13.I.

The covering means 13 and the actuating element 11 each have a circular cross section. The cover 14 has a circular recess 15. The covering means 13 projects through the recess 15 counter to the actuation direction 700. The actuation element 11 also projects through the recess 15.

The recess 15, the actuating element 11 and the covering means 13 have a common imaginary axis 701. The recess 15, the actuating element 11 and the covering means 13 are arranged concentrically.

The covering means 13 has an actuation surface 17 which is spaced apart from the front surface 19 of the actuation element 11. The covering means 13 also has a side surface 16 which is designed at a distance from the side surface 18 of the actuating element 11.

Due to the spacing of the front surface 19 and the actuation surface 17, the transparent covering means 13 can protrude far out of the lid 14, while the partially opaque actuation element 11 protrudes only to a small extent from the lid 14. As a result, the light guide 40, which is essentially flush with the cover 14, remains clearly visible even to users standing at an angle in front of the emergency button 10. The light guide deviates a maximum of ±3 mm, preferably a maximum of ±2 mm, particularly preferably ±1 mm from a flat end with the cover 14.

Because the covering means 13 protrudes far from the cover 14, the emergency button 10 can be operated by the user with the flat of his hand. For this purpose, the covering means 13 is flat with the cover 14 in the operating position 13.II or the covering means 13 protrudes from the cover 14 in the operating position 13.II against the operating direction 700. In other words, the distance ABS from the starting position 13.I and the actuation position 13.II corresponds at most to the distance DF of an elevation 30 of the actuation surface 17 to the cover 14. The amount of the distance AB also corresponds to the Actuating position 11.II and the starting position 11.I at most the distance DF. In Figure 11 the distance ABS and the amount of the distance AB correspond to the distance DF.

The emergency button 10 includes lamps 41. The lamps 41 serve to display the unlocked and locked state of the door lock 200. If there are several emergency buttons 10, 1010, 2010, 3010, the lamps 41 show the unlocked and locked status of the assigned door lock or door locks 200, 1200, 2200, 3200. The lighting means 41 are arranged concentrically around the actuating element 11. For example, the unlocked state is indicated by green light and the locked state is indicated by red light. In particular, all lamps 41 emit the same light to indicate the locked and unlocked states, at least as long as there is no danger.

The lamps 41 can be controlled in at least two groups. Due to the different control, e.g. B. Patterns are possible through which further states of the security system 1 are displayed to the user. The additional display options mean that a large number of states can be displayed to the user and/or the operator in a compact and simple manner without additional display means. This increases the security of the security system 1.

In Figure 13 Of the eight individual lamps 41 present as an example, six individual lamps are shown, three of which are provided with the reference numbers 41a, 41b, 41c. The individual lamps are referred to below as 41a, 41b, 41c etc.

Each of the individually controllable groups of lamps 41 can only include a single lamp 41a, 41b, 41c, etc. In the exemplary embodiment Figures 11 to 17 Each light source 41a, 41b, 41c, etc. can be controlled individually. Each light source 41a, 41b, 41c, etc. is designed as an RGB LED. The lamps 41a, 41b, 41c, etc. can be controlled in such a way that each lamp 41a, 41b, 41c, etc. can emit at least four different, preferably at least five different colors. This can be e.g. B. be red, blue, yellow, green and pink light.

The lamps 41 are controlled by the third emergency button processing unit 22. For this purpose, the emergency button processing unit 22 and the lamps 41 are connected to a ring bus (not shown).

The lamps 41 are arranged on the first circuit board 60. The acoustic alarm generator 23 is also arranged on the first circuit board 60. The acoustic alarm generator 23 is controlled by the third emergency button processing unit 22.

Are several door locks 200, 1200 assigned to the emergency button 10, such as. Am Figure 4 shown, at least two options are conceivable. On the one hand, the emergency button 10 can only display the unlocked state when all door locks 200, 1200 assigned to the emergency button 10 are in the unlocked state. The unlocked state is only displayed when the entire escape door width of the two door leaves 3, 4 is available for escape. Alternatively, the emergency button 10 indicates the unlocked state when one of the door locks 200, 1200 or all door locks of a door leaf 3, 4 are in the unlocked state. This means that the possibility of escape is indicated as early as possible when one of the door leaves 3, 4 is already unlocked. The options can be selected by the operator. For this purpose, e.g. B. a switch (not shown) may be provided in the security system 1.

Another state of the security system 1, which is indicated by the lighting means 41 that can be controlled in groups, is the danger situation. The lamps 41 can indicate whether a fire alarm signal is present or whether an actuation signal has been generated.

The lamps 41 can be controlled in such a way that the progress of the time delay of unlocking after the activation signal has been generated by the lamps 41 is displayed. Here, for example, emit B. increasingly fewer lamps 41 light of one color, especially red light.

As a further state of the security system 1, which can be represented by the lamps 41, an error can be represented by the lamps 41. The error that can be represented in this way can be an error in the security system 1. For example, it can be indicated that the control device 100, the door lock control 200 or the first or second emergency button processing unit 20, 21 of the security system 1 is not operational, defective, failed, deliberately switched off or removed. The error can be an error in the alarm system connected to the security system 1, which is not operational, defective, failed, deliberately switched off or removed.

The light guide 40 includes several light guide areas 44 (see the Figures 16 and 17 ). Each of the lamps 41a, 41b, 41c, etc. is assigned a light guide area 44. The light guide 40 can be mentally divided into the light guide areas 44. Recesses 46 are provided between the light guide areas 44. Through the recesses 46, the light essentially remains in the light guide areas 44.

Each light guide area 44 has a forwarding section 48. The forwarding section 48 is arranged above the lamps 41 in the transmission direction 702. The transmission direction 702 takes place opposite the actuation direction 700. The forwarding section 48 serves to guide light up to a spreading Section 45 of the light guide area 44. The spreading section 45 spreads in the transmission direction 702.

The spreading section 45 adjoins the forwarding section 48 in the transmission direction 702. The spreading section 45 serves to widen the light beam of the emitted light. The forwarding section 48 widens less than the spreading section 45.

The light guide 40 is formed in one piece. The light guide 40 is made of the same material, in particular monolithic. The light guide 40 is made of translucent material.

The light guide areas 44 have a connecting section 49. The connecting section 49 adjoins the spreading section 45 in the transmission direction 702. The connecting sections 49 of the light guide regions 44 are connected to one another in one piece in such a way that the one-piece light guide 40 of uniform material results.

The connecting sections can have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the light from one of the lamps 41a, 41b, 41c, etc. is almost limited to a lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h on the surface 47 of the light guide 40 facing the user. Each light guide area 44 includes a lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h.

The surface 47 of the light guide 40 corresponds to a circular ring. The lighting areas 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are designed as sectors of the circular ring. By emitting the light from a lamp 41a, 41b, 41c, etc., the associated lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h is illuminated. The circular ring encloses the actuating element 11.

The lamps 41 can be controlled in such a way that at least one lamp 41a, 41b, 41c, etc. emits the light of one color and at least one further lamp 41a, 41b, 41c, etc. emits the light of a different color at the same time. For example, in this way the luminous areas 50a, 50b, 50e, 50f can display light of one color and the luminous areas 50c, 50d, 50g and 50h can display light of another color. While the lighting areas 50a, 50b, 50e, 50f z. B. are continuously illuminated, the lighting areas 50c, 50d, 50g and 50h can be illuminated by lamps 41 that emit flashing light.

Are e.g. B. initially the lighting areas 50a, 50b, 50e, 50f are illuminated by the light of a first color and the lighting areas 50c, 50d, 50g and 50h are illuminated by the light of a second color; then the lighting areas 50a, 50h, 50d, 50e are illuminated by the light of the first color and the luminous areas 50b, 50c, 50f and 50g of the light of the second color; Then the lighting areas 50h, 50g, 50d, 50c are illuminated by the light of the first color and the lighting areas 50a, 50b, 50e and 50f are illuminated by the light of the second color, the impression of a surrounding color window is created.

The opposite lighting areas 50, ie the lighting areas 50 that lie on a straight line leading through the imaginary axis 701, in Figure 14 namely 50a and 50e or 50b and 50f or 50c and 50g or 50d and 50h, are preferably illuminated in the same way, ie in the same color and the same flashing frequency. The pattern can therefore also be seen by users standing diagonally in front of the emergency button 10, even if at least one of the opposite lighting areas 50 is covered by the actuating element 11.

So that the light guide 40 is covered as little as possible, the illuminating region 32 protrudes above the light guide 40 by a maximum of 10 mm, preferably a maximum of 7 mm, particularly preferably a maximum of 5 mm.

The emergency button 10 can include a brightness sensor (not shown). The brightness sensor measures the ambient brightness of the emergency button 10. If the ambient brightness decreases, the light intensity of the light emitted by the lamps 41 is also reduced.

Parameters can be set via a mobile communication device via the Bluetooth module 64, e.g. B. in which way the lamps are to be controlled and in what state of the security system 1. The parameters include the flashing frequencies of the lamps 41, whether a continuous or flashing light should be emitted, which state should be indicated by which color. After parameterization, the settings are stored in an electronic memory of the security system 1, in particular the control device 100. The display of certain states may also not be selectable for the operator for safety reasons and may be permanently stored in the electronic memory. The operator can select states of the security system 1 himself, which the operator would like to display through the lamps 41. For this purpose, colors and/or patterns can be emitted by the lighting means 41, which are not assigned to any predetermined state. For example, the operator can choose which status the operator would like to have blue light indicate. In addition to parameterization via the Bluetooth module 64, parameterization via the monitoring device 301 is possible.

The change in the state of the door lock 200 is then displayed after the door lock controller 201 sends the change of state to the control device 100 communicated. The control device 100 then controls the lamps 41 or causes the lamps 41 to be activated.

When the security system 1 is started up, several initialization views are generated one after the other by the lamps 41 at fixed time intervals. Possible enabled functions of the control device 100 are displayed in one of the initialization views. In a second initialization view, the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 that can be integrated into the security system 1 are displayed, with the status error-free/faulty/not present being displayed. The status of inputs and outputs is displayed in a third initialization view.

The central emergency button 302 is constructed almost identically to the emergency button 10. In particular, the actuation element 11 corresponds in function and structure to the emergency button actuation element 306. The switch 63 corresponds to the emergency button switch 307. The central emergency button 302 also includes a reset means corresponding to the reset means 12. The central emergency button 302 comprises a first and a second circuit board and/or a mounting plate, which are constructed and connected to one another in accordance with the first circuit board 60, the second circuit board 61 and the mounting plate 62, respectively. On the first circuit board of the central emergency button 302, the alarm transmitter 309 and the lamps 313 are arranged corresponding to the alarm transmitter 23 and the lamps 41. The first to third emergency processing units 303, 304, 305 are arranged on the second circuit board of the central emergency button 302. The emergency button switch 307 ends on the first circuit board of the central emergency button 302. When the emergency button switch 307 is actuated, a first and a second circuit on the first circuit board is opened, which can be detected wirelessly by the first and second emergency processing units 303, 304. For this purpose, the first and second boards are connected via connectors. The light guide of the central emergency button 302 corresponds in structure and function to the light guide 40. The lamps 313 can be controlled in accordance with the lamps 41.

It is conceivable that in the central emergency button 302 a covering means 13 corresponding to the covering means 13 is designed differently or is missing. In particular, the lamps 313 do not serve to visually represent a locking state of an emergency button 10. The lamps 313 serve to visually represent the first and second delay periods and/or to visually represent that a lifting treatment is possible.

The security system 1 according to the invention does not necessarily have to have all the functions that are in the description of at least one of the Figures 1 to 10 is mentioned, can carry out. Rather, the functions that are in the description are in the security system 1 at least one of the Figures 1 to 10 are mentioned, deposited. However, in order to be able to carry out the functions, the functions must be activated. This is done by the control device 100 communicating with a communication module 801. The communication module 801 is designed as a chip card. The communication module 801 includes a memory in which at least one code for activating at least one function is stored. The communication module 801 includes a microprocessor that is only used to encrypt the code. The communication module 801 is inserted into a receptacle 77 of the control device 100 (see Fig. Fig. 18a ). Due to the arrangement in the receptacle 77, the communication module 801 is held mechanically in the receptacle 77 in a positive and/or non-positive manner. At the same time, the communication module 801 is electrically contacted by the arrangement in the receptacle 77, so that the control device 100 can read out the at least one code from the communication module 801. The control device 100 and the communication module 801 are wired (not shown).

To read the code, the control device 100 must first gain access to the communication module 801 using a password. The control device 100 must decrypt the at least one code before the function can be activated. By activating the function, the program code with which the function can be executed is activated.

To activate the function, the program code with which the function can be executed is activated. If the program code is stored on the emergency button 10 and the control device 100 and the emergency button 10 are connected to one another by the first bus system 400, the control device 100 initiates an activation in the emergency button 10 via the first bus system 400 after reading out the code of the communication module 801. Is If the program code is stored in the door locking control 201, the control device 100 initiates an activation in the door locking control 201 via the first bus system 801 after reading out the code of the communication module 801.

A code can unlock one function or several functions, especially function blocks.

In the parameterization program, only parameters for the functions that were previously released can be set. Only these parameters are displayed on the screen.

The function only remains activated if the code is repeatedly read out of the communication module 801, especially at regular intervals. For this purpose, predetermined, non-adjustable time intervals can be stored in the control device 100. After the specified time interval has elapsed, the control device 100 blocks the function if the associated code could not be read from the communication module 801. If the function is carried out by the emergency button 10, which is connected to the control device 100 via the first bus system 400, the control device 100 causes the function to be blocked via the first bus system 400. If the function is carried out by the door lock control 201, which is connected to the control device 100 via the first bus system 400, the control device 100 causes the function to be blocked via the first bus system 400.

Several codes Code1, Code2 for different functions can be stored on the communication module 801 (see Fig. Fig. 18a ).

If an additional function is to be enabled, it is conceivable to remove the communication module 801 from the receptacle 77 and insert a further communication module 802 into the receptacle 77 (see Fig. Fig. 18b ). The communication module 801 is referred to below as the mother module 801. The further communication module 802 is referred to below as an auxiliary module. The auxiliary module 802 is designed as a chip card. The auxiliary module 802 includes a memory in which at least one code for activating the additional function is stored. The auxiliary module 802 includes a microprocessor that is only used to encrypt the code. The code Code3, which is stored on the auxiliary module 802, is read by the control device 100 (see Fig. Fig. 18b ). To read the code Code3, the control device 100 must first gain access to the auxiliary module 802 using a password. The control device 100 must decrypt the at least one code before the function can be activated. The code Code3 of the auxiliary module 802 is stored in a memory 107 of the control device 100 (see Fig. Fig. 18c ). The code of the auxiliary module 802 is then deleted on the auxiliary module 802 (see. Fig. 18c ). The auxiliary module 802 is removed from the receptacle 77. The mother module 801 is then inserted into the receptacle 77 (see Fig. Fig. 18d ). The code of the auxiliary module 802 is stored on the mother module 801 (see. Fig. 18d ). The code is deleted from the memory of the control device 100 (see Fig. Fig. 18d ). The additional function is activated.

In the case of a mother module 801, however, the code is not stored in the control device 100 (see Fig. Fig. 18a, d ). With a mother module 801, the code is not deleted. Rather, the mother module 801 serves for a permanent arrangement in the receptacle 77. The codes stored on the mother module 801 are Code1, Code2, Code3 read out repeatedly. The control device 100 decides based on an identifier K801, K802 of the communication module 801, 802 whether it is a mother module 801 or an auxiliary module 802. The identifier K801, K802 is stored electronically in particular on the mother module 801 and the auxiliary module 802. The identifier K801 of the mother module 801 differs from the identifier K802 of the auxiliary module 802.

The insertion and removal from the receptacle 77 is done manually. The remaining processes take place automatically.

Insertion and removal from the receptacle 77 can be reserved for an operator. For this purpose, the receptacle 77 is arranged so that it is inaccessible to an unauthorized user. In particular, the tamper switch 66 is activated in the event of an unauthorized attempt to access the recording. The recording can be between the first board 60 and the second board 61, e.g. B. be arranged on an underside of the first circuit board 60.

In order for the security system 1 to become functional, a mother module 801 must be arranged in a receptacle 77 of the security system 1. In order for the security system 1 to remain functional for longer than the specified time interval, the mother module 801 must remain in the receptacle 77.

Each emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 includes a receptacle 77. Exactly one mother module 801 is necessary and provided for each first bus system 400, 400' of the security system 1. Only if the mother module 801 is inserted into the receptacle of an emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 does the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 serve at the same time as a control device 100 for the corresponding first bus system 400, 400 '. In the case of the remaining emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 of the security system 1, which do not contain a mother module 801, the same program codes are stored as in the control device 100. However, without the mother module 801, the program codes are not activated, so that the remaining emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 cannot serve as control device 100. Because the mother module 801 is located in the receptacle 77, the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 serves as a control device 100.

If the control device 100 is to be designed separately from the emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 and the door locks 200, 200', 1200, 1200', 2200, 2200', 3200, then a mother module becomes 801 is inserted into a receptacle 77 of the processing electronics 101. Because the mother module 801 is located in the receptacle 77, the processing electronics 101 is able to carry out the functions of the control device 100.

If the security system 1 comprises several subsystems 5, 6 and thus several first bus systems 400, 400', the security system 1 comprises exactly the same number of mother modules 801, 801' as there are subsystems 5, 6 (see. Figure 10 ). The emergency button 10 ', which communicates with the mother module 801', and the processing electronics 101 of the control device 100 Figure 10 , which communicates with the mother module 801, are also intended to be connected to the second bus system 401.

The mother module 801, 801' can contain 5.6 different codes for each subsystem and thus enable different functions. So can e.g. B. the mother module 801 'of the second subsystem 6 includes a code for the selective assignment of the door locks 200', 1200', 2200' to the emergency buttons 10', 1010', 2010'. However, the code for a selective assignment of door locks to emergency buttons on the mother module 801 is not necessary for subsystem 5.

The communication module 801, 801', 802 can have a gap 803 through which a particularly self-adhesive tape is guided. The self-adhesive tape is used to manually remove the communication module 801, 801', 802 from the receptacle 77. The self-adhesive tape includes information about the functions that can be unlocked by the codes stored on the respective communication module 801, 801', 802. The information can be a color identifier, a QR code and/or a bar code.

Alternatively, the communication module 801, 801', 802 can be designed as a chip card with a flexible section. Part of the chip card that protrudes from exception 77 can contain the information, i.e. H. the color identification, the QR code and/or the bar code.

A mother module 801 once used in a security system 1 can be used again in a functional manner in a receptacle 77 of another security system 1 according to the invention.

Claims (15)

1. A safety system (1) for unlocking at least one door lock (200), in particular for emergency exit security,

   wherein the safety system (1) comprises a trigger element (10), in particular an emergency button (10),

   wherein the trigger element (10) comprises a manually actuatable actuating element (11), wherein an actuation signal for unlocking the door lock (200) can be generated by actuating the actuating element (11),

   wherein the actuating element (11) is designed for mechanical non-latching actuation,

   wherein the safety system (1) comprises an electronic device (207) which is designed, as a result of the actuation signal, to electronically prevent by way of the electronic device (207) a locking mechanism (205) of the door lock (200) from being actuatable for locking without the existence of a cancellation condition,

   characterized in that the safety system comprises a door locking controller, wherein the door locking controller (201) is connected to the trigger element (10) via a first bus system (400),

   wherein the trigger element (10) is designed,

   to be stored electronically until the cancellation condition exists,

   that an actuation signal has been generated, wherein the trigger element (10) is designed

   to repeatedly send a signal that an actuation signal has been generated to the door locking controller (201) until the cancellation condition exists,

   wherein the trigger element (10) is designed,

   to electronically store in a first trigger element processing unit (20) and redundantly in a second trigger element processing unit (21) the fact that an actuation signal has been generated.
2. The safety system (1) according to claim 1, characterized in that the actuation of the actuating element (11) can be carried out in such manner that the actuating element (11) can be moved from a starting position (11.1) into an actuating position (11.II), wherein in particular the actuating element (11) can be moved from the actuating position (11.11) into the starting position (11.1) after actuation without manual action, preferably by a restoring means (12).
3. The safety system (1) according to claim 1 or 2, characterized in that a first program code is stored in the electronic device (207), wherein the first program code prevents the locking mechanism (205) from being actuatable for locking as a result of the generation of the actuation signal without the existence of the cancellation condition, wherein the first program code is stored in a first processing means (202) of the electronic device (207) and a second program code is stored redundantly in a second processing means (203) of the electronic device (207), wherein the first program code and the second program code each prevent the locking mechanism (205) from being actuatable for locking without the existence of the cancellation condition, wherein the first and the second processing means (202, 203) are in particular each designed as a microprocessor or as a microcontroller.
4. The safety system (1) according to one of the preceding claims, characterized in that the safety system (1) comprises a door locking controller (201) for actuating the locking mechanism (205), wherein the door locking controller (201) comprises the electronic device (207).
5. The safety system (1) according to one of the preceding claims, characterized in that after the actuation signal has been generated, the trigger element (10) causes the door locking controller (201) to actuate the locking mechanism (205) for unlocking with a time delay.
6. The safety system (1) according to one of the preceding claims, characterized in that the electronic device (207) comprises an electronic hold-open device, wherein the electronic hold-open device can be transferred to an actuation state as a result of the actuation signal and the electronic hold-open device can be transferred to a starting state when the cancellation condition is met.
7. The safety system (1) according to one of the preceding claims, characterized in that in order to meet the cancellation condition, a cancellation signal can be generated by a cancellation action carried out directly on the trigger element (10), in particular on the actuating element (11).
8. The safety system (1) according to one of the preceding claims, characterized in that the cancellation signal can be generated by actuating the actuating element (11), wherein the cancellation signal corresponds to the actuation signal.
9. The safety system (1) according to one of the preceding claims, characterized in that the safety system (1) comprises an authentication device (500) assigned to the trigger element (10) or is in communicative connection with the authentication device (500) assigned to the trigger element (10), wherein in order to meet the cancellation condition, authentication takes place at the authentication device (500), in particular receiving a positive identification signal by the trigger element (10), wherein in order to meet the cancellation condition, both the generation of the cancellation signal and the authentication at the authentication device (500), in particular receiving the identification signal, is necessary, wherein in order to meet the cancellation condition, a predefined time sequence and/or order must be adhered to when generating the cancellation signal and authenticating, in particular receiving the identification signal.
10. The safety system (1) according to one of the preceding claims, characterized in that there are a plurality of options for meeting the cancellation condition, wherein at least one first door state monitoring device (204) and a second door state monitoring device (206) are provided for a door leaf (2, 3, 4) and/or for a door lock (200), wherein a possible condition for meeting a cancellation condition includes that neither a signal from the first door state monitoring device (204) nor from the second door state monitoring device (206), which are provided for a door leaf (2, 3, 4) and/or a door lock (200), have been received about the opening of the door leaf (2, 3, 4) in the safety system (1) within a predetermined time interval since the actuation signal was generated.
11. The safety system (1) according to one of the preceding claims, characterized in that the safety system (1) comprises a central emergency exit controller (300), wherein a permissible cancellation signal can be generated at the central emergency exit controller (300) to meet a cancellation condition after the predetermined time interval has elapsed and the cancellation signal or a message about the cancellation signal can be sent to the electronic device (207) via at least one bus system (400, 401), wherein in particular authentication of an operator at an identification device (312) of the central emergency exit controller (300) is necessary to generate the cancellation signal.
12. The safety system (1) according to one of the preceding claims, characterized in that the cancellation signal, which is generated by an action carried out directly on the trigger element, is only necessary to meet the cancellation condition if the door was opened after the actuation signal was generated.
13. The safety system (1) according to one of the preceding claims, characterized in that the cancellation condition can be met in that

    a.) since the actuation signal was generated, no signal from the door state monitoring device (204, 206) about the opening of a door leaf (2, 3, 4) has been received in the safety system (1), in particular by the electronic device (207), within the predetermined time interval or neither a signal from the first door state monitoring device (204) nor from the second door state monitoring device (206) about the opening of the door leaf (2, 3, 4) has been received in the safety system (1), in particular by the electronic device (207), within a predetermined time interval since the actuation signal was generated and

    b.) the predetermined time interval has elapsed and it is stored in the safety system (1) that the existence of the conditions a.) and b.) is permissible for meeting the cancellation condition, wherein in particular it can be individually stored for a plurality of trigger elements (10, 10', 1010, 1010', 2010, 2010', 3010) and/or a plurality of door locks (200, 200', 1200, 1200', 2200, 2200', 3200) of the safety system (1) as to whether the existence of the conditions a.) and b) is permissible for meeting the cancellation condition.
14. The safety system (1) according to one of the preceding claims, characterized in that the cancellation condition can be met in that

    a.) since the actuation signal was generated, no signal from the door state monitoring device (204, 206) about the opening of a door leaf (2, 3, 4) has been received in the safety system (1), in particular by the electronic device (207), within the predetermined time interval or neither a signal from the first door state monitoring device (204) nor from the second door state monitoring device (206) about the opening of the door leaf (2, 3, 4) has been received in the safety system (1), in particular by the electronic device (207), within a predetermined time interval since the actuation signal was generated and

    b.) the predetermined time interval has elapsed and

    c.) the cancellation signal is generated at the central emergency exit controller and it is stored in the safety system (1) that the existence of the conditions a.) to c.) is permissible for meeting the cancellation condition, wherein in particular it can be individually stored for a plurality of trigger elements (10, 10', 1010, 1010', 2010, 2010', 3010) and/or a plurality of door locks (200, 200', 1200, 1200', 2200, 2200', 3200) of the safety system (1) as to whether the existence of the conditions a.) to c.) is permissible for meeting cancellation condition.
15. A method for unlocking at least one door lock (200), in particular for emergency exit security, wherein a trigger element (10), in particular an emergency button (10), comprises a manually actuatable actuating element (11), and an actuation signal for unlocking the door lock (200) is generated by actuating the actuating element (11), wherein an actuation of the actuating element (11) takes place in a mechanical non-latching manner, wherein

    as a result of the actuation signal, an electronic device (207) electronically prevents a locking mechanism (205) from being actuated for locking without the existence of a cancellation condition, characterized in that the safety system comprises a door locking controller,

    wherein the door locking controller (201) is connected to the trigger element (10) via a first bus system (400),

    wherein the trigger element (10) electronically stores that an actuation signal has been generated until the cancellation condition exists, wherein the trigger element (10) repeatedly sends a signal that an actuation signal has been generated to the door locking controller (201) until the cancellation condition exists,

    wherein the trigger element (10) electronically stores in a first trigger element processing unit (20) and redundantly in a second trigger element processing unit (21) that an actuation signal has been generated.

Images