ES2910717T3 - Emergency button - Google Patents

Abstract

Emergency button (10) for unlocking at least one door lock (200) for securing emergency exits, where the emergency button comprises lighting means (41) for displaying a locked state and/or unlocking of a door lock (200), where the lighting means (41) can be controlled in at least two groups each, where in particular at least one of the lighting means (41) can be controlled individually, characterized in that the emergency button comprises a light conductor (40), wherein the light conductor (40) has light-conducting zones (44), which are each associated with the controllable groups of lighting means ( 41) or to the individual lighting means (41), with cutouts being provided between the light-guiding areas (44), where the cutouts are located between the groups of lighting means, in particular the individual lighting means , wherein the lighting means (41) are configured as multicolor lighting means that can be controlled in such a way that light can be emitted in at least two, preferably in at least three, particularly preferably in at least four colors other than those lighting means (41), wherein the light-conducting zones each comprise an opening section (45), the opening section serving to spread the light emitted by the corresponding lighting means.

Description

DESCRIPTION

Emergency button

The invention relates to an emergency button, for unlocking at least one door lock, in particular for securing emergency exits, where the activating element comprises lighting means for displaying a locked and unlocked state of a door lock. The invention further relates to a security system with an emergency button according to the invention.

Emergency buttons and safety systems for securing emergency exits are known. The emergency button comprises at least lighting means, with which a locked state and an unlocked state of a door lock can be displayed. In this sense, the lighting means in the unlocked state light up green and in the locked state red. By means of the lighting means the user obtains information as to whether the door is unlocked and the user can escape through the door. By flashing the lighting means it can be signaled that the door is only open for a certain period of time. It is disadvantageous here that only these states are displayed to the user by the lighting means. Other states of the security system are not displayed by the lighting means. EP 1 842 991 A2 discloses an emergency button terminal with a display with several individual display elements, which can be reciprocally connected.

Document US2016/041569 A1 refers to a dimmable light switch, where a light indication is provided to visualize the degree of light regulation, which is carried out through several lighting means that can be controlled individually and a conductor of light. light, the light guide having light-guiding areas, which are each associated with the individual lighting means, and recesses between the light-guiding areas.

EP2251882 A1 relates to illuminated switches, e.g. pushbutton switches for application in the vehicle sector, where the illumination is realized via various lighting means and a light guide, where the light guide It has light-guiding areas, which are each associated with the individual lighting means, and recesses between the light-guiding areas. The light-guiding areas each comprise an opening section, the opening section serving to spread the light emitted by the corresponding lighting means.

Therefore, the objective of the invention is to provide an emergency button and a security system that at least reduces the aforementioned disadvantage. In particular, the object of the invention is to provide an emergency button, which displays at least one additional state of the security system in a simple construction.

This object is achieved by an emergency button according to independent claim 1. Advantageous developments of the activating element are indicated in the dependent claims, the description and in the figures. Likewise, a security system with an activating element according to the invention is protected. Advantageous developments of the security system are indicated in the dependent claims, the description and in the figures. Characteristics and details, which are described in connection with the activating element according to the invention, apply in this connection also in connection with the security system according to the invention and vice versa. In this respect, the features mentioned in the description and in the claims may be essential for the invention in each case individually or in combination with one another.

The objective deduced above and shown is achieved starting from the activating element described at the beginning by being able to control the lighting means in at least two groups in each case. By being able to control the lighting means divided into at least two groups, each group can emit light in a different way. Thus it is conceivable that not all groups of lighting means emit light at the same time, emit light of the same color and/or with the same frequency. By individual control of each group the number of possibilities, by which lighting means show the user at least one additional state of the security system, can be increased more and more.

n denotes the total number of lighting means of the activating element. A group can include in each case from 1 to n-1 lighting means in such a way that the number of lighting means of the groups together add up to n. In particular at least one of the lighting means can be controlled individually. A lighting means group can therefore also comprise only one lighting means. At least several of the lighting means can preferably be controlled individually. Particularly preferably, each lighting means can be controlled individually. In this case the activating element comprises n groups of lighting means, where each group comprises only one of the lighting means.

The lighting means, which already serve to display the locked and unlocked status, can be controlled in groups, in particular individually. For this reason, the lighting means can additionally serve to display the at least one additional status of the security system. Therefore, the activating element of according to the invention can be produced without the use of additional components, in particular additional lighting means. Accordingly, an activating element is provided which displays at least one additional state of the security system in a particularly simple construction. At least the locked or unlocked state of the door lock is preferably displayed by all lighting means. This can be, for example, the locked state of the door lock. In particular, the locked status and the unlocked status of all lighting means can be displayed.

The activating element may comprise an actuating element. The drive element can be actuated by a user in such a way that by actuating the drive element a drive signal can be generated to control the closing of the door. During actuation, the actuating element can be moved in particular from a starting position to an actuating position.

A return means can serve to return the drive element after actuation to the starting position. Particularly preferably, the return means returns the drive element to the starting position without manual intervention. Consequently, the actuating element can return to the starting position immediately after actuation. The recovery means may be configured as a spring.

The actuating element may comprise a front surface facing the user.

The activating element is an emergency button. In this case, the actuating element corresponds to the actuating element of the emergency button.

According to the invention, provision is made for the lighting means to be configured as multicolor lighting means. That is, the lighting means can emit light of different colors. The lighting means can be designed in particular as multicolored LEDs. In this sense, each lighting means has several individual LEDs. The lighting means are particularly preferably configured as RGB LEDs. The different colors can be partially generated by the simultaneous light emission of the individual LEDs of the multi-color LEDs. In this sense, by means of different percentages of light from the individual LEDs, different colors can be generated.

According to the invention the lighting means can be controlled in such a way that light can be emitted in at least two, preferably at least three, particularly preferably at least four different colors of lighting means. For example the lighting means can emit green, yellow and blue light. Different states of the safety system are to be indicated in a particularly suitable manner by means of the different colors.

Preferably the activating element, in particular the emergency button, comprises at least one activating element processing unit, in particular an emergency button processing unit. Particularly preferably, the lighting means can be controlled by the activating element processing unit. The trigger element processing unit, in particular the emergency button processing unit, can be configured digitally and/or electronically. The trigger element processing unit may comprise a processor. The trigger element processing unit may comprise at least one non-volatile memory. For example the trigger element processing unit may be a microprocessor or microcontroller.

The lighting means may be connected to a bus, in particular a ring bus. Via the bus, in particular the ring bus, the driver processing unit can control the lighting means.

The lighting means may be arranged in a circular manner. In particular, the lighting means can be arranged in a circle around the drive element.

It is conceivable that the lighting means can be controlled in such a way that simultaneously at least one lighting means emits light of one color and a further lighting means emits light in another colour. Thus, eg one lighting means can emit yellow light and a further lighting means can simultaneously emit red or green light. For this reason light patterns can arise for the user that can be perceived significantly. Additionally or alternatively the lighting means can be controlled in such a way that at least one lighting means emits light of different colors periodically alternately. An illumination medium can flash eg alternating red and yellow. This is also why patterns can arise for the user that can be perceived significantly. It is likewise possible that in a time interval at least one lighting means emits light continuously, while at least one other lighting means flashes.

As a special example, the impression of a "rotating color window" can arise, when adjacent lighting means in each case adopt one color consecutively, while in particular other lighting means otherwise illuminate in another color or do not illuminate at all .

Other states may be displayed by the lighting means. If several additional states are displayed by the lighting means, preferably the other states are displayed differently by the lighting means. Therefore, the user receives information about the state known by the security system.

Preferably the lighting means is controlled, to show the presence of a fire alarm signal. Therefore the additional state of the security system, which is displayed by the lighting means that can be controlled in groups, can be the state of a security system, in which a fire alarm signal is presented. For this a fire alarm can transmit a fire alarm signal to the security system.

The lighting means can be controlled, when the actuating element has already been actuated, in particular to unlock the door lock. Accordingly, the additional state of the security system, which is displayed by the lighting means that can be controlled in groups, can be the state of a security system, in which an actuating element has been actuated. The presence of a fire alarm signal and the presence of a realized actuation of the actuating element are preferably displayed differently by the lighting means.

The lighting means can be controlled, when by means of a central emergency button the security system for unlocking the door lock. Preferably the actuation of the central emergency button is shown in another way than the presence of the fire alarm signal and/or the presence of the actuation of the actuation element by the lighting means.

The activating element may be capable of being brought to a deactivated state. If the activating element is actuated in the deactivated state, then it does not happen that the activating element causes an unlocking of the door closer. The deactivated state can be shown by means of illumination. Therefore the additional state of the security system, which is displayed by the lighting means that can be controlled in groups, may be the deactivated state. It is conceivable that by means of a parameterization program it can be set that the lighting means do not display the deactivated state. This is particularly advantageous on a psychiatric ward.

It may be that the lighting means serve to show a duration of progress in time. The duration of progress over time is in particular a countdown. The countdown can be determined by a timer, in particular by a trigger element timer.

The time progress duration can be, for example, a predetermined period of time, after which a new door lock is automatically triggered. This is possible in particular when there is no danger situation. Therefore the additional state of the security system, which is displayed by the lighting means that can be controlled in groups, can be the period of time from unlocking until automatic relocking. In the period of time, a distinction can be made in particular between a predetermined short period of time and a predetermined long period of time. The control of the lighting means in the case of the short period of time can be distinguished from the control of the lighting means in the case of the long period of time.

The time progress duration can also be a predetermined time period, in which the automatic relocking has failed and for this reason an alarm is issued in this predetermined time period. Therefore the additional state of the security system, which is displayed by the lighting means that can be controlled in groups, can be the time span of the new failed lock, in which an alarm is issued. The alarm can be a pre-alarm and/or a main alarm. Control of lighting means in a pre-alarm may be designed differently from the main alarm.

It is conceivable that in the event of an actuation of the actuating element the transfer of the door lock from the locked to the unlocked state takes place with a delay. The lighting means may be controlled such that the progress of the delay is displayed by the lighting means. Therefore the additional state of the security system, which is displayed by the lighting means that can be controlled in groups, may be the state of a security system, with delayed unlocking. The length of the delay is called the delay duration. Therefore the duration of progress in time can correspond to the duration of delay.

Both a first delay duration, which must elapse before the door closer is transferred to an unlocked state, and/or a second delay duration, which must elapse before the door lock is transferred to an unlocked state, can be visually indicated in the delay duration. door lock is transferred to an unlocked state, by the lighting means. As a result of an actuation of the activating element, the control of a locking mechanism of the door lock for unlocking can be delayed by a first delay duration. A delay action by an operator, in particular the operation of a delay element, within the first delay duration can lead to an extension of the delay of a locking mechanism control by a second delay duration. The delay action can be effected in particular in a central emergency exit control. The delay element may be part of the central emergency exit control of the security system.

For example in the progress of the time progress duration, in particular of the predetermined period of time, of the predetermined duration and/or of the first and/or second delay duration, more and less or more and less lighting means they can illuminate in a first color. The rest of the lighting means can illuminate in particular in a second color or not. The illumination can be a continuous light emission or an intermittence.

In the event that in the progress of the progress duration in time, in particular the predetermined period of time, the predetermined duration and/or the first and/or second delay duration, many media can illuminate with less intensity lighting in a first color, it is conceivable that the lighting means are controlled in such a way that at the end of the time progress duration the last lighting means emitting the first color adjusts the light emission or switches to the second color .

In the event that more and more lighting means illuminate in a first color as the time progress duration progresses, it is conceivable that the lighting means are controlled in such a way that at the end of the progress duration in the time the last lighting medium not yet emitting the first color starts emitting light of the first color or changes to emitting light of the second color.

It may be that during the time progress duration, in particular the predetermined time period, the predetermined duration, the first and/or second delay duration, each lighting means is controlled exactly once, to start emitting light on the first color or finish emitting light on the first color until the end of the time progress duration. For the case that in the progress of the time progress duration less and less lighting means illuminate, each lighting means can be controlled in particular exactly once, to end a light emission in the first color until the end of the duration of progress over time. In the event that more and more lighting means illuminate in the first color in the course of the delay, each lighting means can in particular be controlled exactly once in order to start an emission of light in the first colour. Consequently the duration of progress in time corresponds to a single passage of the lighting means. In a circular arrangement of the lighting means, the duration of progress in time corresponds exactly to one revolution of the lighting means. The user thus obtains information on the progress of the progress duration over time. It is conceivable that each lighting means is controlled for this at another time. For this purpose, each individual lighting means in each case displays a time section of the progress duration over time. The only control during the time progress duration at the beginning or end of emission in the first color does not exclude that each lighting means can be controlled multiple times, to emit light of the first color, or that the lighting means emits light of the first color intermittently or that the lighting means are controlled very quickly for a brief interruption of light emission. In the second case, during the time progress duration at least once, preferably several times, the impression of a countdown occurs when the lighting means are switched off and on again one after the other. Consequently the visual representation of the duration of progress in time can be repeatedly interrupted by a pattern, which symbolizes an elapsed time.

As an alternative to the lighting of fewer and more lighting means, the duration of progress in time can be represented by lighting means in the first color in each case consecutively lighting. In particular in each case one lighting means illuminates in the first color, while the rest of the lighting means illuminates in a second color or does not illuminate at all. Particularly preferably, each lighting means illuminates in each case only for a single time section of the time progression duration in the first color. Consequently the duration of progress in time corresponds to a single passage of the lighting means. In a circular arrangement of the lighting means, the duration of progress in time corresponds exactly to one revolution of the lighting means. The user thus obtains information on the progress of the progress duration over time.

Preferably the lighting means during the time progress duration, in particular the predetermined time period, the predetermined duration, the first and/or second delay duration, are controlled at regular time intervals in particular. Therefore the duration of progress over time can be shown in a linear fashion.

The predetermined time interval, the predetermined duration, the first and/or second delay duration can each be represented differently. Thus, among others, the first color can be selected differently for different durations of time progress.

Preferably the time progress duration, in particular the predetermined time period duration, the predetermined duration, the first and/or second delay duration, can be set by an operator. In particular, the operator can adjust the duration of progress over time through the parameterization program. Preferably, the control of the lighting means is adapted to the set progress duration over time. In particular, the time intervals, in which the lighting means are controlled, are adapted to the set time progress duration. Particularly preferably, the adaptation is carried out in such a way that at the end of the progress duration in time, the last lighting medium that does not yet emit the first light starts the light output in the first color or the last lighting medium still emitting the first light adjusts the light output in the first color. The adaptation can be carried out in such a way that during the time progress duration each illumination means is controlled exactly once, to start a light emission in the first color or to end the time progress duration. The adaptation can take place in such a way that the control of the lighting means takes place in particular at regular time intervals.

In particular it is provided that the lighting means are controlled to display a failure of the security system. Therefore the additional state of the security system, which is displayed by the lighting means that can be controlled in groups, may be the state of a security system, which is erroneous.

The fault may be that a component of the security system is inoperative, defective, has failed, has been intentionally disconnected or removed. At least one of these faults for at least one component of the security system can be displayed by the lighting means. The security system component can be a control device, a door lock or a part of the control device, the door lock and/or the trigger element, eg the trigger element processing unit. Additionally or alternatively, the fault may be that a signal is activated in the security system that a component connected to the security system, e.g. an alarm system, is not operational, is defective, has a fault, has intentionally disconnected or removed. At least one of these faults for at least one component connected to the security system can be displayed by the lighting means. Preferably several of the mentioned faults can be visualized by the lighting means. Different types of control of the lighting means are preferably provided for different faults. Therefore different faults are displayed in different ways by the lighting means. The fault(s) may be displayed differently than in a hazardous situation, eg with the presence of a fire alarm signal or actuation of the trigger element.

It may be that the trigger element, in particular the emergency button, comprises at least three trigger element processing units, in particular emergency button processing units. A first trigger element processing unit may be configured as a first emergency button processing unit. A second trigger element processing unit may be configured as a second emergency button processing unit. A third trigger element processing unit may be configured as a third emergency button processing unit. The first, second and third trigger element processing may each comprise a processor. The first and second trigger element processing units may each comprise at least one non-volatile memory. The third trigger element processing unit may have a non-volatile memory and/or have access to a non-volatile memory. For example, the first, second and third driver processing units may each be a microprocessor or microcontroller.

The first and second trigger element processing units may serve to detect the drive signal. Preferably, by actuating the actuating element, at least two actuating signals are generated. For this purpose, for example, at least two electrical circuits are opened. The first and second trigger element processing units can in each case detect a drive signal independently of one another. In this sense, the first trigger element processing unit records a first drive signal and the second trigger element processing unit records a second drive signal. The first and second actuating element processing units can then each independently of one another trigger control of the door locking mechanism for unlocking. The first and second drive element processing units each detect a drive signal independently of one another. As the first and second trigger element processing units independently of each other detect the actuation signal, there is a redundancy with respect to unlocking the door after actuation of the trigger element.

It is conceivable that the activating element comprises an audible alarm. The audible alarm can eg serve to issue an alarm, in the event that the activating element has been actuated and/or after receiving a fire alarm signal.

It may be that the control of the audible alarm and/or of the lighting means is carried out without redundancy. It is conceivable that the third trigger element processing unit controls the audible alarm and/or the lighting means.

It can be provided that the brightness of the lighting means can be adapted to the brightness of the environment. In particular, the luminosity of the lighting means can decrease when the luminosity of the environment decreases. This can prevent excessive brightness from disturbing the user. In order to adapt to the brightness of the environment, in particular a brightness sensor can be provided to detect the brightness of the environment. Depending on the detection of the brightness of the environment, the brightness can be adapted to the lighting means. Alternatively or additionally, specified time slots and luminosities correlated to these for the lighting means can be stored in a non-volatile memory of the security system. Through the specified time slots the brightness can be specified for different times of day and night.

The emergency button comprises a light conductor. The light guide can serve to guide the light emitted by the lighting means in the direction of the surface of the activating element visible to users. By means of the light guide, the light emitted by the lighting means can be made visible in a particularly useful way for the user.

The light guide is configured in such a way that the different control of the at least two groups of lighting means is visible to the user. The light guide has light-guiding areas, which are associated with each lighting medium group. If the lighting means are individually controllable, then each individually controllable lighting means can be associated with a light-guiding region. Particularly preferably, each lighting means can be controlled individually and a light-guiding region is associated with each lighting means.

Provision can be made for the light beams that are emitted by one of the lighting means to be guided essentially only in the light-guiding area associated with the respective lighting means. The surfaces of the light guide visible to the user can be perceived as subdivided into at least illumination zones. Each light-guiding zone can comprise an illumination zone. Preferably, a light emission from a lighting medium leads essentially only to illuminating the corresponding lighting area. The lighting means are located in particular in the direction of the surface of the activating element in the center below the lighting areas.

It is conceivable that all lighting zones have the same area. The lighting zones can be imaginarily divisible through a straight line. For this reason, lighting zones can eg glow in the form of bars.

Additionally or alternatively, the surface of the light guide visible to the user can be designed, for example, as a crown. The illumination zones can correspond in particular in each case to a sector of the crown.

According to the invention, cutouts are provided between the light-guiding areas. The cutouts in the light guide are provided so that the lighting means, which can be controlled differently, cannot be guided from one light guide region to the other. The recesses are located between the groups of lighting means, in particular the individual lighting means. The light-guiding regions are located in the direction of the surface of the activating element above the illumination means.

According to the invention, the light-guiding areas each comprise an opening section. The opening section serves to spread the light emitted by the corresponding lighting medium.

This can distribute the emitted light across the corresponding lighting zone. The opening section can be configured in a projection, eg in the form of a trapezoid, in particular in the form of an isosceles trapezoid.

Additionally or alternatively the opening section can be opened in a longitudinal section. This can widen the illumination zone.

The area of the opening end of the opening section corresponds in particular in size and/or shape to the illumination zone. This can distribute the emitted light particularly well over the corresponding illumination zone.

The opening section is preferably arranged in the direction of the surface of the activating element above the lighting means. For this reason, the light emitted by the lighting means reaches the light guide in a particularly suitable manner.

Provision is preferably made for the light-guiding area to have a bypass section for guiding light, whereby the light of the lighting means can be guided through the bypass section to the opening section. The bypass section is therefore arranged between the opening section and the associated lighting means. The diversion section serves to divert the light emitted by the illumination means to the opening section. The bypass section can be opened at least to a lesser extent than the opening section. Thus, the bypass section can have mutually parallel edges in the direction of light guidance. The branch section can be provided where the light guide passes through a plate, eg the mounting plate or a printed circuit board. Since by means of the bypass section the section to be opened begins close to the illumination zone, the light conductor can take up less space at the height of the plate to be passed through. Therefore, a stability of the plate can be guaranteed.

The light guide is preferably made in one piece. The light guide can also be made of a single material. The light guide is particularly preferably designed monolithically. The light guide is in particular made of a translucent material.

The light-guiding area can have a connection section. The connection section can serve to connect the light-guiding areas with one another. In particular, the connection areas of the light-guiding areas are mixed, particularly preferably monolithically, with one another. Preferably the light from the lighting means can be guided through the opening section into the connection section. Thus, the connecting section can be joined in the direction of the light guide to the opening section. The connection section may present the illumination zone. The connecting zones together may comprise the surface facing the user.

The connection section can have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. For this reason, the recesses are designed to be particularly deep, so that the light-guiding areas are spaced apart to a particularly large extent. Consequently essentially only the illumination area is illuminated by the corresponding illumination means. The depth of the connection section nevertheless allows for a mechanically stable one-piece light guide.

The surface of the light conductor visible to the user can be designed flat. Alternatively, the surface of the light guide visible to the user can be concave in design.

It is conceivable that the light guide surrounds the drive element. For example, the light guide and the drive element can be arranged concentric with one another. The light guide can surround the drive element, for example, annularly.

Alternatively, the light guide may be partially arranged within the drive element and/or the front surface of the drive element may hide the light guide from the user's view. In this sense, the front face of the actuating element is preferably designed transparent or translucent where the light guide is concealed.

Provision is preferably made for the light guide to have a support surface for the drive element. The support surface can support the drive element in particular against a non-positive drive direction. It may be that the recovery means pushes the drive element against the bearing surface. The activating element can have a cover.

The light guide can be fixed within the activating element. In particular, the light guide can be attached to a mounting plate. The mounting plate can be used to fix the activating element in a flush-mounted box and/or a mounting casing.

The light guide can have a flange, with which the light guide is fixed inside the activating element. For example the flange may be attached to the mounting plate. Since the light guide itself is fixed within the activating element, the light guide can securely hold the actuating element against the actuating direction with the support surface. In particular the clamping is also maintained when the cover of the activating element is removed. Particularly preferably, the fastening means used to fasten the flange to the mounting plate can also connect at least one additional component, eg a printed circuit board, to the mounting plate.

An illumination area is preferably formed in the center of the front face of the actuating element. The illumination area is configured transparent and can be illuminated by a light source located behind.

It can be provided that the front surface of the drive element is partially conical. A ridge of the front surface can be configured as the transparent illumination zone. Due to the conical design, the illumination area of the actuating element can be suitably visible to all sides. This is true in particular when the illumination zone protrudes from the lid. The overhang is made against the drive direction. The illumination zone is illuminated by a light source. It is conceivable that a front face of the actuating element, in particular the illumination region, projects at most 10 mm, preferably at most 7 mm, particularly preferably at most 5 mm, above the light guide. For this reason, the light guide is also clearly visible to users standing obliquely in front of the activating element.

It may be that the front surface of the drive element is partially concave. In particular, the front surface can be conical around the illumination region. On the other hand, a region of the front surface which covers the light guide can be concave.

Preferably the lighting means can be controlled in such a way that facing lighting means emit the same visual signal. For this reason, users who are positioned obliquely in front of the actuating element, for whom part of the lighting areas are covered by the actuating element, can also recognize the light pattern. By opposing lighting means is meant in particular lighting means, which they can be connected to each other through a straight line passing through a center of symmetry of the lighting means arrangement. By the same visual signal is meant in particular the emission of the same color and/or same frequency in the case of an intermittent lighting medium.

Additionally or alternatively the laterally inverted arranged lighting means can emit the same visual signal. In this case, the mirror plane is preferably located through the center of symmetry. The emission of the same visual signal for illumination means facing each other and/or laterally inverted illumination means is conceivable for at least one visible state of the security system, in particular for states other than the predetermined period of time, the space of predetermined time and/or the first and/or the second delay duration. For example, it can be the presence of a fire alarm signal and/or a previously performed actuation of the actuating element and/or a sabotage of the actuating element.

The activating element can have a cover medium that is designed to be at least partially transparent. The cover means can cover the drive element, so that the drive element can be driven through the cover means.

Preferably the actuating element can only be actuated via the cover means. For this, the cover means in particular can be non-removably arranged on the activating element. For example, the cover means may be firmly connected to the drive element. The cover means can additionally or alternatively be non-removably accommodated in the activating element or in a housing, in which the activating element is arranged, or in a fixing plate, in which the activating element is fixed.

Thanks to the cover means, there is no longer a need to adapt the drive element to the haptic needs of the users. Thus, the actuating element can be adapted, for example, by means of the conical shape, to the best possibility of perceiving the light emitted through the illumination area. The drive element must also not protrude, or not very much, from the cover and/or the light guide. This can be taken care of by the cover medium.

It may be that an actuating surface of the cover means is configured at a distance from the front surface of the actuating element directed towards the actuating surface. Thus, an actuating surface spaced apart from the front surface can contribute to a larger actuating path, ie to a greater distance between the starting position and the actuating position of the actuating element and/or to actuation with a flat hand.

The actuating surface of the cover means can protrude in the starting position through the actuating element cover in such a way that the distance between the starting position and the actuating position in the actuating direction corresponds to maximum with the distance of the drive surface, in particular of a drive surface elevation, towards the cover. Therefore the activating element can be actuated with the flat hand.

It is conceivable that the cover means is transparently formed and configured in such a way that the light guide can be seen through the cover means. Thus the light guide, in particular viewed from the front or obliquely, can be visible through the cover means spaced from the front surface.

Preferably, the light guide ends substantially flush with the cover. Thus, the light guide can deviate by a maximum ±3 mm, preferably by a maximum ±2 mm, particularly preferably by a maximum ±1 mm, from a flat closure with the cover.

The object is also solved by a security system with an activating element according to the invention. The activating element according to the invention, in particular the emergency button according to the invention, can be designed in this respect as described in the description, the drawings and/or the claims.

The security system serves in particular to secure emergency exits. The safety system therefore serves to release the emergency exit. That is, actuation of the actuating element leads to unlocking without user authentication. Unlocking can be done directly or delayed. A user can be anyone who uses the security system. A user can be, for example, a guest who wants to escape through the door secured by the security system.

The security system may comprise the door lock. The door closure may comprise a locking mechanism.

The locking mechanism can be designed, for example, electromechanically or purely electromagnetically. The locking mechanism comprises, for example, at least one coil. A control of the locking mechanism for locking or unlocking can be carried out in particular at a disconnection or connection of a electrical power supply. The electrical power supply may serve to supply the coil with electrical power.

An electromagnetic locking mechanism is described by way of example in DE100 50111 C1. In the unlocked state, for example, no magnetic forces act on the door. In the locked state, for example, magnetic forces act on a door.

In the locked state, an electromechanical locking mechanism has a mechanical connection to the door. In the unlocked state, the mechanical connection is canceled or can be canceled.

Thus, the electromechanical locking mechanism can have, for example, a closing element, ie a bolt or a door latch, which is in a retracted position in the unlocked state of the door lock. In the retracted position, the closing element is disengaged from the door. In the locked state, the closing element is engaged with the door. In another alternative to an electromechanical locking mechanism, the locking mechanism is constructed in the style of a door opener. That is, the locking mechanism comprises a latch member. In the locked state of the door closer, a door latch is engaged with the locking mechanism. In the unlocked state, the latch element releases the door latch in such a way that the door latch, in particular by pressing on the door, can disengage from the locking mechanism.

Preferably, a deactivation of the electrical power supply leads to an unlocked state of the door lock. Thus, the control of the locking mechanism for the unlocking of the door closure is carried out by deactivating the electrical power supply. Preferably, an activation of the electrical power supply leads to a locked state of the door lock. Thus, control of the locking mechanism for locking is performed by turning off the power supply.

The security system may alternatively be configured without the locking mechanism. In this case, the security system only controls the locking mechanism. For example, the security system turns on or off the power supply for the locking mechanism or causes an on or off power supply.

A "control for locking or unlocking" also occurs if the security system obtains information about the status of the locking mechanism. A "control for locking or unlocking" also occurs when, as detected by the information, the locking mechanism does not correspond to the nominal state and therefore an alarm is issued and/or a new attempt is made to reach the nominal state.

The security system may comprise a door lock control. If a door lock control is provided, preferably the door lock control controls the locking mechanism. To do this, the door lock control can turn on or off the electrical power supply for the lock mechanism.

The door lock may comprise the door lock control.

As an alternative to the security system comprising the door lock, the security system may comprise the door lock control, but not the lock mechanism. In this case, the door lock control is configured as a door lock adapter. The door lock adapter serves to use the security system according to the invention on already mounted locking mechanisms.

Preferably, the door closing control and the activating element are connected to a first bus system. A connection to a bus system is meant in the following as a direct connection, so that a component connected to the bus system must be considered a bus system participant with its own bus address. The door closing control and the activating element are connected to each other via the first bus system.

The activating element can directly control the locking mechanism for unlocking. Alternatively and particularly preferably, the activating element causes a control of the locking mechanism for unlocking. By triggering a control is meant in particular the sending of a message, for example via the first bus system, containing information and/or a command that causes the direct or indirect recipient of the message to carry out the control. The sender of the message initiates the control. Thus, by provoking control is meant indirect control. Thus, for example, the activating element may send a message via the first bus system to the door lock control, in response to which the door lock control controls the lock mechanism for unlocking. The activating element can cause, in particular in a delayed manner, the unlocking of the locking mechanism.

The security system can be implemented in such a way that in addition to the unlocked and/or locked state of the door lock, if an additional state of the security system occurs, the lighting means for displaying the additional state can be controlled, which can be the additional state can be selected by a security system operator. Therefore, it is conceivable that not only the mode of the lighting means control, but also the state in which a lighting means control is performed, can be set by the operator. In particular, a color to be emitted by the lighting means and/or a color pattern can be reserved for adjustment. For example, a green and red light emission can be fixedly specified by all lighting means for the locked and unlocked state. The operator can select by himself in which state of the security system at least a part of the lighting means emits blue light. For example the operator can set that in the deactivated state of the activating element the lighting means of the activating element in question emit blue light. In particular, the setting can be carried out via the mobile communication device, in particular a mobile telephone. The mobile communication apparatus can communicate with a radio module of the activating element.

It is preferably provided that several door locks can be associated with the trigger element, so that by actuating the trigger element a control of several door locks can be triggered, where it can be set in the security system, whether the lighting means show a locked state, until all door locks associated with the trigger element are unlocked, or if the lighting means show a locked state only, until at least one of the door locks associated with the trigger element is unlocked. The setting can be made, for example, via a switch, eg via a DIP switch. The door locks can be provided, for example, in each case for a passive leaf and an active leaf of a door. The door must be able to be unlocked by actuating the activating element. For this, after actuation of the actuating element, the door locks are checked. Thanks to adjustability the operator can decide whether the lighting means show only an unlocked state, e.g. by emitting green light, when the full width of the emergency exit is available, i.e. passive leaf and active leaf are unlocked, or if the lighting means show an unlocked state, when and there is a possibility of escape through the door leaf. This setting possibility in itself represents an inventive idea, irrespective of whether or not the lighting means can be controlled in at least two groups in each case.

In particular with regard to the preceding paragraph, it may be that several door lock controls are provided for one door, where it can be set in the security system, whether the door lock control directly causes a locked state, when the door lock control door lock receives a signal to lock, independently of a signal received within the security system about an open position of at least part of the door and the lighting means display an unlocked state, until all door lock controls for the door have established a locked state, or if the door lock controls have caused the locked state only, when at least one signal about a fully closed position of the door is presented within the security system and the lighting means alone displays an unlocked state, if none of the door lock controls have produced a locked state.

The security system may comprise a control device. The control device is connected to the first bus system. The control device comprises at least one electronic digital processing system. The electronic digital processing system may comprise at least one digital processing unit. The digital processing unit may comprise a processor and non-volatile memory. In particular, the electronic digital processing system may comprise a first processing unit, a second processing unit and a third processing unit. The first, second and third processing units may each comprise a processor. The first, second and third processing unit can each be designed as a microprocessor or a microcontroller. The first, second and third processing units may each comprise a non-volatile memory. Furthermore, in particular the third processing unit may have access to a non-volatile memory.

The control device can be integrated in the activating element or the door lock control. In other words, the door lock activating element or control may comprise the control device. Alternatively, the control device can be connected via a bus system, in particular via a first bus system, to the activating element and the door lock control.

If the control device is integrated in the trigger element, then in particular the third trigger element processing unit simultaneously serves as the third processing unit of the control device. In particular the first trigger element processing unit may serve as the first control device processing unit and the second trigger element processing unit may serve as the second control device processing unit.

The change in the state of the door lock is preferably displayed only then by the lighting means, after the door lock control via the bus system has sent a corresponding signal to the activating element and/or to the control device.

Preferably the control device causes the lighting means to be controlled. If the control device and the activating element are connected to each other via the first bus system, then the control device can cause the activating element to control the lighting means,

Yo. to optically represent the unlocked state and the locked state,

ii. to visually represent a delayed control of the door locking mechanism, in particular for unlocking and in particular after actuation of the activating element,

iii. to visually represent a particular alarm condition after an actuation of the activating element or after receiving a fire alarm signal and/or

IV. to issue a visual alarm, in the event that a new lock fails, in particular the door remains open, which can be detected via a door status monitoring device,

It may be that the control device in at least one of the aforementioned cases i. to IV. cause the activating element to control the lighting means. Preferably the control device in several, particularly preferably in all of the aforementioned cases i. to IV. causes the activating element to control the lighting means. For this purpose, in particular, parameters are stored in the control device for how the lighting means are to be controlled for the aforementioned cases. The electronic processing system, in particular the third processing unit, can communicate via the first bus system with the electronic unit, in particular the third trigger element processing unit, and thus cause the control.

The control device can be connected or can be connected to a second bus system. A security system center, in particular a monitoring device, a central emergency exit control and/or a multi-door display device, can be connected to the second bus system. The control device serves to conduct or transmit messages to the central or receive or transmit messages from the central.

The control device can be configured in particular to trigger locks or unlocks that are not safety-relevant.

Thus, the control device can control the door lock mechanism for unlocking after receipt of a positive authentication signal or cause such a control. For this, the control device can be connected or be connected to an access control system.

The control device may eg control the door lock mechanism for unlocking at a specified time or such a control. Unlocking at a predetermined time can be provided, if, for example, the door must be unlocked at a certain time each day.

If there is no danger, i.e. neither the activating element nor fire alarm signal is presented, then the control device can control the door lock mechanism for automatic re-locking after the expiration of the period. of predetermined time or to cause a control of this type.

In addition, it can be provided that the control device directly controls the locking mechanism for automatic relocking after receipt of a signal during a closed state of the door or triggers such a control. The closed state of the door can be detected by at least one door state monitoring device.

Particularly preferably, the security system, in particular the control device, prevents a control of a further door lock mechanism after the control of a first door lock mechanism has been performed until a condition occurs such that a lock is formed. For example, a first door can be arranged at an entrance to a room and a second door at an exit to the same room.

The security system, in particular the control device, eg if a positive authentication signal is present for a door lock of the first door, can trigger an unlocking of the door lock of the first door. Even if a positive authentication signal for the door closing of the second door is presented to the control device, in particular the control device, the security system, in particular the control device, can prevent, until a condition, the unlocking of the door lock of the second door. Once the condition occurs, then the security system, in particular the control device, causes an unlocking of the door lock of the second door.

Until the condition is presented by the lighting means it can be displayed that control of the further door lock mechanism has been prevented. The user therefore obtains in particular the information that an absence of a positive authentication signal does not prevent the unlocking of the second door.

The functions that the control device can perform may depend on a communication module. Depending on the communication module used, more or fewer functions can be performed by the security system. The communication module is arranged in particular in a housing of the security system. In particular, by means of the arrangement in the housing, functions of the security system can be released, so that the security system can execute the functions.

It is conceivable that in particular in a commissioning of the security system the lighting means can display the status of individual components of the security system. It is conceivable that lighting means are permanently associated with the individual components. The status of the components can be displayed simultaneously. Therefore the operator can quickly get an overview of the commissioning. The components can be the door closer, the door lock control, the activating element, the control device or parts of the activating element or the control device, such as inputs and/or outputs of a processing unit and/or an activator element processing unit. The inputs and/or outputs can be the connection to the first bus system, to a second bus system, a bus input, via which an authentication of an authorized user is communicated, the input of a key switch and /or similar.

It is conceivable that the security system has several activating elements and/or several door lock controls. The various activating elements and/or the various door lock controls may be connected to the first bus system.

The lighting means can display at the same time the status of the various activating elements and/or various door lock controls in particular. It is conceivable that at least one lighting means is fixedly associated with one of the actuating elements and/or in each case with one of the door locking controls. The visualization can take place in particular during a start-up of the security system.

It is conceivable that the functions that the control device can perform can be represented by the lighting means. In particular, the used communication module can be visualized by means of the illumination means. The functions that can be executed can be displayed in particular in the event of a start-up of the security system.

It may be that at startup of the security system the lighting means are controlled consecutively, to display the status of the components or executable functions of the security system. For this reason, various states and/or functions to be displayed can be associated with each lighting means. Consequently the number of states and/or functions displayed may exceed the number of lighting means. For example, initially the states of the activating elements and of the door lock controls can be displayed, then the states of inputs and outputs and then the executable functions, when the communication module used is displayed. Of course, another order can also be selected. The control of the lighting means, which serves to consecutively display the status of the components or the executable functions of the control device, can therefore comprise at least one additional control of the lighting means in addition to the first control. The additional control of the lighting means can take place after a specified period of time or alternatively in each case after a conscious action.

Overall, it may be that the lighting means can be controlled in particular during a start-up of the security system in such a way that the lighting means show the ability to execute at least one function of the control device and/or the state of a component, in particular of the door lock control or door lock controls and/or the activating element or activating elements, where in particular lighting means are fixedly associated with the door block control and /o to an activator element.

Preferably in an electronic memory the security system is entered in an adjustable way, the way in which the lighting means are to be controlled depending on the state of the door lock. The electronic memory may be a non-volatile memory of the trigger element processing unit or/and of a processing unit. The control mode may comprise a flash rate, a color selection and/or a color pattern. It can be adjustable, if a predetermined period of time is to be displayed without flashing. In particular, the setting can be carried out via the mobile communication device, in particular a mobile telephone. The mobile communication apparatus can communicate with the radio module.

The invention is described in more detail below with the aid of exemplary embodiments. Technical characteristics with the same function are provided in the identical reference figures. They show:

FIG. 1 a top view of a security system according to the invention with an emergency button as an activating element in a state ready for operation of a door according to the invention according to a first exemplary embodiment,

Figure 2 a functional diagram of the security system according to the invention of Figure 1,

Figure 3 a modified functional diagram with respect to figure 2 of a security system according to the invention according to a second embodiment,

FIG. 4 a top view of a security system according to the invention with several emergency buttons in a ready-to-operate state on a door according to a third exemplary embodiment,

Figure 5 a functional diagram of the security system according to the invention of Figure 4, Figure 6 a modified functional diagram with respect to figure 5 of a security system according to the invention according to a fourth embodiment,

FIG. 7 a top view of a security system according to the invention in a state ready for operation according to a fifth exemplary embodiment,

Figure 8 a functional diagram of a central emergency exit control of the security system of Figure 7,

Figure 9 a functional diagram of the security system of Figure 7,

Figure 10 a functional diagram of a security system according to the invention according to a sixth embodiment,

FIG. 11 an exemplary embodiment of an emergency button according to the invention in a side view,

Figure 12 the emergency button of figure 11 in a longitudinal section,

FIG. 13 the emergency button from FIG. 11 in an exploded view,

Figure 14 an actuation element of the emergency button of figure 11 in a perspective view, Figure 15 another perspective view of the actuation element of figure 14,

FIG. 16 a light guide of the emergency button from FIG. 11 in a perspective view, FIG. 17 another perspective view of the light guide from FIG. 16

Figures 18a-d a schematic representation of the development of a functional release in a security system according to the invention,

Figure 19 a second embodiment of an emergency button according to the invention in an exploded view and

FIG. 20 shows the exemplary embodiment of FIG. 19 in a sectional view.

Hereinafter, a distinction will be made between user and operator. A user can be anyone who uses security system 1. A user can be, for example, a guest who wants to escape through the door secured with security system 1. An operator serves to operate security system 1 The operator, for example, can be authenticated with respect to the security system. The operator, for example, may be part of a surveillance template. In a particularly preferred way, the operator can adjust the security system 1.

In the following, the term "emergency button actuation" is understood to mean "actuation of the emergency button actuating element".

A connection to a bus system is meant in the following as a direct connection, so that a component connected to the bus system must be considered a bus system participant with its own bus address.

By triggering a control is meant in particular the sending of a message, for example via the first or/and second bus system, containing information and/or a command that makes the direct or indirect recipient of the message carry out the check. The sender of the message initiates the control. Thus, by provoking control is meant indirect control. The message may in particular correspond to a bus telegram.

As a consequence of a drive means that the cause is a drive, regardless of whether the drive continues or not.

In figures 1 and 2, a first example of embodiment of a security system 1 according to the invention for a door 2 is represented. The door 2 is not part of the security system 1 according to the invention. The security system 1 according to the invention comprises a door lock 200 and an emergency button 10. The emergency button 10 comprises a control device 100. The emergency button 10 is associated with a key switch 500. The system The security system 1 can comprise the key switch 500. Alternatively, the security system 1, in particular the emergency button 10, can have a key switch input by means of which a connection to the key switch can be established. 500.

As shown in Fig. 2, the emergency button 10 and the door closer 200 are connected to each other via a first bus system 400. The key switch 500 is electrically connected or can be electrically connected with the emergency button. 10 by means of a connection 402. The connection 402 is shown as a dashed arrow to show that signals about a position of a key inserted into the key switch 500 are fed to an electronic unit 24 of the emergency button 10. Alternatively to the connection 402, the key switch 500 can also be connected to the first bus system 400 (not shown). This alternative is fulfilled for all the exemplary embodiments.

The emergency button 10 is configured to send the door lock 200 as a result of an operation of the emergency button 10 a message via the first bus system 400 and thus cause the door lock to unlock. The message as a consequence of activating the emergency button 10 can be carried out in a delayed manner.

Also the security system 1 according to the invention, in particular the emergency button 10, can be connected to a fire alarm (not shown). If there is a fire alarm, the security system 1 also causes an unlocking of the door lock 200.

The control device 100 does not perform security-relevant functions: the control device 100 can trigger an unlocking of the door lock 200 for authorized persons. For this, the control device 100 can be connected to an access control system that is not shown. . The access control system can be connected or connectable in particular with the first bus system 400. The control device 100 receives from the access control system in particular via the bus system 400 a positive authentication signal on the authentication done. The control device 100 then triggers an unlocking of the door lock 200. The access control system may comprise, for example, a reader, a key switch, a keyboard for entering a code, or a lock cylinder of a deadbolt. mechanical, in particular of a self-locking panic lock, or configured as such.

The control device 100 can also automatically cause an unlocking of the door lock 200 at a predetermined time or after the expiration of a predetermined time, for example, if the door must be unlocked at a certain time each day.

If there is no danger, i.e. if the emergency button 10 has not been actuated and a fire alarm signal is not active either, the control device 100 can automatically trigger a new block after a certain period of time has elapsed. . In this sense, the control device 100 can receive, in addition to the positive authentication signal, also an access signal from the access control system and/or measure the length of the positive authentication signal. By means of the access signal or based on the length of the authentication signal, the control device 100 can adapt the length of the predetermined time interval. Thus, a person, for example, can hold an identification card in front of the reader for a long time or turn the key for a while. In this way, it is signaled that the predetermined period of time must correspond to a long period of time previously saved in the control device 100. If the person holds the identification card briefly in front of the reader or the user briefly turns the key, signals that the predetermined period of time must correspond to a short period of time previously saved in the control device 100.

A first door status monitoring device 204 and a second door status monitoring device 206 detect whether the door 2 is open or closed. The control device 100 at least indirectly receives a signal from the door status monitoring devices 204, 206. If the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 can directly cause and automatically a new lock of the door lock 200, as soon as the control device 100, with the help of the door status monitoring devices 204, 206, has the information that the door was first open and has now been closed again.

The emergency button 10 comprises an audible alarm 23 and lighting means 41 (see also figure 13). The lighting means 41 serve to display the locked or unlocked state of the door lock 200 and thus serve as a display device. The lighting means 41 serve to display a delayed unlocking of the door lock 200 as a result of an actuation of the emergency button 10 and thus serve as a display device. The lighting means 41 serve for the visual representation of an alarm condition after receipt of the fire alarm signal or as a result of actuation of the emergency button 10 and thus serve as indicators. The lighting means 41 serve for the visual representation when a new lock described above fails.

The control device 100 controls the audible alarm 23 to emit an audible alarm when a danger event occurs, that is, when a fire alarm signal is received or the emergency button 10 has been operated. The control device 100 controls audible alarm 23 to sound an audible alarm when a new lock fails.

The control device 100 controls the lighting means 41 to represent the locked or unlocked state of the door lock 200 to visually represent an unlock and/or issue a visual alarm when a fire alarm signal is received or the door lock has been operated. emergency button 10 or when a new lock fails.

In the unlocked state of the door lock 200, the control device 100 can monitor the opening of the door with the help of the door status monitoring devices 204, 206. The control device 100 can cause, if desired, to be output , an audible alarm if the door 2 is opened during the unlocked state of the door lock 200, at least if no positive authentication signal is presented. So you can watch if someone opens the door even when the door is unlocked.

The emergency button 10 can comprise at least one additional output. The control device 100 can control via the output other components that can be connected to the security system 1 according to the invention, for example a room light.

The parameters for carrying out the mentioned functions of the control device 100 are stored in the control device 100. Thus, for example, the predetermined time or times, the predetermined time interval or intervals, parameters for audible alarms, for example , how loud and how often an audible alarm should be emitted, and parameters for the different controls of the lighting means 41 for the visual representation of the aforementioned different states of the security system 1, are stored in the control device 100 The parameters for the lighting means may comprise flashing frequencies, emission colors, color intensities and/or light patterns. For parameterization, the control device 100 can communicate via a radio module 64 with a mobile communication device. Alternatively, the parameterization can be carried out with the aid of a monitoring device 301 via a second bus system 401 (see FIGS. 9 and 10). For the parameterization, a parameterization program is provided which can be run on a communication device, eg a personal computer, a mobile phone and/or a tablet. The operator can adjust the parameters with the help of the parameterization program.

In Figure 2, the structure of the door lock 200 and the emergency button 10 is shown in more detail.

The emergency button 10 has a first emergency button processing unit 20, a second emergency button processing unit 21 and a third emergency button processing unit 22. The first, second and third processing units of emergency button 20, 21, 22 are configured in each case as microprocessors or microcontrollers. The first and second emergency button processing units 20, 21 comprise a non-volatile memory. The third emergency button processing unit 22 comprises a non-volatile memory and/or has access to a non-volatile memory. The first, second and third emergency button processing units 20, 21, 22 are collectively designated as the electronic unit 24 of the emergency button 10.

The electronic unit 24 simultaneously serves as the control device 100. In this sense, the first emergency button processing unit 20 serves as the first processing unit 103 of the control device 100. The second emergency button processing unit 21 serves as the second processing unit 104 of the control device 100. The third emergency button processing unit 22 serves as the third processing unit 105 of the control device 100.

The first and second emergency button processing units 20, 21 serve to carry out safety-relevant functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 serves to carry out the non-safety-relevant functions. Safety-relevant functions include triggering unlocking in the event of danger. Non-safety-relevant functions include the other functions listed above.

When the emergency button 10 is actuated, an actuating element 11 moves from a starting position 11.I to an actuating position 11.II, whereby a switch 63 is actuated (see also FIGS. 12, 13). . In this way, a first and a second drive signal are generated. In this way, a first and a second electrical circuit (not shown) are opened. A signal about the opening of the first electric circuit is detected by the first emergency button processing unit 20. A signal about the opening of the second electric circuit is detected by the second emergency button processing unit 21. As a drive signal is understood the signal that has been generated by the user through actuation of the actuating element for unlocking the door lock and releasing the emergency exit. The expression "as a result of an actuation of the emergency button 10" is used in particular in the sense of "after generation of the actuation signal", i.e. regardless of whether the actuation element 11 is still in the position drive 11.II or has already returned to the starting position 11.1.

The first emergency button processing unit 20 and the second emergency button processing unit 21 each independently of one another trigger an unlocking of the lock after detection of the actuation signal via the first bus system 400 of door 200. The second unit of emergency button processing unit 21 thus acts redundantly with respect to the first emergency button processing unit 20.

The door closure 200 comprises a door closure control 201. The door closure control 201 comprises a first processing means 202 and a second processing means 203. The first and second processing means 202, 203 are jointly designated as electronic device 207. The first and second processing means 202, 203 are in each case configured as microprocessors or microcontrollers. The first and second processing means 202, 203 can each control a locking mechanism 205 of the door lock 200 for unlocking. In the event of danger, i.e. as a result of actuation of the emergency button 10 or upon receipt of a fire alarm, both the first processing means 202 and the second processing means 203 control the locking mechanism 205 for unlocking. . The second processing means 203 is thus redundant with respect to the first processing means 202. Safety against failure is achieved by this structure.

Locking mechanism 205 is electromechanically configured. The locking mechanism 205 comprises, for example, an electromechanically actuable bolt element (not shown), which locks a door bolt 2 in the locked state of the door lock 200 and, in the unlocked state of the door lock 200, releases it. In a lock mechanism control 205 for locking, the first and second processing means 202, 203 activate an electric current for the lock mechanism 205. In a lock mechanism control 205 for unlocking, the first and second second processing means 202, 203 deactivate an electrical current for the locking mechanism 205. In each case, a separate switch is assigned to a processing means 202, 203 for this purpose. The opening of one of the switches leads to the deactivation of the current for the locking mechanism 205.

The door lock controller 201 obtains information about the status of the lock mechanism 205 by means of a lock mechanism status monitoring device. In particular, a position of an anchor of a coil of the lock mechanism 205 is monitored. If the state of the door lock 205 does not correspond to the nominal state, an alarm is issued. Additionally or alternatively, a new attempt to reach the nominal state can be made in this case.

Following an actuation of the emergency button 10, the first and second emergency button processing units 20, 21 communicate with the first and second processing means 202, 203 via the first bus system 400 with the help of a message. The message may contain information about the drive or a control command for unlocking. In this sense, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21 informs the second processing means 203. Through the message, the first and second units emergency button processing means 20, 21, cause both the first and second processing means 202, 203 to control the lock mechanism 205 for unlocking, that is, to turn off the power.

The presence of a fire alarm is detected by the first and second emergency button processing units 20, 21. Then, the first and second emergency button processing units 20, 21 trigger via a message to the first and to the second processing means 202, 203 that the locking mechanism 205 is controlled for unlocking by the door closing control 201. In this sense, the first emergency button processing unit 20 informs the first processing means 202 and the second emergency button processing unit 21, to the second processing means 203. By means of the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 control the lock mechanism 205 to unlock, ie turn off the power.

The activation of the emergency button 10 or the presence of a fire alarm can be sent in a message by one of the two emergency button processing units 20, 21, the first emergency button processing unit 20 writing a first part of the message and the second emergency button processing unit 21, a second part of the message. The first and second processing means 202, 203 are each responsible for at least one part of the message. The emergency button processing units 20, 21, 22 and the first and second processing means 202, 203 can each receive messages via the first bus system 400. In this regard, the electronic unit 24 and the door closing control 201 can each be associated with a bus address.

The first and second emergency button processing units 20, 21 monitor each other. If a fault is detected, the electronic unit 24, in particular the intact emergency button processing unit 20, 21, causes the first and second processing means 202, 203 to control the door lock mechanism 205 for unlocking. . The first and second processing means 202, 203 monitor each other. If a failure is detected, the locking mechanism 205 is controlled for unlocking by at least the intact processing means 202, 203. Likewise, in the event of a failure of the bus system 400, the locking mechanism 205 is controlled for unlocking. unlocking by the door closing control 201. For this, and for the supervision of the first and second emergency button processing unit 20, 21, a life signal from the first and second emergency button processing units 20, 21 is sent regularly to the door lock controller 201. If the life signal does not arrive, the first and second processing means 202, 203 control the lock mechanism 205 for unlocking. The first and second processing means 202, 203 communicate with each other when the door closing control 201 has received a message about the activation of the emergency button 10 and/or the presence of a fire alarm. If only the first processing means 202 or the second processing means 203 detects that the emergency button 10 has been actuated and there is a fire alarm signal, the processing means 202, 203 that has made the detection controls the fire alarm mechanism. door lock 205 for unlocking and initiates the other processing means 202, 203 to also control the door lock mechanism 205 for unlocking. An error and an interference in this sense always also include a failure of the respective component. In the event of a power failure, the locking mechanism 205 automatically goes into the unlocked state. In the operations described in this section, the security system 1 also emits an audible and/or visual alarm, in particular by means of the control device 100.

If the actuation signal has been generated, without the presence of an abort condition, the door closer 200 is electronically prevented from being transferred to the locked state. In this way, the door is prevented from locking while the danger state persists. To do this, an electronic system for maintaining the open position is integrated in the electronic device 207. The electronic hold-open system, as a result of the actuation of the actuating element 11, which serves to release the emergency exit, is transferred to an actuated state. In the driving state, control of the door lock 200 for locking is prevented.

The open position maintenance electronic system comprises a first program code. The first program code comprises a first variable or has access to a first variable. In a starting state of the electronic open position-holding system, the first variable is set to a starting value. In the actuation state, the first variable is set to an actuation value by which control of the door closer 200 for locking is prevented. The first variable can be binary. If the abort condition is reached, the electronic hold-open system is transferred back to a starting state. To do this, the value of the first variable is set to the starting value. In the starting state of the electronic hold-open system, a control of the door closure 200 for locking is permitted. The first program code registers the first value of the first variable and allows a lock of the door lock 200 if the value of the first variable corresponds to the starting value and prevents a lock of the door lock 200, if the value of the first variable corresponds to the drive value.

The electronic hold-open system is stored both in the first processing means 202 and redundantly in the second processing means 203. For this, the first program code is stored in the first processing means 202. The first variable is stored in the non-volatile memory of the first processing means 202. A second program code with the same functionality as the first program code is stored in the second processing means 203. The first variable is redundantly stored in the non-volatile memory of the second processing means 203.

The first variable is additionally stored in the first emergency button processing unit 20 and in the second emergency button processing unit 21 in each case in the non-volatile memories. As a consequence of actuation of the emergency button 10, the first variable in the first and second emergency button processing units 20, 21 are transferred from the start value to the actuation value. The modified value of the first variable is transmitted by the electronic device 207 via the bus system 400. Until an abort condition occurs, the emergency button 10 repeatedly sends the actuation value of the first variable to the electronic device 207. The sending can be done at regular time intervals, in particular together with the sign of life.

At least if at least one of the door status monitoring devices 204, 206 has detected that the door 2 has been opened after the emergency button 10 has been actuated, a cancellation action is necessary to achieve the cancellation condition. on the emergency button 10.

The actuating element 11 is designed in such a way that it does not lock. The actuating element 11 is transferred during actuation from the starting position 11.1 to the actuating position 11.II (see FIG. 11). Directly after actuation, the actuating element 11 is moved back into the starting position 11.1 by the force of a spring-shaped return means 12 (see FIGS. 12, 13). The actuation of the actuating element 11 takes place translationally.

The cancellation action on the emergency button 10 is performed by actuating the actuation element 11. In this way, a cancellation signal corresponding to the actuation signal is generated. In order for the control device 100 to be able to detect whether an actuation of the emergency button 10 serves to unlock the door lock 200 or whether a cancellation action occurs, another signal must be generated simultaneously to achieve the cancellation condition. To do this, an operator is identified. Authentication is effected by inserting and turning a key into the key switch 500. Actuation of the actuating element 11 and authentication must temporarily overlap. That is, the operator must keep the key in the turned state while the actuating element 11 is in the actuating position 11.II. The actuating element 11 must return to the starting position 11.1 while the key is in the turned state. The action sequence is sufficient to achieve the cancellation condition.

If the door status monitoring devices 204, 206 have detected that the door 2 has remained permanently closed following the activation of the emergency button 10, the cancellation condition can not be achieved in at least one other way, specifically, by means of the passage of a predetermined time interval. Thus, for example, after 60 seconds after the last generation of the actuation signal, the cancellation condition can be achieved if the door 2 has remained closed. An authentication at the key switch 500 and an abort action at the emergency button 10 are not necessary in this case.

The first and second door status monitoring devices 204, 206 are designed to detect with fail safety that the door 2 has remained permanently closed after the emergency button 10 has been actuated. To do this, the monitoring devices door status indicators 204, 206 are preferably configured differently. The first door status monitoring device 204 can be designed, for example, as a door contact. The second door status monitoring device 206 can be designed, for example, as a latch contact. Alternatively, for example, at least one of the door status monitors can magnetically monitor the status of door 2, for example as a reed switch. The door lock control 201 receives a signal in each case from the first and of the second door status monitoring device 204, 206 as to whether the door 2 is open or closed. Only when, during the predetermined time interval, neither the first door status monitoring device 204 nor the second door status monitoring device 206 has sent a signal about opening the door, the cancellation condition can be reached. over the course of the predetermined time interval.

The door lock control 201 contains a timer, to measure the predetermined time interval. The door lock control 201 starts the timer as a result of the activation of the emergency button 10. If the door lock control 201 receives a signal from the first or the second door status monitoring device 204 during the predetermined time interval 206 that the door has been opened, a cancel action must be performed on the emergency button 10. In this case, it is not enough that the predetermined time interval elapses. The length of the predetermined time interval is stored in the door closing control t^a 201.

The door lock control 201 checks whether an attainment of the cancellation condition is permissible by elapse of the predetermined time interval before the door lock control 201 controls the lock mechanism 205 for locking. Thus, during the start-up of the security system 1, that is, before the start of the operation of the security system 1, an operator can establish whether an elapse of the predetermined time interval without opening the door 2 is admissible as a condition of cancellation and thus leads to a new locking of the door 2. This setting can be made at the emergency button 10. A check of admissibility, a passage of the predetermined time interval, and an absence of a signal from the first and of the second door status monitoring device 204, 206 through an opening of the door 2 is sufficient to reach the abort condition.

The door closing control 201 communicates the open or closed state of the door via the bus 400 to the emergency button 10 and/or to the control device 100.

The electronic unit 24 comprises a timer. A first delay duration can be stored in the electronic unit 24 . If an unlocking of the door lock 200 is to be carried out in a delayed manner, the electronic unit 24 waits, after the activation signal is generated, for the first duration of the delay before the first and second emergency button processing units 20, 21 communicate via the first bus system 400 with the door lock control 201 to cause an unlock.

The third processing unit 105 triggers the non-security-relevant unlocks and locks of the door lock 200 described in FIGS. 1 and 2, for example, an unlock after receipt of the authentication signal, at a predetermined time or after the expiry of a predetermined time or a blocking after expiry of a predetermined period of time or directly after the closing of the door 2. For this, the third processing unit 105 communicates via the first bus system 400 with the gate control. door lock 201. The communication may contain, for example, information or a control command that causes the door lock controller 201 to control the lock mechanism for unlocking or locking. If the control device 100 is connected to the second bus system (see FIG. 7), the third processing unit 105 serves to forward messages from and/or to a central emergency exit control 300.

The third emergency button processing unit 22 controls the audible alarm 23 and the lighting means 41.

If it is presented to at least one of the processing means 202, 203 that the locking mechanism 205 has Once the unlocked state has been adopted, the processing means 202, 203 sends a corresponding signal via the bus 400 to the electronic unit 24. The electronic device 207 is connected or can be connected to the door status monitoring devices 204, 206 and receives signals about an open or closed state of the door from the door state monitoring devices 204, 206.

The mentioned functions performed by the control device 100, the door closing control 2021 and/or the emergency button 10 can be realized with the help of software modules. In the electronic device 207 and/or the electronic unit 24, program codes are stored with the help of which the functions can be carried out.

Figure 3 represents a variant of the security system 1 represented in figures 1 and 2. In this sense, the control device 100 is configured independently of the emergency button 10 and the door lock 200. The control device 100 can be arranged, for example, in a hat rail housing (not shown). The control device 100 is not integrated in an emergency button 10 or in a door closer 200. For example, the control device 100 can be provided for arrangement in a technical room. The first bus system 400 connects the control device 100, the door closer 200 and the emergency button 10 to each other. As in the first embodiment, the key switch 500 is connected or can be electrically connected with the button emergency 10 via a 402 connection.

Unless stated otherwise, the structure and function correspond to those of the first exemplary embodiment, with the functions described with reference to FIGS. 1 and 2 being carried out with the aid of the control device 100 or the processing units 103, 104, 105, by the control device 100 of Figure 3 and the functions described with respect to Figures 1 and 2 being performed with the help of the emergency button 10 or the emergency button processing units 20 , 21, 22, by the emergency button 10: In particular, the first and second emergency button processing units 20, 21 detect the activation signal, as a result of an operation of the emergency button 10, they communicate with the first and second processing means 202, 203 via the first bus system 400 and thus cause a control of the locking mechanism 205 via the door closing control 201. The measures for achieving Failsafe or redundancy are realized with the aid of the first and second emergency button processing units 20, 21. The first variable is stored in the first and second emergency button processing units 20, 21 and is transmitted from there to the door lock control 201. The emergency button 10 comprises the timer for determining the first duration of the delay. The control device 100 is connected or can be connected to the second bus system 401. The third processing unit 105 triggers the non-safety-relevant unlocks and locks of the door lock 200 described in Figures 1 and 2, for example , an unlocking after receiving the authentication signal, at a predetermined time or after the expiration of a predetermined time or a new automatic locking after the expiration of a predetermined period of time or directly after the closing of the door 2.

The first, second and third processing units 103, 104, 105 are in each case configured as microprocessors or microcontrollers. The first, second and third processing units 103, 104, 105 together constitute a processing electronics 101. The first and second processing units 103, 104 have a non-volatile memory. The third processing unit 105 comprises non-volatile memory and/or has access to non-volatile memory.

A fire alarm signal can be received by both the control device 100 and the emergency button 10. The presence of a fire alarm is detected in this connection by the first and second emergency button processing units 20. , 21 for the emergency button 10 or by the first and second processing units 103, 104 for the control device 100. Correspondingly, both the control device 100 with the help of the first and second processing units 103, 104 such as the emergency button 10 with the help of the first and second emergency button processing units 20, 21 can trigger an unlocking of the door lock 200. For this, a communication takes place via the first bus system 400 with door closing control 201.

The control device 100 is informed by means of the first bus system 400 when the emergency button 10 has caused an unlocking of the door lock 200, that is, as a consequence of an activation of the emergency button 10 or after receiving a fire alarm. Likewise, the control device 100 is informed about a delayed unlocking of the door lock 200 as a result of the activation of the emergency button 10. The control device 100 is informed about the locking and unlocking status of the door lock 200. The device control panel 100 is informed about the open or closed status of door 2.

The control device 100 causes a control of the alarm 23 and of the lighting means 41 for the warnings and visual representations described with respect to figures 1 and 2. For this, the control device 100 can communicate with the electronic unit 24 , in particular with the third emergency button processing unit 22, via the first bus system 400. The third emergency button processing unit 22 then controls the alarm 23 or the lighting means 41. To do this, the parameters for the alarm 23 and the lighting means 41 are stored in the control device 100.

In the exemplary embodiments of FIGS. 1 to 3, the door lock 200 comprises the door status monitoring devices 204, 206. Alternatively, and not shown, the door status monitoring devices 204, 206 can be connected with the first bus system 400 or directly with the emergency button 10 and/or the control device 100.

In the exemplary embodiments of FIGS. 1 to 3, at least one additional emergency button, not shown, can be connected to the first bus system 400, which is configured without the control device 100. The additional emergency button is configured as the emergency button 10 of FIG. 3 and can trigger the unlocking of the door lock 200 in one actuation. The additional emergency button corresponds in construction and functionality to the emergency button 10 of FIG. 3.

In the exemplary embodiments of FIGS. 1 to 3, at least one additional door lock, not shown, can be connected to the first bus system 400. The additional door lock is configured as the door lock 200 of FIGS. 2 or 3. and can also be unlocked with an actuation of the emergency button 10. The additional door lock corresponds in structure and functionality to the door locks 200 of figures 1 to 3.

In FIG. 4, a third exemplary embodiment of a security system according to the invention 1 is shown with several emergency buttons 10, 1010, 2010, 3010. The security system 1 comprises several door locks 200, 1200, 2200, 3200. Each emergency button 10, 1010, 2010, 3010 is associated with a key switch 500, 1500, 2500, 3500. Security system 1 serves to arrange the emergency button 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 on different doors 2, 2002, 3002. The doors 2, 2002, 3002 are not part of the security system 1 according to the invention. The various emergency buttons 10, 1010, 2010, 3010 are connected to the first bus system 400 and thus correspond to an emergency button number 10, 1010, 2010, 3010. The door locks 200, 1200, 2200, 3200 are connected to the first bus system 400 and thus correspond to a number of door closers 200, 1200, 2200, 3200.

In the example of figure 4, the emergency buttons 10, 1010 are associated with the door locks 200, 1200. The emergency button 2010 is associated with the door lock 2200. The emergency button 3010 is associated with the door lock 3200. Thus, as a result of actuation of one of the emergency buttons 10, 1010, the two door locks 200, 1200 are unlocked, but not the door locks 2200, 3200. If the emergency button 2010 is actuated, only door lock 2200 is unlocked. Correspondingly, if emergency button 3010 is actuated, only door lock 3200 is unlocked. Thus, in this exemplary embodiment, door locks 200, 1200, 2200, 3200.

For example, the emergency buttons 10, 1010 are intended to be arranged on a double door 2. In each case, a door lock 200, 1200 is to be arranged on one door leaf 3, 4 of the door. 2. The emergency button 2010 and door lock 2200 are intended for placement on another door 2002. The emergency button 3020 and door lock 3200 are to be provided on a door 3002 as shown in Figure 4.

The security system 1 of figure 4 can also be set for selective unlocking different from figure 4. In an exemplary setting that differs from figure 4, on actuation of one of the emergency buttons 10,1010, 2010 , 3010, only one associated door lock 200, 1200, 2200, 3200 is unlocked in each case. Thus, in each case only one door lock is associated with an emergency button 10, 1010, 2010, 3010 200, 1200, 2200, 3200. In particular, a security system 1 adjusted in this way is suitable for four single-leaf doors each with a door lock 200, 1200, 2200, 3200.

In another exemplary setting of the security system 1, not shown, only the two door locks 200, 1200 are unlocked when one of the emergency buttons 10, 1010 is actuated and when one of the emergency buttons 10, 1010 is actuated. emergency buttons 2010, 3010, in each case the other two door locks 2200, 3200. Thus, the emergency buttons 10, 1010 are associated with the door locks 200, 1200 and the emergency buttons 2010, 3010, with the door closers 2200, 3200. In particular, the security system 1 configured in this way is suitable for double doors with one door closer 200, 1200, 2200, 3200 per door leaf.

Also, the security system 1 can be set such that if an emergency button 10, 1010, 2010, 3010 is actuated, all door locks 200, 1200, 2200, 3200 are unlocked.

Unlike the security system 1 shown in Figure 4, a security system according to the invention 1 may comprise a number of emergency buttons 10, 1010, 2010, 3010 that does not coincide with the number of door locks 200, 1200, 2200, 3200. For example, in Figure 4, door 2 can be configured with one leaf and one of the emergency buttons 10, 1010 or one of the door locks 200, 1200 is missing.

In FIG. 5 it is shown that the emergency buttons 10, 1010, 2010, 3010 and the door closers 200, 1200, 2200, 3200 are connected to each other via the first bus system 400. In each case an emergency button 10, 1010, 2010, 3010 is connected or can be electrically connected with a key switch 500, 1500, 2500, 3500 associated with the respective emergency button 10, 1010, 2010, 3010 via a connection 402, 1402, 2402 or 3402. Alternatively, the key switches 500, 1500, 2500, 3500 are connected to the first bus system 400 ( not represented). In the exemplary embodiment of FIGS. 4 and 5, the control device 100 is integrated in one of the emergency buttons 10, 1010, 2010, 3010, for example the emergency button 10. The first bus system 400 is connected only with a single control device 100. Unless otherwise stated in the following, the structure and functions of door closers 200, 1200, 2200, 3200 correspond to the structure and functions of door closer 200 of figures 2 and 3; the structure and functions of the emergency button 10, with the structure and functions of the emergency button 10 of Figure 2; and the structure and functions of the emergency buttons 1010, 2010, 3010, with the structure and functions of the emergency button 10 of figure 3. The references of figures 2 and 3 are used. In this sense, it is understood that in each case the door locks 200, 1200, 2200, 3200 comprise their own door locking mechanism, their own processing means, etc., and the emergency buttons 10, 1010, 2010, 3010 each comprise their own units of emergency button processing, alarms, lighting means, switches and actuation elements.

So that the association of the emergency buttons 10, 1010, 2010, 3010 to the door locks 200, 1200, 2200, 3200 can be carried out, when the security system 1 starts up, that is, before the start of the operation of the security system 1, an association of the emergency buttons 10, 1010, 2010, 3010 is made to the door locks 200, 1200, 2200, 3200. To do this, one of the door locks is transferred in each case 200, 1200, 2200, 3200 to an association mode. Afterwards, a conscious action is performed on the emergency buttons 10, 1010, 2010, 3010. The conscious action can be performed as an actuation of the actuating element 11 of the respective emergency button 10, 1010, 2010, 3010. After that all the emergency buttons 10, 1010, 2010, 3010, which must be associated to the door lock 200, 1200, 2200, 3200, which is in the association mode, have been activated, the association mode of the door lock is ended door 200, 1200, 2200, 3200. In the exemplary embodiment of Figure 4, for example, the door lock 200 is first transferred to association mode and then the emergency buttons 10, 1010 are actuated, by means of the which the association of the emergency buttons 10, 1010 to the door lock 200 is made. Then, the association mode of the door lock 200 is closed. Then, for example, the door lock 1200 is transferred to the mode of association and then the buttons are activated emergency buttons 10, 1010, whereby the association of the emergency buttons 10, 1010 to the door lock 1200 is effected. Afterwards, the association mode of the door lock 1200 is closed. door lock 2200 to association mode and then emergency button 2010 is actuated, whereby association of emergency button 2010 to door lock 2200 is effected. Door lock association mode 2200 is closed. Correspondingly, you can then proceed with the door lock 3200 and the emergency button 3010.

Through the association, it is saved in the respective door locks 200, 1200, 2200, 3200, in particular in the respective door lock controls 201, which emergency button 10, 1010, 2010, 3010 should be associated with the respective door lock 200, 1200, 2200, 3200. By association, it is saved in the control device 100 for all emergency buttons 10, 1010, 2010, 3010 and all door locks 200, 1200, 2200, 3200 of the first security system. bus 400 the association of the emergency buttons 10, 1010, 2010, 3010 with the door locks 200, 1200, 2200, 3200. For the association, a bus address is saved in each case, in particular a bus address not modifiable, of the respective emergency buttons 10, 1010, 2010, 3010.

The establishment of the association in the respective door locks 200, 1200, 2200, 3200 takes place in each case in the first digital processing means 202 and redundantly in the second digital processing means 203, in particular in the memories not volatiles of the processing media 202, 203.

If, for example, the emergency button 10 is actuated, the emergency button 10 communicates with all door locks 200, 1200, 2200, 3200 of the first bus system 400. The door locks 200, 1200, 2200, 3200 check in each case on the basis of the saved whether the respective door lock 200, 1200, 2200, 3200 has been associated with the actuated emergency button 10. Only if there is an association, the associated door locks 200, 1200 then control the respective door lock mechanism 205.

In the event of a fire alarm signal, the door locks 200, 1200, 2200, 3200 that are associated with the emergency button 10, 1010, 2010, 3010 receiving the fire alarm signal are unlocked.

If a door lock 200, 1200, 2200, 3200 is to be unlocked in a delayed manner as a result of actuation of an associated emergency button 10, 1010, 2010, 3010, the corresponding emergency button 10, 1010, 2010, 3010 is stores a first delay duration. The delay setting takes place during the commissioning of the security system 1 by means of the parameterization program. A different first delay duration can be indicated for each emergency button 10, 1010, 2010, 3010 by the operator. For example, a first delay duration has been stored in the emergency button 10, which differs from the first delay duration stored in the emergency button 2010. The emergency buttons 1010, 3010 must trigger an unlocking of the locks without delay. associated door buttons 2200 or 3200, such that the emergency buttons 1010, 3010 have not set a first delay duration or have set a first delay duration of 0 seconds. Alternatively to this, the security system 1 can be configured in such a way that in the emergency buttons 10, 1010, 2010, 3010 that are associated with the same door lock 200, 1200, 2200, 3200, the same first delay duration is always set. For this, the parameterization program allows the operator only one joint setting.

The control device 100 assumes the non-safety-relevant functions for unlocking and locking of all door locks 200, 1200, 2200, 3200, as described above with respect to FIGS. 1 and 2. To do this, the control device 100 can selectively communicate with door locks 200, 1200, 2200, 3200. Thus, in control device 100 it is established which access control system is associated with which door lock 200, 1200, 2200, 3200 , such that, with a positive authentication signal from an access control system, only the associated door lock(s) 200, 1200, 2200, 3200 are unlocked. Also, in the control device 100 it is saved whether and , if yes, when which door lock 200, 1200, 2200, 3200 should unlock at what predetermined time. Furthermore, it can be stored in the control device 100 after which predetermined time interval(s) or which predetermined time interval(s) which door lock 200, 1200, 2200, 3200 is to be locked again. Likewise, in the control device 100 it is stored whether and, if so, which door locks 200, 1200, 2200, 3200 are to be locked again directly after the closing of door 2, 2002, 3002. In the control device 100 can be saved if and, if so, for which door lock 200, 1200, 2200, 3200 an audible alarm should be generated when unlocked door 2, 2002, 3002 is opened without a positive authentication signal. In the control device 100 it can be stored if an audible alarm should be generated if the door 2, 2002, 2003 is not closed again. Setting these parameters can be done differently for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200 to be arranged on a door 2, 2002, 3002. This Adjustment is carried out with the help of the parameterization program by the operator during commissioning.

The control device 100 causes an audible and visual alarm to be emitted as a result of activating an emergency button 10, 1010, 2010, 3010 also in the at least one additional emergency button 10, 1010, 2010, 3010 that is associated to the same door closure 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. If in the example of embodiment of figures 4 and 5, for example, the emergency button 10 is activated , the control device 100 causes by means of communication with the electronic unit 24 of the emergency button 1010 that also the audible alarm 23 and the lighting means 41 of the emergency button 1010 emit an audible alarm or a visual alarm.

If, after actuation of an emergency button 10, 1010, 2010, 3010, an unlocking is triggered in a delayed manner, the control device 100 causes the first duration of the delay with which the unlocking is triggered to also be displayed in the at least one additional emergency button 10, 1010, 2010, 3010 that is associated with the same door lock 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. To do this, the control device 100 communicates with the electronic unit 24 of at least one additional emergency button 1010, 2010, 3010 or controls the lighting means 41 of the emergency button 10 in which the control device 100 is integrated.

The control device 100 can carry out the non-security-relevant association for selective communication, for example, the association of an access control system to a door lock 200, 1200, 2200, 3200 on the basis of a bus address. In this connection, the members of the first bus system 400 each have a setting device for manually setting a bus address. The setting device may comprise DIP switches. At least the subscribers of the first bus system 400 that have the same setting in the setting device are automatically associated with one another. In order to be able to assign different bus addresses to the participants with the same setting, the participants of the first bus system 400 have different properties, from which different bus addresses are configured with the help of the setting made. The bus address that is determined with the help of the setting for emergency buttons 10, 1010, 2010, 3010 and for door closers 200, 1200, 2200, 3200 is just an additional bus address used by emergency buttons 10 , 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 together with the bus address that is used in the case of safety-relevant communication.

If a door lock 200, 1200, 2200, 3200 has already been unlocked, the control device 100 may prevent an unlocking of another door lock 200, 1200, 2200, 3200 until the presence of a condition, if a condition is not met. dangerous situation. If the condition is met, the control device 100 triggers the unlocking of the additional door lock 200, 1200, 2200, 3200. In this way, the control device 100 can communicate with several door locks 200, 1200, 2200, 3200 in such a way that a lock is generated. For example, door 2002 may be arranged at the entrance of a room and door 3002 at an exit of the same room. The control device 100, if a positive authentication signal is presented, can cause the door lock 2200 to unlock the door lock 2200. Even if a positive authentication signal is presented for the door lock 3200 from the control device 100, control device 100 may prevent unlocking of door lock 3200 until a condition is present. As soon as the condition occurs, the control device 100 triggers an unlocking of the door lock 3200. The condition can, for example, be a lock time interval or the achievement of a measured variable, such as room temperature, humidity of the air, cleanliness of the air or number of people in the room. The control device 100 can be connected or can be connected to a measuring device. The condition may comprise door 2002 closing open first, which may be detected by door status monitoring devices 204, 206. The condition and door closures 2200, 3200 participating in the lock can be stored in the control device 100. These parameters can be set by the operator with the help of the parameterization program.

In Figure 6, a variant of the security system 1 shown in Figures 4 and 5 is shown. In this sense, the control device 100 is configured independently of the emergency buttons 10, 1010, 2010, 3010 and the door locks. door 200, 1200, 2200, 3200. The first bus system 400 connects the control device 100 with the door locks 200, 1200, 2200, 3200 and the emergency buttons 10, 1010, 2010, 3010. The control device 100 of Figure 6 corresponds in structure to the control device 100 of Figure 3. The emergency button 10 of Figure 6 corresponds in structure to the emergency button 10 of Figure 3. Otherwise, the structure and functionalities, which have been described above with respect to Figure 5, correspond to the structure and functionalities of the security system 1 of Figure 6.

Since, in the exemplary embodiments of FIGS. 4 to 6, the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010, 2010, 3010 and, if necessary, the control device 100 act As participants of a single and first bus system 400, only the cables of the bus system 400 are necessary so that the participants can communicate with each other. Thus, the security system 1 has only a few cables.

Bus system 400 may comprise at least two cables for communication and at least two cables for power supply. In particular, the bus system 400 has exactly two wires for communication and two wires for power supply. In each of the exemplary embodiments of the security system 1 according to the invention, a power supply can be integrated as a connection to an electricity network at any point in the bus system 400. Thus, the power supply can be provided as a stand-alone component of the security system 1 outside of the emergency button 10 or the emergency buttons 10, 1010, 2010, 3010 and the door closer 200 or the door closers 200, 1200, 2200, 3200. Thus, the security system 1 is flexible in spatial structure.

If, as in the third and fourth embodiments, there are several emergency buttons 10, 1010, 2010, 3010 and one of the emergency buttons 10, 1010, 2010, 3010 has been activated electronically by means of the electronic maintenance system in the open position, only the door locks 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010 are prevented from locking. door 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010. To achieve the cancellation condition, it is necessary to activate the activation element 11 of the emergency button 10 overlapped in time, 1010, 2010, 3010 and previously activated and authentication on the key switch 500, 1500, 2500, 3500 associated with the activated emergency button 10, 1010, 2010, 3010. At least this operating sequence is necessary for closing door 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010 in which at least one of the door status monitoring devices 204, 206 has detected that door 2 or one of the door leaves 3, 4 have been opened after activating the emergency button 10.

If the door status monitoring devices 204, 206 of the door locks 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010 have detected that door 2 has remained constantly closed after activation of the emergency button 10, 1010, 2010, 3010, the cancellation condition can be reached by passing the predetermined time interval. Thus, the cancellation condition can be achieved, for example, after 60 seconds after the last activation of the emergency button 10. The admissibility of whether a blocking must be carried out after the expiration of the predetermined time interval when the door 2, 2002, 3002 has remained closed for each door closer 200, 1200, 2200, 3200 or for groups of door closers 200, 1200, 2200, 3200, in particular for door closers that are determined for arrangement on the same door, can be set and can be specified individually. This setting can be made, for example, on the emergency buttons 10, 1010, 2010, 3010. Likewise, for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200 , in particular for door locks that are determined for arrangement on the same door, it is possible to adjust and set the duration of the predetermined time interval individually. In this sense, a minimum duration of, for example, 60 seconds can be firmly predetermined for the predetermined time interval. The setting is carried out by means of the parameterization program.

In figure 7 a fifth example of embodiment of the security system 1 according to the invention is shown. The fifth example of embodiment comprises the security system 1 according to the first example of embodiment of figures 1 and 2. That is, the emergency button 10, which includes the control device 100, is connected by means of the security system. bus 400 with the door lock 200. The key switch 500 is connected or can be connected via a connection 402 with the emergency button 10. In the fifth embodiment, compared to the first embodiment, other components 300, 301, 510 are provided.

The security system 1 comprises the central emergency exit control 300. The central emergency exit control 300 is intended to be arranged remotely from the door 2. Thus, the central emergency exit control 300 for example, together with a monitoring device 301, which can be configured as a screen or a personal computer, and/or a multi-door display device 350 (see figure 10), can be arranged in a surveillance booth. Surveillance device 301 is optionally part of security system 1 according to the invention. Alternatively, the surveillance device 301 is connectable to the security system 1 according to the invention.

The central emergency exit control 300 is modularly structured. An emergency module 310 comprises a first fixing plate 311. The first fixing plate 311 houses a central emergency button 302 and an identification device 312 configured, for example, as a key switch. By means of the first fixing plate 311, the central emergency button 302 and the identification device 312 are mechanically rigidly connected to each other. The central emergency button 302 serves so that, as a result of an operation of the central emergency button 302, the door lock 200 is unlocked. Thus, by means of the central emergency button 302 remote from the door 2, the door lock can be unlocked. door closing 200. Unlocking as a result of activating the central emergency button 302 is carried out safely against failure. The actuation of the central emergency button 302 is therefore appropriate for a dangerous situation.

A deactivation module 320 comprises a first control element 322 configured as a key switch and a second control element 323 configured as a button. The first control element 322 serves to deactivate the emergency button 10. Thus, by actuating the first control element 322, the emergency button 10 is transferred to a deactivated state. If the emergency button 10 is in a deactivated state, an unlocking of the door lock 200 is not carried out following an actuation of the emergency button 10. The second control element 323 serves to activate the emergency button 10. If the emergency button 10 is in the deactivated state and the second control element 323 is actuated, the emergency button 10 is transferred to an activated state. In the activated state of the emergency button 10, the emergency button 10 triggers an unlocking of the door lock 200, if the emergency button 10 has been actuated. The deactivation module comprises a second fixing plate 321. The second fixing plate The fixing plate 321 serves to receive the first and second control elements 322, 323. The second fixing plate 321 mechanically rigidly connects the first and second control elements 322, 323 to one another.

The delay module 330 comprises a third mounting plate 331. The third mounting plate 331 accommodates a delay element 332. The delay element 332 is designed, for example, as a key switch. The delay element 332 serves to further delay, within the first delay duration, the unlocking of the door lock 200. The delay module 330 comprises a termination element 333 which is configured as a button. The termination element 333 is attached to the third mounting plate 331. The termination element 333 is mechanically rigidly connected to the delay element 332 by means of the third mounting plate 331. By actuating the termination element 333, door lock unlock delay 200 can end.

The central emergency exit control 300 comprises an open-sided emergency exit control housing 340 in which the emergency module 310, the deactivation module 320 and the delay module 330 are arranged. The deactivation module 320 and the delay module 330 are optional components of the central emergency exit protection 300. In the emergency exit control housing 340, the multi-door display 350 can also be arranged, if present.

The emergency exit control shell 340 can mechanically fix the emergency module 310, the deactivation module 320 and the delay module 330. The emergency module 310, the deactivation module 320 and the delay module 330 are fixed in each case individually to the emergency exit control housing 340, in particular screwed. For fastening to the emergency exit control housing 340, the first fastening plate 311 for the emergency module 310, the second fastening plate 321 for the deactivation module 320 and/or the third fastening plate 331 for the delay module 330. The emergency exit control housing 340 and the modules 310, 320, 330 are designed in such a way that different orders in which the modules 310, 320, 330 can be arranged adjacently are possible. Thus, for For example, in a central emergency exit lock 300, not shown, for example, the emergency module 310 can be arranged between the deactivation module 320 and the delay module 330. In another central emergency exit control 300, not shown , a free space can be arranged, for example, on the left, the delay module 330 in the center, and the emergency module 310 on the right. The free space is generated by the absence of the deactivation module 320 and is hidden by a plate. The emergency exit control housing 340 can have rails for sliding the rails 310, 320, 330. The emergency exit control housing 340 can have fixing possibilities, for example, perforated bars or oblong holes for fixing variable of modules 310, 320, 330.

On the first mounting plate 311, on the second mounting plate 321 and on the third mounting plate 331, a display area 314, 324 or 334 is provided in each case, which is only shown schematically. In the display area there are symbols illustrating the function of the modules 310, 320, 330. In addition, visual lights for displaying the states of the security system 1 may be provided in the display areas 314, 324, 334.

In the example of embodiment of figure 7, the security system 1 also includes an audio and video module 510. The audio and video module 510 is intended for arrangement near the door 2 which can be locked by the door lock 200. If the audio and video module 510 is activated, an operator in the surveillance booth can speak with the user standing in front of door 2 and looking at the space around door 2.

As shown in Fig. 8, the central emergency button 302 is structured similarly to the emergency button 10. Thus, the central emergency button 302 comprises an electronic emergency button unit 308. The electronic emergency button unit 308 comprises a first emergency processing unit 303, a second emergency processing unit 304 and a third emergency processing unit 305. The first, second and third emergency processing units 303, 304, 305 are each configured such as microprocessors or microcontrollers. The first and second emergency processing units 303, 304 have non-volatile memory. The third emergency processing unit 305 has non-volatile memory and/or has access to non-volatile memory. The central emergency button 302 is actuated by an emergency button actuating member 306 being actuated. In this manner, the emergency button switch 307 is actuated. In this manner, a first and a second signal are generated. To do this, a first and a second electrical circuit (not shown) are opened. A signal about the opening of the first electric circuit is detected by the first emergency processing unit 303. A signal about the opening of the second electric circuit is detected by the second emergency processing unit 304.

The central emergency button 302 is connected with a second bus system 401. As shown in Fig. 9, the control device 100 is also connected with the second bus system 401. The second bus system 401 is a kind of bus system different from the first bus system 400. For example, the second bus system 401 can be configured as a LON or LAN bus and the first bus system 400 as a CAN or DCW bus.

In Figure 9, the emergency button 10 comprises the control device 100. The emergency button 10 and door lock 200 shown in Figure 9 correspond to the emergency button 10 and door lock 200 of figure 2.

In an alternative not shown, the control device 100, the emergency button 10 and the door lock 200 are configured according to figure 3. In this alternative not shown, the control device 100, the emergency button 10 and the door closer 200 are connected to each other via the first bus system 400, the control device 100 being connected to the second bus system 401.

The control device 100 receives messages from the central emergency exit guard 300 via the second bus system 401. The control device 100 forwards the messages via the first bus system to other participants of the first bus system 400. The The message can in particular be information regarding an actuation of the central emergency switch 302, of the key switch 312, of the first control element 322, of the second control element 323, of the delay element 332 and/or of the control element. termination 333 or a control command as a result of an actuation of one of the aforementioned elements 302, 312, 322, 323, 332, 333. If the control device 100 is integrated in the emergency button 10, the bypass to the emergency button 10 in which the control device 100 is integrated is not necessary. For example, according to figure 9, the control device 100 forwards the message to the door lock 200. If the control device 100 and the emergency button 10 are connected via the first bus system 400, the control device 100 forwards the message to the emergency button 10 and/or the door closing 200. The control device 100 adapts the message to the format of the first bus system 400. Otherwise, the safety-relevant messages are left untouched.

If the central emergency button 302 has been actuated, the first emergency processing unit 303 and redundantly the second emergency processing unit 304 trigger an unlocking of the door lock 200. In this sense, the central emergency button 302 communicates via the control device 100 with the door closing control 201, in particular with the first and second processing means 202, 203. The first and second processing means 202, 203 then control the closing mechanism. lock 205. Previously, the first and second processing units 103, 104 have derived the message. In this sense, the control device 100 has left the content of the message intact.

The central emergency button 302 has an input for receiving a fire alarm. If a fire alarm signal is received, the central emergency button 302 triggers an unlocking of the door lock 200. To do this, the first and second emergency processing units 303, 304 communicate via the control device 100, in particular through the first and second processing units 103, 104, with the door lock control 201, as described above.

A signal about an actuation of the key switch 312 of the first module 310 is received by the emergency button electronic unit 308, in particular the third emergency processing unit 305. The emergency button electronic unit 308 sends a message regarding to actuation of the key switch 312 on the second bus system 401 to the control device 100. The control device 100 forwards the message to the first bus system 400.

The emergency button actuating element 306 is made non-locking. The emergency button actuation element 306 is configured identically to the actuation element 11 of the emergency button 10 (see FIGS. 13 to 15). Thus, the emergency actuation element 306 is transferred during actuation from a starting position to an actuation position (analogous to FIG. 11). Directly after actuation, the emergency actuation element 306 is moved back into the starting position by the force of a spring-shaped return means (analogous to FIG. 11). The actuation of the emergency actuation element 306 is effected translationally. If, as a result of activating the central emergency button 302, the door lock 200 is transferred to the unlocked state, the electronic device 207 prevents, by means of the open position maintenance electronic system, that, without the presence of a cancellation condition, door lock 200 can be transferred back to the locked state. The cancellation condition after actuation of the central emergency button 302 can be achieved by an actuation of the key switch 312. In particular, an actuation of the key switch 312 is sufficient to achieve the cancellation condition.

If the security system 1 comprises the central emergency exit control 300, as a result of an operation of the emergency button 10, the cancellation condition can be reached in another way: If the door status monitoring devices 204, 206 have detected that the door 2 has remained permanently closed after the activation of the emergency button 10, the cancellation condition can be achieved by elapse of a predetermined time interval and a cancellation action in the central emergency exit control 300 after the activation. default time interval. The cancellation action can be an authentication at the central emergency exit control 300, in particular an actuation of the key switch 312. By means of the cancellation action, for example, the actuation of the key switch 312, a signal can be generated of cancellation. The cancellation signal is forwarded via the control device 100 to the door closing control 201. An authentication at the key switch 500 and a cancellation action at the emergency button 10 are not necessary in this case.

The door lock control 201 checks whether an achievement of the cancellation condition is permissible by passing the predetermined time interval and authenticates at the central emergency exit control 300 whether the door 2 has remained closed before the exit control. door closer 201 check the lock mechanism 205 for locking. Thus, an operator can establish during the start-up of the security system 1 if an elapse of the predetermined time interval without opening of the door 2 and the additional actuation of the key switch 312 is permissible as a cancellation condition and, therefore, leads to a relocking of the door 2. An admissibility check, an expiration of the predetermined time interval, an actuation of the key switch 312 after the predetermined time interval and the fact that, during the predetermined time interval, neither the first door status monitoring device 204 nor the second door status monitoring device 206 has sent a signal about the opening of the door, they are sufficient to achieve the cancellation condition.

In this sense, it is a variant for achieving a cancellation condition that has been described with respect to figures 1 and 2. This variant can be selected, for example, by the operator when only the elapsed time interval default when door 2 remains closed does not seem safe enough to the operator. The operator can choose and set this variant by means of the parameterization program.

In particular if the operator has chosen this option, the passage of the predetermined time interval when the door 2 remains closed is displayed visually to the central emergency exit control 300. In particular, the lighting means 313 serve to show that the interval of predetermined time has elapsed without receiving a signal about opening the door 2 within the predetermined time interval. By the visual display, the operator acknowledges that the door 2 can be locked by authentication at the central emergency exit control 300.

If the door status monitoring devices 204, 206 do not send a signal about a door opening during the presence of a fire alarm, after an end of the fire signal a blocking of the door closing 200 can also be achieved. by the same actuation of the key switch 312. Also visually shown by means of the lighting means 313 is the possibility of achieving by actuation of the key switch 312 after an end of the fire signal a blocking of the door lock 200.

The control device 100 derives messages from the emergency button 10 and/or the door lock 200 via the second bus system 401. In this sense, the control device 100 adapts the message to the format of the second bus system 401. The control device 100 sends information about the status of the emergency button 10 and/or the door lock 200 via the second bus system 401.

For example, the central emergency exit control 300 and the multi-door display apparatus 350 may be connected with a third bus system 403 (see Fig. 10). Preferably, the central emergency button 302, particularly preferably the emergency button electronic unit 308, can be connected to the third bus system 403 (see figure 8). The multi-door display apparatus 350 can visually display the locked or unlocked status of the door lock 200. Additionally with the help of the multi-door display apparatus 350 one of the door locks 200, 200', 1200', 2200' of the security system 1 (see figure 10) can be unlocked. Unlocking with the aid of the multi-door display unit 350 is not fail-safe. The third bus system 403 may be of the same type of bus system as the first bus system 400, for example, a CAN or DCW bus.

The control device 100 bypasses via the second bus system 401 to the central emergency exit control 300, if the emergency button 10 waits a first delay duration, before the emergency button 10 causes the closing control door lock 201 check the lock mechanism 205 for unlocking.

The first duration of the delay is displayed on the central emergency exit control 300. For this, the central emergency button 302 is constructed corresponding to the emergency button 10, as described with respect to figures 13, 16, 17. For the display of the first delay duration, the lighting means 313 of the central emergency button 302 are controlled by the emergency button electronic unit 308. With the progress of the first delay duration, less lighting means 313 light up. with the same color. For example, fewer lighting means 313 with a first color and increasingly more lighting means 313 with a second color can be illuminated. The illumination means 41 of the emergency button 10 are controlled in the same way to visually represent the first duration of the delay.

During the first duration of the delay, for example, 8 seconds, the operator can actuate the delay element 332. To do this, the operator turns a key in the key switch serving as the delay element 332. An actuation of the delay element 332 is detected by the electronic emergency button unit 308, in particular the third emergency processing unit 305. A corresponding message is sent via the second bus system 401 and, if applicable, the first bus system 400. The emergency button 10 receives the message. Following actuation of delay element 332, emergency button 10 ends the first delay duration and begins a second delay duration. The second delay duration, for example, 180 seconds, is longer than the first delay duration. At the end of the second duration of the delay, the emergency button 10 triggers the unlocking of the door lock 200. The second duration of the delay is determined in the emergency button 10 with the help of the same timer that serves to determine the first duration. of the delay. During the second duration of the delay, the delay element key 322 must remain unturned. On the contrary, a single turn of the key is enough to start the second duration of the delay.

The second delay duration is displayed on the central emergency exit control 300 and on the emergency button 10. The display on the central emergency exit control 300 is similar to the display on the emergency button 10. With the progress of the second duration of the delay, fewer lighting means 41, 313 light up with the same color. For example, fewer lighting means 41, 313 can be illuminated with a first color and increasingly more lighting means 41, 313 with a second color. To represent how long the second delay duration lasts, a pattern that is associated with a temporal sequence, for example, a circulating color dot or a circulating color window, can be repeatedly represented within the second delay duration (see Fig. description with respect to figures 16, 17).

If, during the first or second duration of the delay, the termination element 333 is actuated, the emergency electronic unit 308, in particular the third emergency processing unit 305, detects the actuation of the termination element 333 and sends a message with respect to the actuation of the termination element 333 by means of the second bus system 401. In this way, the emergency electronic unit 308 leads the emergency button 10 to no longer delay the unlocking, but to directly cause an unlocking of the lock gate 200. Completion element 333 is configured to be non-latching. One actuation of the completion element 333 suffices to end the unlock generation delay.

The emergency button 10 can be transferred to the deactivated state by an actuation of the first control element 322 . To do this, the operator turns a key in the key switch serving as the first control element 322. An actuation of the first control element 322 is detected by the electronic emergency button unit 308. At an actuation of the first control element 322, a first and second electrical deactivation circuit is opened or closed. The opening or closing of the first deactivation electric circuit is detected by the first emergency processing unit 303. The opening or closing of the second electric circuit is detected by the second emergency processing unit 304. The first and second emergency processing units 303, 304 communicate via the second bus system 401 with the emergency button 10. If the first bus system 400 is located between the emergency button 10 and the central emergency button 302, the control device 100 forwards the message to the first and second emergency processing units 303, 304. In the forwarding, the format is changed, but the content remains unchanged.

In the deactivated state of the emergency button 10, actuation of the emergency button 10 has no effect on the door lock 200.

The activated state and the deactivated state are stored in the emergency button 10 electronically. To be Once the activated state and the deactivated state are stored in the emergency button 10, the key does not need to remain turned on the first control element 322 during the deactivated state. On the other hand, a single turn of the key is enough to deactivate the emergency button 10.

The deactivation persists until the second command element 323 is actuated. The actuation of the second command element 323 can be detected by the emergency button electronic unit 308, in particular the emergency processing unit 305. The emergency electronic unit 308 sends a message regarding the actuation of the second control element 323 via the second bus system 401 and, if necessary, via the first bus system 400 to the emergency button 10, after which the emergency button 10 is transferred to the activated state. The second control element 323 does not latch. Since the activated and deactivated status is stored in the emergency button 10, a single actuation of the second control element 323 suffices to transfer the emergency button 10 to the activated state.

The central emergency exit control 300 comprises a bus 341 through which the emergency electronic unit 308, in particular the third emergency processing unit 305, can record signals from the second control element 323, from the delay element 332 and of the completion element 333. The electronic emergency unit 308 serves as the intelligence of the entire central emergency exit control 300. Only the electronic emergency unit 308 comprises microprocessors. Deactivation module 320 and/or delay module 322 can be designed without a processor. The 341 bus may be designed as an I2C bus.

For establishing the activated and deactivated state in the first emergency button processing unit 20 and, redundantly, in the second emergency button processing unit 21, in particular in the non-volatile memories, a second variable can be saved . The second variable can be binary. If the emergency button 10 is in the deactivated state, the second variable is set to a deactivation value. If the emergency button 10 is in the activated state, the second variable is set to an activation value. Following actuation of the first control element 322, the second variable is set to the deactivation value. Following actuation of the second control element 323, the second variable is set to the activation value. Before the emergency button 10 causes the unlocking of the door lock 200, the emergency button 10 checks the value of the second variable. If the emergency button determines that the emergency button 10 is deactivated, there is no communication of the emergency button 10 with the door lock control 201, to cause an unlock 200.

The first emergency processing unit 303 and the second emergency processing unit 304 monitor each other for failures. If a fault is detected, a message is sent via the second bus system 401. The emergency button 10 receives the message and then transfers itself to the activated state, if the emergency button 10 is in the disabled state. For this, the emergency button 10 modifies the value of the second variable to the activation value.

The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly, in particular at regular intervals, send a life signal via the second bus system 401. The emergency button 10 receives the life signals. If on one or more occasions a sign of life is missing, the emergency button 10 is transferred to the activated state, if the emergency button 10 is in the deactivated state. If the security system 1 receives a fire alarm signal, the emergency button 10 is transferred to the activated state, if the emergency button 10 is in the deactivated state.

Actuation of the emergency button 10 in the deactivated state is displayed on the central emergency exit control 300, on the monitoring device 301 and/or on the multi-door display unit 350. If a dangerous situation actually exists, the emergency button 10 is transferred by the operator to the activated state by operating the operator the second control element 323, or the closing of the door for unlocking can be directly controlled by the operator. For this, the operator can actuate the central emergency button 302. If a dangerous situation arises, the operator can perceive, for example, the audio and video module 510. In this way, high safety is achieved.

Deactivation can be done, for example, at night in a department store. Furthermore, it is conceivable to use the emergency button 10 which can be deactivated in a building, in which people with impaired mental status live. Thus, emergency buttons 10 can also be used on doors to which people with impaired mental conditions have access, for example, in a psychiatric station or ward.

If, in the deactivated state, the emergency button 10 is actuated and then the emergency button 10 is transferred to the activated state, the actuation of the emergency button 10 in the deactivated state also does not lead to unlocking after the transfer to the activated state. of the door closer 200. The operation carried out in the deactivated state of the emergency button 10 has no effect. This is due, on the one hand, to the fact that the actuating element 11 and the switch 63 are not designed to interlock. On the other hand, the operation of the emergency button 10 is not saved in the deactivated state in the emergency button 10. The door lock control 201 does not receive any message regarding the operation of the emergency button 10 in the deactivated state. The electronic hold-open system has therefore been transferred to the status of drive. In this way, it is achieved that, directly with the activation of the emergency button 10, the door lock 100 is unlocked, for example, because the emergency button 10 had been activated long before. In this way, high security is achieved. in the building in question.

In order to achieve particularly high security, provision can be made for the audio-video module 510 to be activated during the first and/or second duration of the delay. In this sense, the emergency button 10 activates the audio-video module 510 at the beginning of the first and/or the second duration of the delay. Likewise, the audio and video module 510 is activated by the emergency button 10 when the emergency button 10 is actuated in the deactivated state. For this, the emergency button 10 communicates via the second bus system 401 and, optionally via the first bus system 400 with the audio/video module 510.

It may be that the emergency button 10 can only be deactivated if the audio-video module 510 can be activated. If the audio-video module 510 is part of the security system 1 according to the invention, a deactivation can be dispensed with. if the audio and video module 510, for example, is not working and/or the connection with the audio and video module 510 fails. This is not the case if the security system 1 does not include an audio and video module 510, but instead a surveillance system is provided in the building independent of the security system 1.

It may be that the emergency button 10 that delays the triggering of the unlocking is only delayed for the first and/or the second duration of the delay, if the audio and video module 510 can be activated. If the audio and video module 510 is part of the security system 1 according to the invention, a delay can be dispensed with if the audio-video module 510, for example, is not in operation and/or the connection to the audio-video module fails. This is not the case if the security system 1 does not include an audio and video module 510, but instead a surveillance system is provided in the building independent of the security system 1.

In Figure 10, another embodiment of a security system 1 according to the invention is shown. As in the exemplary embodiment of FIGS. 7 to 9, the security system 1 comprises a central emergency exit control 300 which is structured correspondingly to that of FIGS. 7 and 8. Between the emergency buttons 10, 10', 1010 , 1010', 2010 respective key switches 500, 500', 1500, 1500', 2500 are not reproduced for the sake of clarity. The central emergency exit control 300 is connected with the second bus system 401. With the second bus system 401, a first bus subsystem 5 and a second bus subsystem 6 are connected. The two subsystems 5, 6 comprise in each case a first bus system 400, 400'. Emergency buttons 10, 1010 or 10', 1010', 2010' and door locks 200 or 200', 1200', 2200' are each connected to the respective first bus system 400, 400'. The first bus systems 400, 400' are of the same type of bus system, eg a CAN bus or a DCW bus. The second bus system 401 is of a different type of bus system, for example, a LON or LAN bus.

The security system 1 comprises the multi-door display apparatus 350. The multi-door display apparatus 350 can, for example, visually display which door lock 200 or 200', 1200', 2200' is in the locked state. unlock and which door lock is in the unlock state. With the aid of the multi-door display unit 350, an operator can perform a security-independent locking and unlocking of individual door locks 200 or 200', 1200', 2200' of the security system 1.

Each subsystem 5, 6 comprises only one control device 100, 100'. In each case the control device 100, 100' of the respective subsystem 5, 6 is connected to the second bus system 401. The control device 100 of the first subsystem 5 is connected in this connection with the emergency buttons 10, 1010 and the door lock 200 of the first subsystem 5 via the first bus system 400. Instead, the control device 100' of the second subsystem 6 is integrated into an emergency button 10' of the second subsystem 6 and is connected to the rest of the emergency buttons 1010', 2010' and the door locks 200', 1200', 2200' of the additional first bus system 400'.

In the subsystem 5, a first emergency button 10 and a second emergency button 1010 are provided. If the emergency button 10, 1010 is actuated, the actuated emergency button 10, 1010 causes in each case an unlocking of the door lock 200.

In the subsystem 6, a first emergency button 10', a second emergency button 1010' and a third emergency button 2010' are provided. The emergency buttons 10', 1010', 2010' selectively trigger an unlocking of the door locks 200', 1200', 2200' of the second subsystem 6. For example, actuation of the first emergency button 10' only triggers an unlocking of the first door lock 200'. Correspondingly, with an actuation of the second emergency button 1010', only one unlocking of the second door lock 1200' is triggered, and with an actuation of the third emergency button 2010', only one unlocking of the third door lock 2200'.

Multiple variations are conceivable. Thus, a security system 1 according to the invention can be designed, for example, without the first or second subsystem 5, 6. As a single or additional subsystem, for example, one of the security systems 1 of according to the invention described in figures 1 to 6.

The configuration and functions of the emergency buttons 10, 10', 1010, 1010', 2010' and of the door locks 200, 200', 1200', 2200' are configured according to the preceding embodiments, except unless additionally or differently described below.

In each of the door locks 200, 200', 1200', 2200' of the security system 1 it is saved if, in the event of an actuation of the central emergency button 302, an unlocking of the respective door lock 200 is carried out, 200'1200', 2200'. Thus, for example, the door locks 200, 200', 2200' can allow unlocking as a result of an actuation of the central emergency switch 302, but not the door lock 1200'. If the central emergency button 302 is actuated, then the door lock controls 201 of the door closers 200, 200', 2200' control the respective locking mechanism 205 for unlocking. In contrast, such a control does not take place in the door lock 1200'.

If the central emergency button 302 is actuated, the control devices 100, 100' receive a corresponding message from the central emergency button 302 via the second bus system 401 and forward the message to all door locks 200 in each case. or 200', 1200', 2200' of the respective first bus system 400, 400'. The door locks 200, 200, 1200, 2200 decide in each case on the basis of what is indicated, which includes the admission of an unlocking as a result of actuation of the central emergency button 302, whether the respective door lock control 201 of the door locks 200, 200', 1200', 2200' control the respective lock mechanism 205 to unlock or not.

The setting of whether the door lock 200, 200', 1200', 2200' is unlocked as a result of an actuation of the central emergency button 302, is made during the start-up of the security system 1 by means of the operator. The setting is carried out by means of the parameterization program.

In each of the emergency buttons 10, 1010, 10', 1010', 2010' it is stored whether, in the event of an actuation of the first control element 322, a transfer to the deactivated state for the respective emergency button is allowed or not. emergency 10, 1010, 10', 1010', 2010'. This produces a selective deactivation by actuation of the only first control element 322 of the security system 1. Thus, for example, the emergency buttons 10, 10', 2010' can be transferred as a result of an actuation of the first control element 322 to the deactivated state, but not the emergency buttons 1010, 1010'.

If the first control element 322 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message in each case to all emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400', which do not comprise the control device 100. The emergency buttons 10, 1010, 10'. 1010', 2010' of the security system 1 decide, on the basis of the indication on admission for deactivation, whether the respective emergency button 10, 1010, 10', 1010', 2010' transfers itself or not to the deactivated state as a result of activating the first control element 322.

The setting of whether a deactivation of the emergency buttons 10, 1010, 10', 1010', 2010' is to be allowed can be a third variable. The third variable can be realized binary. The third variable is stored in the non-volatile memories of the respective first and second emergency button processing units 20, 21 of each emergency button 10, 1010, 10', 1010', 2010'. If deactivation is allowed for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable assumes a first value. If deactivation is prohibited for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable assumes a second value. The emergency button 10, 1010, 10', 1010', 2010' checks the value of the third variables before the emergency button 10, 1010, 10', 1010', 2010' is deactivated and deactivates itself, if the third variable has the first value.

The setting of whether the emergency button 10, 1010, 10', 1010', 2010' should be deactivated is made during the start-up of the safety system 1 by the operator. This is established with the help of a parameterization program.

In each of the emergency buttons 10, 1010, 10', 1010', 2010', the emergency button 10, 1010, 10' is stored if the delay element 332 is actuated. 1010', 2010' respectively delays or not the unlocking of the door locks 200, 200', 1200', 2200' associated with the emergency button 10, 1010, 10'. 1010', 2010' in a second delay duration. The second delay duration can be set for the emergency buttons 10, 1010, 10'. 1010', 2010' with a different duration and is stored in the security system 1, in particular in the emergency buttons 10, 1010, 10', 1010', 2010'. As an alternative, the support of the delay with the second delay duration, and optionally the length of the second delay duration, can be set individually only for groups of emergency buttons 10, 1010, 10'. 1010', 2010', which are associated with a door lock 200, 200', 1200', 2200' or with a door 2, 2002, 3002. Setting and saving is done by the operator with the help of the parameterization program .

Thus, for example, the emergency buttons 10, 2010' as a result of an actuation of the delay element 332 can additionally delay the unlocking of the door locks 200 or 2200', but not the buttons emergency 1010, 10', 1010'. The duration of the second delay time for the emergency button 10 has been selected different from the duration of the second delay time for the emergency button 2010'. If the emergency button 10 is actuated and, within the first delay duration that is stored for the emergency button 10, the delay element 332, the emergency button 10, is actuated from the actuation of the delay element 332 , delays unlocking with the second delay duration that has been saved in the emergency button 10. If the emergency button 2010' is actuated and within the first delay duration, which has been saved for the emergency button 2010, the delay element 332 is actuated, the emergency button 2010, from the actuation of the delay element 332, delays unlocking with the second delay time, which has been stored in the emergency button 2010' and which is different from the second delay time for the emergency button 10. If the emergency button 1010 is actuated, the emergency button 1010 delays unlocking with the first delay duration that has been saved for the emergency button 1010. Yes, during the first or second delay duration of the emergency button 1010, the delay element 332 is actuated, unlocking is not delayed with a second delay duration, since this delay is not allowed for the emergency button 1010, but that the emergency button 1010 will cause after the first duration of the delay directly an unlocking of the door lock 200. The emergency buttons 10', 1010' do not delay the unlocking of the associated door locks 200' or 1200'. In the emergency buttons 10', 1010', neither a first delay duration nor a second delay duration is allowed. Instead of not accepting a delay for the first and/or second delay duration, a duration of 0 seconds can also be saved. An actuation of termination element 333 terminates any unlock delay.

If the delay element 332 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message in each case to the emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400', which do not comprise the control device 100. The emergency buttons 10, 1010, 10'. 1010', 2010' of the security system 1 decide on the basis of the setting how to proceed.

The setting of whether the emergency button 10, 1010, 10', 1010', 2010' allows the delay with the second delay time and, if so, the setting of the duration of the second delay time is made during the start commissioning of the security system 1. The settings are made by the operator with the help of the parameterization program. the first and/or the second duration of the delay can be selected only up to a firmly predetermined maximum duration.

Also, with the help of the parameterization program, the operator can selectively establish for which emergency button 10, 1010, 1010', 2010' which cancellation condition is allowed. The cancel condition for the cancel- in-place action is always supported. For each emergency button 10, 1010, 1010', 2010', however, it may or may not be selectively allowed to reach the abort condition by passing the predetermined time interval or to attain the abort condition by passing the predetermined time interval and subsequent activation of the identification device 312 in case the door 2 has remained closed.

Setting whether the emergency button 10 can be deactivated by actuating the first control element 322, whether the emergency button 10 can delay unlocking by actuating the delay element 332 by a second delay duration, the duration of the first and second delay times, the establishment of the cancellation condition and/or the establishment of whether the door lock 200 should be unlocked with an actuation of the central emergency button 302 can also be an embodiment for the security system 1 of according to the example of embodiment of figures 7 to 9.

In a different way and not shown in FIGS. 7 to 10, several central emergency exit controls 300, 300' can also be connected to the second bus system 401. For example, in a psychiatric center a central emergency control can be provided. emergency exit 300 for provision in a surveillance booth and another central control emergency exit 300' for provision in a nursing station.

With the respective door locks 200, 200', 1200', 2200', it can be saved in each case with the help of the parameterization program, as a result of an actuation, which of the central emergency buttons 302, 302' is to be unlocked. To do this, a list must be established in the door locks. In the respective emergency buttons 10, 10', 1010, 1010', 2010' it can be saved in each case with the help of the parameterization program, as a result of an actuation which of the first control elements 322, 322' are allowed to a deactivation. In contrast to the third variable, a list is stored for this in each case in the emergency buttons 10, 10', 1010, 1010', 2010'.

From the first to the fourth embodiment of the security system 1 according to the invention there is no second bus system 401, no central emergency exit control 300, no surveillance device 301 and no audio and video module 510 However, exemplary embodiments of the security system 1 are conceivable according to the invention, in which the missing components 401, 301, 300 and 510 are at least partially included in the first to fourth exemplary embodiments. If the security system 1 is designed for several doors, an audio and video module 510 can be associated with each door. The emergency buttons 1010, 2010, 3010 do not comprise the control device 100, and the door closers 200, 1200, 2200, 3200 are not connected to the second bus system 401.

In figures 1 to 10 the door locks 200, 200', 1200, 1200', 2200, 2200', 3200 are part of the security system 1 according to the invention. However, it is also conceivable that in each case only the door lock controls 201 are part of the security system 1 according to the invention. In this case, the door lock controls 201 can each be connected to the lock mechanism 205 and, if necessary, the door status monitoring devices 204, 206. An unlocking of the door lock 200 does not have place in this case in the security system 1, however, it is part of the security system 1 that the door lock control 201 controls the locking mechanism 205, that is, that the door lock control 201 activates or deactivates the electric current for the locking mechanism 205. In this case, instead of the terms "unlocking or locking of the door lock" in each case "control of the locking mechanism for unlocking or locking" can be used.

An emergency button 10 is shown in figures 11 to 13. The emergency button 10 shown in figure 11 is or can be used as an emergency button 10, 10', 1010, 1010', 2010, 3010 in one of the security systems 1 according to the invention of figures 1 to 10.

The emergency button 10 comprises the actuating element 11. The actuating element 11 can be moved from the starting position 11.I, which is shown in figure 11, to the actuating position 11.11, which is indicated in figure 11. In Fig. 12, the actuating element 11 is also in the starting position 11.I.

Switch 63 is activated in actuation position 11.II. Switch 63 also changes in this direction from one position 63.I to a second position 63.11, as shown in Fig. 12.

After actuation, the actuating element 11 returns directly and without manual action to the starting position 11.I. For this, a return means 12 configured as a spring is provided on the emergency button 10. After actuation, the switch 63 also returns directly and without manual action to the first position 63.I.

The emergency button 10 comprises at least one first plate 60. It is thus possible to design the emergency button 10 in a compact manner and with assured operation.

The emergency button 10 has a mounting height AH of less than 48 mm from a crest 32 of a front surface 19 of the actuating element 11 in the mounting direction, preferably less than 45 mm, particularly preferably less than 43 mm.

Switch 63 is attached to first plate 60. The first and second electrical circuits are interrupted on first plate 60 by actuation of switch 63.

The emergency button 10 further comprises a second plate 61. On the first plate 61, the first, second, and third emergency button processing units 20, 21, 22 are arranged. second and third emergency button processing units 20, 21, 22 is independent of whether the first, second and third emergency button processing units 20, 21, 22 serve as processing units 103, 104, 105 of the control device 100.

The opening of the first and second electrical circuits can be wirelessly detected by the first or second emergency button processing unit 20, 21. For this, the first and second boards 60, 61 are connected to each other by means of pins 68.

The first and second plates 60, 61 are arranged at a fixed distance from each other. For this, bolts 69 are provided which fix the first and second plates 60, 61 to each other by means of screws 70 at a fixed distance from each other (see Figure 13). The first and second plates 60, 61 are arranged parallel to each other.

The emergency button 10 comprises a mounting plate 62. The mounting plate 62 is also arranged at a fixed distance from the first and second plates 60, 61. For this purpose, bolts 71 are provided which join the mounting plate by means of screws 72. assembly 62 with the first plate 61.

Mounting plate 62 serves for mounting a flush-mounted box. The recessed box can have a diameter of 60 mm and a depth of 41 mm. The part of the emergency button 10 extending from the mounting plate 62 in the mounting direction is designated as component 73. The component 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm. mm, particularly preferably less than 29 mm. In this way, there is enough space for cables in the flush-mounted box. The distance MP from the lower side of the mounting plate 62 to an upper side of the second plate 62 is less than 22 mm, preferably less than 20 mm, particularly preferably less than 17 mm. The plate Mounting bracket 62 can also be used for fastening to a cover element of a drop-in casing (not shown). The mentioned distances are met in particular for an emergency button in which the bluetooth module 64 is fixed to a lower side of the second circuit board 61, in contrast to the illustration of the figures.

As described above, the cancellation action, which is performed directly on the emergency button 10, is executed without a rotary movement of the actuating element 11 and the switch 63. Therefore, it is possible to use a switch 63 with a lower height. Thus, switch 63 is configured such that switch 63 does not turn. The switch 63 has a height SH of less than 20 mm, preferably less than 17 mm, particularly preferably less than 15 mm.

The manner of the cancellation action and the low height of the switch 63 contribute to a low construction height AH of the emergency button 10.

Furthermore, it contributes to the low overall height AH of the emergency button 10 that the switch 63 is arranged centrally below the actuating element 11 and that the actuating element 11 is guided eccentrically in the emergency button 10.

As shown in figures 14 and 15, the actuating element 11 has guide means 35 in the form of a bar. The guide means 35 are guided in guide bushes 65. The guide bushes 65 are connected to the mounting plate 62. In order to achieve good guidance, one of the guide bushes 65 extends through the first plate 60.

The guide means 35 are arranged parallel to the switch 63. The guide means 35 prevent a rotary movement of the actuating element 11 about an imaginary axis 701 running in the actuating direction 700.

By means of the guide means 35 guided in the guide bushes 65, the drive element 11 can only be moved translationally.

The drive element 11 has a drive means 36. As shown in FIGS. 12 and 15, the drive means 36 is configured in the shape of a circular cylinder. In this way, it is ensured that the actuating means 36 always actuates the switch 63. In particular, a first and a second switching element 74, 75 of the switch are thus always actuated simultaneously (see FIG. 13). The first electrical circuit is opened by the first switching element 74 and the second electrical circuit is opened by the second switching element 75.

The actuating means 36 is configured with a hollow interior space 38. A light source (not shown) is arranged in the switch 63. The light emitted by the light source is directed through the hollow interior space 38 towards the ridge 32 of the front surface 19 of the drive element 11, where the light passes through the drive element 11. The ridge 32 serves as a zone illumination 32 of the actuating element 11.

The drive element 11 can comprise a light-permeable base body 33. In contrast to the representation in the figures, the basic body 33 can be provided with an opening. A light-permeable, in particular translucent, insert (not shown) can be arranged in the opening. The insert can be fixed in the opening, in particular snapped on. In this way, the drive element 11 can be manufactured in a particularly simple manner.

The front surface 19 is made partially conical. The illumination zone 32 constitutes the tip of the truncated cone. The lighting zone 32 protrudes against the direction of actuation 700 of the cover 14 of the emergency button 10. In this way, the light coming out of the lighting zone 32 laterally to the emergency button 10 can be clearly seen.

The return means 12 has a cavity 37. The actuating means 36 of the actuating element 11 and the switch 36 with the first and second switching elements 74, 75 enter into the cavity 37. This results in an arrangement compact.

The bluetooth module 64 is arranged between the first and second boards 60, 61. The bluetooth module 64 is used for parameterization. Alternatively, although not shown, and in a compact manner, the bluetooth module 64 is fixed on a side of the second plate 61 facing away from the actuating element 11. In this way, the distance of the first and second plate 61 can be further reduced. the second plate 60, 61.

An anti-tamper switch 66 is arranged on the first plate 60. Due to the low overall height, an actuation extension 67 of the anti-tamper switch 66 is guided through the mounting plate 62. The actuation extension 67 rests directly on the cover 14 of the emergency button 10.

If the control device 100 is integrated in the emergency button 10, despite the low overall height AH, the emergency button 10 can comprise the functions described above and thus be intelligently designed. The functions described above are carried out with the help of a program code that is stored in at least one of the processing units 103, 104, 105.

The emergency button 10 has a cover element 13. The cover element 13 is transparent and covers the front surface 19 of the actuating element 11. In this way, the covering element 13 prevents direct contact with the actuating element 11. with the user. The cover means 13 serves as a mental barrier for the user.

The cover means 13 is not destroyed by an actuation of the emergency button 10. The cover means 13 is moved by an actuation of the emergency button 10 from a starting position 13.I to an actuation position 13.11. Via the cover means 13, the user actuates the drive element 11 only indirectly via the cover means 13.

The cover means 13 is disposed in a non-removable manner on the emergency button 10. In this way, it is achieved that a user cannot remove the cover means 13 by misuse.

The cover means 13 is firmly connected to the drive element 11. For this purpose, the cover means 13 has extensions 27, which are shown in FIG. 13. As shown in FIGS. 13, 14 and 15, the drive element 11 has holes 28 through which the extensions 27 are guided and are bonded with the actuating element 11.

The actuating element 11 has a rim-like section 31 to which the cover means 13 is fixed. The rim-like section 31 has the holes 28.

The flanged section 31 serves as a stop for the actuating element 11 in drive direction 700. The actuating element 11 reaches the actuating position 11.11 when the flanged section 31 rests on the mounting plate 62 or on the guide bushes 65. .

The flange-like section 31 serves as a stop for the actuating element 11 against the actuating direction 700. The actuating element 11 reaches the starting position 11.I when the flange-like section 31 rests on a light guide 40. The light guide 40 holds the drive element 11 against the force of the return means 12. For this, the light guide 40 has a support surface 51.

The light guide 40 is fixed to the mounting plate 62. In this way, the actuating element 11 also remains held against the force of the recovery means 12 when the cover 14 is removed. The light guide 40 has a flange 52 with which the light conductor 40 is fixed to the mounting plate 62 (see figure 17). The light conductor 40 is fixed by means of the same screws 72 to the mounting plate 62 by means of which the mounting plate 62 is fixed to the first plate 60.

Alternatively, and although not shown, the cover means 13 can be configured as an elastic sheet that encompasses the drive element 11.

Due to the firm connection, the drive position 11.II and the starting position 11.I and the distance between the driving position 13.11 and the starting position 13.I coincide with each other. Directly after the completion of the drive and without manual action, the cover means 13 returns to the starting position 13.I. The return means 12 serves for this. The return means 12 transfers the cover means 13 indirectly via the drive element 11 into the starting position 13.I.

The cover means 13 and the drive element 11 each have a circular cross-section. The cover 14 has a circular cutout 15. The cover means 13 protrudes against the drive direction 700 through the cutout 15. Likewise, the drive element 11 protrudes through the cutout 15.

The recess 15, the drive element 11 and the cover means 13 have an imaginary common axis 701. The recess 15, the drive element 11 and the cover means 13 are arranged concentrically.

The cover means 13 has an actuating surface 17 which is spaced from the front surface 19 of the actuating element 11. Likewise, the cover means 13 has a lateral surface 16 which is configured at a distance from the lateral surface 18 of the actuating element. drive 11.

By distancing the front surface 19 and the drive surface 17, the transparent cover element 13 can protrude largely from the lid 14, while the partially light-impermeable drive element 11 only protrudes slightly from the lid. 14. In this way, the light guide 40, which closes essentially flat with the cover 14, can also be conveniently seen by a user positioned obliquely to the emergency button 10. The light guide deviates max. ±3 mm, preferably max. ±2 mm, particularly preferably ±1 mm from a flat closure with cover 14.

As the cover means 13 protrudes widely from the cover 14, the user can manipulate the emergency button 10 with a flat hand. For this, the cover means 13 is placed in the drive position 13.II flat with the cover 14 or the cover means 13 protrudes from the cover 14 in the drive position 13.II against the drive direction 700. Expressed otherwise, the ABS distance of the starting position 13.I and of the driving position 13.II corresponds at most to the distance DF of an elevation 30 of the driving surface 17 with respect to the cover 14. Likewise , the measurement of the distance AB between the actuation position 11.II and the starting position 11.I corresponds at most to the distance DF. In figure 11 the distance ABS and the measure of the distance AB correspond to the distance DF.

The emergency button 10 comprises lighting means 41. The lighting means 41 serve to show the unlocked and locked status of the door lock 200. In case there are several emergency buttons 10, 1010, 2010, 3010, the lighting means 41 show the unlocked and locked state of the associated door lock(s) 200, 1200, 2200, 3200. The lighting means 41 are arranged concentrically around the actuating element 11. For example, the unlocked state is shown by light green and the locked state by red light. In particular, all lighting means 41 emit the same light to show the locked and unlocked state, at least if there is no danger situation.

The lighting means 41 can be controlled in at least two groups. By means of the different control, patterns are possible, for example, by means of which other states of the safety system 1 can be displayed to the user. By means of the additional display possibilities, they can be displayed to the user and/or the operator in a compact way and simple and without additional display means a plurality of states. In this way, the security of the security system 1 is increased.

In Fig. 13 illuminating means of the eight illuminating means 41 present by way of example are shown, of which three illuminating means are provided with the references 41a, 41b, 41c. The individual lighting means are hereinafter designated as 41a, 41b, 41c, etc.

Each of the individually controllable groups of lighting means 41 may comprise only one individual lighting means 41a, 41b, 41c, etc. In the exemplary embodiment of figures 11 to 17, each lighting means 41a, 41b, 41c, etc. can be controlled individually. Each lighting means 41a, 41b, 41c, etc. is configured in each case as RGB led. The lighting means 41a, 41b, 41c, etc. can be controlled in such a way that each lighting means 41a, 41b, 41c, etc. it can emit light in at least four different colors, preferably at least five. In this sense it can be red, blue, yellow, green and pink light.

The lighting means 41 is controlled by the third emergency button processing unit 22. For this, the emergency button processing unit 22 and the lighting means 41 are connected to a ring bus (not shown).

The lighting means 41 is arranged on the first board 60. Also, the audible alarm 23 is arranged on the first board 60. The audible alarm 23 is controlled by the third emergency button processing unit 22.

If several door locks 200, 1200 are associated with the emergency button 10 as shown, for example, in FIG. 4, at least two options are conceivable. On the one hand, the emergency button 10 can show the unlocked state only when all door locks 200, 1200 associated with the emergency button 10 are in the unlocked state. In this sense, the unlocked state is only displayed when the full width of the escape door of the two door leaves 3, 4 is available for evacuation. Alternatively, the emergency button 10 already shows the unlocked state when one of the door locks 200, 1200 or all the door locks of a door leaf 3, 4 are in the unlocked state. In this way, the possibility of escape is shown as soon as possible when one of the door leaves 3, 4 is already open. The options can be selected by the operator. For this, a switch (not shown) can be provided in the security system 1, for example.

Another state of the security system 1 that is displayed by the illumination means 41 that can be controlled in a group is the case of danger. In this sense, the lighting means 41 can show whether there is a fire alarm signal or whether a drive signal has been generated.

The lighting means 41 can be controlled in such a way that the progress of the unlocking delay is displayed after generation of the actuation signal by means of the lighting means 41. In this sense, for example, less and less lighting means 41 emit light of one color, particularly red light.

Another state of the security system 1 that can be represented by the lighting means 41 is a fault that display means 41. The fault displayed in this way may be a fault of the security system 1. For example, it may be shown that the control device 100, the door lock control 200 or the first or second unit emergency button processing module 20, 21 of the security system 1 is inoperative, defective, has a fault, has been intentionally disconnected or removed. The failure may be a failure of the alarm system connected with the security system 1, being inoperative, defective, malfunctioning, being disconnected or removed intentionally.

The light guide 40 comprises several light guide areas 44 (see FIGS. 16 and 17). Each of the lighting means 41a, 41b, 41c is associated with a light-guiding area 44 in each case. The light-guiding area 40 can be divided in an imaginary way into the light-guiding areas 44. Between the light-guiding areas 44 cut-outs 46 are provided. Through the cut-outs 46 the light essentially remains in the light-guiding areas 44.

Each light-guiding region 44 has a bypass section 48. The bypass section 48 is arranged on the lighting means 41 in the direction of transmission 702. The direction of transmission 702 is opposite to the direction of actuation 700. The section By-pass section 48 serves to guide light to an opening section 45 of the light-guiding area 44. The opening section 45 is in the direction of transmission 702.

The opening section 45 is contiguous with the bypass section 48 in the transmission direction 702. The opening section 45 serves to broaden the light beam of the emitted light. The bypass section 48 expands less than the section 45 which opens.

The light guide 40 is made in one piece. The light guide 40 is made of a single material, in particular monolithically. Light conductor 40 is made of a translucent material.

The light-guiding areas 44 have a connecting section 49. The connecting section 49 adjoins in the transmission direction 702 the opening section 45 . The connection sections 49 of the light guide region 44 are connected to one another in one piece in such a way that the light guide 40 is one piece and a uniform material.

The connection sections can have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. Therefore the light from one of the lighting means 41a, 41b, 41c etc. it is almost limited to an illumination zone 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h on the surface 47 of the light guide 40 pointing towards the user. In this sense, each light-guiding zone 44 comprises an illumination zone 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h.

The surface 47 of the light guide 40 corresponds to a circular ring. The illumination zones 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are designed as sectors of the circular ring. By emitting light from an illumination means 41a, 41b, 41c, etc. the corresponding lighting zone 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h lights up. The circular ring surrounds the drive element 11.

The lighting means 41 can be controlled such that at least one lighting means 41a, 41b, 41c, etc. emits light of one color and at least one additional lighting means 41a, 41b, 41c, etc. simultaneously emits light of another color. For example, in this way the illumination zones 50a, 50b, 50e, 50f can show light of one color and the illumination zones 50c, 50d, 50g and 50h, light of another color. While the lighting zones 50a, 50b, 50e, 50f, for example, are illuminated continuously, the lighting zones 50c, 50d, 50g and 50h may be illuminated by means of lighting means 41, which emit intermittent light.

If, for example, initially the illumination zones 50a, 50b, 50e, 50f are illuminated with light of a first color and the illumination zones 50c, 50d, 50g and 50h with light of another color; then the illumination zones 50a, 50h, 50d, 50e are illuminated with light of the first color and the illumination zones 50b, 50c, 50f and 50g with light of the other color; then the illumination zones 50h, 50g, 50d, 50c are illuminated with light of the first color and the illumination zones 50a, 50b, 50e and 50f with light of the other color, thus creating the impression of a circulating color window .

The oppositely located lighting zones 50, that is, the lighting zones 50 that are located on a straight line extending along an imaginary axis 701, in FIG. 14 specifically 50a and 50e or 50b and 50f or 50c and 50g or 50d and 50h, they preferably light up in the same way, that is, with the same color and the same flashing frequency. Thus, the user located obliquely before the emergency button 10 can detect the pattern even if the actuation element 11 covers at least one of the lighting zones 50 located opposite.

In order that the light guide 40 is obscured as little as possible, the illumination area 32 protrudes by a maximum of 10 mm, preferably by a maximum of 7 mm, particularly preferably by a maximum of 5 mm, above the light guide 40.

The emergency button 10 may include a light sensor (not shown). The light sensor measures the brightness of the environment of the emergency button 10. If the brightness of the environment decreases, the light power of the light emitted by the lighting means 41 is reduced.

By means of the bluetooth module 64, parameters can be set via a mobile communication device, for example, how the lighting means should be controlled in which state of the security system 1. Enter the parameters for the flashing frequencies of the lighting means illumination 41, it is found whether a continuous or flashing light should be emitted, which state should be shown by which color. The settings are saved after parameterization in an electronic memory of the security system 1, in particular of the control device 100. Likewise, the display of different states may not be selectable by the operator for security reasons and always be stored in the memory electronics. The operator can himself select states of the security system 1 that the operator wants to display by means of the lighting means 41. For this, colors and/or patterns can be emitted by means of the lighting means 41 that are not associated by default to a state. For example, the operator can select which state the operator wants to display in blue light. In addition to parameterization via bluetooth module 64, parameterization via monitoring device 301 is possible.

The change of state of the door lock 200 is displayed after the door lock control 201 has communicated the change of state to the control device 100. The control device 100 then controls the lighting means 41 or causes a control of lighting means 41.

During the start-up of the security system 1, several initialization views are generated consecutively at fixed time intervals by means of the lighting means 41. In one of the initialization views, the possible enabled functions of the control device 100 are displayed. In a second initialization view, emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 that can be connected to security system 1 are shown, showing the status without fault/faulty/ not present. In a third initialization view, the status of the inputs and outputs is displayed.

The central emergency button 302 is structured practically like the emergency button 10. In particular, the actuating element 11 corresponds in function and structure to the emergency button actuating element 306. The switch 63 corresponds to the emergency button switch 307. Likewise, the central emergency button 302 comprises a recovery means corresponding to the recovery means 12. The central emergency button 302 comprises a first and a second plate and/or a mounting plate that are structured and attached to each other correspondingly to the first plate 60, the second plate 61 or the mounting plate 62. On the first plate of the central emergency button 302, the alarm 309 and the lighting means 313 corresponding to the alarm 23 and the lighting means 41. On the second plate of the central emergency button 302, are arranged from the second to the third pro emergency stop switch 303, 304, 305. The emergency button switch 307 terminates in the first central emergency button plate 302. On actuation of the emergency button switch 307, a first and second electrical circuit is opened in the first board, which can be wirelessly detected by the first and second emergency processing units 303, 304. For this, the first and second boards are connected by means of pins. The light guide of the central emergency button 302 corresponds in structure and function to the light guide 40. The lighting means 313 can be controlled correspondingly to the lighting means 41.

It is conceivable that in the central emergency button 302 a cover means 13 corresponding to the cover means 13 is designed differently or is missing. The lighting means 313 are not used in particular for displaying a locked state of an emergency button 10. The lighting means 313 are used for displaying the first and second duration of the delay and/or for displaying visual that a cancellation action is possible.

The security system 1 according to the invention does not necessarily have to be able to perform all the functions that are mentioned in the description relating to at least one of Figures 1 to 10. On the contrary, they are stored in the security system 1 the functions that are mentioned in the description relating to at least one of figures 1 to 10. However, in order to perform the functions, the functions must be released. This is done by the control device 100 communicating with a communication module 801. The communication module 801 is embodied as a smart card. The communication module 801 comprises a memory in which at least one code for releasing at least one function is stored. The communication module 801 comprises a microprocessor that serves only to encrypt the code. The communication module 801 is inserted into a housing 77 of the control device 100 (see figure 18a). Through the arrangement in the housing 77, the communication module 801 is retained in the housing 77 by form and/or force. Simultaneously, the communication module 801 has electrical contact thanks to the arrangement in the housing 77, in such a way that the control device 100 can read the at least one code of the communication module 801. The control device 100 and the communication module communication 801 are in this sense connected by cable (not shown).

In order to read the code, the control device 100 must first obtain access with the aid of a password to the communication module 801. The control device 100 must decipher the at least one code before that the function can be released. By releasing the function, the program code with the help of which the function can be executed is released.

For the release of the function, the program code with the help of which the function can be executed is released. If the program code has been saved in the emergency button 10 and the control device 100 and the emergency button 10 are connected to each other via the first bus system 400, the control device 100, after reading the code of the communication module 801, causes a release on the emergency button 10 via the first bus system 400. If the program code is stored in the door lock control 201, the control device 100, after reading the code from the communication module 801, causes a release in the door lock control 201 via the first bus system 801.

A code can release one or more functions, in particular function blocks.

In the parameterization program, only parameters relating to functions that have previously been enabled can be set. Only these parameters are displayed on the screen.

The function remains released if the code is read again repeatedly, in particular at regular time intervals, from the communication module 801.

For this, non-adjustable time intervals can be stored in the control device 100. After the predetermined time interval has elapsed, the control device 100 blocks the function if the corresponding code could not be read from the communication module 801. If the function is carried out via the emergency button 10, which is connected to the control device 100 via the first bus system 400, the control device 100 triggers a blocking of the function via the first bus system 400 . If the function is carried out by means of the door closing control 201 which is connected to the control device 100 via the first bus system 400, the control device 100 causes via the first bus system 400 a blocking of the door. function.

Various codes code1, code2 for different functions can be stored in the communication module 801 (see FIG. 18a).

If an additional function is to be released, it is conceivable to remove communication module 801 from receptacle 77 and slide another communication module 802 into receptacle 77 (see FIG. 18b). The communication module 801 is hereinafter referred to as the parent module 801. The additional communication module 802 is hereinafter referred to as the auxiliary module. Auxiliary module 802 is designed as a smart card. The auxiliary module 802 comprises a memory in which at least one code for releasing the additional function is stored. Auxiliary module 802 comprises a microprocessor that serves only to encrypt the code. The code code3 that is stored in the auxiliary module 802 is read by the control device 100 (see figure 18b). In order to read the code code3, the control device 100 must first obtain access with the aid of a password to the auxiliary module 802. The control device 100 must decipher the at least one code before the function can be released. The code code3 of the auxiliary module 802 is stored in a memory 107 of the control device 100 (see Fig. 18c). Then, the code from auxiliary module 802 is removed in auxiliary module 802 (see Fig. 18c). Auxiliary module 802 is removed from housing 77. Matrix module 801 then slides into housing 77 (see Figure 18d). The code of the auxiliary module 802 is stored in the matrix module 801 (see figure 18d). The code is deleted from the memory of the control device 100 (see figure 18d). The additional function is released.

In a matrix module 801, the code is saved, on the contrary, not in the control device 100 (see FIG. 18a, d). In an 801 matrix module the code is not erased. On the contrary, the matrix module 801 serves for a durable arrangement in the housing 77. The codes stored in the matrix module 801 codes code1, code2, code3 are repeatedly read. On the basis of a key K801, K802 of the communication module 801, 802, the control device 100 decides whether it is a matrix module 801 or an auxiliary module 802. The key K801, K802 is stored electronically in particular in the matrix module 801 and the auxiliary module 802. The key K801 of the matrix module 801 differs from the key K802 of the auxiliary module 802.

The insertion and removal of the housing 77 is carried out manually in each case. The remaining operations are carried out automatically.

Insertion and removal of housing 77 may be reserved for an operator. To do this, the housing 77 is arranged in a way that is not accessible to an unauthorized user. In particular, the anti-tamper switch 66 is actuated in the event of an unauthorized attempt to access the housing. The housing may be arranged between the first plate 60 and the second plate 61, for example on the underside of the first plate 60.

In order for security system 1 to be functional, a matrix module 801 must be disposed in a housing 77 of security system 1. In order for security system 1 to be functional for longer than the predefined interval, matrix module 801 must remain in accommodation 77.

Each emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 comprises a housing 77. Exactly one matrix module 801 is required and is provided for each first bus system 400, 400' of the security system 1 Only when the matrix module 801 is inserted in the housing of an emergency button 10, 10', 1010, 1010', 2010, 2010', 3010, then the emergency button 10, 10', 1010, 1010', 2010 , 2010', 3010 simultaneously serves as control device 100 for the corresponding first bus system 400, 400'. In the rest of the emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 of the security system 1, in whose housing there is no matrix module 801, the same program codes are stored as in the control device 100. Without matrix module 801, however, the program codes are not released, so the rest of the emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 cannot serve as a control device 100. As the matrix module 801 is located in the housing 77, the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 serves as a control device 100.

If the control device 100 is configured independently of the emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 and the door locks 200, 200', 1200, 1200', 2200, 2200', 3200, a matrix module 801 is inserted into a housing 77 of the processing electronics 101. Since the matrix module 801 is located in the housing 77, the processing electronics 101 is capable of performing the functions of the control device 100.

If security system 1 comprises several subsystems 5,6 and thus several first bus systems 400, 400', security system 1 comprises exactly the same number of matrix modules 801, 801' as subsystems 5, 6 ( see figure 10). The emergency button 10', which communicates with the matrix module 801', and the electronic processing system 101 of the control device 100 of figure 10, which communicates with the matrix module 801, are simultaneously provided to connect with the second bus system 401.

The matrix module 801, 801' can contain 5,6 different codes for each subsystem and thus release different functions. Thus, for example, the matrix module 801' of the second subsystem 6 may comprise a code for the selective association of the door locks 200', 1200', 2200' to the emergency buttons 10', 1010', 2010'. On the contrary, the code for a selective association of door locks with emergency buttons in the matrix module 801 is not necessary for subsystem 5.

The communication module 801, 801', 802 can have a space 803, through which a self-adhesive tape, in particular, is guided. The self-adhesive tape serves for the manual removal of the communication module 801, 801', 802 from the housing 77. The self-adhesive tape contains information about the functions that can be released by means of the codes stored in the respective communication module 801, 801', 802 . The information can be a color code, a QR code and/or a barcode.

Alternatively, the communication module 801, 801', 802 can be configured as a chip card with a flexible section. A part of the smart card protruding from the housing 77 may be provided with the information, ie the color code, the QR code and/or the bar code.

A matrix module 801 inserted once in a security system 1 can be inserted again with full functionality in a housing 77 of another security system 1 according to the invention.

Figures 19 and 20 show another embodiment of an emergency button 10 according to the invention. Elements with the same functions are provided with the same reference numbers. In particular, the structure and functions below the mounting plate 62 correspond to the first embodiment of the emergency button 10, as shown in figures 11 to 13. Thus, in the embodiment of figures 19 and 20 lighting means 41 can be individually controlled. The differences with the first embodiment of the emergency button 10 will be mainly discussed below.

The emergency button 10 of FIGS. 19 and 20 is intended in particular for fastening to a superimposed housing, not shown. For this, the mounting plate 62 is fastened to a cover element of the mounting housing, not shown, in particular screwed.

The emergency button 10 ends flush with the cover element. In this case the cover means 13 is inserted into a corresponding opening of the cover element. The opening is adapted to the shape of the cover means 13.

A seal 81 protects against penetration of moisture.

The cover means 13 and the drive element 11 are firmly connected, in particular by material bonding, to each other. For this purpose, the flange-like section 31 of the actuating element 11 is designed concave, in order to be connected to the cover means 13 of flat design.

The transparent cover medium 13 can be made of glass or plastic.

The drive element 11 surrounds the light guide 40 partially. The drive element 11 covers the light guide 40 with the front side 19. The breeze-like section 31 serves to cover the light guide.

In order that the user can perceive the light emitted by the lighting means 41, the flange-like section 31 is made transparent or translucent.

A conical region 82 of the actuating element 11 is surrounded by the flange-like section 31. The conical region 82 is opaque except for the illumination region 32. For this, the conical region 82 can be provided with a layer of lacquer or of an opaque material.

The guide sleeves 65 for guiding the drive element 11 are arranged outside the light guide. The drive element 11 has corresponding guide means 35 for this.

The light guide 40 holds the drive element 11 not against the drive direction. Rather the actuating element 11 is forcefully pressed by the recovery means 12 against the cover element. In actuation position 11.II the actuation element bears against mounting plate 62.

The light conductor 40 opens at the opening section 45 not only in the circumferential direction but also radially.

The fixing lugs 83 serve to fix the light guide 40 to the mounting plate 62.

In the exemplary embodiment of FIGS. 11 to 13, the retaining means 12 is guided between the drive means 36 and the lateral surface 18. In the exemplary embodiment, the drive element 11 comprises an additional guide element 39. In this sense, the retaining means 12 is guided in the space between the drive means 36 and the guide element 39.

Claims (14)

1. Emergency button (10) for unlocking at least one door lock (200) for securing emergency exits, wherein the emergency button comprises lighting means (41) for displaying a locked and/or unlocked state of a door lock (200), where the lighting means (41) can be controlled in at least two groups each one of them, where in particular at least one of the lighting means (41) can be controlled individually, characterized in that the emergency button comprises a light conductor (40), wherein the light conductor (40) has light-conducting zones (44), which are each associated with the controllable groups of lighting means ( 41) or to the individual lighting means (41), with cutouts being provided between the light-guiding areas (44), where the cutouts are located between the groups of lighting means, in particular the individual lighting means, where the lighting means (41) are designed as multicolor lighting means that can be controlled in such a way that light can be emitted in at least two, preferably at least three, particularly preferably in at least four different colors of the lighting means ( 41), where the light-conducting zones each comprise a section (45) that opens, the section that opens serving to widen the light emitted by the illuminating means corresponding tion. Emergency button (10) according to claim 1, characterized in that the lighting means (41) can be controlled in such a way that simultaneously at least one (41a) of the lighting means (41) emits light of one color and another (41b) of the lighting means (41) emits light of another color and/or at least one of the lighting means (41) periodically alternately emits light of different colors. 3. Emergency button (10) according to claims 1 or 2, characterized in that the emergency button comprises at least one activator element processing unit (20, 21) and the lighting means (41) can be controlled by the unit trigger element processing unit (20, 21), wherein in particular the lighting means (41) are connected to a ring bus (403), by means of which the trigger element processing unit (20, 21) controls the lighting means (41). Emergency button (10) according to one of the preceding claims, characterized in that the lighting means (41) are controlled to display a fault, wherein in particular different types of lighting means control are provided for different faults . Emergency button (10) according to one of the preceding claims, characterized in that by means of the lighting means (41) the presence of a fire alarm signal and the presence of an actuation carried out by an actuation element (11) of the emergency button (10) can be displayed visually, where the presence of a fire alarm signal and the presence of an actuation made of the actuation element (11) can be displayed differently by the lighting means (41), where, in particular, in a different way by means of the lighting means (41) it can be seen that a central emergency button (302) of the security system (1) has been activated to unlock the door lock (200) . Emergency button (10) according to one of the preceding claims, characterized in that the light-guiding area (44) has a bypass section (48) towards the light guide, where the light from the lighting means ( 41) can be led through the bypass section (48) to the opening section (45). 7. Emergency button (10) according to one of the preceding claims, characterized by that the emergency button (10) comprises an actuation element (11), provided that this claim does not refer to claim 5 or to a combination of claims 6 and 5, wherein the light conductor (40) has a support surface (51) for the actuation element (11) to actuate the emergency button, where a recovery means (12) pushes the actuation element (11) against the support surface (51), where in In particular, the light guide (40) has a flange (52), with which the light guide (40) in particular is fixed to a mounting plate (62). Emergency button (10) according to one of the preceding claims, characterized in that the lighting means (41) serve to display a progress duration over time, the duration of progress over time being adjustable by an operator and the control of the lighting means (41) is adapted to the adjusted time progress duration. Emergency button (10) according to one of the preceding claims, characterized in that the emergency button (10) comprises an actuation element (11), provided that this claim does not refer to claims 5 or 7 or to a combination of claims containing claims 5 or 7, wherein the emergency button has a cover means (13) configured at least partially transparent, wherein in particular the actuation of the actuating element (11) can be carried out in such a way so that the element drive (11) in one drive moves from a starting position (11.1) to an actuating position (11.11), where an actuating surface (17) of the cover means (13) protrudes through the cover (14) of the emergency button (10), so that the distance AB of the starting position (11.I) and of the actuation position (11.II) in the actuation direction (700) with respect to each other is corresponds at most to the distance FD of the actuating surface (17), in particular of an elevation (30) of the actuating surface (17), towards the cover (14). Security system (1) with an emergency button (10) according to one of the preceding claims. Security system (1) according to claim 10, characterized in that the security system (1) is designed in such a way that in addition to the unlocked and/or locked state of the door lock (200), if a state occurs In addition to the security system (1), the lighting means (41) for displaying the additional state can be controlled, where the additional state can be selected by an operator. Security system (1) according to one of claims 10 or 11, characterized in that the security system (1) comprises a door lock control (201) and a control device (100), where the control The door lock (201) and the control device (100) are connected to each other via a bus system (400), whereby the change of the status of the door lock (200) is only then displayed by means (41), after the door lock control (201) has sent a corresponding signal to the control device (100) via the bus system (400). Security system (1) according to one of claims 10 to 12, characterized in that the security system (1) prevents a check of a further door lock mechanism (205) after the check of a first mechanism has been carried out door lock mechanism (205) until a condition is present such that a lock is formed, wherein until the condition is presented by illumination means (41) it can be shown that control of the door lock mechanism is prevented. additional door (205), is prevented due to the lock function. Security system (1) according to one of Claims 10 to 13, characterized in that the lighting means (41) can be controlled in such a way that the lighting means (41) are controlled in particular when the security system (1) is switched on. that the lighting means (41) show the execution capacity of at least one function of the security system (100) and/or the status of a component, in particular of the door lock control (201) or of the controls of door lock (201, 1201, 2201, 3201) and/or the emergency button (10) or the emergency buttons (10, 1010, 2010, 3010), where in particular the lighting means (41) are fixedly associated with a door lock control (201, 1201, 2201, 3201) and/or an emergency button (10, 1010, 2010, 3010).