ES2932879T3 - System to block the fixing of a door or window leaf - Google Patents

Abstract

A device for locking the lock of a door leaf, a window or the like that can be locked by means of a locking device comprises a lock that can be actuated, in particular, by an electric and/or electromagnetic motor and can be controlled by a control device. In this case, the control device is designed with one or more redundancies and the lock can be controlled via a corresponding number of redundancy branches, the operability of the different redundancy branches being controllable via the control device in each case. case. A restraint system with such a locking device is also specified. (Automatic translation with Google Translate, without legal value)

Description

DESCRIPTION

System to block the fixing of a door or window leaf

The invention relates to a system for fixing a door leaf, a window or the like with a locking device for locking, that is to say, preventing the fixing of a door leaf, a window or the like that can be fixed by means of a fixing device, with a locking element that can be actuated, in particular electromotively and/or electromagnetically, that can be controlled by a control device.

A locking system is a device for holding open fire doors, in particular fire doors, smoke doors and/or the like. Ensures that fire protection closures or smoke closures remain open, but close securely in the event of a fire or smoke generation.

Among other things, clamping systems are known which constantly hold an open fire door against the spring force of a mechanical accumulator of a drive. In the event of a fire, the locking system is activated and the door closes thanks to the spring force of the mechanical accumulator. The fixing system generally comprises an electrical power supply, a fixing device, an activation device, and a fire detection system.

Drives such as, in particular, movable door closers or door leaves with a mechanical energy store are also known in general. When the door leaf is opened manually, the mechanical energy store is charged with potential energy, which closes the released leaf again. The mechanical energy store can comprise, for example, a spring unit that is tensioned when the door leaf is manually opened and released again when the door leaf is closed.

A quiescent current fixing device based on an assembly comprising a permanent magnet and one or more coils for fixing a door leaf, a window or the like has already been proposed. In this case, the sheet can be fixed by the permanent magnet when the coil is not energized, while the fixing can be activated with a coil energization performed to compensate the magnetic field of the permanent magnet. For example, a wall-mounted or door-mounted door-holding magnet with integrated coils can interact with a door-mounted armature plate. It is also conceivable, for example, an electromechanical clamping device integrated in a slide rail, in which a slide block guided in the slide rail can be fixed directly or by means of a mechanical transmission by means of a permanent magnet. The assembly in question does not have to be firmly connected to the door leaf (free movement).

If the door leaf is opened with an associated drive or door closer, potential energy is charged to the spring unit of the drive or door closer. If, for example, in the case of a mounting device with an armature plate, the armature plate reaches the permanent magnet, this holds the armature plate against the closing force of the drive or door closer. To activate this clamp, one or more coils can be energized to compensate for the magnetic field of the permanent magnet. Due to the potential energy stored in the door closer, the armature plate moves away from the permanent magnet with the door leaf, whereby the door closer closes the door leaf. As soon as the armature plate is far enough away from the permanent magnet, the current through at least one coil is turned off again.

A quiescent current clamp of this type has the significant advantage over conventional clamp devices operating on the energizing principle that electrical power is only required during the relatively short activation time of the clamp device.

In order for a clamping device operating according to the quiescent current principle to be activated safely, it has already been proposed to design such clamping devices with single or multiple redundancies with regard to the power supply, the electrical control of the coils and the own coils.

With such a redundantly designed fixing device, the redundancy can be monitored. In the event of a failure of a redundancy string, the locking device can be activated via another redundancy string, so that the door leaf can be closed.

Compared to conventional clamping devices based on the energizing current principle and clamping devices based on a bistable principle, a quiescent current clamping device has the particular disadvantage that it can no longer be activated in the event of an alarm if the door leaf opens after a failure of the last redundancy string and the armature plate reaches the permanent magnet. There is then no longer any possibility of activating the fixing via a redundancy string.

Mechanical locking elements are also already known, by means of which it is possible to prevent the approximation of the armature plate to the permanent magnet in order to prevent a clamping of the sheet. Such locking elements can normally be actuated electromotively or electromagnetically. In order to save energy, it is also possible to control such a locking element according to the quiescent current principle or according to a bistable principle.

However, if an error occurs in the control of said blocking element, the blocking element can no longer be activated. If the door leaf is now opened after a failure of the last redundancy leg of the activation device, the armature plate will move closer to the permanent magnet, as a result of which the door leaf will remain open. Thus, the door remains open in case of fire. Document EP3064692A1 discloses an example of a system for fixing a door leaf.

The invention is based on the object of specifying a fixing system of the type mentioned at the beginning, in which the problems mentioned above are eliminated. In particular, it must be ensured that the locking element can be safely activated even in the event of failures in its control and, in particular, in the case of a quiescent current clamping device with single or multiple redundancies, even before a fault occurs on the last redundancy leg of the fixing device

According to the invention, this object is achieved by a fixing system with the features of claim 1. Preferred embodiments of the fixing system according to the invention result from the dependent claims, the present description and the drawing.

The system according to the invention with a device for locking the fixing of a door leaf, a window or the like that can be fixed by means of a fixing device comprises a locking element that can be actuated, in particular electromotive and/or electromagnetic, which can be controlled by a control device. In this case, the control device is designed with one or more redundancies, the control element being able to be controlled via a corresponding number of redundancy branches and the functionality of the individual redundancy branches being able to be monitored via the control device in each case.

In this way, even in the event of a complete failure or failure of the last redundancy branch of the fixing device control, it is impossible for the leaf to remain open in the event of a fire, since the locking element can continue to be activated safely before of the failure of the last redundancy branch of the fixing device.

Preferably, the functionality of a respective redundancy branch can be monitored by the control device continuously or at definable time intervals.

According to a suitable practical embodiment of the system according to the invention, the control device of the locking device comprises at least two redundantly realized control channels, each assigned to a redundancy branch.

In this case, via the different control channels of the control device, it is advantageous to control an own drive device, in particular electromotive and/or electromagnetic, assigned to the corresponding redundancy branch, in order to drive the locking element. Since not only redundant control channels are provided, but also redundant drive devices for actuating the locking element, a correspondingly higher security is achieved when the locking element is actuated.

In order to further increase the control security of the locking element, it is also particularly advantageous if the individual redundancy strings are each assigned their own power source to supply them, in particular with electrical power, whereby preferably power can also be supplied to at least one other redundancy leg via the power source assigned to a respective redundancy leg.

Preferably, the energy source assigned to the respective redundancy branch as well as the energy source assigned to another respective redundancy branch can be monitored via the control channel of a respective redundancy branch.

If, for example, a power source assigned to a redundancy leg fails, then this redundancy leg can also be supplied with power via the power supply of at least one other redundancy leg.

Advantageously, the various power sources can be monitored continuously or at predetermined time intervals via the control channel of a respective redundancy branch.

According to another preferred practical embodiment of the system according to the invention, in particular, when the leaf lock is activated, in order to monitor the functionality of a respective redundancy branch, the drive unit associated with it can be controlled by the control channel associated to the redundancy branch of the control device of the blocking device, and it can be set by this control channel on the basis of a feedback whether the blocking has been activated or not.

When a clamp is activated, a respective control channel can test whether it can activate the locking element via the associated drive unit. Through the feedback, you can monitor the activability of the blocking element.

It is also particularly advantageous if, in particular when sash clamping is activated, the drive unit assigned to it can be controlled to monitor the functionality of a respective redundancy string. via the control channel of the interlock control device assigned to the redundancy string and the current flowing through the drive device can be monitored via this control channel.

When clamping is activated, for example in which an armature plate is in contact with a permanent magnet, an incomplete test of a respective redundancy string is possible, for example by supplying the assigned drive unit only with sufficient energy so that the locking element does not move or rotate any further or is pressed against a stop. The current flowing through the drive device is then monitored.

Advantageously, the control device of the interlock device is designed in such a way that the individual redundancy branches monitor each other via their control channels.

Advantageously, the control device of the locking device can also be designed in such a way that when a fault is detected in a respective redundancy branch, the locking can be activated via at least one other redundancy branch after the leaf has been activated. released.

According to an advantageous practical embodiment of the system according to the invention, a bistable locking element that can be electromotively actuated is provided as the locking element, a drive unit preferably comprising an electric motor for driving the locking element.

According to an advantageous alternative embodiment of the system according to the invention, an electromagnetically actuatable locking element can also be provided as a locking element.

In this case, the blocking element advantageously comprises an electromagnetically actuatable bistable blocking element. In this case, a drive unit for driving the locking element preferably comprises two bistable electromagnets or one bistable electromagnet with two coil units.

In order to actuate the blocking element, the armature of a respective bistable electromagnet is coupleable to or coupled to the blocking element, preferably via a mechanical transmission. In this way, in particular, an erroneous readjustment of the locking element can be avoided when it hits the sash.

According to an advantageous alternative embodiment of the system according to the invention, an electromagnetically actuatable locking element according to the quiescent current principle can also be provided as the locking element.

In this case, a drive unit for actuating the locking element preferably comprises a permanent magnet and at least one electric coil assigned to it, the locking element being held in its deactivated state by the magnetic field of the permanent magnet when the electric coil is not in use. is under voltage, and when the electric coil is activated and deactivation is performed, the compensation of the magnetic field of the permanent magnet can be activated in particular by force of gravity, a spring force and/or the like. In this case, only an incomplete test of the activation of the blocking element is possible, since the activated blocking element can only be deactivated manually.

The system according to the invention for fixing a door, window or similar leaf comprises a drive with at least one mechanical energy accumulator, which is charged with an opening movement of the leaf and discharged with a lifting movement. sheet closure. The drive can in particular be a door closer. In addition, the fixing system according to the invention comprises a fixing device that works according to the quiescent current principle with a permanent magnet unit for fixing the blade and at least one electric coil that can be controlled via a control device so that the magnetic field is equalized and therefore the clamping device is activated and the sheet is released. Preferably, the fixing device is realized with one or multiple redundancies, in particular with regard to the power supply, the electrical control of the at least one coil and/or the coil itself, via a corresponding number of redundancy branches.

Since, according to the invention, the blocking element can also be controlled with one or multiple redundancies via a corresponding number of redundancy branches and the functionality of the various redundancy branches assigned to the blocking element can be monitored via through the assigned control device, it is impossible for the leaf to remain open in the event of a fire even in the event of a complete failure or even a failure of the last redundancy branch of a quiescent current fixing device, since the element The lockout can still be safely activated even before the failure of the last redundancy leg of the fixing device.

The redundancy strings for controlling the locking element and the redundancy strings for controlling the locking device are preferably at least partly separated from one another, the redundancy strings which are separated from one another being advantageously connectable or connected to one another via a communication link.

In certain cases, it is also advantageous if the redundancy strings for controlling the locking element and the redundancy strings for controlling the locking device comprise at least partly common components, such as in particular common power sources, a common control device or common microcontrollers and/or the like and/or for controlling the lock and common redundancy legs are provided for controlling the fixing device.

The blocking device and the fixing device can preferably be controlled via the redundancy branches in such a way that when the blocking device is activated and a fault is detected in a respective redundancy branch of the blocking device, the blocking device The locking element can be activated first and, after the sash has been released, the locking element can be activated via at least one other redundancy branch of the locking device.

The invention is explained in more detail below using exemplary embodiments with reference to the drawing; showing

the fig. 1 a schematic representation of an exemplary embodiment of a locking device of a fixation system according to the invention and

the fig. 2 a schematic representation of an exemplary embodiment of a fastening system according to the invention.

The fig. 1 shows a schematic representation of an exemplary embodiment of a device 10 for locking the fixing of a door leaf, a window or the like that can be fixed by means of a fixing device.

The locking device 10 comprises a locking element 14 that can be actuated, in particular electromotively and/or electromagnetically, which can be controlled via a control device 12. The control device 12 has single or multiple redundancies and The blocking element 14 can be controlled via a corresponding number of redundancy branches 16, 18, the functionality of which in each case can be monitored via the control device 12.

The functionality of a respective redundancy branch 16, 18 can be monitored by the control device 12, in particular continuously or at definable time intervals.

The control device 12 comprises at least two redundant control channels 20, 22, each assigned to a redundancy branch 16, 18, via each of which a drive device 24, 26 can be actuated. separate, in particular electromotive and/or electromagnetic, assigned to the redundancy branch 16, 18 in question, to actuate the blocking element 14.

The individual redundancy strings 16, 18 are assigned to their own power source 28, 30 for their supply, in particular with electrical power. As can be seen in fig. 1, at least one other redundancy branch 16, 18 can preferably also be supplied with power via the power source 28, 30 assigned to a respective redundancy branch.

Both the power source 28, 30 assigned to the respective redundancy line 16, 18 and the power source 28, 30 assigned to a further respective redundancy line 16, 18 can be monitored via the control channel 20, 22 of a redundancy branch 16, 18 respective. The different power sources 28, 30 can be monitored via the control channel 20, 22 of a respective redundancy branch 16, 18, in particular continuously or at predetermined time intervals.

In particular, when the sash lock is activated, the drive unit 24, 26 assigned to a respective redundancy branch 16, 18 can be controlled by the control channel 20, 22 of the control device 12 assigned to the redundancy branch. 16, 18 for the purpose of monitoring the functionality of a respective redundancy branch, it being then possible to determine via this control channel 20, 22 to set by means of a feedback 32, 34 whether the blocking element 14 has been activated or not .

In particular, when the sash lock is activated, in order to monitor the functionality of a respective redundancy branch 16, 18, the drive unit 24, 26 assigned to it can be controlled by the control channel 20, 22 of the redundancy device. control 12 assigned to the redundancy branch 16, 18 and via this control channel 20, 22 the current flowing through the drive 24, 26 can be monitored.

As indicated in fig. 1 by means of the bidirectional connection 36 between the two control channels 20, 22, the control device 12 can in particular also be designed in such a way that the mutual monitoring of the various redundancy branches 16, 18 takes place via their channels. controls 20, 22.

In addition, the control device 12 can also be designed in particular so that when a fault is detected in a respective redundancy branch 16, 18, the blocking element 14 can be activated via at least one other redundancy branch 16, 18 after the release of the sheet.

For example, as locking element 14 a bistable locking element can be provided that can be electromotively actuated. In this case, an associated drive unit 24, 26 comprises an electric motor.

In the present case, for example, two fully redundant channels or redundancy branches 16, 18 are available to control the blocking element. Each redundancy string 16, 18 is powered by two different power sources 28, 30 and can activate the blocking element 14 and its own drive unit 24, 26 or electric motor independently of the other redundancy string 16, 18 in each case. Each redundancy channel or branch 16, 18 continuously monitors or tests both power sources 28, 30 regularly or at predetermined time intervals. Each control channel 20, 22 or each resonance branch 16, 18 tests whether it can activate the blocking element 14 with its drive unit 24, 26 or the electric motor when a detection is triggered and monitors it via feedback 32 , 34 associated.

In the case of active clamping, in which, for example, an armature plate is in contact with the permanent magnet of the clamping device, an incomplete test is possible because each drive unit 24, 26 or each electric motor only receives enough energy so that it does not rotate (for example, with little energy it is pressed against a stop) and the current through the drive unit 24, 26 or the electric motor is monitored.

If an error is detected in a redundancy string 16, 18, the leaf activation is activated (if the blocking is activated, for example, by an armature plate resting against the permanent magnet), and the blocking element 14 is activated. activated via at least one other redundancy string 16, 18. An additional fixing of the door leaf is now no longer possible.

As locking element 14, it can also be provided, for example, an electromagnetically actuatable locking element. In this case, the blocking element 14 can be configured, for example, as an electromagnetically actuatable bistable blocking element or as an electromagnetically actuatable blocking element according to the quiescent current principle. In the case of an electromagnetically actuatable bistable locking element 14, an associated drive unit 24, 26 can comprise, for example, two bistable electromagnets or one bistable electromagnet with two coil units. The armature of a respective bistable electromagnet can be coupleable or coupled to the locking element 14 via a mechanical transmission to drive the locking element 14, as a result of which incorrect adjustment of the locking element 14 upon striking the sheet.

In the case of a locking element 14 that can be actuated electromagnetically according to the quiescent current principle, an associated drive unit 24, 26 can comprise a permanent magnet and at least one electrical coil assigned to it, the element being lock 14 held in its deactivated state by the magnetic field of the permanent magnet when the electric coil is not energized and being activatable, in particular by the force of gravity, a spring force and/or the like, when the electric coil is energized and the magnetic field of the permanent magnet is thus compensated.

However, in such an embodiment, the redundancy legs 16, 18 can only be incompletely tested, since the activated blocking element 14 can only be deactivated manually.

The energy sources 28, 30, intended especially as electrical energy sources, can each comprise an electrical network, at least one accumulator, at least one battery and/or the like.

The fig. 2 shows in schematic representation an exemplary embodiment of a system 38 according to the invention for fixing a door leaf, a window or the like. The system 38 comprises a drive 40 configured, for example, as a door closer with at least one mechanical energy store, which is charged with an opening movement of the leaf and discharged with a closing movement of the leaf, a fixing 42 operating according to the quiescent current principle with a permanent magnet unit 44 for fixing the blade provided with an armature plate 50 and at least one electric coil 46, which can be controlled via a control device in such a way that a compensation of the magnetic field takes place and, therefore, an activation of the fixing device 42 and release of the sheet, as well as a locking device 10, which can be configured, for example, as described with reference to fig. 1.

The fixing device 42 can be made with one or multiple redundancies, in particular with regard to the power supply, the electrical control of at least one coil 46 and/or the coil 46 itself, and can comprise a corresponding number of redundancy branches. 48 for this purpose.

The redundancy branches 16, 18 for controlling the locking element 14 and the redundancy branches 48 for controlling the fixing device 42 can be configured at least partially separate from each other, the redundancy branches 16, 18 or 42 being able to be made separated from each other. yes be connectable or be connected to each other through a communication link.

However, the redundancy branches 16, 18 for controlling the locking element 14 and the redundancy branches 42 for controlling the fixing device 42 can also comprise at least partly common components such as in particular common power sources, a common control or a common microcontroller and/or the like. In particular, such embodiments are also conceivable in which common redundancy branches are provided for controlling the locking element 14 and for controlling the fixing device 42.

The locking device 10 and the fixing device 42 can be controlled via the redundancy branches 16, 18, 42 in particular in such a way that when the sash fixing is activated the fixing device 42 can be activated first in case of that a failure is detected in a respective redundancy leg 16, 18 of the interlock 10, and the interlock 14 can be activated via at least one other redundancy leg 16, 18 of the interlock 10 after it has been activated. released sheet.

The redundant control of the locking element 14 can be implemented, for example, as its own independent module that communicates with the clamping control, or it can also be a component of the clamping control. In the latter case, both controls can use common components or common redundancy legs.

reference list

10 Locking device

12 control device

14 Blocking element

16 Interlock redundancy branch

18 Interlock redundancy branch

20 Control channel

22 Control channel

24 Drive unit

26 Drive unit

28 Power source

30 power source

32 Feedback

34 Feedback

36 Bidirectional connection

38 Fixing system

40 Drive

42 fixing device

44 Permanent Magnet Unit

46 electric coil

48 Fixture redundancy branch

50 Armor Plate

Claims (25)

1. System (38) for fixing a door, window or similar leaf, with a drive (40) with at least one mechanical energy accumulator that is charged by an opening movement of the leaf and discharged with a closing movement of the leaf, and with a fixing device (42) that works according to the quiescent current principle with a control device, characterized in that the fixing device (42) has a permanent magnet unit (44) for fixing the sheet and at least one electric coil (46) that can be controlled via the control device so that a compensation of the magnetic field and, therefore, an activation of the fixing device (42) and release of the sheet, wherein the system (38) further has a locking device (10) for locking, i.e. preventing the fixing of the sheet that can be fixed through the fixing device (42), with a control device (12 ) and a locking element (14) that can be actuated, in particular electromotively and/or electromagnetically that can be controlled via the control device (12), in which the control device (12) is realized with one or multiple redundancies, the blocking element (14) can be controlled via a corresponding number of redundancy branches (16, 18) of the blocking device (10) and the functionality of the different redundancy branches (16, 18) can be supervised respectively through the control device (12). System according to claim 1, characterized in that the functionality of a respective redundancy branch (16, 18) can be continuously monitored by the control device (12). System according to claim 1 or 2, characterized in that the functionality of a respective redundancy branch (16, 18) can be monitored by the control device (12) at predetermined time intervals. System according to at least one of the preceding claims, characterized in that the control device (12) comprises at least two redundantly implemented control channels (20, 22) assigned in each case to a redundancy branch (16). , 18). System according to claim 4, characterized in that a single drive device (24, 26) can be controlled in each case via the various control channels (20, 22) of the control device (12), in particular, electromotive and/or electromagnetic, assigned to the corresponding redundancy branch (16, 18) to actuate the blocking element (14). System according to at least one of the preceding claims, characterized in that in each case an individual power source (28, 30) is assigned to the various redundancy branches (16, 18) for supplying them, in particular with power power, preferably also being able to supply power to at least one other redundancy string (16, 18) in each case via the power source (28, 30) assigned to a respective redundancy string. System according to claim 4 and 6, characterized in that both the power source (28, 30) assigned to the corresponding redundancy branch and the energy source (28, 30) assigned to another redundancy branch (16, 18) can be monitored via the control channel (20, 22) of a respective redundancy branch (16, 18). System according to claim 7, characterized in that the various power sources (28, 30) can be continuously monitored via the control channel (20, 22) of a respective redundancy branch (16, 18). System according to claim 7, characterized in that the different energy sources (28, 30) can be monitored via the control channel (20, 22) of a respective redundancy branch (16, 18) at intervals of predetermined time. System according to at least one of the preceding claims 4 to 9, characterized in that, in particular when the sash clamp is released to monitor the functionality of a respective redundancy branch (16, 18), it can be control a drive unit (24, 26) assigned to it via the control channel (20, 22), assigned to the redundancy branch (16, 18), of the control device (12) and can be set, via this channel control (20, 22), with respect to a feedback (32, 34), whether the blocking element (14) has been activated or not. System according to at least one of the preceding claims 4 to 10, characterized in that, in particular when the sash lock is activated to monitor the functionality of a respective redundancy branch (16, 18), it can be control a drive unit (24, 26) assigned to it via the control channel (20, 22), assigned to the redundancy branch (16, 18), of the control device (12) and the current that circulates can be monitored via the drive unit (24, 26) via this control channel (20, 22). System according to at least one of the preceding claims 4 to 11, characterized in that the control device (12) is designed such that mutual monitoring of the various redundancy branches (16, 18) is carried out via of its control channels (20, 22). System according to at least one of the preceding claims, characterized in that the control device (12) is designed in such a way that, in the event of a failure of a respective redundancy branch (16, 18) being detected, the blocking element (14) can be activated via at least one other redundancy branch (16, 18) after the leaf has been released. System according to at least one of the preceding claims, characterized in that the locking element (14) is provided with a bistable locking element that can be electromotively actuated. System according to claim 14, characterized in that a drive unit (24, 26) for driving the bistable locking element comprises an electric motor. System according to one of Claims 1 to 13, characterized in that an electromagnetically actuatable locking element is provided as the locking element (14). System according to claim 16, characterized in that an electromagnetically actuatable bistable locking element is provided as the locking element (14). System according to claim 17, characterized in that a drive unit (24, 26) for actuating the locking element comprises two bistable electromagnets or one bistable electromagnet with two coil units. System according to claim 18, characterized in that the armature of a respective bistable electromagnet for actuating the blocking element (14) is coupleable or coupled to the blocking element via a mechanical transmission. System according to claim 16, characterized in that a locking element is provided as the locking element (14), which can be actuated electromagnetically according to the quiescent current principle. System according to claim 20, characterized in that a drive unit (24, 26) for actuating the locking element (14) comprises a permanent magnet and at least one electrical coil assigned to it, wherein the element The locking device (14) is held in its deactivated state by the magnetic field of the permanent magnet when the electric coil is not energized and can be activated when the electric coil is energized and the magnetic field of the permanent magnet is thereby compensated, in particular , by the force of gravity, a spring force and/or the like. System according to one of the preceding claims, characterized in that the fixing device (42) is realized with one or multiple redundancies, in particular with regard to the power supply, the electrical control of the at least one coil (46) and/or the coil (46) itself, and comprises a corresponding number of redundancy branches (48) for this purpose. System according to claim 22, characterized in that the redundancy branches (16, 18) for controlling the locking element (14) and the redundancy branches (48) for controlling the fixing device (42) They are made at least partially separate from one another, it being possible for the redundancy branches (16, 18 or 42) made separately from one another to be connectable or to be connected to one another via a communication link. System according to claim 22 or 23, characterized in that the redundancy branches (16, 18) for controlling the locking element (14) and the redundancy branches (42) for controlling the fixing device ( 42) comprise at least partly common components such as, in particular, common power sources, a common control device or common microcontrollers and/or the like and/or are provided with common redundancy branches for controlling the locking element (14) and for controlling the fixing device (42). System according to at least one of the preceding claims, characterized in that the locking device (10) and the fixing device (42) can be controlled via the redundancy branches (16, 18, 42) of so that, when the sash lock is activated and a failure of a respective redundancy branch (16, 18) of the lock device (10) is detected, firstly, the lock device (42) can be activated, and, after the leaf has been released, the locking element (14) can be activated via at least one other redundancy branch (16, 18) of the locking device (10).