ES2907554T3 - Security system - Google Patents

Abstract

Security system (1) for unlocking at least one door lock (200), in particular a lock for emergency exits, the security system (1) comprising an activating element (10), in particular an emergency button (10), the activating element (10) comprising an actuating element (11), which can be operated manually, and an actuating signal for unlocking the door closure (200) can be generated by actuating the actuating element (11), the security system (1) comprising an electronic device (207) and being electronically prevented as a consequence of the actuation signal by means of the electronic device (207) from being able to control a locking mechanism without the presence of a cancellation condition. (205) of the door closure (200) for locking, the actuation of the actuation element (11) being carried out mechanically and without interlocking, the actuation of the actuation element (11) being possible in such a way that the actuation element (11) ) can be moved from a starting position (11.I) to an actuation position (11.II), the actuation element (11) being able to move after actuation without manual action from the actuation position (11.II) to the starting position (11.I), being able to generate, to reach the cancellation condition, a cancellation signal by means of a cancellation action carried out directly on the activating element (10) and comprising the security system (1). an authentication device (500) associated with the activating element (10) or being communicatively connected to the authentication device (500) associated with the activating element (10), the cancellation signal having been generated to achieve the cancellation condition and authentication having also been carried out in the authentication device (500), characterized in that the cancellation signal can be generated by actuating the actuation element (11).

Description

DESCRIPTION

Security system

The invention relates to a security system for unlocking at least one door lock, in particular for securing emergency exits, the security system comprising an activating element, in particular an emergency button, the activating element comprising a drive element, whereby a drive signal for unlocking the door lock can be generated by actuation of the drive element. The invention also relates to a method for unlocking at least one door lock, in particular for securing emergency exits, the activating element, in particular an emergency button, comprising an actuating element, and being generated by a drive of the drive element a drive signal for unlocking the door closer. Furthermore, the invention relates to a use of the security system according to the invention.

Security systems for securing emergency exits are known. The security systems comprise at least one emergency button configured in a latching manner and a door lock. If the actuating element of the emergency button is actuated, the actuating element is held in an actuating position. In the actuated position, an electrical circuit is interrupted, such that a door lock is transferred to an unlocked state. If a locked state of the door closer is to be restored, a user, ie an authorized person, must manually transfer the emergency button on site by rotating the actuating element from the actuating position to a starting position.

According to DIN EN 13637, it is also permissible to use non-locking activating elements. In this sense, it is problematic that the door lock, despite the fact that a danger persists, can be locked again and, therefore, the emergency exit can no longer be available for people who are fleeing from the danger.

DE 102014 113647 A1 discloses an emergency button designed with a scrollable screen where a main alarm can be triggered by a pre-alarm and a continuous touch of a screen. An alarm opening mode simulates a mechanical interlock of the emergency button.

EP 2725 172 A2 discloses a security system in which alarm triggering equipment is connected via a bus system with locking equipment.

Therefore, the object of the invention is to present a security system and a method for unlocking at least one door lock that guarantees the security of the security system also by using a non-locking actuating element.

This object is achieved by a security system according to independent claim 1. Advantageous developments of the security system are indicated in the dependent device claims, the description and the figures. Furthermore, the invention is also achieved by the features of independent method claim 15. Features and details that are described in connection with the security system are fulfilled in this respect also in connection with the method according to the invention and vice versa. In this respect, the features mentioned in the description and in the claims may be essential for the invention in each case individually or in combination with one another.

The objective deduced and indicated above is achieved, starting from the safety system described at the beginning, because the safety system comprises an electronic device and, as a consequence of the activation signal, by means of the electronic device it is electronically prevented that, without the presence of an abort condition, a door latch locking mechanism can be controlled to lock. In other words, the actuation signal causes, with the help of the electronic device, in particular the electronic device, to electronically prevent, without the presence of an abort condition, a latch lock mechanism being controlled to lock. of door Thus, until the cancellation condition is reached, the control for the lock of the lock mechanism is prevented. In this way, it is achieved that, after an actuation of the drive element for unlocking the door lock, a locking of the door lock is reliably prevented. Thus, by electronically preventing, in particular as a result of the actuation signal, the locking mechanism from being controlled to lock without the abort condition being achieved, the safety of the safety system can be ensured. By electronically blocking, the security of the security system can be easily guaranteed. In particular, no additional mechanical components are necessary and/or the electronic hindrance is effected statically. "As a result of the actuation signal" means in this sense in particular that, after the generation of an actuation signal, a new blocking is prevented regardless of whether the actuation signal is still generated or not.

After achieving the cancellation condition, the security system again allows a control for blocking. It may be that, after the abort condition is achieved, the lockout mechanism is controlled for lockout. In this sense, the blocking mechanism is controlled in particular after the achievement of the condition cancellation directly and automatically for blocking. In particular, by achieving the cancel condition, the lockout mechanism is caused to be controlled for lockout. Thus, by achieving the cancel condition, the door lock is transferred to the locked state.

Locking is understood to be the transfer of the door lock to the locked state. Unlocking means the transfer of the door lock to the unlocked state.

The security system may comprise the locking mechanism.

The locking mechanism can be designed, for example, electromechanically or purely electromagnetically. The locking mechanism comprises, for example, at least one coil. A control of the locking mechanism for locking or unlocking can be performed in particular at a disconnection or connection of an electrical power supply. The electrical power supply may serve to supply the coil with electrical power.

An electromagnetic locking mechanism is described by way of example in DE10050111 C1. In the unlocked state, for example, no magnetic forces act on the door. In the locked state, for example, magnetic forces act on a door.

In the locked state, an electromechanical locking mechanism has a mechanical connection to the door. In the unlocked state, the mechanical connection is canceled or can be canceled.

Thus, the electromechanical locking mechanism can have, for example, a closing element, ie a bolt or a door latch, which is in a retracted position in the unlocked state of the door lock. In the retracted position, the closing element is disengaged from the door. In the locked state, the closing element is engaged with the door. In another alternative to an electromechanical locking mechanism, the locking mechanism is constructed in the style of a door opener. That is, the locking mechanism comprises a latch element. In the locked state of the door closer, a door latch is engaged with the locking mechanism. In the unlocked state, the latch element releases the door latch in such a way that the door latch, in particular by pressing on the door, can disengage from the locking mechanism.

Preferably, a deactivation of the electrical power supply leads to an unlocked state of the door lock. Thus, the control of the locking mechanism for the unlocking of the door closure is carried out by deactivating the electrical power supply. Preferably, an activation of the electrical power supply leads to a locked state of the door lock. Thus, control of the locking mechanism for locking is performed by turning off the power supply.

The security system may alternatively be configured without the locking mechanism. In this case, the security system only controls the locking mechanism. For example, the security system turns on or off the power supply for the locking mechanism or causes an on or off power supply.

A "control for locking or unlocking" also occurs if the security system obtains information about the status of the locking mechanism. A "control for locking or unlocking" also occurs when, as detected by the information, the locking mechanism does not correspond to the nominal state and therefore an alarm is issued and/or a new attempt is made to reach the nominal state.

The security system may comprise a door lock control. If a door lock control is provided, preferably the door lock control controls the locking mechanism. To do this, the door lock control can turn on or off the electrical power supply for the lock mechanism.

The security system may comprise the door closing control, but not the locking mechanism. In this case, the door lock control is configured as a door lock adapter. The door lock adapter serves to use the security system according to the invention on already mounted locking mechanisms.

The door lock comprises the locking mechanism and, if present, the door lock control. In a particularly preferred manner, the security system comprises the door lock.

The door lock or locking mechanism may be integrated into a mechanical lock.

Hereinafter, a distinction will be made between user and operator. A user can be anyone who uses the security system. A user can be, for example, a guest who wants to escape through the door secured by the security system. An operator serves to operate the security system. The operator has access to a surveillance device of the security system and/or can be authenticated with respect to the security system, in particular to manage the security system. The surveillance device can be a PC or a screen. By means of the operator, for example, the cancellation condition can be reached. By actuation signal is meant in the following the signal that has been generated by the user through actuation of the actuating element for unlocking the door lock and releasing the emergency exit.

The security system serves in particular to secure emergency exits. The safety system therefore serves to release the emergency exit. That is, actuation of the actuating element leads to unlocking without user authentication. Unlocking can be done directly or delayed.

The activating element is preferably configured as an emergency button. In this case, the actuating element corresponds to the actuating element of the emergency button. Alternatively, the activating element may be configured as a panic bar assembly. The actuating element is configured in this case as a panic bar. The activating element can be configured as a hardware set. In this case, the drive element is designed, for example, as a door handle.

Preferably, the door closing control and the activating element are connected to a first bus system. A connection to a bus system is meant in the following as a direct connection, so that a component connected to the bus system must be considered a bus system participant with its own bus address. The door closing control and the activating element are connected to each other via the first bus system.

The activating element can directly control the locking mechanism for unlocking. Alternatively and particularly preferably, the activating element causes a control of the locking mechanism for unlocking. By triggering a control is meant in particular the sending of a message, for example via the first bus system, containing information and/or a command that causes the direct or indirect recipient of the message to carry out the control. The sender of the message initiates the control. Thus, by provoking control is meant indirect control. Thus, for example, the activating element may send a message via the first bus system to the door lock control, in response to which the door lock control controls the lock mechanism for unlocking. The activating element can cause, in particular in a delayed manner, the unlocking of the locking mechanism.

According to the invention, it is provided that the drive of the drive element can be carried out in such a way that the drive element can be moved from a starting position to a drive position. Thus, the drive element can be moved mechanically. Preferably, the actuation signal is generated in the actuation position. In this way, the actuation element can give information to the user about the actuation.

Furthermore, it is provided according to the invention that the actuating element, after actuation, always without manual action, preferably by means of a restoring agent, can be moved from the actuating position to the starting position. The drive element can be moved by the recovery agent, for example after a recovery agent check or directly after the completion of the manual actuation into the starting position. The recovery agent may be a spring.

A drive of the drive element always takes place mechanically without locking. In this sense, during actuation, the actuating element can be held in the starting position or moved directly after manual actuation into the starting position. In this way, it is achieved that, even without a manual return of the actuating element, the actuating element can be actuated again. Re-actuation of the actuating element can only trigger unlocking of the door lock if the door lock is not already in the unlocked state. If the door closer is already in the unlocked state and the actuating element is actuated, the locking mechanism in particular is not controlled. The door lock remains in the unlocked state.

The actuating element preferably has an illumination region. The illumination area is preferably provided centrally on the drive element. With the help of the illumination zone, light of one color, in particular red light, is always emitted. A light source that is arranged behind the drive element can shine through the illumination area.

Provision may be made for a first program code to be stored in the electronic device, preventing the first program code, as a consequence of the generation of the actuation signal, from being controlled for its cancellation without the presence of the cancellation condition. lock the locking mechanism. In this way, the object according to the invention can be achieved in a simple manner. In particular, the first program code is stored in a first digital processing means of the electronic device. A second program code may be redundantly stored in a second processing means of the electronic device. By means of the first program code and by means of the second program code it can be prevented in each case, as a result of the generation of the actuation signal, that, without the presence of the condition cancellation, the locking mechanism can be controlled to lock. This ensures security against failure.

The first and/or the second processing means can each comprise a processor. The first and/or the second processing means can be configured, for example, in each case as microprocessors or microcontrollers. The first and/or the second processing means can each comprise a non-volatile memory.

The electronic device can be found, for example, in the activating element, in particular in the emergency button. Particularly preferably, however, the door lock comprises, in particular in the door lock control, the electronic device. In this way, the door closing control as a consequence of the actuation signal prevents that, without the presence of an abort condition, the locking mechanism can be controlled for locking. Thus, locking is prevented in the event of danger where the safety-relevant control of the locking mechanism is carried out.

The door closing control may comprise the first and second digital processing means. The first and second processing means serve to control the locking mechanism independently of each other. In this way, redundancy is achieved.

The activating element, in particular the emergency button, may comprise an electronic unit. The electronic unit serves as control of the activating element. The electronic unit may comprise a first and a second digital trigger element processing unit, in particular a first and a second emergency button processing unit. The first and/or the second trigger element processing unit may each comprise a processor. The first and/or the second driver processing unit can be configured as microprocessors or microcontrollers. The first and second trigger element processing units may each comprise a non-volatile memory. Additionally, the electronic unit may comprise a third trigger element digital processing unit.

The first and second trigger element processing units can in each case detect a drive signal independently of one another. In this sense, the first trigger element processing unit records a first drive signal and the second trigger element processing unit records a second drive signal. In response to this, the first and second actuating element processing units can in each case independently of one another trigger control of the door locking mechanism for unlocking by means of the first bus system. In this regard, in particular at least one message is sent in which the first and/or second trigger element processing unit reports the presence of the first or second drive signal via the first bus system to the controller. door lock. In this regard, in particular the first trigger element processing unit informs the first processing means and the second trigger element processing unit informs the second processing means. In this way, in particular, both the first and the second processing means control the locking mechanism for unlocking, that is, they deactivate the power supply.

A signal of life from the first and second trigger element processing units is preferably sent regularly to the door closing control. The first and second trigger element processing units in this case in particular emit their own signal of life in each case. Signs of life can be contained in this connection in a message. In this sense, the first processing means checks the sign of life of the first trigger element processing unit and the second processing means checks the sign of life of the second trigger element processing unit. If on one or more occasions one of the signs of life is missing, the first and second processing means control the locking mechanism for unlocking. In this sense, one processing means can inform the other processing means about the absence of the sign of life.

The trigger element can electronically store until the occurrence of the cancellation condition that a drive signal, in particular the first and second drive signals, has been generated. In particular, the trigger element stores electronically in the first trigger element processing unit and redundantly in the second trigger element processing unit that a drive signal has been generated. The storage can be done in the non-volatile memories of the first and second trigger element processing units. In particular, the first trigger element processing unit stores that the first drive signal has been generated and the second trigger element processing unit stores that the second drive signal has been generated. In this way, it is achieved that the security system does not forget the actuation of the actuating element.

The door closing control can electronically save until the presence of the cancellation condition that a drive signal has been generated. In particular, the door closing control saves electronically in the first processing means and redundantly in the second processing means that a drive signal has been generated. The storage can be carried out in the non-volatile memories of the first and second processing means.

Preferably, it is stored both in the actuating element and in the door closing control that a drive signal has been generated.

In order to achieve a particularly high level of safety, the trigger element repeatedly sends a signal that a drive signal has previously been generated to the door closing control until the abort condition is present. Preferably, the signal is always sent until the cancellation condition is present together with a sign of life. In this sense, the first trigger element processing unit can inform the first processing means repeatedly until the occurrence of the cancellation condition about the generation of the trigger signal and the second trigger element processing unit can inform the second means accordingly. processing. The information may be contained in a message that is sent via the first bus system.

It may be that the first trigger element processing unit always sends the safety-relevant message, for example the message about the presence of an actuation signal, the life signal or the signal that the activation signal has previously been generated. drive, to door closing control. The message comprises the information from the first and second trigger element processing units.

Provision can be made for the electronic device to comprise an electronic hold-open system, whereby the electronic hold-open system can be transferred into an actuated state as a result of the actuation signal. Upon reaching the abort condition, the electronic hold-open system can be transferred to a start state. In the actuated state, the electronic hold-open system prevents the locking mechanism from being controlled for locking. In the starting state, the electronic hold-open system allows the locking mechanism to be controlled for locking. When the cancellation condition is reached, the open position maintenance electronic system is transferred to the starting state. By means of the electronic hold-open system, blocking is prevented after generation of the actuation signal in a particularly safe and simple manner.

The electronic open position maintenance system may comprise a variable together with the first program code. The first program code understands the variable or has access to the variable. In a starting state of the electronic open position holding system, the variable is set to a starting value. In the drive state, the variable is set to a drive value by means of which locking of the door closer is prevented. The variable can be binary. If the cancellation condition is reached, the value of the variable is set to the starting value. The first program code registers the value of the variable and allows a blocking of the door closing if the value of the variable corresponds to the starting value and prevents a blocking of the door closing, if the value of the variable corresponds to the actuation value. The variable is stored in the non-volatile memory of the first processing means. The second program code proceeds correspondingly with the variable that is redundantly stored in the non-volatile memory of the second processing means.

The variable may be stored in the first and second trigger element processing units. The variable can be transferred repeatedly by the activating element to the door closing control.

If the variables that the first and second trigger element processing units transmit to the door closing control do not match, a control of the locking mechanism for locking is in particular not allowed. If the variables transmitted by the first and second processing means do not match, a check of the blocking mechanism for the blocking is in particular not allowed. For this, the first and second processing means communicate with each other.

Preferably, provision can be made for a number of door lock controls and a number of trigger elements to communicate with one another via the first bus system, and the number of door lock controls to be associated with the number of trigger elements in such a way that, in the event of an actuation of one of the trigger elements, only the at least one door lock control associated with the activated trigger element controls the respective door lock mechanism for unlocking. Through the association, a selective unlocking of the door locks is provided. Thus, on actuation of one of the activating elements that are connected to the first bus system, not all of the door lock controls that are connected to the first bus system are driven to control the respective door lock mechanism for unlocking, but only the door lock controls that have previously been associated with the activated trigger element. The other door lock controls that have not previously been associated with the activated trigger element refrain from a control of the respective door lock mechanism for unlocking. Thus it is possible to arrange the door closers that are connected to the first bus system on different doors. If the activating element is actuated, only the door on which the activating element is arranged can be opened, for example. The other doors remain closed. If the activation signal is generated in an activating element of such a security system, it is only electronically prevented in the at least one door closing control that is associated with the activated activating element that until the presence of the cancellation condition the corresponding locking mechanism can be controlled for locking. Door lock controls first bus system not associated with the activating element, however, they can still be blocked.

A cancellation signal serves to achieve the cancellation condition, the cancellation signal being able to be generated by a cancellation action performed directly on the activating element. In this way, it is achieved that the operator goes to the activating element and makes sure that there is no danger in the place. The cancellation action can be performed at least by a contact of the activating element or by a near field communication.

The cancellation action that is performed directly on the activating element can be generated by actuating the actuating element. In this way, the actuation element already provided for the release of the emergency exit is practically used. Thus, it is possible to dispense with another additional element in the activating element and, in particular, to get the operator to go to the activating element.

It may be that the cancellation condition is achieved without a rotational movement of the actuating element. The cancellation action on the activating element can be carried out without rotation of the activating element. In particular, it is conceivable that the drive element can only move translationally. In particular, the drive element can only be moved between the starting position and the drive position.

It is conceivable that the cancellation signal corresponds to the drive signal. Thus, the same action can serve for the generation of the drive signal for unlocking the door lock and as the cancellation action.

In order for the electronic device to detect that the activation of the activation element is carried out to achieve the cancellation condition and not to generate the activation signal for the release of the emergency exit, the electronic device must have other information additional.

According to the invention, provision is made for the security system to comprise an authentication device associated with the trigger element or which is in communication connection with the authentication device associated with the trigger element. Communication can be wired or wireless.

Authentication at the authentication device can take place, for example, by entering a code, wired or wireless transmission of a code, recognition of a key by rotation, detection of personal characteristics such as fingerprints fingerprint or iris. The authentication device can be designed, for example, as a keyboard, a key switch, a fingerprint sensor or a reader. The authentication device can be associated with one or more activating elements. Preferably, the authentication device is associated with only one activating element.

After successful authentication, the electronic device receives a positive identification signal on authentication at the authentication device.

It is conceivable that the authentication device, in the event that there is no danger, serves to allow an authorized person to unlock the door lock. In this sense, a control device of the security system can receive a positive authentication signal from the authentication device and trigger the unlocking of the door lock.

To achieve the cancellation condition, an authentication is carried out in the authentication device, in particular a reception of a positive identification signal by means of the activating element. To achieve the cancellation condition, provision is made for the cancellation signal to have been generated and for an authentication to have also taken place in the authentication device, in particular, the reception of the positive identification signal.

It may be that, in order to achieve the cancellation condition, a predetermined time sequence must be fulfilled during the generation of the cancellation signal and the authentication, in particular the receipt of the identification signal. Additionally or alternatively, it may be that, in order to achieve the cancellation condition, a predetermined order must be fulfilled during the generation of the cancellation signal and the authentication, in particular the reception of the positive identification signal. The generation of the cancellation signal and the authentication carried out, in particular the generation of the cancellation signal and the authentication carried out in which the temporal sequence and/or the order must be maintained, may be sufficient to achieve the cancellation condition and, therefore, therefore, at least allow the locking of the door closure.

In particular, the cancellation signal and the authentication, in particular the reception of the positive identification signal, can occur at least partially simultaneously. The authentication, in particular the receipt of the positive identification signal, should preferably last longer than the generation of the cancellation signal.

For example, to achieve the cancellation condition, it may suffice that, in the first place, the actuating element and, while the actuating element is held actuated, a key is turned in the key switch. The key remains turned as long as the actuating element is released.

In another example, to achieve the cancellation condition, it may suffice to first turn the key in the key switch and then actuate the actuating element while the key remains turned. The key remains turned as long as the actuating element is released.

It may be that the cancellation signal that is generated by an action performed directly on the activating element is always necessary for the achievement of the cancellation condition. Alternatively, it may be that the cancellation signal that is generated by the action directly carried out on the activating element is only necessary for the achievement of the cancellation condition if, after the generation of the activation signal, the door has been opened. . For this, a signal from at least one door status monitoring device can be presented to the security system, in particular the electronic device. By a door is also meant a door leaf.

The door status monitoring device serves to detect whether the door is open or closed. The door status monitoring device can be, for example, a door contact, a sensor, a switch and/or a door lock with a detectable closing and/or latching position. The security system may comprise the door status monitoring device or may be connected to the door status monitoring device.

Particularly preferably, at least one first door status monitoring device and a second door status monitoring device are provided for a door, in particular for a door leaf, or/and a door closer. Thus, security against failure can be achieved. Preferably, the first door status monitoring device differs in its construction from the second door status monitoring device. In this way, the security against failures is increased.

In particular, if the door, in particular the door leaf, remains closed after generation of the actuation signal, there is at least one other possibility available to the security system to reach the cancellation condition. For example, in this case it may suffice that a predetermined time interval elapses, for example 60 seconds, from the generation of the drive signal. In the expression "from the generation of the drive signal" a time for informing the electronic device about the drive signal may be ignored. The predetermined time interval may be saved in the electronic device. Thus, to achieve the cancellation condition, it may suffice if

a. ) since the generation of the activation signal, no signal from the door status monitoring device about the opening of the door leaf has been received within the predetermined time interval in the security system, in particular by the electronic device , Y

b. ) the predetermined time interval has elapsed.

The electronic device may comprise a timer for determining the time interval.

The predetermined time interval may be fixed and unchangeable in the electronic device. Alternatively, an operator can adjust the predetermined time interval through a parameterization program. In this sense, a minimum time can be predefined in a fixed way.

If the first and second door status monitoring devices are provided differently, condition a.) can be that

a.) neither a signal from the first door status monitoring device nor from the second door status monitoring device, which are intended for a door leaf and/or a door closer, has been received in the security system , on the opening of the door leaf from the generation of the drive signal within a predetermined time interval, in particular by the electronic device.

Provision may be made for the security system to comprise a central emergency exit control, whereby a cancellation signal can be generated at the central emergency exit control. The cancellation signal or a message about the cancellation signal can be sent via the at least one bus system, in particular via at least one second bus system, to the electronic device. The cancel signal may serve to achieve the cancel condition. In particular, an authentication of an operator at the central emergency exit control is necessary for the generation of the cancellation signal. For this purpose, the emergency exit control can comprise an identification device. Authentication at the central emergency exit control can be done, for example, by entering a code, wired or wireless transmission of a code, recognition of a key by rotation, detection of personal characteristics such as , fingerprint or iris. For example, the central control of the emergency exit may comprise a keyboard, a key switch, a fingerprint sensor or a reader as an identification device.

The identification device preferably has at least one other function. The central emergency exit lock may comprise a central emergency button. If the central emergency button is actuated, the locking mechanism is controlled for unlocking. The operation of controlling, as a consequence of actuation of the central emergency button, the locking mechanism for unlocking, is performed fail-safe and is therefore appropriate in case of danger. If the central emergency button has been actuated, preferably by means of the electronic device it is electronically prevented from being able to control the locking mechanism of the door lock for locking until a corresponding signal is generated by means of the authentication identification device and the signal or a message about the signal is received by the electronic device.

In particular, if an automatic lock after the predetermined time interval has elapsed in case the door has been left closed is not considered sufficiently safe, it is conceivable that, in addition to conditions a) and b), to achieve the cancellation condition It is provided as an additional condition that

c.) the cancellation signal has been generated in the central control of the emergency exit.

Conditions a.) to c.) may be sufficient to achieve the cancellation condition.

Preferably, it is conceivable that a permissible cancellation signal contributing to the achievement of the cancellation condition is only generated after the predetermined time interval has elapsed. An authentication at the central emergency exit control within the predetermined time interval, on the other hand, does not lead to a permissible cancellation signal that contributes to achieving the cancellation condition. It may be that the passing of the predetermined time interval can be displayed on the central emergency exit control. For this, the central emergency exit control can comprise lighting agents with which, in particular, an unlocking delay can be additionally displayed as a result of actuation of the activating element. The central emergency exit control may comprise an emergency module. The emergency module may comprise, together with the central emergency button and the identification device, the lighting agents.

If the door lock has been unlocked due to a fire alarm and then there has been no opening of the door, which must be detected in particular by both the first and the second door status monitoring device, after the end of the fire alarm, an authentication in the identification device can also trigger a lockout of the door lock. Only when the fire alarm has ended does an authentication on the identification device lead to a lockout again. To do this, the door lock control receives a signal about authentication. It may be that the possibility of causing, after the termination of the fire alarm, by means of an authentication in the identification device a blocking of the door lock can be visualized in the central emergency exit control. In particular, the same lighting agents are used for this.

It is conceivable that the activating element comprises lighting agents in situ . On- site activating element lighting agents may serve to visually represent whether the presence of a fire alarm or an actuation of the activating element electronically prevents control without the presence of an abort condition. the locking mechanism of the door latch for locking. Preferably, the lighting agents represent in different ways whether relocking is prevented by the presence of a fire alarm or by actuation of the actuating element.

Furthermore, it is conceivable that the lighting agents of the activating element display on site whether relocking is prevented by actuation of the central emergency button. In particular, by means of the lighting agents of the on- site activation element, it can be displayed in different ways whether the central emergency button has been actuated or the on- site activation element has been actuated. In this way, the operator can recognize whether a lock can be established again by an on-the-spot cancel action or by handling the identification device.

In particular, a signal about opening the door after the predetermined time interval has elapsed or after the end of the fire alarm does not prevent the abort condition from being achieved.

It may be that the conditions a.) and b.) or a.) to c.) are not sufficient to achieve the cancellation condition and therefore allow a lockout of the door lock. On the contrary, it may be that the cancellation condition is only reached if, in addition, it is stored in the security system, in particular electronically, that the presence of conditions a.) and b.) is admissible for the achievement of the cancellation. cancellation condition and/or it is stored in the security system that conditions a.) to c.) are admissible for achieving the cancellation condition.

The prior establishment of admissibility can be carried out by an operator. The admissibility can be established in advance with the help of a parameterization program. In the parameterization program, the operator can manually set whether conditions a.) and b.) and/or conditions a.) to c.) are admissible for achieving the cancellation condition. It may be that the previous establishment can only be carried out during commissioning of the security system.

If the security system comprises several trigger elements, it can be saved for each trigger element or for groups of trigger elements individually whether the presence of conditions a.) and b) and/or the presence of conditions a.) to c is permissible. ) to achieve the cancellation condition. The group of activating elements may comprise in particular the activating elements that can be associated with a door or a door lock. The admissibility is preferably stored electronically in the respective activating elements.

If the security system comprises several door locks, it is possible to save individually for each door lock or for groups of door locks whether the presence of conditions a.) and b) and/or the presence of conditions a. ) to c.) to achieve the cancellation condition. The group of door locks can include in particular the door locks that can be associated with a door or a door leaf. The admissibility is preferably stored electronically in the respective door locks.

Before the locking mechanism is controlled for locking, the electronic device checks whether conditions a.) and b.) and/or conditions a.) to c.) have been saved as permissible. If the conditions a.) and b) and/or the conditions a.) to c.) have not been saved as admissible, a lock release or a lock mechanism check for the lock does not occur. Thus, in order to achieve the cancellation condition, it may suffice that conditions a.) and b.) are met and it has been confirmed that the presence of conditions a.) and b.) is admissible for the achievement of the condition. of cancellation.

Alternatively, to achieve the cancellation condition, it may suffice that conditions a.) to c.) are met and that the presence of conditions a.) to c.) has been confirmed as admissible for the achievement of the condition. of cancellation.

Thus, it may be that the security system comprises, for example, a first activating element in which, always in situ, that is, by generating the cancellation signal and authentication, the cancellation condition must be achieved regardless of whether the door has been opened or not since the generation of the drive signal. Another achievement is not admissible. In a second activating element of the security system, the cancellation condition can be achieved when the door has remained closed since the generation of the activation signal, by means of the passage of the predetermined time interval and because the admissibility for it has been saved . With a third activating element of the security system and in the event that the door has remained closed since the activation signal was generated, the passage of the predetermined time interval is not enough to achieve the cancellation condition. On the contrary, the cancellation signal must also have been generated after the predetermined time interval in the central emergency exit control to achieve the cancellation condition, and this possibility of reaching the cancellation condition must be saved as permissible.

If in each case for the trigger element and/or in the trigger element which conditions are permissible for achieving the cancellation condition have been stored, it may be that the electronic device, before the control of the locking mechanism for locking, consults to the activating element in which the activation signal has been generated if the fulfilled conditions that are presented to the electronic device are saved as admissible for the achievement of the cancellation condition in the activating element.

The security system may comprise a number of central emergency exit controls. The central emergency exit controls may in each case comprise an identification device.

In this case, it can be stored in the security system in which identification device a cancellation signal can be generated that is permissible for the fulfillment of condition c.). This can be saved for multiple triggers and/or multiple door locks.

The activating element may be capable of being brought to a deactivated state. In the deactivated state, as a result of an actuation of the actuating element, there is no control of the locking mechanism for unlocking the door closer. The activating element may be able to be brought from the deactivated state to the activated state. In the activated state, as a result of an actuation of the actuating element, the locking mechanism is controlled to unlock the door lock. The off state can be set, for example, at night in a department store or a closed psychiatric ward. The activating element may be able to be brought, in particular by the central emergency exit control, into the deactivated and/or activated state.

It is preferably provided that, in the activated state of the activating element, a previously performed actuation of the activating element has no effect on the control of the locking mechanism in the deactivated state. In this way, it is prevented that the door lock is unlocked directly during or after transfer to the activated state, even if the actuating element was activated hours or days before when the actuating element was in the deactivated state. This is particularly advantageous for the present non-latching activator element.

The security system is preferably configured to display an actuation of the actuating element in the deactivated state of the activating element to a central. In this way, an operator can recognize a danger to the user and act accordingly. The operator can transfer the activating element to the activated state or unlock the door lock. In particular, the central is the emergency exit central control or monitoring device.

An operation of the central emergency exit control and/or the connection of the central emergency exit control with the control device is monitored in particular in the deactivated state of the actuating element. If a failure occurs, the activator element is transferred to the activated state. In this way, security can be increased on site in the event that an activation or unlocking can no longer be carried out by means of the control unit.

The emergency button can have a coating agent designed to be at least partially transparent. During actuation of the actuating element, the coating agent can be moved from a starting position to an actuating position. The coating agent can coat the actuating element in such a way that a drive of the actuating element is effected by means of the coating agent. The coating agent serves to establish an imaginary barrier to actuation of the activating element and thus prevent fraudulent actuation. The imaginary barrier arises because the user believes that the coating agent must be broken or removed before the user can actuate the activating element.

Provision can be made for the coating agent to be arranged in such a way that it cannot be removed. Since the coating agent is arranged in a non-removable manner, the coating agent cannot be removed. In this way, the emergency button remains as it was originally conceived and built.

In particular, the coating composition is configured transparently in such a way that the actuating element is visible to the user through the coating composition. The actuating element is preferably actuated indirectly by means of the coating agent. "Non-removable" means in particular that the cover agent cannot be removed or folded either for the generation of the cancellation signal.

The non-removable arrangement in the activating element is made possible in particular because the operator does not need to rotate the activating element to achieve the cancellation condition. Thus, the non-removable arrangement is made possible in particular by the electronic prevention that, without the presence of an abort condition, the locking mechanism can be controlled for locking the door closer.

The non-removable coating agent arrangement can be configured in different ways. For example, the coating agent may be housed in such a way that it cannot be removed. Thus, the coating agent can in particular be movably guided in the emergency button. Additionally or alternatively, the coating agent may be made of an elastic material. For example, the coating agent may comprise an elastic film that is spread over the drive element. In this way, the coating agent can contribute to the waterproof construction of the emergency button. Additionally or alternatively, the coating agent may be firmly bonded to the actuating element. The connection can be designed in particular with form-fitting or by adhesion of materials. In this way, misuse can be prevented, in particular the drive element can only be moved together with the cover element.

The security system according to the invention is particularly suitable for use in a building in which people with impaired mental status live, in particular a psychiatric center, a psychiatric hospital ward or the like. In particular, through the possibility of deactivation, monitoring and, if necessary, activation, the security of the inmates can be increased in this way.

The object of the invention is also achieved by a method for unlocking at least one door lock, in particular for securing emergency exits, according to claim 15.

The invention is described in more detail below with the aid of exemplary embodiments. Technical characteristics with the same function are provided in the identical reference figures. They show:

FIG. 1 a top view of a security system according to the invention with an emergency button as an activating element in a state ready for operation of a door according to the invention according to a first exemplary embodiment,

Figure 2 a functional diagram of the security system according to the invention of figure 1, Figure 3 a modified functional diagram with respect to figure 2 of a security system according to the invention according to a second example of realization,

FIG. 4 a top view of a security system according to the invention with several emergency buttons in a ready-to-operate state on a door according to a third exemplary embodiment,

Figure 5 a functional diagram of the security system according to the invention of figure 4, Figure 6 a modified functional diagram with respect to figure 5 of a security system according with the invention according to a fourth embodiment,

FIG. 7 a top view of a security system according to the invention in a state ready for operation according to a fifth exemplary embodiment,

Figure 8 a functional diagram of a central emergency exit control of the security system of Figure 7,

Figure 9 a functional diagram of the security system of Figure 7,

Figure 10 a functional diagram of a security system according to the invention according to a sixth embodiment,

FIG. 11 an exemplary embodiment of an emergency button according to the invention in a side view,

Figure 12 the emergency button of figure 11 in a longitudinal section,

FIG. 13 the emergency button from FIG. 11 in an exploded view,

Figure 14 an actuation element of the emergency button of figure 11 in a perspective view, Figure 15 another perspective view of the actuation element of figure 14,

Figure 16 a perspective view of the emergency button of Figure 11, Figure 17 another perspective view of the light conductor of Figure 16 and

Figures 18a-d a schematic representation of the development of a functional release in a security system according to the invention.

Hereinafter, a distinction will be made between user and operator. A user can be anyone who uses security system 1. A user can be, for example, a guest who wants to escape through the door secured with security system 1. An operator serves to operate security system 1 The operator, for example, can be authenticated with respect to the security system. The operator, for example, may be part of a surveillance template. In a particularly preferred way, the operator can adjust the security system 1.

In the following, the term "emergency button actuation" is understood to mean "actuation of the emergency button actuating element".

A connection to a bus system is meant in the following as a direct connection, so that a component connected to the bus system must be considered a bus system participant with its own bus address.

By triggering a control is meant in particular the sending of a message, for example via the first or/and second bus system, containing information and/or a command that makes the direct or indirect recipient of the message carry out the check. The sender of the message initiates the control. Thus, by provoking control is meant indirect control. The message may in particular correspond to a bus telegram.

As a consequence of a drive means that the cause is a drive, regardless of whether the drive continues or not.

In figures 1 and 2, a first example of embodiment of a security system 1 according to the invention for a door 2 is represented. The door 2 is not part of the security system 1 according to the invention. The security system 1 according to the invention comprises a door lock 200 and an emergency button 10. The emergency button 10 comprises a control device 100. The emergency button 10 is associated with a key switch 500. The system The security system 1 can comprise the key switch 500. Alternatively, the security system 1, in particular the emergency button 10, can have a key switch input by means of which a connection to the key switch can be established. 500.

As shown in Fig. 2, the emergency button 10 and the door closer 200 are connected to each other via a first bus system 400. The key switch 500 is electrically connected or can be electrically connected with the emergency button. 10 by means of a connection 402. The connection 402 is shown as a dashed arrow to show that signals about a position of a key inserted into the key switch 500 are fed to an electronic unit 24 of the emergency button 10. Alternatively to the connection 402, the key switch 500 can also be connected to the first bus system 400 (not shown). This alternative is fulfilled for all the exemplary embodiments.

The emergency button 10 is configured to send the door lock 200 as a result of an operation of the emergency button 10 a message via the first bus system 400 and thus cause the door lock to unlock. The message as a consequence of activating the emergency button 10 can be carried out in a delayed manner.

Also the security system 1 according to the invention, in particular the emergency button 10, can be connected to a fire alarm (not shown). If there is a fire alarm, the security system 1 also causes an unlocking of the door lock 200.

Control device 100 does not perform safety-relevant functions: control device 100 can cause an unlocking of the door lock 200 for authorized persons. For this purpose, the control device 100 can be connected to an access control system (not shown). The access control system can be connected or connectable in particular with the first bus system 400. The control device 100 receives from the access control system in particular via the bus system 400 a positive authentication signal on the authentication done. The control device 100 then triggers an unlocking of the door lock 200. The access control system may comprise, for example, a reader, a key switch, a keypad for entering a code, or a lock cylinder. mechanical, in particular a self-locking panic lock, or be designed in such a way.

The control device 100 can also automatically cause an unlocking of the door lock 200 at a predetermined time or after the expiration of a predetermined time, for example, if the door must be unlocked at a certain time each day.

If there is no danger, that is, if the emergency button 10 has not been actuated and a fire alarm is not active either, the control device 100 can automatically trigger a new lockout after a certain period of time has elapsed. In this sense, the control device 100 can receive, in addition to the positive authentication signal, also an access signal from the access control system and/or measure the length of the positive authentication signal. By means of the access signal or based on the length of the authentication signal, the control device 100 can adapt the length of the predetermined time interval. Thus, a person, for example, can hold an identification card in front of the reader for a long time or turn the key for a while. In this way, it is signaled that the predetermined period of time must correspond to a long period of time previously saved in the control device 100. If the person holds the identification card briefly in front of the reader or the user briefly turns the key, signals that the predetermined period of time must correspond to a short period of time previously saved in the control device 100.

A first door status monitoring device 204 and a second door status monitoring device 206 detect whether the door 2 is open or closed. The control device 100 at least indirectly receives a signal from the door status monitoring devices 204, 206. If the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 can directly cause and automatically a new lock of the door lock 200, as soon as the control device 100, with the help of the door status monitoring devices 204, 206, has the information that the door was first open and has now been closed again.

The emergency button 10 comprises a sound alarm 23 and lighting agents 41 (see also figure 13). The lighting agents 41 serve to display the locked or unlocked state of the door lock 200 and thus serve as a display device. The lighting agents 41 serve to display a delayed unlocking of the door lock 200 as a result of an actuation of the emergency button 10 and thus serve as a display device. The lighting agents 41 serve for the visual display of an alarm condition after receipt of the fire alarm signal or as a result of actuation of the emergency button 10 and thus serve as indicators. The lighting agents 41 serve for the visual representation when a new lock described above fails.

The control device 100 controls the audible alarm 23 to emit an audible alarm when a danger event occurs, that is, when a fire alarm signal is received or the emergency button 10 has been operated. The control device 100 controls audible alarm 23 to sound an audible alarm when a new lock fails.

Control device 100 controls lighting agents 41 to represent the locked or unlocked state of door closer 200 to visually represent unlocking and/or issue a visual alarm when a fire alarm signal is received or the door lock has been actuated. emergency button 10 or when a new lock fails.

In the unlocked state of the door lock 200, the control device 100 can monitor the opening of the door with the help of the door status monitoring devices 204, 206. The control device 100 can cause, if desired, to be output , an audible alarm if the door 2 is opened during the unlocked state of the door lock 200, at least if no positive authentication signal is presented. So you can watch if someone opens the door even when the door is unlocked.

The emergency button 10 can comprise at least one additional output. The control device 100 can control via the output other components that can be connected to the security system 1 according to the invention, for example a room light.

The parameters for carrying out the mentioned functions of the control device 100 are stored in the control device 100. Thus, for example, the predetermined time or times, the predetermined time interval or intervals, parameters for audible alarms, for example , at what volume and how often an audible alarm should be emitted, and parameters for the different controls of the lighting agents 41 for the visual representation of the aforementioned different states of the security system 1, are stored in the control device 100. The parameters for the lighting agents may comprise flashing frequencies, emission colors, color intensities and/or light patterns. For parameterization, the control device 100 can communicate via a radio module 64 with a mobile communication device. Alternatively, the parameterization can be carried out with the aid of a monitoring device 301 via a second bus system 401 (see FIGS. 9 and 10). For the parameterization, a parameterization program is provided which can be executed on a communication device, for example a personal computer, a mobile phone and/or a tablet. The operator can adjust the parameters with the help of the parameterization program.

In Figure 2, the structure of the door lock 200 and the emergency button 10 is shown in more detail.

The emergency button 10 has a first emergency button processing unit 20, a second emergency button processing unit 21 and a third emergency button processing unit 22. The first, second and third processing units of emergency button 20, 21, 22 are configured in each case as microprocessors or microcontrollers. The first and second emergency button processing units 20, 21 comprise a non-volatile memory. The third emergency button processing unit 22 comprises a non-volatile memory and/or has access to a non-volatile memory. The first, second and third emergency button processing units 20, 21, 22 are collectively designated as the electronic unit 24 of the emergency button 10.

The electronic unit 24 simultaneously serves as the control device 100. In this sense, the first emergency button processing unit 20 serves as the first processing unit 103 of the control device 100. The second emergency button processing unit 21 serves as the second processing unit 104 of the control device 100. The third emergency button processing unit 22 serves as the third processing unit 105 of the control device 100.

The first and second emergency button processing units 20, 21 serve to carry out safety-relevant functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 serves to carry out the non-safety-relevant functions. Safety-relevant functions include triggering unlocking in the event of danger. Non-safety-relevant functions include the other functions listed above.

When the emergency button 10 is actuated, an actuating element 11 moves from a starting position 11.I to an actuating position 11.II, whereby a switch 63 is actuated (see also FIGS. 12, 13). . In this way, a first and a second drive signal are generated. In this way, a first and a second electrical circuit (not shown) are opened. A signal about the opening of the first electric circuit is detected by the first emergency button processing unit 20. A signal about the opening of the second electric circuit is detected by the second emergency button processing unit 21. As a drive signal is understood the signal that has been generated by the user through actuation of the actuating element for unlocking the door lock and releasing the emergency exit. The expression "as a result of an actuation of the emergency button 10" is used in particular in the sense of "after generation of the actuation signal", i.e. regardless of whether the actuation element 11 is still in the position drive 11.II or has already returned to the starting position 11.I.

The first emergency button processing unit 20 and the second emergency button processing unit 21 each independently of one another trigger an unlocking of the lock after detection of the actuation signal via the first bus system 400 200. The second emergency button processing unit 21 thus acts redundantly with respect to the first emergency button processing unit 20.

The door closure 200 comprises a door closure control 201. The door closure control 201 comprises a first processing means 202 and a second processing means 203. The first and second processing means 202, 203 are jointly designated as electronic device 207. The first and second processing means 202, 203 are in each case configured as microprocessors or microcontrollers. The first and second processing means 202, 203 can each control a locking mechanism 205 of the door lock 200 for unlocking. In the event of danger, i.e. as a result of actuation of the emergency button 10 or upon receipt of a fire alarm, both the first processing means 202 and the second processing means 203 control the locking mechanism 205 for unlocking. . The second processing means 203 is thus redundant with respect to the first processing means 202. Safety against failure is achieved by this structure.

Locking mechanism 205 is electromechanically configured. The locking mechanism 205 comprises, for example, an electromechanically actuable bolt element (not shown), which locks a door bolt 2 in the locked state of the door lock 200 and, in the unlocked state of the door lock 200, releases it. In a lock mechanism control 205 for lock, the first and second processing means 202, 203 activate an electric current for the lock mechanism 205. In a control of the lock mechanism 205 for unlocking, the first and second processing means 202, 203 deactivate an electric current for the lock mechanism 205. In each In this case, a separate switch is assigned to a processing means 202, 203 for this purpose. The opening of one of the switches leads to the deactivation of the current for the locking mechanism 205.

The door lock controller 201 obtains information about the status of the lock mechanism 205 by means of a lock mechanism status monitoring device. In particular, a position of an anchor of a coil of the lock mechanism 205 is monitored. If the state of the door lock 205 does not correspond to the nominal state, an alarm is issued. Additionally or alternatively, a new attempt to reach the nominal state can be made in this case.

Following an actuation of the emergency button 10, the first and second emergency button processing units 20, 21 communicate with the first and second processing means 202, 203 via the first bus system 400 with the help of a message. The message may contain information about the drive or a control command for unlocking. In this sense, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 informs the second processing means 203. Through the message, the first and second units emergency button processing means 20, 21, cause both the first and second processing means 202, 203 to control the lock mechanism 205 for unlocking, that is, to turn off the power.

The presence of a fire alarm is detected by the first and second emergency button processing units 20, 21. Then, the first and second emergency button processing units 20, 21 trigger via a message to the first and to the second processing means 202, 203 that the locking mechanism 205 is controlled for unlocking by the door closing control 201. In this sense, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21, to the second processing means 203. By means of the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 control the lock mechanism 205 to unlock, ie turn off the power.

The activation of the emergency button 10 or the presence of a fire alarm can be sent in a message by one of the two emergency button processing units 20, 21, the first emergency button processing unit 20 writing a first part of the message and the second emergency button processing unit 21, a second part of the message. The first and second processing means 202, 203 are each responsible for at least one part of the message. The emergency button processing units 20, 21, 22 and the first and second processing means 202, 203 can each receive messages via the first bus system 400. In this regard, the electronic unit 24 and the door closing control 201 can each be associated with a bus address.

The first and second emergency button processing units 20, 21 monitor each other. If a fault is detected, the electronic unit 24, in particular the intact emergency button processing unit 20, 21, causes the first and second processing means 202, 203 to control the door lock mechanism 205 for unlocking. . The first and second processing means 202, 203 monitor each other. If a failure is detected, the locking mechanism 205 is controlled for unlocking by at least the intact processing means 202, 203. Likewise, in the event of a failure of the bus system 400, the locking mechanism 205 is controlled for unlocking. unlocking by the door lock control 201. For this, and for monitoring the first and second emergency button processing units 20, 21, a life signal is sent from the first and second emergency button processing units. emergency button 20, 21 regularly to the door lock control 201. If the sign of life does not arrive, the first and second processing means 202, 203 control the lock mechanism 205 for unlocking. The first and second processing means 202, 203 communicate with each other when the door closing control 201 has received a message about the activation of the emergency button 10 and/or the presence of a fire alarm. If only the first processing means 202 or the second processing means 203 detects that the emergency button 10 has been actuated and there is a fire alarm signal, the processing means 202, 203 that has made the detection controls the fire alarm mechanism. door lock 205 for unlocking and initiates the other processing means 202, 203 to also control the door lock mechanism 205 for unlocking. An error and an interference in this sense always also include a failure of the respective component. In the event of a power failure, the locking mechanism 205 automatically goes into the unlocked state. In the operations described in this section, the security system 1 also emits an audible and/or visual alarm, in particular by means of the control device 100.

If the actuation signal has been generated, without the presence of an abort condition, the door closer 200 is electronically prevented from being transferred to the locked state. In this way, the door is prevented from locking while the danger state persists. To do this, an electronic system for maintaining the open position is integrated in the electronic device 207. The electronic open position maintenance system, such as As a result of the actuation of the actuating element 11, which serves to release the emergency exit, it is transferred to an actuated state. In the driving state, control of the door lock 200 for locking is prevented.

The open position maintenance electronic system comprises a first program code. The first program code comprises a first variable or has access to a first variable. In a starting state of the electronic open position-holding system, the first variable is set to a starting value. In the actuation state, the first variable is set to an actuation value by which control of the door closer 200 for locking is prevented. The first variable can be binary. If the abort condition is reached, the electronic hold-open system is transferred back to a starting state. To do this, the value of the first variable is set to the starting value. In the starting state of the electronic hold-open system, a control of the door closure 200 for locking is permitted. The first program code registers the first value of the first variable and allows a lock of the door lock 200 if the value of the first variable corresponds to the starting value and prevents a lock of the door lock 200, if the value of the first variable corresponds to the drive value.

The electronic hold-open system is stored both in the first processing means 202 and redundantly in the second processing means 203. For this, the first program code is stored in the first processing means 202. The first variable is stored in the non-volatile memory of the first processing means 202. A second program code with the same functionality as the first program code is stored in the second processing means 203. The first variable is redundantly stored in the non-volatile memory of the second processing means 203.

The first variable is additionally stored in the first emergency button processing unit 20 and in the second emergency button processing unit 21 in each case in the non-volatile memories. As a consequence of actuation of the emergency button 10, the first variable in the first and second emergency button processing units 20, 21 are transferred from the start value to the actuation value. The modified value of the first variable is transmitted by the electronic device 207 via the bus system 400. Until an abort condition occurs, the emergency button 10 repeatedly sends the actuation value of the first variable to the electronic device 207. The sending can be done at regular time intervals, in particular together with the sign of life.

At least if at least one of the door status monitoring devices 204, 206 has detected that the door 2 has been opened after the emergency button 10 has been actuated, a cancellation action is necessary to achieve the cancellation condition. on the emergency button 10.

The actuating element 11 is designed in such a way that it does not lock. The actuating element 11 is transferred from the starting position 11.I to the actuating position 11.II during actuation (see FIG. 11). Directly after actuation, the actuating element 11 is moved back into the starting position 11.I by the force of a spring-shaped restoring agent 12 (see FIGS. 12, 13). The actuation of the actuating element 11 takes place translationally.

The cancellation action on the emergency button 10 is performed by actuating the actuation element 11. In this way, a cancellation signal corresponding to the actuation signal is generated. In order for the control device 100 to be able to detect whether an actuation of the emergency button 10 serves to unlock the door lock 200 or whether a cancellation action occurs, another signal must be generated simultaneously to achieve the cancellation condition. To do this, an operator is identified. Authentication is effected by inserting and turning a key into the key switch 500. Actuation of actuating element 11 and authentication must temporarily overlap. That is, the operator must keep the key in the turned state while the actuating element 11 is in the actuating position 11.II. The actuating element 11 must return to the starting position 11.I while the key is in the turned state. The action sequence is sufficient to achieve the cancellation condition.

If the door status monitoring devices 204, 206 have detected that the door 2 has remained permanently closed following the activation of the emergency button 10, the cancellation condition can not be achieved in at least one other way, specifically, by means of the passage of a predetermined time interval. Thus, for example, after 60 seconds after the last generation of the actuation signal, the cancellation condition can be achieved if the door 2 has remained closed. An authentication at the key switch 500 and an abort action at the emergency button 10 are not necessary in this case.

The first and second door status monitoring devices 204, 206 are designed to detect with fail safety that the door 2 has remained permanently closed after the emergency button 10 has been actuated. To do this, the monitoring devices door status indicators 204, 206 are preferably configured differently. The first door status monitoring device 204 can be designed, for example, as a door contact. The second door status monitoring device 206 can be designed, for example, as a latch contact. Alternatively, for example, at least one of the door status monitors can, for example, magnetically monitor the status of door 2 as a reed switch. The door lock control 201 receives a signal from the first and second door status monitoring devices 204 each. , 206 on whether door 2 is open or closed. Only when, during the predetermined time interval, neither the first door status monitoring device 204 nor the second door status monitoring device 206 has sent a signal about opening the door, the cancellation condition can be reached. over the course of the predetermined time interval.

The door lock control 201 contains a timer, to measure the predetermined time interval. The door lock control 201 starts the timer as a result of the activation of the emergency button 10. If the door lock control 201 receives a signal from the first or the second door status monitoring device 204 during the predetermined time interval 206 that the door has been opened, a cancel action must be performed on the emergency button 10. In this case, it is not enough that the predetermined time interval elapses. The length of the predetermined time interval is stored in the door closing control t^a 201.

The door lock control 201 checks whether an attainment of the cancellation condition is permissible by elapse of the predetermined time interval before the door lock control 201 controls the lock mechanism 205 for locking. Thus, during the start-up of the security system 1, that is, before the start of the operation of the security system 1, an operator can establish whether an elapse of the predetermined time interval without opening the door 2 is admissible as a condition of cancellation and thus leads to a new locking of the door 2. This setting can be made at the emergency button 10. A check of admissibility, an expiration of the predetermined time interval and an absence of signal of the first and second door status monitoring device 204, 206 upon opening of door 2 is sufficient to achieve the cancellation condition.

The door closing control 201 communicates the open or closed state of the door via the bus 400 to the emergency button 10 and/or to the control device 100.

The electronic unit 24 comprises a timer. A first delay duration can be stored in the electronic unit 24 . If an unlocking of the door lock 200 is to be carried out in a delayed manner, the electronic unit 24 waits, after the activation signal is generated, for the first duration of the delay before the first and second emergency button processing units 20, 21 communicate via the first bus system 400 with the door lock control 201 to cause an unlock.

The third processing unit 105 triggers the non-security-relevant unlocks and locks of the door lock 200 described in FIGS. 1 and 2, for example, an unlock after receipt of the authentication signal, at a predetermined time or after the expiry of a predetermined time or a blocking after expiry of a predetermined period of time or directly after the closing of the door 2. For this, the third processing unit 105 communicates via the first bus system 400 with the gate control. door lock 201. The communication may contain, for example, information or a control command that causes the door lock controller 201 to control the lock mechanism for unlocking or locking. If the control device 100 is connected to the second bus system (see FIG. 7), the third processing unit 105 serves to forward messages from and/or to a central emergency exit control 300.

The third emergency button processing unit 22 controls the audible alarm 23 and the lighting agents 41.

If it is presented to at least one of the processing agents 202, 203 that the locking mechanism 205 has assumed the unlocked state, the processing means 202, 203 sends a corresponding signal via the bus 400 to the electronic unit 24. The electronic device 207 is connected or can be connected with the door status monitoring devices 204, 206 and receives signals about an open or closed status of the door from the door status monitoring devices 204, 206.

The mentioned functions performed by the control device 100, the door closing control 2021 and/or the emergency button 10 can be realized with the help of software modules. In the electronic device 207 and/or the electronic unit 24, program codes are stored with the help of which the functions can be carried out.

Figure 3 represents a variant of the security system 1 represented in figures 1 and 2. In this sense, the control device 100 is configured independently of the emergency button 10 and the door lock 200. The control device 100 can be arranged, for example, in a hat rail housing (not shown). The control device 100 is not integrated in an emergency button 10 or in a door closer 200. For example, the control device 100 can be provided for arrangement in a technical room. The first bus system 400 connects the control device 100, the door closer 200 and the emergency button 10 to each other. As in the first embodiment, the key switch 500 is connected or can be electrically connected with the button emergency 10 via a 402 connection.

Unless stated otherwise, the structure and function correspond to those of the first exemplary embodiment, the functions described with reference to FIGS. 1 and 2 being carried out with the aid of the control device 100 or the processing units 103, 104, 105, by the control device 100 of Figure 3 and the functions described with respect to Figures 1 and 2 being performed with the help of the emergency button 10 or the emergency button processing units 20 , 21, 22, by the emergency button 10: In particular, the first and second emergency button processing units 20, 21 detect the activation signal, as a result of an operation of the emergency button 10, they communicate with the first and second processing means 202, 203 via the first bus system 400 and thus cause a control of the locking mechanism 205 via the door closing control 201. The measures for achieving Failsafe or redundancy are realized with the aid of the first and second emergency button processing units 20, 21. The first variable is stored in the first and second emergency button processing units 20, 21 and is transmitted from there to the door lock control 201. The emergency button 10 comprises the timer for determining the first duration of the delay. The control device 100 is connected or can be connected to the second bus system 401. The third processing unit 105 triggers the non-safety-relevant unlocks and locks of the door lock 200 described in Figures 1 and 2, for example , an unlocking after receiving the authentication signal, at a predetermined time or after the expiration of a predetermined time or a new automatic locking after the expiration of a predetermined period of time or directly after the closing of the door 2.

The first, second and third processing units 103, 104, 105 are in each case configured as microprocessors or microcontrollers. The first, second and third processing units 103, 104, 105 together constitute a processing electronics 101. The first and second processing units 103, 104 have a non-volatile memory. The third processing unit 105 comprises non-volatile memory and/or has access to non-volatile memory.

A fire alarm signal can be received by both the control device 100 and the emergency button 10. The presence of a fire alarm is detected in this connection by the first and second emergency button processing units 20. , 21 for the emergency button 10 or by the first and second processing units 103, 104 for the control device 100. Correspondingly, both the control device 100 with the help of the first and second processing units 103, 104 such as the emergency button 10 with the help of the first and second emergency button processing units 20, 21 can trigger an unlocking of the door lock 200. For this, a communication takes place via the first bus system 400 with door closing control 201.

The control device 100 is informed by means of the first bus system 400 when the emergency button 10 has caused an unlocking of the door lock 200, that is, as a consequence of an activation of the emergency button 10 or after receiving a fire alarm. Likewise, the control device 100 is informed about a delayed unlocking of the door lock 200 as a result of the activation of the emergency button 10. The control device 100 is informed about the locking and unlocking status of the door lock 200. The device control panel 100 is informed about the open or closed status of door 2.

The control device 100 causes a control of the alarm 23 and of the lighting agents 41 for the warnings and visual representations described with respect to figures 1 and 2. For this, the control device 100 can communicate with the electronic unit 24 , in particular with the third emergency button processing unit 22, via the first bus system 400. The third emergency button processing unit 22 then controls the alarm 23 or lighting agents 41. To do this, parameters for alarm 23 and lighting agents 41 are stored in control device 100.

In the exemplary embodiments of FIGS. 1 to 3, the door lock 200 comprises the door status monitoring devices 204, 206. Alternatively, and not shown, the door status monitoring devices 204, 206 can be connected with the first bus system 400 or directly with the emergency button 10 and/or the control device 100.

In the exemplary embodiments of FIGS. 1 to 3, at least one additional emergency button, not shown, can be connected to the first bus system 400, which is configured without the control device 100. The additional emergency button is configured as the emergency button 10 of FIG. 3 and can trigger the unlocking of the door lock 200 in one actuation. The additional emergency button corresponds in construction and functionality to the emergency button 10 of FIG. 3.

In the exemplary embodiments of FIGS. 1 to 3, at least one additional door lock, not shown, can be connected to the first bus system 400. The additional door lock is configured as the door lock 200 of FIGS. 2 or 3. and can also be unlocked with an actuation of the emergency button 10. The additional door lock corresponds in structure and functionality to the door locks 200 of figures 1 to 3.

Figure 4 shows a third embodiment of a security system according to the invention. 1 with several emergency buttons 10, 1010, 2010, 3010. The security system 1 comprises several door locks 200, 1200, 2200, 3200. Each emergency button 10, 1010, 2010, 3010 is associated with a key switch 500, 1500, 2500, 3500. The security system 1 is used to place the emergency button 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 in different doors 2, 2002, 3002. The doors 2 , 2002, 3002 are not part of the security system 1 according to the invention. The various emergency buttons 10, 1010, 2010, 3010 are connected to the first bus system 400 and thus correspond to an emergency button number 10, 1010, 2010, 3010. The door locks 200, 1200, 2200, 3200 are connected to the first bus system 400 and thus correspond to a number of door closers 200, 1200, 2200, 3200.

In the example of figure 4, the emergency buttons 10, 1010 are associated with the door locks 200, 1200. The emergency button 2010 is associated with the door lock 2200. The emergency button 3010 is associated with the door lock 3200. Thus, as a result of actuation of one of the emergency buttons 10, 1010, the two door locks 200, 1200 are unlocked, but not the door locks 2200, 3200. If the emergency button 2010 is actuated, only door lock 2200 is unlocked. Correspondingly, if emergency button 3010 is actuated, only door lock 3200 is unlocked. Thus, in this exemplary embodiment, door locks 200, 1200, 2200, 3200.

For example, the emergency buttons 10, 1010 are intended to be arranged on a double door 2. In each case, a door lock 200, 1200 is to be arranged on one door leaf 3, 4 of the door. 2. The emergency button 2010 and door lock 2200 are intended for placement on another door 2002. The emergency button 3020 and door lock 3200 are to be provided on a door 3002 as shown in Figure 4.

The security system 1 of figure 4 can also be set for selective unlocking different from figure 4. In an exemplary setting that differs from figure 4, on actuation of one of the emergency buttons 10,1010, 2010 , 3010, only one associated door lock 200, 1200, 2200, 3200 is unlocked in each case. Thus, in each case only one door lock is associated with an emergency button 10, 1010, 2010, 3010 200, 1200, 2200, 3200. In particular, a security system 1 adjusted in this way is suitable for four single-leaf doors each with a door lock 200, 1200, 2200, 3200.

In another exemplary setting of the security system 1, not shown, only the two door locks 200, 1200 are unlocked when one of the emergency buttons 10, 1010 is actuated and when one of the emergency buttons 10, 1010 is actuated. emergency buttons 2010, 3010, in each case the other two door locks 2200, 3200. Thus, the emergency buttons 10, 1010 are associated with the door locks 200, 1200 and the emergency buttons 2010, 3010, with the door closers 2200, 3200. In particular, the security system 1 configured in this way is suitable for double doors with one door closer 200, 1200, 2200, 3200 per door leaf.

Also, the security system 1 can be set such that if an emergency button 10, 1010, 2010, 3010 is actuated, all door locks 200, 1200, 2200, 3200 are unlocked.

Unlike the security system 1 shown in Figure 4, a security system according to the invention 1 may comprise a number of emergency buttons 10, 1010, 2010, 3010 that does not coincide with the number of door locks 200, 1200, 2200, 3200. For example, in Figure 4, door 2 can be configured with one leaf and one of the emergency buttons 10, 1010 or one of the door locks 200, 1200 is missing.

In FIG. 5 it is shown that the emergency buttons 10, 1010, 2010, 3010 and the door closers 200, 1200, 2200, 3200 are connected to each other via the first bus system 400. In each case an emergency button 10, 1010, 2010, 3010 is connected or can be electrically connected to a key switch 500, 1500, 2500, 3500 associated with the respective emergency button 10, 1010, 2010, 3010 via a connection 402, 1402, 2402 or 3402. Alternatively, key switches 500, 1500, 2500, 3500 are connected to the first bus system 400 (not shown). In the exemplary embodiment of FIGS. 4 and 5, the control device 100 is integrated in one of the emergency buttons 10, 1010, 2010, 3010, for example the emergency button 10. The first bus system 400 is connected only with a single control device 100. Unless otherwise stated in the following, the structure and functions of door closers 200, 1200, 2200, 3200 correspond to the structure and functions of door closer 200 of figures 2 and 3; the structure and functions of the emergency button 10, with the structure and functions of the emergency button 10 of Figure 2; and the structure and functions of the emergency buttons 1010, 2010, 3010, with the structure and functions of the emergency button 10 of figure 3. The references of figures 2 and 3 are used. In this sense, it is understood that in each case the door locks 200, 1200, 2200, 3200 comprise their own door locking mechanism, their own processing agents, etc., and the emergency buttons 10, 1010, 2010, 3010 each comprise their own units processing emergency button, alarms, lighting agents, switches and drive elements.

So that the association of the emergency buttons 10, 1010, 2010, 3010 to the door locks 200, 1200, 2200, 3200 can be carried out, when the security system 1 starts up, that is, before the start of the operation of the security system 1, an association of the emergency buttons 10, 1010, 2010, 3010 is made to the door locks 200, 1200, 2200, 3200. To do this, one of the door locks is transferred in each case 200, 1200, 2200, 3200 to an association mode. Afterwards, a conscious action is performed on the emergency buttons 10, 1010, 2010, 3010. The conscious action can be performed as an actuation of the actuating element 11 of the respective emergency button 10, 1010, 2010, 3010. After that all emergency buttons 10, 1010, 2010, 3010 to be associated with door locks 200, 1200, 2200, 3200, which are in the association mode, have been activated lock association mode is ended 200, 1200, 2200, 3200. In the exemplary embodiment of Figure 4, for example, first the door lock 200 is transferred to association mode and then the emergency buttons 10, 1010 are actuated, by means of which the association of the emergency buttons 10, 1010 to the door lock 200 is made. Then, the association mode of the door lock 200 is closed. Then, for example, the door lock 1200 is transferred to the mode of association and then they are activated s emergency buttons 10, 1010, by means of which the association of the emergency buttons 10, 1010 to the door lock 1200 is carried out. Then, the association mode of the door lock 1200 is closed. Now the lock is transferred door lock 2200 to association mode and then emergency button 2010 is actuated, whereby association of emergency button 2010 to door lock 2200 is effected. Door lock association mode 2200 is closed. Correspondingly, you can then proceed with the door lock 3200 and the emergency button 3010.

Through the association, it is saved in the respective door locks 200, 1200, 2200, 3200, in particular in the respective door lock controls 201, which emergency button 10, 1010, 2010, 3010 should be associated with the respective door lock 200, 1200, 2200, 3200. By association, it is saved in the control device 100 for all emergency buttons 10, 1010, 2010, 3010 and all door locks 200, 1200, 2200, 3200 of the first security system. bus 400 the association of the emergency buttons 10, 1010, 2010, 3010 with the door locks 200, 1200, 2200, 3200. For the association, a bus address is saved in each case, in particular a bus address not modifiable, of the respective emergency buttons 10, 1010, 2010, 3010.

The establishment of the association in the respective door locks 200, 1200, 2200, 3200 takes place in each case in the first digital processing means 202 and redundantly in the second digital processing means 203, in particular in the memories not volatiles of processing agents 202, 203.

If, for example, the emergency button 10 is actuated, the emergency button 10 communicates with all door locks 200, 1200, 2200, 3200 of the first bus system 400. The door locks 200, 1200, 2200, 3200 check in each case on the basis of the saved whether the respective door lock 200, 1200, 2200, 3200 has been associated with the actuated emergency button 10. Only if there is an association, the associated door locks 200, 1200 then control the respective door lock mechanism 205.

In the event of a fire alarm signal, the door locks 200, 1200, 2200, 3200 that are associated with the emergency button 10, 1010, 2010, 3010 receiving the fire alarm signal are unlocked.

If a door lock 200, 1200, 2200, 3200 is to be unlocked in a delayed manner as a result of actuation of an associated emergency button 10, 1010, 2010, 3010, the corresponding emergency button 10, 1010, 2010, 3010 is stores a first delay duration. The delay setting takes place during the commissioning of the security system 1 by means of the parameterization program. A different first delay duration can be set for each emergency button 10, 1010, 2010, 3010 by means of the operator. For example, a first delay duration has been stored in the emergency button 10, which differs from the first delay duration stored in the emergency button 2010. The emergency buttons 1010, 3010 must trigger an unlocking of the locks without delay. associated door buttons 2200 or 3200, such that the emergency buttons 1010, 3010 have not set a first delay duration or have set a first delay duration of 0 seconds. Alternatively to this, the security system 1 can be configured in such a way that in the emergency buttons 10, 1010, 2010, 3010 that are associated with the same door lock 200, 1200, 2200, 3200, the same first delay duration. For this, the parameterization program allows the operator only one joint setting.

The control device 100 assumes the non-safety-relevant functions for unlocking and locking of all door locks 200, 1200, 2200, 3200, as described above with respect to FIGS. 1 and 2. To do this, the control device 100 can selectively communicate with door locks 200, 1200, 2200, 3200. Thus, in control device 100 it is established which access control system is associated with which door lock 200, 1200, 2200, 3200 , such that, with a positive authentication signal from an access control system, only the associated door lock(s) 200, 1200, 2200, 3200 are unlocked. Also, in the control device 100 it is saved whether and , if yes, when which door lock 200, 1200, 2200, 3200 should unlock at what predetermined time. Furthermore, it can be stored in the control device 100 after which predetermined time interval(s) or which predetermined time interval(s) which door lock 200, 1200, 2200, 3200 is to be locked again. Likewise, in the control device 100 it is stored whether and, if so, which door locks 200, 1200, 2200, 3200 are to be locked again directly after the closing of door 2, 2002, 3002. In the control device 100 can be saved if and, if so, for which door lock 200, 1200, 2200, 3200 an audible alarm should be generated when unlocked door 2, 2002, 3002 is opened without a positive authentication signal. In the control device 100 it can be stored if an audible alarm should be generated if the door 2, 2002, 2003 is not closed again. Setting these parameters can be made differently for each door lock 200, 1200, 2200, 3200 or for the groups of door locks 200, 1200, 2200, 3200 to be arranged on a door 2, 2002, 3002. This setting is made with the help of the parameterization program by the operator during commissioning.

The control device 100 causes an audible and visual alarm to be emitted as a result of activating an emergency button 10, 1010, 2010, 3010 also in the at least one additional emergency button 10, 1010, 2010, 3010 that is associated to the same door closure 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. If in the example of embodiment of figures 4 and 5, for example, the emergency button 10 is activated , the control device 100 causes by means of communication with the electronic unit 24 of the emergency button 1010 that also the sound alarm 23 and the lighting agents 41 of the emergency button 1010 emit an audible alarm or a visual alarm.

If, after actuation of an emergency button 10, 1010, 2010, 3010, an unlocking is triggered in a delayed manner, the control device 100 causes the first duration of the delay with which the unlocking is triggered to also be displayed in the at least one additional emergency button 10, 1010, 2010, 3010 that is associated with the same door lock 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. To do this, the control device 100 communicates with the electronic unit 24 of at least one additional emergency button 1010, 2010, 3010 or controls the lighting agents 41 of the emergency button 10 in which the control device 100 is integrated.

The control device 100 can carry out the non-security-relevant association for selective communication, for example, the association of an access control system to a door lock 200, 1200, 2200, 3200 on the basis of a bus address. In this connection, the members of the first bus system 400 each have a setting device for manually setting a bus address. The setting device may comprise DIP switches. At least the subscribers of the first bus system 400 that have the same setting in the setting device are automatically associated with one another. In order to be able to assign different bus addresses to the participants with the same setting, the participants of the first bus system 400 have different properties, from which different bus addresses are configured with the help of the setting made. The bus address that is determined with the help of the setting for emergency buttons 10, 1010, 2010, 3010 and for door closers 200, 1200, 2200, 3200 is just an additional bus address used by emergency buttons 10 , 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 together with the bus address that is used in the case of safety-relevant communication.

If a door lock 200, 1200, 2200, 3200 has already been unlocked, the control device 100 may prevent an unlocking of another door lock 200, 1200, 2200, 3200 until the presence of a condition, if a condition is not met. dangerous situation. If the condition is met, the control device 100 triggers the unlocking of the additional door lock 200, 1200, 2200, 3200. In this way, the control device 100 can communicate with several door locks 200, 1200, 2200, 3200 in such a way that a lock is generated. For example, door 2002 may be arranged at the entrance of a room and door 3002 at an exit of the same room. The control device 100, if a positive authentication signal is presented, can cause the door lock 2200 to unlock the door lock 2200. Even if a positive authentication signal is presented for the door lock 3200 from the control device 100, control device 100 may prevent unlocking of door lock 3200 until a condition is present. Once the condition occurs, the control device 100 causes an unlocking of the door lock 3200. The condition can be, for example, a lock time interval or the achievement of a measured variable, such as ambient temperature, humidity, the purity of the air or the number of people in the room. The control device 100 can be connected or can be connected to a measuring device. The condition may comprise door 2002 closing open first, which may be detected by door status monitoring devices 204, 206. The condition and door closures 2200, 3200 participating in the lock may be saved. in the control device 100. The setting of these parameters can be done by the operator with the help of the parameterization program.

In Figure 6, a variant of the security system 1 shown in Figures 4 and 5 is shown. In this sense, the control device 100 is configured independently of the emergency buttons 10, 1010, 2010, 3010 and the door locks. door 200, 1200, 2200, 3200. The first bus system 400 connects the control device 100 with the door locks 200, 1200, 2200, 3200 and the emergency buttons 10, 1010, 2010, 3010. The control device 100 of Figure 6 corresponds in structure to the control device 100 of Figure 3. The emergency button 10 of Figure 6 corresponds in structure to the emergency button 10 of Figure 3. Otherwise, the structure and functionalities, which have been described above with respect to Figure 5, correspond to the structure and functionalities of the security system 1 of Figure 6.

Since, in the exemplary embodiments of FIGS. 4 to 6, the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010, 2010, 3010 and, if necessary, the control device 100 act As participants of a single and first bus system 400, only the cables of the bus system 400 are necessary so that the participants can communicate with each other. Thus, the security system 1 has only a few cables.

Bus system 400 may comprise at least two cables for communication and at least two cables for communication. electricity supply. In particular, the bus system 400 has exactly two wires for communication and two wires for power supply. In each of the exemplary embodiments of the security system 1 according to the invention, a power supply can be integrated as a connection to an electricity network at any point in the bus system 400. Thus, the power supply can be provided as a stand-alone component of the security system 1 outside of the emergency button 10 or the emergency buttons 10, 1010, 2010, 3010 and the door closer 200 or the door closers 200, 1200, 2200, 3200. Thus, the security system 1 is flexible in spatial structure.

If, as in the third and fourth embodiments, there are several emergency buttons 10, 1010, 2010, 3010 and one of the emergency buttons 10, 1010, 2010, 3010 has been activated electronically by means of the electronic maintenance system in the open position, only the door locks 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010 are prevented from locking. door 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010. To achieve the cancellation condition, it is necessary to activate the activation element 11 of the emergency button 10 overlapped in time, 1010, 2010, 3010 and previously activated and authentication on the key switch 500, 1500, 2500, 3500 associated with the activated emergency button 10, 1010, 2010, 3010. At least this operating sequence is necessary for closing door 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010 in which at least one of the door status monitoring devices 204, 206 has detected that door 2 or one of the door leaves 3, 4 have been opened after activating the emergency button 10.

If the door status monitoring devices 204, 206 of the door locks 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010 have detected that door 2 has remained constantly closed after activation of the emergency button 10, 1010, 2010, 3010, the cancellation condition can be reached by passing the predetermined time interval. Thus, the cancellation condition can be achieved, for example, after 60 seconds after the last activation of the emergency button 10. The admissibility of whether a blocking must be carried out after the expiration of the predetermined time interval when the door 2, 2002, 3002 has remained closed can be adjustable and can be set individually for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, in particular for door locks that are determined for layout at the same door. This setting can be made, for example, on the emergency buttons 10, 1010, 2010, 3010. Likewise, for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200 , in particular for door locks that are determined for arrangement on the same door, it is possible to adjust and set the duration of the predetermined time interval individually. In this sense, a minimum duration of, for example, 60 seconds can be firmly predetermined for the predetermined time interval. The setting is carried out by means of the parameterization program.

In figure 7 a fifth example of embodiment of the security system 1 according to the invention is shown. The fifth example of embodiment comprises the security system 1 according to the first example of embodiment of figures 1 and 2. That is, the emergency button 10, which includes the control device 100, is connected by means of the security system. bus 400 with the door lock 200. The key switch 500 is connected or can be connected via a connection 402 with the emergency button 10. In the fifth embodiment, compared to the first embodiment, other components 300, 301, 510 are provided.

The security system 1 comprises the central emergency exit control 300. The central emergency exit control 300 is intended to be arranged remotely from the door 2. Thus, the central emergency exit control 300 for example, together with a surveillance device 301, which may be configured as a screen or a personal computer, and/or a multi-door display apparatus 350 (see Fig. 10), may be arranged in a surveillance booth. Surveillance device 301 is optionally part of security system 1 according to the invention. Alternatively, the surveillance device 301 is connectable to the security system 1 according to the invention.

The central emergency exit control 300 is modularly structured. An emergency module 310 comprises a first fixing plate 311. The first fixing plate 311 houses a central emergency button 302 and an identification device 312 configured, for example, as a key switch. By means of the first fixing plate 311, the central emergency button 302 and the identification device 312 are mechanically rigidly connected to each other. The central emergency button 302 serves so that, as a result of an operation of the central emergency button 302, the door lock 200 is unlocked. Thus, by means of the central emergency button 302 remote from the door 2, the door lock can be unlocked. door closing 200. Unlocking as a result of activating the central emergency button 302 is carried out safely against failure. The actuation of the central emergency button 302 is therefore appropriate for a dangerous situation.

A deactivation module 320 comprises a first control element 322 configured as a key switch and a second control element 323 configured as a button. The first control element 322 serves to deactivate the emergency button 10. Thus, by actuating the first control element 322, the emergency button 10 is transferred to a deactivated state. If the emergency button 10 is in a state If the emergency button 10 is deactivated, unlocking of the door lock 200 is not carried out after an operation of the emergency button 10. The second control element 323 serves to activate the emergency button 10. If the emergency button 10 is in the state deactivated and the second control element 323 is actuated, the emergency button 10 is transferred to an activated state. In the activated state of the emergency button 10, the emergency button 10 triggers an unlocking of the door lock 200, if the emergency button 10 has been actuated. The deactivation module comprises a second fixing plate 321. The second fixing plate The fixing plate 321 serves to receive the first and second control elements 322, 323. The second fixing plate 321 mechanically rigidly connects the first and second control elements 322, 323 to one another.

The delay module 330 comprises a third mounting plate 331. The third mounting plate 331 accommodates a delay element 332. The delay element 332 is designed, for example, as a key switch. The delay element 332 serves to further delay, within the first delay duration, the unlocking of the door lock 200. The delay module 330 comprises a termination element 333 which is configured as a button. The termination element 333 is attached to the third mounting plate 331. The termination element 333 is mechanically rigidly connected to the delay element 332 by means of the third mounting plate 331. By actuating the termination element 333, door lock unlock delay 200 can end.

The central emergency exit control 300 comprises an open-sided emergency exit control housing 340 in which the emergency module 310, the deactivation module 320 and the delay module 330 are arranged. The deactivation module 320 and the delay module 330 are optional components of the central emergency exit protection 300. In the emergency exit control housing 340, the multi-door display unit 350 can also be arranged, if present.

The emergency exit control shell 340 can mechanically fix the emergency module 310, the deactivation module 320 and the delay module 330. The emergency module 310, the deactivation module 320 and the delay module 330 are fixed in each case individually to the emergency exit control housing 340, in particular screwed. For fastening to the emergency exit control housing 340, the first fastening plate 311 for the emergency module 310, the second fastening plate 321 for the deactivation module 320 and/or the third fastening plate 331 for the delay module 330. The emergency exit control housing 340 and the modules 310, 320, 330 are designed in such a way that different orders in which the modules 310, 320, 330 can be arranged adjacently are possible. Thus, for For example, in a central emergency exit lock 300, not shown, for example, the emergency module 310 can be arranged between the deactivation module 320 and the delay module 330. In another central emergency exit control 300, not shown , a free space can be arranged, for example, on the left, the delay module 330 in the center, and the emergency module 310 on the right. The free space is generated by the absence of the deactivation module 320 and is hidden by a plate. The emergency exit control housing 340 can have rails for sliding the rails 310, 320, 330. The emergency exit control housing 340 can have fixing possibilities, for example, perforated bars or oblong holes for fixing variable of modules 310, 320, 330.

On the first mounting plate 311, on the second mounting plate 321 and on the third mounting plate 331, a display area 314, 324 or 334 is provided in each case, which is only shown schematically. In the display area there are symbols illustrating the function of the modules 310, 320, 330. In addition, visual lights for displaying the states of the security system 1 may be provided in the display areas 314, 324, 334.

In the exemplary embodiment of FIG. 7, the security system 1 further comprises an audio and video module 510. The audio and video module 510 is intended for placement near the door 2 which can be locked by the user. door closing 200. If the audio and video module 510 is activated, an operator in the security booth can talk to the user located in front of door 2 and see the space around door 2.

As shown in Fig. 8, the central emergency button 302 is structured similarly to the emergency button 10. Thus, the central emergency button 302 comprises an electronic emergency button unit 308. The electronic emergency button unit 308 comprises a first emergency processing unit 303, a second emergency processing unit 304 and a third emergency processing unit 305. The first, second and third emergency processing units 303, 304, 305 are each configured such as microprocessors or microcontrollers. The first and second emergency processing units 303, 304 have non-volatile memory. The third emergency processing unit 305 has non-volatile memory and/or has access to non-volatile memory. The central emergency button 302 is actuated by an emergency button actuating member 306 being actuated. In this manner, the emergency button switch 307 is actuated. In this manner, a first and a second signal are generated. To do this, a first and a second electrical circuit (not shown) are opened. A signal about the opening of the first electric circuit is detected by the first emergency processing unit 303. A signal about the opening of the second electric circuit is detected by the second emergency processing unit 304.

The central emergency button 302 is connected with a second bus system 401. As shown in Fig. 9, the control device 100 is also connected with the second bus system 401. The second bus system 401 is a kind of bus system different from the first bus system 400. For example, the second bus system 401 can be configured as a LON or LAN bus and the first bus system 400 as a CAN or DCW bus.

In Figure 9, the emergency button 10 comprises the control device 100. The emergency button 10 and door lock 200 shown in Figure 9 correspond to the emergency button 10 and door lock 200 of figure 2.

In an alternative not shown, the control device 100, the emergency button 10 and the door lock 200 are configured according to figure 3. In this alternative not shown, the control device 100, the emergency button 10 and the door closer 200 are connected to each other via the first bus system 400, the control device 100 being connected to the second bus system 401.

The control device 100 receives messages from the central emergency exit guard 300 via the second bus system 401. The control device 100 forwards the messages via the first bus system to other participants of the first bus system 400. The The message can in particular be information regarding an actuation of the central emergency button 302, of the key switch 312, of the first control element 322, of the second control element 323, of the delay element 332 and/or of the activation element. termination 333 or a control command as a consequence of an actuation of one of the aforementioned elements 302, 312, 322, 323, 332, 333. If the control device 100 is integrated in the emergency button 10, the bypass to the emergency button 10 in which the control device 100 is integrated is not necessary. For example, according to figure 9, the control device 100 forwards the message to the door lock 200. If the control device 100 and the emergency button 10 are connected via the first bus system 400, the control device 100 forwards the message to the emergency button 10 and/or the door closing 200. The control device 100 adapts the message to the format of the first bus system 400. Otherwise, the safety-relevant messages are left untouched.

If the central emergency button 302 has been actuated, the first emergency processing unit 303 and redundantly the second emergency processing unit 304 trigger an unlocking of the door lock 200. In this sense, the central emergency button 302 communicates via the control device 100 with the door closing control 201, in particular with the first and second processing means 202, 203. The first and second processing means 202, 203 then control the closing mechanism. lock 205. Previously, the first and second processing units 103, 104 have derived the message. In this sense, the control device 100 has left the content of the message intact.

The central emergency button 302 has an input for receiving a fire alarm. If a fire alarm signal is received, the central emergency button 302 triggers an unlocking of the door lock 200. To do this, the first and second emergency processing units 303, 304 communicate via the control device 100, in particular through the first and second processing units 103, 104, with the door lock control 201, as described above.

A signal about an actuation of the key switch 312 of the first module 310 is received by the emergency button electronic unit 308, in particular the third emergency processing unit 305. The emergency button electronic unit 308 sends a message regarding to actuation of the key switch 312 on the second bus system 401 to the control device 100. The control device 100 forwards the message to the first bus system 400.

The emergency button actuating element 306 is made non-locking. The emergency button actuation element 306 is configured identically to the actuation element 11 of the emergency button 10 (see FIGS. 13 to 15). Thus, the emergency actuation element 306 is transferred during actuation from a starting position to an actuation position (analogous to FIG. 11). Directly after actuation, the emergency actuation element 306 is moved back into the starting position by the force of a spring-shaped restoring agent (analogous to FIG. 11). The actuation of the emergency actuation element 306 is effected translationally. If, as a result of activating the central emergency button 302, the door lock 200 is transferred to the unlocked state, the electronic device 207 prevents, by means of the open position maintenance electronic system, that, without the presence of a cancellation condition, door lock 200 can be transferred back to the locked state. The cancellation condition after actuation of the central emergency button 302 can be achieved by an actuation of the key switch 312. In particular, an actuation of the key switch 312 is sufficient to achieve the cancellation condition.

If the security system 1 comprises the central emergency exit control 300, as a result of an operation of the emergency button 10, the cancellation condition can be reached in another way: If the door status monitoring devices 204, 206 have detected that door 2 has remained permanently closed after activating the emergency button 10, the condition can be achieved cancellation by elapse of a predetermined time interval and a cancellation action in the emergency exit central control 300 after the predetermined time interval. The cancellation action can be an authentication at the central emergency exit control 300, in particular an actuation of the key switch 312. By means of the cancellation action, for example, the actuation of the key switch 312, a signal can be generated of cancellation. The cancellation signal is forwarded via the control device 100 to the door closing control 201. An authentication at the key switch 500 and a cancellation action at the emergency button 10 are not necessary in this case.

The door lock control 201 checks whether an achievement of the cancellation condition is permissible by passing the predetermined time interval and authenticates at the central emergency exit control 300 whether the door 2 has remained closed before the exit control. door closer 201 check the lock mechanism 205 for locking. Thus, an operator can establish during the start-up of the security system 1 if an elapse of the predetermined time interval without opening of the door 2 and the additional actuation of the key switch 312 is permissible as a cancellation condition and, therefore, leads to a relocking of the door 2. An admissibility check, an expiration of the predetermined time interval, an actuation of the key switch 312 after the predetermined time interval and the fact that, during the predetermined time interval, neither the first door status monitoring device 204 nor the second door status monitoring device 206 has sent a signal about the opening of the door, they are sufficient to achieve the cancellation condition.

In this sense, it is a variant for achieving a cancellation condition that has been described with respect to figures 1 and 2. This variant can be selected, for example, by the operator when only the elapsed time interval default when door 2 remains closed does not seem safe enough to the operator. The operator can choose and set this variant by means of the parameterization program.

In particular if the operator has chosen this option, the elapse of the predetermined time interval when door 2 remains closed is displayed visually to the central emergency exit control 300. In particular, the lighting agents 313 serve to show that the interval of predetermined time has elapsed without receiving a signal about opening the door 2 within the predetermined time interval. By the visual display, the operator acknowledges that the door 2 can be locked by authentication at the central emergency exit control 300.

If the door status monitoring devices 204, 206 do not send a signal about a door opening during the presence of a fire alarm, after an end of the fire signal a blocking of the door closing 200 can also be achieved. by means of the same actuation of the key switch 312. Also visually shown by means of the lighting agents 313 is the possibility of achieving by actuation of the key switch 312 after an end of the fire signal a blocking of the door lock 200.

The control device 100 derives messages from the emergency button 10 and/or the door lock 200 via the second bus system 401. In this sense, the control device 100 adapts the message to the format of the second bus system 401. The control device 100 sends information about the status of the emergency button 10 and/or the door lock 200 via the second bus system 401.

For example, the central emergency exit control 300 and the multi-door display apparatus 350 may be connected with a third bus system 403 (see Fig. 10). Preferably, the central emergency button 302, particularly preferably the emergency button electronic unit 308, can be connected to the third bus system 403 (see FIG. 8). The multi-door display apparatus 350 can visually display the locked or unlocked status of the door lock 200. Additionally, with the help of the multi-door display apparatus 350, one of the door locks 200, 200', 1200 can be unlocked. ', 2200' of security system 1 (see figure 10). Unlocking with the aid of the multi-door display unit 350 is not fail-safe. The third bus system 403 may be of the same type of bus system as the first bus system 400, for example, a CAN or DCW bus.

The control device 100 bypasses via the second bus system 401 to the central emergency exit control 300, if the emergency button 10 waits a first delay duration, before the emergency button 10 causes the closing control door lock 201 check the lock mechanism 205 for unlocking.

The first duration of the delay is displayed on the central emergency exit control 300. For this, the central emergency button 302 is constructed corresponding to the emergency button 10, as described with respect to figures 13, 16, 17. For the display of the first delay duration, the lighting agents 313 of the central emergency button 302 are controlled by the emergency button electronic unit 308. With the progress of the first delay duration, fewer lighting agents 313 light up. with the same color. For example, fewer highlighters 313 may be displayed with a first color and increasingly more highlighters 313 with a second color. The lighting agents 41 of the emergency button 10 are identically controlled to display the first delay duration.

During the first duration of the delay, for example, 8 seconds, the operator can actuate the delay element 332. To do this, the operator turns a key in the key switch serving as the delay element 332. An actuation of the delay element 332 is detected by the electronic emergency button unit 308, in particular the third emergency processing unit 305. A corresponding message is sent via the second bus system 401 and, if applicable, the first bus system 400. The emergency button 10 receives the message. Following actuation of delay element 332, emergency button 10 ends the first delay duration and begins a second delay duration. The second delay duration, for example, 180 seconds, is longer than the first delay duration. At the end of the second duration of the delay, the emergency button 10 triggers the unlocking of the door lock 200. The second duration of the delay is determined in the emergency button 10 with the help of the same timer that serves to determine the first duration. of the delay. During the second duration of the delay, the delay element key 322 must remain unturned. On the contrary, a single turn of the key is enough to start the second duration of the delay.

The second delay duration is displayed on the central emergency exit control 300 and on the emergency button 10. The display on the central emergency exit control 300 is similar to the display on the emergency button 10. With the progress of the second delay duration, fewer lighting agents 41, 313 with the same color light up. For example, fewer lighting agents 41, 313 can be displayed with a first color and increasingly more lighting agents 41, 313 with a second color. To represent how long the second delay duration lasts, a pattern that is associated with a temporal sequence, for example, a circulating color dot or a circulating color window, can be repeatedly represented within the second delay duration (see Fig. description with respect to figures 16, 17).

If, during the first or second duration of the delay, the termination element 333 is actuated, the emergency electronic unit 308, in particular the third emergency processing unit 305, detects the actuation of the termination element 333 and sends a message with respect to the actuation of the termination element 333 by means of the second bus system 401. In this way, the emergency electronic unit 308 leads the emergency button 10 to no longer delay the unlocking, but to directly cause an unlocking of the lock gate 200. Completion element 333 is configured to be non-latching. One actuation of the completion element 333 suffices to end the unlock generation delay.

The emergency button 10 can be transferred to the deactivated state by an actuation of the first control element 322 . To do this, the operator turns a key in the key switch serving as the first control element 322. An actuation of the first control element 322 is detected by the electronic emergency button unit 308. At an actuation of the first control element 322, a first and second electrical deactivation circuit is opened or closed. The opening or closing of the first deactivation electric circuit is detected by the first emergency processing unit 303. The opening or closing of the second electric circuit is detected by the second emergency processing unit 304. The first and second emergency processing units 303, 304 communicate via the second bus system 401 with the emergency button 10. If the first bus system 400 is located between the emergency button 10 and the central emergency button 302, the control device 100 forwards the message to the first and second emergency processing units 303, 304. In the forwarding, the format is changed, but the content remains unchanged.

In the deactivated state of the emergency button 10, actuation of the emergency button 10 has no effect on the door lock 200.

The activated state and the deactivated state are stored in the emergency button 10 electronically. Since the activated state and the deactivated state are stored in the emergency button 10, the key does not need to remain turned on the first control element 322 during the deactivated state. On the other hand, a single turn of the key is enough to deactivate the emergency button 10.

The deactivation persists until the second command element 323 is actuated. The actuation of the second command element 323 can be detected by the emergency button electronic unit 308, in particular the emergency processing unit 305. The emergency electronic unit 308 sends a message regarding the actuation of the second control element 323 via the second bus system 401 and, if necessary, via the first bus system 400 to the emergency button 10, after which the emergency button 10 is transferred to the activated state. The second control element 323 does not latch. Since the activated and deactivated status is stored in the emergency button 10, a single actuation of the second control element 323 suffices to transfer the emergency button 10 to the activated state.

The central emergency exit control 300 comprises a bus 341 by means of which the emergency electronic unit 308, in particular the third emergency processing unit 305, can detect signals from the second control element 323, from the element of delay 332 and of the termination element 333. The electronic emergency unit 308 serves as the intelligence of the entire central emergency exit control 300. Only the electronic emergency unit 308 comprises microprocessors. The deactivation module 320 and/or delay module 322 can be designed without a processor. The 341 bus may be designed as an I2C bus.

For establishing the activated and deactivated state in the first emergency button processing unit 20 and, redundantly, in the second emergency button processing unit 21, in particular in the non-volatile memories, a second variable can be saved . The second variable can be binary. If the emergency button 10 is in the deactivated state, the second variable is set to a deactivation value. If the emergency button 10 is in the activated state, the second variable is set to an activation value. Following actuation of the first control element 322, the second variable is set to the deactivation value. Following actuation of the second control element 323, the second variable is set to the activation value. Before the emergency button 10 causes the unlocking of the door lock 200, the emergency button 10 checks the value of the second variable. If the emergency button determines that the emergency button 10 is deactivated, there is no communication of the emergency button 10 with the door lock control 201, to cause an unlock 200.

The first emergency processing unit 303 and the second emergency processing unit 304 monitor each other for failures. If a fault is detected, a message is sent via the second bus system 401. The emergency button 10 receives the message and then transfers itself to the activated state, if the emergency button 10 is in the disabled state. For this, the emergency button 10 modifies the value of the second variable to the activation value.

The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly, in particular at regular intervals, send a life signal via the second bus system 401. The emergency button 10 receives the life signals. If on one or more occasions a sign of life is missing, the emergency button 10 is transferred to the activated state, if the emergency button 10 is in the deactivated state.

If the security system 1 receives a fire alarm signal, the emergency button 10 is transferred to the activated state, if the emergency button 10 is in the deactivated state.

Actuation of the emergency button 10 in the deactivated state is displayed on the central emergency exit control 300, on the monitoring device 301 and/or on the multi-door display unit 350. If a dangerous situation actually exists, the emergency button 10 is transferred by the operator to the activated state by operating the operator the second control element 323, or the closing of the door for unlocking can be directly controlled by the operator. For this, the operator can actuate the central emergency button 302. If a dangerous situation arises, the operator can perceive, for example, the audio and video module 510. In this way, high safety is achieved.

Deactivation can be done, for example, at night in a department store. Furthermore, it is conceivable to use the deactivatable emergency button 10 in a building in which mentally impaired people live. Thus, emergency buttons 10 can also be used on doors to which people with impaired mental conditions have access, for example, in a psychiatric station or ward.

If, in the deactivated state, the emergency button 10 is actuated and then the emergency button 10 is transferred to the activated state, the actuation of the emergency button 10 in the deactivated state also does not lead to unlocking after the transfer to the activated state. of the door closer 200. The operation carried out in the deactivated state of the emergency button 10 has no effect. This is due, on the one hand, to the fact that the actuating element 11 and the switch 63 are not designed to interlock. On the other hand, the operation of the emergency button 10 is not saved in the deactivated state in the emergency button 10. The door lock control 201 does not receive any message regarding the operation of the emergency button 10 in the deactivated state. The electronic hold-open system has therefore been transferred to the actuated state. In this way, it is achieved that, directly with the activation of the emergency button 10, the door lock 100 is unlocked, for example, because the emergency button 10 had been activated long before. In this way, high security is achieved. in the building in question.

In order to achieve particularly high security, provision can be made for the audio-video module 510 to be activated during the first and/or second duration of the delay. In this sense, the emergency button 10 activates the audio-video module 510 at the beginning of the first and/or the second duration of the delay. Likewise, the audio and video module 510 is activated by the emergency button 10 when the emergency button 10 is actuated in the deactivated state. For this, the emergency button 10 communicates via the second bus system 401 and, optionally via the first bus system 400 with the audio/video module 510.

It may be that the emergency button 10 can only be deactivated if the audio-video module 510 can be activated. If the audio-video module 510 is part of the security system 1 according to the invention, a deactivation can be dispensed with. if the audio and video module 510, for example, is not working and/or the connection with the audio and video module 510 fails. This is not the case if the security system 1 does not include an audio and video module 510, but instead a surveillance system is provided in the building independent of the system. security 1.

It may be that the emergency button 10 that delays the triggering of the unlocking is only delayed for the first and/or the second duration of the delay, if the audio and video module 510 can be activated. If the audio and video module 510 is part of the security system 1 according to the invention, a delay can be dispensed with if the audio-video module 510, for example, is not in operation and/or the connection to the audio-video module fails. This is not the case if the security system 1 does not include an audio and video module 510, but instead a surveillance system is provided in the building independent of the security system 1.

In Figure 10, another embodiment of a security system 1 according to the invention is shown. As in the exemplary embodiment of FIGS. 7 to 9, the security system 1 comprises a central emergency exit control 300, which is structured correspondingly to that of FIGS. 7 and 8. The corresponding key switches 500, 500', 1500 , 1500', 2500 of the respective emergency buttons 10, 10', 1010, 1010', 2010 are not reproduced for the sake of clarity. The central emergency exit control 300 is connected with the second bus system 401. With the second bus system 401, a first bus subsystem 5 and a second bus subsystem 6 are connected. The two subsystems 5, 6 comprise in each case a first bus system 400, 400'. Emergency buttons 10, 1010 or 10', 1010', 2010' and door locks 200 or 200', 1200', 2200' are each connected to the respective first bus system 400, 400'. The first bus systems 400, 400' are of the same type of bus system, eg a CAN bus or a DCW bus. The second bus system 401 is of a different type of bus system, for example, a LON or LAN bus.

The security system 1 comprises the multi-door display apparatus 350. The multi-door display apparatus 350 can, for example, visually display which door lock 200 or 200', 1200', 2200' is in the unlocked state. and which door lock is in the unlocked state. With the aid of the multi-door display unit 350, an operator can perform a security-independent locking and unlocking of individual door locks 200 or 200', 1200', 2200' of the security system 1.

Each subsystem 5, 6 comprises only one control device 100, 100'. In each case the control device 100, 100' of the respective subsystem 5, 6 is connected to the second bus system 401. The control device 100 of the first subsystem 5 is connected in this connection with the emergency buttons 10, 1010 and the door lock 200 of the first subsystem 5 via the first bus system 400. The control device 100' of the second subsystem 6, on the other hand, is integrated in an emergency button 10' of the second subsystem 6 and is connected with the other emergency buttons 1010', 2010' and the door locks 200', 1200', 2200' of the other first bus system 400'.

In the subsystem 5, a first emergency button 10 and a second emergency button 1010 are provided. If the emergency button 10, 1010 is actuated, the actuated emergency button 10, 1010 causes in each case an unlocking of the door lock 200.

In the subsystem 6, a first emergency button 10, a second emergency button 1010' and a third emergency button 2010' are provided. The emergency buttons 10', 1010', 2010' selectively trigger an unlocking of the door locks 200', 1200', 2200' of the second subsystem 6. For example, actuation of the first emergency button 10' only triggers an unlocking of the first door lock 200'. Correspondingly, with an actuation of the second emergency button 1010', only one unlocking of the second door lock 1200' is triggered, and with an actuation of the third emergency button 2010', only one unlocking of the third door lock 2200'.

Multiple variations are conceivable. Thus, a security system 1 according to the invention can be designed, for example, without the first or second subsystem 5, 6. As a single or additional subsystem, for example, one of the security systems 1 of according to the invention described in figures 1 to 6. The configuration and functions of the emergency buttons 10, 10', 1010, 1010', 2010' and of the door locks 200, 200', 1200', 2200' they are configured corresponding to the previous exemplary embodiments, unless they are described additionally or differently below.

In each of the door locks 200, 200', 1200', 2200' of the security system 1 it has been saved if, in the event of an actuation of the central emergency button 302, an unlocking of the respective door lock 200 is carried out , 200'1200', 2200'. Thus, for example, the door locks 200, 200', 2200' can allow unlocking as a result of actuation of the central emergency button 302, but not the door lock 1200'. If the central emergency button 302 is actuated, the door lock controls 201 of the door locks 200, 200', 2200' control the respective lock mechanism 205 for unlocking. In contrast, such a control does not take place in the door lock 1200'.

If the central emergency button 302 is actuated, the control devices 100, 100' receive a corresponding message from the central emergency button 302 via the second bus system 401 and forward the message to all door locks 200 in each case. or 200', 1200', 2200' of the respective first bus system 400, 400'. Door locks 200, 200, 1200, 2200 decide on the basis of the saved, which includes the admission of a unlocking as a result of actuation of the central emergency button 302, whether or not the respective door lock control 201 of the door locks 200, 200', 1200', 2200' controls the respective lock mechanism 205 for unlocking.

The setting of whether the door lock 200, 200', 1200', 2200' is unlocked as a result of an actuation of the central emergency button 302, is made during the start-up of the security system 1 by means of the operator. The setting is carried out by means of the parameterization program.

In each of the emergency buttons 10, 1010, 10', 1010', 2010' it has been established whether, in the event of an actuation of the first control element 322, a transfer to the deactivated state is allowed or not for the respective button. emergency 10, 1010, 10', 1010', 2010'. In this way, a selective deactivation is achieved by actuating the only first control element 322 of the security system 1. Thus, for example, the emergency buttons 10, 10', 2010' can be transferred to the deactivated state as a consequence of an actuation of the first control element 322, but not the emergency buttons 1010, 1010'.

If the first control element 322 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message in each case to all emergency buttons 10, 1010, 1010', 2010 ' of the respective first bus system 400, 400' that do not comprise the control device 100. The emergency buttons 10, 1010, 10', 1010', 2010' of the security system 1 decide, based on the setting on the admission for deactivation, whether or not the respective emergency button 10, 1010, 10', 1010', 2010' transfers itself to the deactivated state as a result of actuation of the first control element 322.

The setting of whether a deactivation of the emergency buttons 10, 1010, 10', 1010', 2010' should be allowed can be a third variable. The third variable can be realized binary. The third variable is stored in the non-volatile memories of the respective first and second emergency button processing units 20, 21 of each emergency button 10, 1010, 10', 1010', 2010'. If deactivation is allowed for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable assumes a first value. If deactivation is prohibited for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable assumes a second value. The emergency button 10, 1010, 10', 1010', 2010' checks the value of the third variable before the emergency button 10, 1010, 10', 1010', 2010' is deactivated and only deactivates if the third variable has the first value.

The setting of whether the emergency button 10, 1010, 10', 1010', 2010' should be deactivatable is made during the start-up of the safety system 1 by the operator. This is established with the help of a parameterization program.

For each of the emergency buttons 10, 1010, 10', 1010', 2010', it is determined whether, in the event of an actuation of the delay element 332, the respective emergency button 10, 1010, 10', 1010' , 2010' delays or not the unlocking of the door locks 200, 200', 1200', 2200' associated with the emergency button 10, 1010, 10', 1010', 2010' for a second duration of the delay. The second delay duration is adjustable differently for the respective emergency buttons 10, 1010, 10', 1010', 2010' and is saved in the security system 1, in particular in the emergency buttons 10, 1010, 10 ', 1010', 2010'. Alternatively, the admission of the delay during a second delay duration and, if necessary, the time of the second delay duration can be individually adjustable only for groups of emergency buttons 10, 1010, 10'. 1010', 2010' that are associated with a door lock 200, 200', 1200', 2200' or a door 2, 2002, 3002. Setting and saving is done by the operator with the help of the parameterization program.

Thus, for example, the emergency buttons 10, 2010' can delay the release of the door locks 200 or 2200' more as a result of an activation of the delay element 332, but not the emergency buttons 1010, 10', 1010 '. The duration of the second delay time for the emergency button 10 has been selected different from the duration of the second delay time for the emergency button 2010'. If the emergency button 10 is actuated and, within the first delay duration that is stored for the emergency button 10, the delay element 332, the emergency button 10, is actuated from the actuation of the delay element 332 , delays unlocking with the second delay duration that has been saved in the emergency button 10. If the emergency button 2010 is actuated and, within the first delay duration that is saved for the emergency button 2010, it is actuated the delay element 332, the emergency button 2010, starting from the actuation of the delay element 332, delays the unlocking with the second delay time that has been stored in the emergency button 2010' and that is different from the second delay time delay for the emergency button 10. If the emergency button 1010 is actuated, the emergency button 1010 delays unlocking with the first delay duration that has been saved for the emergency button 1010. Yes, du During the first or second delay duration of the emergency button 1010, the delay element 332 is actuated, unlocking is not delayed by a second delay duration, since this delay is not allowed for the emergency button 1010, but that the emergency button 1010 will cause after the first duration of the delay directly an unlocking of the door lock 200. The emergency buttons 10', 1010' do not delay the unlocking of the associated door locks 200' or 1200'. In the emergency buttons 10', 1010', neither a first duration of delay or a second delay duration. Instead of not accepting a delay for the first and/or second delay duration, a duration of 0 seconds can also be saved. An actuation of termination element 333 terminates any unlock delay.

If the delay element 332 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message in each case to the emergency buttons 10, 1010, 1010', 2010'. of the respective first bus system 400, 400' which do not comprise the control device 100. The emergency buttons 10, 1010, 10', 1010', 2010' of the security system 1 decide on the basis of the setting how the proceed.

The setting of whether the emergency button 10, 1010, 10', 1010', 2010' supports the delay of the second delay time and, if so, the setting of the duration of the second delay time is made during power up. commissioning of the security system 1. The settings are made by the operator with the help of the parameterization program. the first and/or the second duration of the delay can be selected only up to a firmly predetermined maximum duration.

Also, with the help of the parameterization program, the operator can selectively establish for which emergency button 10, 1010, 1010', 2010' which cancellation condition is allowed. The cancel condition for the cancel- in-place action is always supported. For each emergency button 10, 1010, 1010', 2010', however, it may or may not be selectively allowed to reach the abort condition by passing the predetermined time interval or to reach the abort condition by passing the predetermined time interval. predetermined time and subsequent activation of the identification device 312 in case the door 2 has remained closed.

Setting whether the emergency button 10 can be deactivated by actuating the first control element 322, whether the emergency button 10 can delay unlocking by actuating the delay element 332 by a second delay duration, the duration of the first and second delay times, the establishment of the cancellation condition and/or the establishment of whether the door lock 200 should be unlocked with an actuation of the central emergency button 302 can also be an embodiment for the security system 1 of according to the example of embodiment of figures 7 to 9.

In a different way and not shown in FIGS. 7 to 10, several central emergency exit controls 300, 300' can also be connected to the second bus system 401. For example, in a psychiatric center a central emergency control can be provided. emergency exit 300 for provision in a surveillance booth and another central control emergency exit 300' for provision in a nursing station.

With the respective door locks 200, 200', 1200', 2200', it can be established in each case with the help of the parameterization program as a result of an actuation on which of the central emergency buttons 302, 302' an action is to be carried out. unlock. To do this, a list must be established in the door locks. At the respective emergency buttons 10, 10', 1010, 1010', 2010', it can be determined in each case with the help of the parameterization program as a result of an actuation which of the first control elements 322, 322' are assigned the allows deactivation. Unlike the third variable, a list is established in each case in the emergency buttons 10, 10', 1010, 1010', 2010'.

From the first to the fourth embodiment of the security system 1 according to the invention there is no second bus system 401, no central emergency exit control 300, no surveillance device 301 and no audio and video module 510 However, exemplary embodiments of the security system 1 are conceivable according to the invention, in which the missing components 401, 301, 300 and 510 are at least partially included in the first to fourth exemplary embodiments. If the security system 1 is designed for several doors, an audio and video module 510 can be associated with each door. The emergency buttons 1010, 2010, 3010 do not comprise the control device 100, and the door locks 200, 1200, 2200, 3200 are not connected to the second bus system 401.

In figures 1 to 10, the door locks 200, 200', 1200, 1200', 2200, 2200', 3200 are part of the security system 1 according to the invention. However, it is also conceivable that in each case only the door lock controls 201 are part of the security system 1 according to the invention. In this case, the door lock controls 201 can each be connected to the lock mechanism 205 and, if necessary, the door status monitoring devices 204, 206. An unlocking of the door lock 200 does not have place in this case in the security system 1, however, it is part of the security system 1 that the door lock control 201 controls the locking mechanism 205, that is, that the door lock control 201 activates or deactivates the electric current for the locking mechanism 205. In this case, instead of the terms "unlocking or locking of the door lock" in each case "control of the locking mechanism for unlocking or locking" can be used.

An emergency button 10 is shown in figures 11 to 13. The emergency button 10 shown in figure 11 can be or is used as an emergency button 10, 10', 1010, 1010', 2010, 3010 in one of the systems safety 1 according to the invention of figures 1 to 10.

The emergency button 10 comprises the actuating element 11. The actuating element 11 can be moved from the starting position 11.I, which is shown in figure 11, to the actuating position 11.11, which is indicated in figure 11. In Fig. 12, the actuating element 11 is also in the starting position 11.I.

Switch 63 is activated in actuation position 11.II. Switch 63 also changes in this direction from one position 63.I to a second position 63.11, as shown in Fig. 12.

After actuation, the actuating element 11 returns directly and without manual action to the starting position 11.I. For this, a return agent 12 configured as a spring is provided in the emergency button 10. After actuation, the switch 63 also returns directly and without manual action to the first position 63.I.

The emergency button 10 comprises at least one first plate 60. It is thus possible to design the emergency button 10 in a compact manner and with assured operation.

The emergency button 10 has a mounting height AH of less than 48 mm from a crest 32 of a front surface 19 of the actuating element 11 in the mounting direction, preferably less than 45 mm, particularly preferably less than 43 mm.

Switch 63 is attached to first plate 60. The first and second electrical circuits are interrupted on first plate 60 by actuation of switch 63.

The emergency button 10 further comprises a second plate 61. On the first plate 61, the first, second, and third emergency button processing units 20, 21, 22 are arranged. second and third emergency button processing units 20, 21, 22 is independent of whether the first, second and third emergency button processing units 20, 21, 22 serve as processing units 103, 104, 105 of the control device 100.

The opening of the first and second electrical circuits can be wirelessly detected by the first or second emergency button processing unit 20, 21. For this, the first and second boards 60, 61 are connected to each other by means of pins 68.

The first and second plates 60, 61 are arranged at a fixed distance from each other. For this, bolts 69 are provided which fix the first and second plates 60, 61 to each other by means of screws 70 at a fixed distance from each other (see Figure 13). The first and second plates 60, 61 are arranged parallel to each other.

The emergency button 10 comprises a mounting plate 62. The mounting plate 62 is also arranged at a fixed distance from the first and second plates 60, 61. For this purpose, bolts 71 are provided which join the mounting plate by means of screws 72. assembly 62 with the first plate 61.

Mounting plate 62 serves for mounting a flush-mounted box. The recessed box can have a diameter of 60 mm and a depth of 41 mm. The part of the emergency button 10 that extends from the mounting plate 62 in the mounting direction is designated as component 73. The component 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm. mm, particularly preferably less than 29 mm. In this way, there is enough space for cables in the flush-mounted box. The distance MP from the lower side of the mounting plate 62 to an upper side of the second plate 62 is less than 22 mm, preferably less than 20 mm, particularly preferably less than 17 mm. The mounting plate 62 can also serve for attachment to a cover element of a drop-in casing (not shown). The mentioned distances are met in particular for an emergency button in which the bluetooth module 64 is fixed to a lower side of the second circuit board 61, in contrast to the illustration of the figures.

As described above, the cancellation action, which is performed directly on the emergency button 10, is executed without a rotary movement of the actuating element 11 and the switch 63. Therefore, it is possible to use a switch 63 with a lower height. Thus, switch 63 is configured such that switch 63 does not turn. The switch 63 has a height SH of less than 20 mm, preferably less than 17 mm, particularly preferably less than 15 mm.

The manner of the cancellation action and the low height of the switch 63 contribute to a low construction height AH of the emergency button 10.

Furthermore, it contributes to the low overall height AH of the emergency button 10 that the switch 63 is arranged centrally under the actuating element 11 and that the actuating element 11 is guided eccentrically on the emergency button 10.

As shown in FIGS. 14 and 15, the actuating element 11 has rod-shaped guide agents 35 . The guide agents 35 are guided in guide bushes 65. The guide bushes 65 are connected to the mounting plate 62. In order to achieve good guidance, one of the guide bushes 65 extends through the first plate 60.

The guide agents 35 are arranged parallel to the switch 63. The guide agents 35 prevent a rotary movement of the actuating element 11 about an imaginary axis 701 running in the actuating direction 700.

By means of the guide agents 35 guided in the guide bushes 65, the drive element 11 can only be moved translationally.

The actuating element 11 has an actuating agent 36. As shown in FIGS. 12 and 15, the actuating agent 36 is configured in the shape of a circular cylinder. In this way, it is ensured that the actuating agent 36 always actuates the switch 63. In particular, a first and a second switching element 74, 75 of the switch are thus always actuated simultaneously (see FIG. 13). The first electrical circuit is opened by the first switching element 74 and the second electrical circuit is opened by the second switching element 75.

The actuating agent 36 is configured with a hollow interior space 38. A light source (not shown) is arranged in the switch 63. The light emitted by the light source is directed through the hollow interior space 38 towards the ridge 32 of the front surface 19 of the drive element 11, where the light passes through the drive element 11. The ridge 32 serves as a zone illumination 32 of the actuating element 11.

The drive element 11 can comprise a light-permeable base body 33. In contrast to the representation in the figures, the basic body 33 can be provided with an opening. A light-permeable, in particular translucent, insert (not shown) can be arranged in the opening. The insert can be fixed in the opening, in particular snapped on. In this way, the drive element 11 can be manufactured in a particularly simple manner.

The front surface 19 is made partially conical. The illumination zone 32 constitutes the tip of the truncated cone. The lighting zone 32 protrudes against the direction of actuation 700 of the cover 14 of the emergency button 10. In this way, the light coming out of the lighting zone 32 laterally to the emergency button 10 can be clearly seen.

The recovery agent 12 has a cavity 37. The actuating agent 36 of the actuating element 11 and the switch 36 with the first and second switching elements 74, 75 enter into the cavity 37. This results in an arrangement compact.

The bluetooth module 64 is arranged between the first and second boards 60, 61. The bluetooth module 64 is used for parameterization. Alternatively, although not shown, and in a compact manner, the bluetooth module 64 is fixed on a side of the second plate 61 facing away from the actuating element 11. In this way, the distance of the first and second plate 61 can be further reduced. the second plate 60, 61.

An anti-tamper switch 66 is arranged on the first plate 60. Due to the low overall height, an actuation extension 67 of the anti-tamper switch 66 is guided through the mounting plate 62. The actuation extension 67 rests directly on the cover 14 of the emergency button 10.

If the control device 100 is integrated in the emergency button 10, despite the low overall height AH, the emergency button 10 can comprise the functions described above and thus be intelligently designed. The functions described above are carried out with the help of a program code that is stored in at least one of the processing units 103, 104, 105.

The emergency button 10 has a coating agent 13. The coating agent 13 is transparent and covers the front surface 19 of the actuating element 11. In this way, the coating agent 13 prevents direct contact with the actuating element 11. with the user. The coating agent 13 serves as a mental barrier for the user.

The covering agent 13 is not destroyed by an actuation of the emergency button 10. The coating agent 13 is moved by an actuation of the emergency button 10 from a starting position 13.I to an actuating position 13.11. By means of the coating agent 13, the user actuates the drive element 11 only indirectly by means of the coating agent 13.

The coating agent 13 is non-removably arranged in the emergency button 10. In this way, it is ensures that a user cannot withdraw the cover agent 13 due to misuse.

The coating agent 13 is firmly connected to the actuating element 11. To this end, the coating agent 13 has projections 27, which are shown in FIG. 13. As shown in FIGS. 13, 14 and 15, the actuating element 11 has holes 28 through which the extensions 27 are guided and are bonded with the actuating element 11.

The actuating element 11 has a rim-like section 31 to which the coating agent 13 is fixed. The rim-like section 31 has the holes 28.

The flange-like section 31 serves as a stop for the actuating element 11 in actuating direction 700. The actuating element 11 reaches the actuating position 11.II when the flange-like section 31 rests on the mounting plate 62 or on the bushings. guide 65.

The flange-like section 31 serves as a stop for the actuating element 11 against the actuating direction 700. The actuating element 11 reaches the starting position 11.I when the flange-like section 31 rests on a light guide 40. The light guide 40 holds the actuating element 11 against the force of the recovery agent 12. For this, the light guide 40 has a support surface 51. The light guide 40 is attached to the mounting plate 62. In this way, the actuating element 11 also remains held against the force of the recovery agent 12 when the cover 14 is removed. The light guide 40 has a flange 52 with which the light guide 40 is fixed to the plate. mounting bracket 62 (see figure 17). The light conductor 40 is fixed by means of the same screws 72 to the mounting plate 62 by means of which the mounting plate 62 is fixed to the first plate 60.

Alternatively, and although not shown, the coating agent 13 can be configured as an elastic sheet that encompasses the actuating element 11.

Due to the firm connection, the drive position 11.II and the starting position 11.I and the distance between the driving position 13.11 and the starting position 13.I coincide with each other. Directly after the completion of the actuation and without manual action, the coating agent 13 returns to the starting position 13.I. The recovery agent 12 serves for this. The recovery agent 12 transfers the coating agent 13 indirectly via the actuating element 11 to the starting position 13.I.

The coating agent 13 and the actuating element 11 each have a circular cross-section. The cover 14 has a circular cutout 15. The coating agent 13 protrudes against the drive direction 700 through the cutout 15. Likewise, the actuating element 11 protrudes through the cutout 15.

The notch 15, the actuating element 11 and the coating agent 13 have an imaginary common axis 701. The notch 15, the actuating element 11 and the coating agent 13 are arranged concentrically.

The coating agent 13 has an actuating surface 17 which is spaced from the front surface 19 of the actuating element 11. Likewise, the coating agent 13 has a lateral surface 16 which is configured at a distance from the lateral surface 18 of the actuating element. drive 11.

By distancing the front surface 19 and the actuating surface 17, the transparent covering agent 13 can protrude largely from the lid 14, while the partially light-impermeable actuating element 11 protrudes only to a small extent from the lid. 14. In this way, the light guide 40, which essentially closes flat with the cover 14, can also be conveniently seen by a user standing obliquely to the emergency button 10. The light guide deviates at most ±3 mm, preferably at most ±2 mm, particularly preferably ±1 mm of a flat closure with the lid 14.

As the covering agent 13 protrudes widely from the cover 14, the user can manipulate the emergency button 10 with a flat hand. For this, the coating agent 13 is placed in the actuating position 13.II flat with the cover 14 or the coating agent 13 protrudes from the cover 14 in the actuating position 13.II against the actuating direction 700. Expressed otherwise, the ABS distance of the starting position 13.I and of the driving position 13.II corresponds at most to the distance DF of an elevation 30 of the driving surface 17 with respect to the cover 14. Likewise , the measurement of the distance AB between the actuation position 11.II and the starting position 11.I corresponds at most to the distance DF. In figure 11 the distance ABS and the measure of the distance AB correspond to the distance DF.

The emergency button 10 comprises lighting agents 41. The lighting agents 41 serve to display the unlocked and locked status of the door lock 200. In case there are several emergency buttons 10, 1010, 2010, 3010, the lighting agents 41 show the unlocked and locked status of the associated door lock(s) 200, 1200, 2200, 3200. The lighting agents 41 are arranged concentrically around the actuating element 11. For example, the unlocked state is shown by green light and the locked state by red light. In particular, all the lighting agents 41 emit the same light to show the locked and unlocked state, at least if there is no danger situation.

The lighting agents 41 can be controlled in at least two groups. By means of the different control, patterns are possible, for example, by means of which other states of the safety system 1 can be displayed to the user. By means of the additional display possibilities, they can be displayed to the user and/or the operator in a compact way and simple and without additional visualization agents a plurality of states. In this way, the security of the security system 1 is increased.

In FIG. 13, highlights of the eight highlights 41 present by way of example are shown, of which three highlights are designated 41a, 41b, 41c. The individual lightening agents are designated hereinafter as 41a, 41b, 41c, etc.

Each of the individually controllable groups of lightening agents 41 may comprise an individual lightening agent 41a, 41b, 41c, etc. In the exemplary embodiment of figures 11 to 17, each lighting agent 41a, 41b, 41c, etc. can be controlled individually. Each lighting agent 41a, 41b, 41c, etc. is configured in each case as RGB led. The lighting agents 41a, 41b, 41c, etc. can be controlled in such a way that each lighting agent 41a, 41b, 41c, etc. it can emit light in at least four different colors, preferably at least five. In this sense, it can be, for example, red, blue, yellow, green and pink light.

The lighting agents 41 are controlled by the third emergency button processing unit 22. For this, the emergency button processing unit 22 and the lighting agents 41 are connected to a ring bus (not shown).

The lighting agents 41 are arranged on the first board 60. Likewise, the audible alarm 23 is arranged on the first board 60. The audible alarm 23 is controlled by the third emergency button processing unit 22.

If several door locks 200, 1200 are associated with the emergency button 10 as shown, for example, in FIG. 4, at least two options are conceivable. On the one hand, the emergency button 10 can show the unlocked state only when all door locks 200, 1200 associated with the emergency button 10 are in the unlocked state. In this sense, the unlocked state is only displayed when the full width of the escape door of the two door leaves 3, 4 is available for evacuation. Alternatively, the emergency button 10 already shows the unlocked state when one of the door locks 200, 1200 or all the door locks of a door leaf 3, 4 are in the unlocked state. In this way, the possibility of escape is shown as soon as possible when one of the door leaves 3, 4 is already open. The options can be selected by the operator. For this, a switch (not shown) can be provided in the security system 1, for example.

Another state of the security system 1 that is displayed by the lighting agents 41 that can be controlled in a group is the case of danger. In this sense, the lighting agents 41 can show whether there is a fire alarm signal or whether a trigger signal has been generated.

The lighting agents 41 can be controlled in such a way that the progress of the unlocking delay is displayed after generation of the actuation signal by means of the lighting agents 41. In this sense, for example, less and less lighting agents 41 emit light of one color, particularly red light.

Another state of the security system 1 that can be represented by the lighting agents 41 is a fault displayed by the lighting agents 41. The fault displayed in this way can be a fault of the security system 1. For example, it can be displayed that the control device 100, the door lock control 200 or the first or second emergency button processing unit 20, 21 of the security system 1 is not operational, is defective, fails or has been intentionally disabled or removed . The failure may be a failure of the alarm system connected to the security system 1, which is not operational, is faulty, fails, or has been deactivated or removed.

The light guide 40 comprises several light guide areas 44 (see FIGS. 16 and 17). Each of the lighting agents 41a, 41b, 41c is associated with a light-guiding zone 44 in each case. The light-guiding zone 40 can be divided in an imaginary way into the light-guiding zones 44. Between the light-guiding zones 44 cut-outs 46 are provided. Through the cut-outs 46 the light essentially remains in the light-guiding areas 44.

Each light-guiding area 44 has a bypass section 48. The bypass section 48 is arranged in the direction of transmission 702 on the lighting agents 41. The direction of transmission 702 is in against the actuation direction 700. The bypass section 48 serves to guide light to an opening section 45 of the light-guiding area 44. The opening section 45 is in the transmission direction 702.

The opening section 45 is contiguous with the bypass section 48 in the transmission direction 702. The opening section 45 serves to broaden the light beam of the emitted light. The bypass section 48 expands less than the section 45 which opens.

The light guide 40 is made in one piece. The light guide 40 is made of a single material, in particular monolithic. Light conductor 40 is made of a translucent material.

The light-guiding areas 44 have a connecting section 49. The connecting section 49 adjoins in the transmission direction 702 the opening section 45 . The connection sections 49 of the light guide region 44 are connected to one another in one piece in such a way that the light guide 40 is one piece and a uniform material.

The connection sections can have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. In this way, the light from one of the lighting agents 41a, 41b, 41c, etc., is practically restricted to an illumination zone 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h on the surface 47 of the conductor. of light 40 pointing towards the user. In this sense, each light-guiding zone 44 comprises an illumination zone 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h.

The surface 47 of the light guide 40 corresponds to a circular ring. The illumination zones 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are designed as sectors of the circular ring. By emitting light from an illumination agent 41a, 41b, 41c, etc., the corresponding illumination zone 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h is illuminated. The circular ring surrounds the drive element 11.

The lighting agents 41 can be controlled in such a way that at least one lighting agent 41a, 41b, 41c, etc. emits light of one color and at least one other lighting agent 41a, 41b, 41c, etc. emits simultaneously light in another color. For example, in this way illumination zones 50a, 50b, 50e, 50f can display light of one color and illumination zones 50c, 50d, 50g and 50h light of another color. While the lighting zones 50a, 50b, 50e, 50f, for example, are illuminated continuously, the lighting zones 50c, 50d, 50g and 50h of lighting agents 41 may emit intermittent light.

If, for example, the illumination zones 50a, 50b, 50e, 50f are first illuminated with light of a first color and the illumination zones 50c, 50d, 50g and 50h with light of another color; then the illumination zones 50a, 50h, 50d, 50e are illuminated with light of the first color and the illumination zones 50b, 50c, 50f and 50g with light of the other color; then the illumination zones 50h, 50g, 50d, 50c are illuminated with light of the first color and the illumination zones 50a, 50b, 50e and 50f with light of the other color, thus creating the impression of a circulating color window .

The oppositely located lighting zones 50, that is, the lighting zones 50 that are located on a straight line extending along an imaginary axis 701, in FIG. 14 specifically 50a and 50e or 50b and 50f or 50c and 50g or 50d and 50h, they preferably light up in the same way, that is, with the same color and the same flashing frequency. Thus, the user located obliquely before the emergency button 10 can detect the pattern even if the actuation element 11 covers at least one of the lighting zones 50 located opposite.

In order that the light guide 40 is obscured as little as possible, the illumination area 32 protrudes by a maximum of 10 mm, preferably by a maximum of 7 mm, particularly preferably by a maximum of 5 mm, above the light guide 40.

The emergency button 10 may include a light sensor (not shown). The brightness sensor measures the brightness of the surroundings of the emergency button 10. If the brightness of the surroundings decreases, the light power of the light emitted by the lighting agents 41 is reduced.

By means of the bluetooth module 64, parameters can be set via a mobile communication device, for example, how the lighting agents are to be controlled in which state of the security system 1. Enter the parameters for the flashing frequencies of the lighting agents illumination 41, it is found whether a continuous or flashing light should be emitted, which state should be shown by which color. The settings are saved after parameterization in an electronic memory of the security system 1, in particular of the control device 100. Likewise, the display of different states may not be selectable by the operator for security reasons and always be stored in the memory electronics. The operator can himself select states of the security system 1 that the operator wants to display by means of the lighting agents 41. For this, colors and/or patterns can be emitted by means of the lighting agents 41 that are not associated by default to a state. For example, the operator can select which state the operator wants to display in blue light. In addition to parameterization via bluetooth module 64, parameterization via monitoring device 301 is possible.

The change of state of the door lock 200 is displayed after the door lock control 201 has communicated the change of state to the control device 100. The control device 100 then controls the lighting agents 41 or causes a control of the enlightening agents 41.

During the commissioning of the security system 1, several initialization views are generated consecutively at fixed time intervals by means of the lighting agents 41. In one of the initialization views, the possible enabled functions of the control device 100 are displayed. In a second initialization view, emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 that can be connected to security system 1 are shown, showing the status without fault/faulty/ not present. In a third initialization view, the status of the inputs and outputs is displayed.

The central emergency button 302 is structured practically like the emergency button 10. In particular, the actuating element 11 corresponds in function and structure to the emergency button actuating element 306. The switch 63 corresponds to the emergency button switch 307. Also, the central emergency button 302 comprises a recovery agent corresponding to the recovery agent 12. The central emergency button 302 comprises a first and a second plate and/or a mounting plate that are structured and attached to each other correspondingly to the first plate 60, the second plate 61 or the mounting plate 62. On the first plate of the central emergency button 302, the alarm 309 and lighting agents 313 corresponding to the alarm 23 and the lighting agents 41. On the second plate of the central emergency button 302, are arranged from the second to the third unit of emergency processing 303, 304, 305. The emergency button switch 307 terminates in the first central emergency button board 302. On actuation of the emergency button switch 307, a first and a second electrical circuit is opened in the first board, which can be wirelessly detected by the first and second emergency processing units 303, 304. For this, the first and second boards are connected by means of pins. The light guide of the central emergency button 302 corresponds in structure and function to the light guide 40. The lighting agents 313 can be controlled corresponding to the lighting agents 41.

It is conceivable that in the central emergency button 302 a cover agent 13 corresponding to the cover agent 13 is designed differently or is missing. The lighting agents 313 are not used in particular for the display of a locked state of an emergency button 10. The lighting agents 313 are used for the display of the first and second duration of the delay and/or for the display visual that a cancellation action is possible.

The security system 1 according to the invention does not necessarily have to be able to perform all the functions that are mentioned in the description relating to at least one of Figures 1 to 10. On the contrary, they are stored in the security system 1 the functions that are mentioned in the description relating to at least one of figures 1 to 10. However, in order to perform the functions, the functions must be released. This is done by the control device 100 communicating with a communication module 801. The communication module 801 is embodied as a smart card. The communication module 801 comprises a memory in which at least one code for releasing at least one function is stored. The communication module 801 comprises a microprocessor that serves only to encrypt the code. The communication module 801 is inserted into a housing 77 of the control device 100 (see figure 18a). Through the arrangement in the housing 77, the communication module 801 is retained in the housing 77 by form and/or force. Simultaneously, the communication module 801 has electrical contact thanks to the arrangement in the housing 77, in such a way that the control device 100 can read the at least one code of the communication module 801. The control device 100 and the communication module communication 801 are in this sense connected by cable (not shown).

In order to read the code, the control device 100 must first gain access to the communication module 801 with the aid of a password. The control device 100 must decipher the at least one code before the function can be released. By releasing the function, the program code with the help of which the function can be executed is released.

For the release of the function, the program code with the help of which the function can be executed is released. If the program code has been saved in the emergency button 10 and the control device 100 and the emergency button 10 are connected to each other via the first bus system 400, the control device 100, after reading the code of the communication module 801, causes a release on the emergency button 10 via the first bus system 400. If the program code is stored in the door lock control 201, the control device 100, after reading the code from the communication module 801, causes a release in the door lock control 201 via the first bus system 801.

A code can release one or more functions, in particular function blocks.

In the parameterization program, only parameters relating to functions that have previously been enabled can be set. Only these parameters are displayed on the screen.

The function remains enabled if the code is read out repeatedly, in particular at regular time intervals, from the communication module 801. For this, non-adjustable time intervals can be stored in the control device 100. After the elapse of the predetermined time interval, the control device 100 blocks the function if the corresponding code could not be read from the communication module 801. If the function is carried out by means of the emergency button 10, which is connected with the control device control 100 via the first bus system 400, the control device 100 causes a function block via the first bus system 400. If the function is carried out by means of the door closing control 201 which is connected to the control device 100 via the first bus system 400, the control device 100 causes via the first bus system 400 a blocking of the door. function.

Various codes code1, code2 for different functions can be stored in the communication module 801 (see FIG. 18a).

If an additional function is to be released, it is conceivable to remove communication module 801 from receptacle 77 and slide another communication module 802 into receptacle 77 (see FIG. 18b). The communication module 801 is hereinafter referred to as the parent module 801. The additional communication module 802 is hereinafter referred to as the auxiliary module. Auxiliary module 802 is designed as a smart card. The auxiliary module 802 comprises a memory in which at least one code for releasing the additional function is stored. Auxiliary module 802 comprises a microprocessor that serves only to encrypt the code. The code code3 that is stored in the auxiliary module 802 is read by the control device 100 (see figure 18b). In order to read the code code3, the control device 100 must first obtain access with the aid of a password to the auxiliary module 802. The control device 100 must decipher the at least one code before the function can be released. The code code3 of the auxiliary module 802 is stored in a memory 107 of the control device 100 (see Fig. 18c). Then, the code from auxiliary module 802 is removed in auxiliary module 802 (see Fig. 18c). Auxiliary module 802 is removed from housing 77. Matrix module 801 then slides into housing 77 (see Figure 18d). The code of the auxiliary module 802 is stored in the matrix module 801 (see figure 18d). The code is deleted from the memory of the control device 100 (see figure 18d). The additional function is released.

In a matrix module 801, the code is saved, on the contrary, not in the control device 100 (see FIG. 18a, d). In an 801 matrix module the code is not erased. On the contrary, the matrix module 801 serves for a durable arrangement in the housing 77. The codes stored in the matrix module 801 codes code1, code2, code3 are repeatedly read. On the basis of a key K801, K802 of the communication module 801, 802, the control device 100 decides whether it is a matrix module 801 or an auxiliary module 802. The key K801, K802 is stored electronically in particular in the matrix module 801 and the auxiliary module 802. The key K801 of the matrix module 801 differs from the key K802 of the auxiliary module 802.

The insertion and removal of the housing 77 is carried out manually in each case. The remaining operations are carried out automatically.

Insertion and removal of housing 77 may be reserved for an operator. To do this, the housing 77 is arranged in a way that is not accessible to an unauthorized user. In particular, the anti-tamper switch 66 is actuated in the event of an unauthorized attempt to access the housing. The housing may be arranged between the first plate 60 and the second plate 61, for example on the underside of the first plate 60.

In order for security system 1 to be functional, a matrix module 801 must be disposed in a housing 77 of security system 1. In order for security system 1 to be functional for longer than the predefined interval, matrix module 801 must remain in accommodation 77.

Each emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 comprises a housing 77. Exactly one matrix module 801 is required and is provided for each first bus system 400, 400' of the security system 1 Only when the matrix module 801 is inserted in the housing of an emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 the emergency button 10, 10', 1010, 1010', 2010, 2010 ', 3010 simultaneously serves as control device 100 for the corresponding first bus system 400, 400'. In the remaining emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 of the security system 1 in whose housing there is no matrix module 801, the same program codes are stored as in the security device. control 100. Without matrix module 801, however, the program codes are not released, so that the other emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 cannot serve as an emergency device. control 100. Since the matrix module 801 is located in the housing 77, the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 serves as the control device 100.

If control device 100 is to be configured independently of emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 and door locks 200, 200', 1200, 1200', 2200, 2200', 3200, a matrix module 801 is inserted into a housing 77 of the processing electronics 101. Since the matrix module 801 is located in the housing 77, the processing electronics 101 is capable of performing the functions of the control device 100.

If security system 1 comprises several subsystems 5,6 and thus several first bus systems 400, 400', security system 1 comprises exactly the same number of matrix modules 801, 801' as subsystems 5, 6 ( see figure 10). The emergency button 10', which communicates with the matrix module 801', and the electronic processing system 101 of the control device 100 of figure 10, which communicates with the matrix module 801, are simultaneously provided to connect with the second bus system 401.

The matrix module 801, 801' can contain 5,6 different codes for each subsystem and thus release different functions. Thus, for example, the matrix module 801' of the second subsystem 6 may comprise a code for the selective association of the door locks 200', 1200', 2200' to the emergency buttons 10', 1010', 2010'. On the contrary, the code for a selective association of door locks with emergency buttons in the matrix module 801 is not necessary for subsystem 5.

The communication module 801, 801', 802 can have a gap 803 through which a self-adhesive tape, in particular, is guided. The self-adhesive tape serves for the manual removal of the communication module 801, 801', 802 from the housing 77. The self-adhesive tape contains information about the functions that can be released by means of the codes stored in the respective communication module 801, 801', 802. The information can be a color code, a QR code and/or a barcode.

Alternatively, the communication module 801, 801', 802 can be configured as a smart card with a flexible section. A part of the smart card protruding from the housing 77 may be provided with the information, ie the color code, the QR code and/or the bar code.

A matrix module 801 inserted once in a security system 1 can be inserted again with full functionality in a housing 77 of another security system 1 according to the invention.

Claims (15)

1. Security system (1) for unlocking at least one door lock (200), in particular a lock for emergency exits, the security system (1) comprising an activating element (10), in particular an emergency button (10), the activating element (10) comprising an actuating element (11), which can be activated manually, and can be generated by activating the drive element (11) a drive signal for unlocking the door lock (200), the security system (1) comprising an electronic device (207) and being electronically prevented as a result of the actuation signal by means of the electronic device (207) that, without the presence of a cancellation condition, a locking mechanism can be controlled (205) of the door lock (200) for blocking, a drive of the drive element (11) being effected mechanically and without locking, the drive of the drive element (11) being able to take place in such a way that the drive element (11) can be moved from a starting position (11.I) into an actuating position (11.II), the actuating element (11) being able to move after actuation without manual action from the actuating position (11.II) to the starting position (11.I), being able to generate, to reach the cancellation condition, a cancellation signal by means of a cancellation action performed directly on the activating element (10) and the security system (1) comprising an authentication device (500) associated with the activating element (10) or being communicatively connected to the authentication device (500) associated with the activating element (10), having generated, to achieve the cancellation condition, the cancellation signal and having also carried out an authentication in the authentication device ( 500), characterized by what the cancellation signal can be generated by actuating the actuating element (11). Safety system (1) according to claim 1, characterized in that the actuation element (11) can be moved, after actuation without manual action, from the actuation position (11.II) to the starting position ( 11.I) by means of a recovery agent (12). 3. Security system (1) according to claims 1 or 2, characterized in that a first program code is deposited in the electronic device (207), preventing the first program code, as a consequence of the generation of the activation signal , that, without the presence of the cancellation condition, the locking mechanism (205) can be controlled to lock, in particular a first program code being stored in a first processing means (202) of the electronic device (207) and a second program code redundantly in a second processing means (203) of the electronic device (207), being prevented by the first program code and by the second program code in each case that, without the presence of the condition lock mechanism (205) can be controlled to lock, each of the first and second processing means (202, 203) being embodied in particular as microprocessors. drivers or microcontrollers. Security system (1) according to one of the preceding claims, characterized in that the security system (1) comprises a door closing control (201) for controlling the locking mechanism (205), comprising the control of door lock (201) the electronic device (207). 5. Security system (1) according to claim 4, characterized in that the door closing control (201) is connected by means of a first bus system (400) to the activating element (10), causing the delayed activation of the door. trigger element (10), in particular after generation of the drive signal, that the door lock control (201) controls the locking mechanism (205) for unlocking. 6. Security system (1) according to one of claims 4 or 5, characterized in that the activating element (10) saves, until the cancellation condition occurs, that an activation signal has been generated, sending to the control of door closing (201) in particular the activating element (10) repeatedly, until the cancellation condition occurs, a signal that an actuating signal has been generated, electronically saving the activating element (10) in a first storage unit trigger element processing unit (20) and, redundantly, in a second trigger element processing unit (21) that a drive signal has been generated. Safety system (1) according to one of the preceding claims, characterized in that the electronic device (207) comprises an electronic maintenance system in the open position, being able to transfer, as a consequence of the activation signal, the electronic maintenance system in the open position to an actuation state and, when the cancellation condition is reached, the electronic system of maintenance in the open position can be transferred to a starting state. 8. Security system (1) according to one of the preceding claims, characterized in that , to achieve After the cancellation condition, a cancellation signal can be generated by means of a cancellation action carried out directly on the actuating element (11). Security system (1) according to one of the preceding claims, characterized in that the cancellation signal corresponds to the activation signal. 10. Security system (1) according to one of the preceding claims, characterized in that , in order to achieve the cancellation condition, both the generation of the cancellation signal and the authentication in the authentication device (500) are necessary, in particular the receipt of the identification signal, a predetermined time sequence and/or a predetermined time sequence and/or during the generation of the cancellation and authentication signal must be met, in particular during reception of the identification signal. 11. Security system (1) according to one of the preceding claims, characterized in that there are several possibilities for achieving the cancellation condition, with at least a first door status monitoring device (204) and a second device being provided. door status monitor (206) for a door leaf (2, 3, 4) and/or for a door closure (200), comprising a possible condition for achieving a cancellation condition that has not been received in the security system (1) neither a signal from the first door status monitoring device (204) nor from the second door status monitoring device (206), which are provided for a door leaf (2, 3, 4) and/or a door lock (200), upon opening of the door leaf (2, 3, 4) from the generation of the drive signal within a predetermined time interval. Security system (1) according to one of the preceding claims, characterized in that the security system (1) comprises a central emergency exit control (300), which can be generated in the central emergency exit control (300) a permissible cancellation signal for achieving a cancellation condition after the predetermined time interval has elapsed and the cancellation signal or a message about the cancellation signal being able to be sent via at least one bus system (400, 401) to the electronic device (207), being necessary in particular the authentication of a user in an identification device (312) of the central control of the emergency exit (300) for the generation of the cancellation signal. 13. Security system (1) according to one of claims 11 or 12, characterized in that the cancellation condition can be reached by a. ) since the generation of the activation signal, no signal has been received in the security system (1) from the first or the second door status monitoring device (204, 206) about the opening of the door leaf ( 2, 3, 4) within the predetermined time interval, in particular from the electronic device (207), or a signal from the first door status monitoring device (204) has not been received in the security system (1) nor of the second door status monitoring device (206) on the opening of the door leaf (2, 3, 4) from the generation of the drive signal within a predetermined time interval, in particular by the electronic device (207) and b. ) the predetermined time interval has elapsed and, in the security system (1), it is stored that the presence of conditions a.) and b.) is admissible for the achievement of the cancellation condition, being able to be stored in particular for several trigger elements (10, 10', 1010, 1010', 2010, 2010', 3010) and/or several door locks (200, 200', 1200, 1200', 2200, 2200', 3200) of the security system (1) individually if the presence of conditions a.) and b) is admissible for the achievement of the cancellation condition. 14. Security system (1) according to one of claims 11 to 13, characterized in that the cancellation condition can be reached by a. ) since the generation of the activation signal, no signal has been received in the security system (1) from the first or the second door status monitoring device (204, 206) about the opening of the door leaf ( 2, 3, 4) within the predetermined time interval, in particular from the electronic device (207), or a signal from the first door status monitoring device (204) has not been received in the security system (1) nor of the second door status monitoring device (206) on the opening of the door leaf (2, 3, 4) from the generation of the drive signal within a predetermined time interval, in particular by the electronic device (207) and b. ) the predetermined time interval has elapsed and c. ) the cancel signal has been generated in the emergency exit central control and in the security system (1) it is stored that the presence of the conditions a.) to c.) is admissible for achieving the cancellation condition, and can be stored in particular for several activating elements (10, 10', 1010, 1010', 2010, 2010', 3010) and/or several door locks (200, 200', 1200, 1200', 2200, 2200', 3200) of the security system (1) individually if the presence is admissible of conditions a.) to c.) to achieve the cancellation condition. 15. Procedure for unlocking at least one door lock (200), in particular for the safety of emergency exits, comprising the activating element (10), in particular an emergency button (10), an element drive (11), and a drive signal for unlocking the door lock (200) being generated by actuation of the drive element (11), being electronically prevented as a result of the drive signal by means of an electronic device (207). ) that, without the presence of an abort condition, a locking mechanism (205) can be controlled to lock, actuation of the actuating element (11) being effected mechanically and without latching, actuation of the actuating element (11) being able to be effected. 11) such that the actuating element (11) can be moved from a starting position (11.I) to an actuating position (11.II), the actuating element (11) being movable after actuation without manual action from the activation position (11.II) to the starting position (11.I), being able to generate a cancellation signal by med io of a cancellation action carried out directly in the activating element (10), generating the cancellation signal for the achievement of the cancellation condition, as well as also performing an authentication in an authentication device (500), characterized in that the signal cancellation can be generated by actuating the actuating element (11).